Norwegian Honeynet Project | A chapter of The Honeynet Project
Sandbox Data
Version 1.04 - 2006.09.10
SUBMISSIONS
SIGNATURES
FILE NAMES
BOTNETS
IRC
MALWARE-HOSTS
UNKNOWNS
MUTEXES
List of file names used by captured malware (total: 416)
Click on the filename to get additional information about that file.
File Name
Count
taskmegr.exe
30
Windows-.exe
26
rp5.exe
25
taskmkemr.exe
24
bar
22
taskmnegr.exe
21
servs.exe
18
taskwin.exe
16
rp5.exe_Download.tmp
16
sysinfo.exe
15
msinexecs.exe
15
winmsfws.exe
15
host.exe
15
winmsfw.exe
14
sysin.pif
12
MSsec32.exe
11
MSNplus.pif
11
newexe.exe
10
MSPF.EXE
10
msconfg.exe
10
explore.exe
10
x.exe
9
bling.exe
8
up32.pif
8
microsoft32.exe
7
winsys.exe
7
servic.exe
7
winfixup.exe
7
telnet24.exe
7
winupdat.exe
7
autowxckn.exe
7
asn2.exe
7
scorti.exe
7
bot.exe
6
winksas.exe
6
msvpn.exe
6
winfifggf.exe
6
winsvc.exe
6
sysmsn.exe
6
plscdksx.exe
6
pdate.exe
6
eraseme_27108.exe
6
taskmngr.exe
5
mnsmp.exe
5
Sygate.exe
5
msapply.exe
5
wuamguard.exe
5
wsaugt32.exe
5
soff.pif
5
index.html
5
mansor.exe
5
ming.pif
5
AntiSsy.pif
5
MNSQ.exe
5
laordew.exe
4
WindowsUpdate.exe
4
wmedia.exe
4
Windows-mod.exe
4
SVCHOSTE.EXE
4
spdauth.exe
4
sp1.exe
4
Windows-spyware.exe
4
wscntfh.exe
4
taskngr.exe
4
tskmgr.exe
4
omgs.exe
4
svch32.pif
4
UpMsnGraond.exe
4
lEXPLORE.EXE
4
explorer.pif
4
system32.exe
4
xhost.exe
4
plscdff.exe
4
msngrer.exe
4
taskmngrs.exe
4
expl0rer.pif
3
basic69.exe
3
svc32.pif
3
wuaulct.exe
3
r71.exe_Download.tmp
3
Msdetect.exe
3
winlogom.exe
3
msnmsgr.exe
3
IHSVC.EXE
3
autowckx.exe
3
win32ssr.exe
3
ServiceX32.exe
3
msw32.pif
3
msnserve.exe
3
msaconf.exe
3
msresource.exe
3
hhs32.pif
3
filez.exe
3
cmss.exe
3
Xsyn.pif
3
winxpfwl.exe
3
spread.exe
3
ntsf.exe
3
Firewall-UpdateV9.exe
3
MSdos32.exe
3
freememory.exe
3
javams64.exe
3
msmd.exe
2
servza.exe
2
jimbo.exe
2
winfixrghh.exe
2
svxhtost.exe
2
NeroFilterCheck.EXE
2
msinexec.exe
2
wkssr.exe
2
WinUPD.exe
2
Msvm3.exe
2
drives.exe
2
h3110.411
2
winampa.exe
2
hhs.pif
2
41463.exe
2
MSAV32.exe
2
BHSV.EXE
2
kaspersky.exe
2
Scvhost.exe
2
wuamkop.exe
2
FirewallingV10.exe
2
keyboard.exe
2
updates.pif
2
WINDOWS32.exe
2
winxSysten32.exe
2
svchost32.exe
2
msnger.exe
2
syscvhost.exe
2
schost.exe
2
p.exe
2
mrcw34.exe
2
msdtcxp.exe
2
tesakrmger.exe
2
mswi32.pif
2
hqghumea.dll
2
bload.exe
2
rundll.exe
2
NortonAV.exe
2
msmsgrs.exe
2
laordewin.exe
2
javams32.exe
2
FmMPacK32.exe
2
winabra.exe
2
mssmpp.exe
2
mouseie.exe
2
setup_27108.exe
2
Generic.exe
2
Erun.pif
2
google.exe
2
eraseme_41463.exe
2
plscdksxg.exe
2
genuine.exe
2
msni.exe
2
firefox.exe
2
MSGUPDATES.EXE
2
teekids.exe
2
runs.pif
2
f.exe
2
ATIPTAX.exe
2
mssmppp.exe
2
pcxlscx.exe
2
WinRDH.exe
2
Adapter.exe
2
winhost32.exe
2
mslaugh.exe
2
eraseme_63723.exe
2
Samsong.exe
2
12345.exe
2
Kizlo.exe
2
commdlg32.exe
1
kavsvr.exe
1
cp.exe
1
mstsk.exe
1
laordewll.exe
1
svch0st.exe
1
live.exe
1
Svcost.exe
1
eraseme_70040.exe
1
eraseme_57153.exe
1
MSVMP.EXE
1
msserv.exe
1
msnserve.pif
1
SygateV1.exe
1
AVGcore11234.exe
1
XPService.exe
1
msdtc2k.exe
1
pload.exe
1
Msn24.exe
1
Performance32.exe
1
sysmsvc.exe
1
winlogz0.exe
1
wingin.exe
1
cool.exe
1
WinNPS.exe
1
SysRes.exe
1
nddsds.exe
1
msnngers.exe
1
sysfirewall.exe
1
eraseme_02403.exe
1
spoolss.exe
1
winPE.exe
1
wmediav.exe
1
tasks.exe
1
update32.exe
1
wins.exe
1
winmx32.EXE
1
keys.exe
1
msconfg32.exe
1
gulfserv.exe
1
eraseme_05331.exe
1
winfixir.exe
1
ntsfxp.exe
1
symantecch.exe
1
Mircosoft-Update.exe
1
MsnMgr.exe
1
windvr.exe
1
kjsdu_42557.exe
1
Visu0dll.exe
1
winstk32.exe
1
cftmon.exe
1
sp12.exe
1
bdlichhck.exe
1
stmb32.exe
1
tfn0ne.exe
1
win.exe
1
WinPSR.exe
1
chkdisk.exe
1
msnowen32.exe
1
msnmsgrs32.exe
1
eraseme_51755.exe
1
wsftpsrv16.exe
1
win32ssr.exe_Download.tmp
1
winupdt.exe
1
microsoftp.exe
1
mkass.exe
1
systemconfig32.exe
1
xphost.exe
1
windowsp.exe
1
eraseme_74287.exe
1
plscd1gbnn.exe
1
sched.exe
1
JetAudio.exe
1
IEXPL0RE.EXE
1
UpdatejuWin32.pif
1
eraseme_10683.exe
1
systemexec.exe
1
winat.exe
1
msnszert.exe
1
eraseme_60774.exe
1
mssmp.exe
1
mmp.exe
1
updt.pif
1
reg32ocx.exe
1
winupser.exe
1
30671_upload.exe
1
dskmon32.exe
1
xkjmxtu.exe
1
cfg32.exe
1
usbhub.exe
1
Acrord32.exe
1
laordewl.exe
1
setup_06138.exe
1
cfgwiz32.exe
1
wuawx.exe
1
rundllx32.exe
1
iexplore.exe
1
svlhost.exe
1
setup_26183.exe
1
kjsdu_36770.exe
1
ms32.pif
1
dll.exe
1
MSAOL32dll.exe
1
Messengerplus.exe
1
FireWall-Update1.exe
1
setup_42333.exe
1
zt
1
sound.exe
1
wuamkoppnp.exe
1
av32.pif
1
cmdfs.exe
1
cload.exe
1
mssec.exe
1
w1nz0zz0.exe
1
svghostss.exe
1
messenger2.exe
1
nthost32.exe
1
spack2.exe
1
28396_up.exe
1
NeroFil.EXE
1
olecli32.exe
1
phr.exe
1
spoolsvc.exe
1
iexplorersis.exe
1
sxrose.exe
1
playboy1.exe
1
MSPlayerAIT.exe
1
eraseme_46866.exe
1
tempes.exe
1
winzip.exe
1
anx.exe
1
sysmances.exe
1
scvhosts.exe
1
svcfrorhun.exe
1
setup_41463.exe
1
Windows-Update1.exe
1
rundl32.exe
1
myhost2.exe
1
psnif447.exe
1
winz1zz0s3.exe
1
IDMan.exe
1
r3grun.exe
1
wlmsn.exe
1
wsecom.exe
1
4215_up.exe
1
chkdisk32.exe
1
ati2vx.exe
1
BSDMPlyr32.exe
1
S1y3g4ate.exe
1
plscd.exe
1
winupl.exe
1
winxpstats.exe
1
Reallplayer.exe
1
msblast.exe
1
winsecure.exe
1
backup.exe
1
Seurit.exe
1
dcz.exe
1
winini.exe
1
systry3x.exe
1
eraseme_18568.exe
1
msmsngr.exe
1
mswind32.pif
1
msnwin.exe
1
spoolsae.exe
1
stisv.pif
1
dload.exe
1
taskhosst.exe
1
msconfigures.exe
1
svcdata.exe
1
TrinityBackup.exe
1
sysinfo.pif
1
msnkalid.exe
1
taskmgs.exe
1
NeroFilter.EXE
1
msfw.exe
1
taskbar.exe
1
ctfn0n3z.exe
1
eraseme_34601.exe
1
WinRDH.exe_WinRDH.exe.SBOX
1
mvsp32.exe
1
wmloader.exe
1
eraseme_48810.exe
1
host32.exe
1
XpWinRoot.exe
1
iexplorers.exe
1
Reads.exe
1
serve.exe
1
Msnhost.exe
1
kjsdu_06183.exe
1
kasebar.exe
1
eraseme_33433.exe
1
ielower.exe
1
nood32.exe
1
winsvcc.exe
1
asn.exe
1
rundlll32.exe
1
schedsvc32.exe
1
norten.pif
1
eraseme_75008.exe
1
lsd
1
asn1sys.exe
1
SysCloc16.exe
1
svchos.exe
1
Windowsfixsystem.exe
1
nod32kui.exe
1
windowsupdz.exe
1
eraseme_13481.exe
1
msnka0lids.exe
1
eraseme_66021.exe
1
svchsot.exe
1
rundll32.exe
1
WinEUM.exe
1
msnservers.exe
1
IEEXPLORER.exe
1
real.exe
1
eraseme_01056.exe
1
svcsrv32.exe
1
mssqlmgr.exe
1
sshost.exe
1
scdhost.exe
1
kjsdu_63723.exe
1
wkssvc.exe
1
Stillz.exe
1
0.exe
1
bootini.exe
1
Sistem32.exe
1
WinPatrol.exe
1
redy.exe
1
winfixirdrszxx.exe
1
lol.exe
1
eraseme_46410.exe
1
webmsn.exe
1
msconfig32x.exe
1
ad.exe
1
winlab.exe
1
Windowsupfixer.exe
1
jjeuskkie.exe
1
WinHSD.exe
1
Scheduler.exe
1
fwupdat.exe
1
iwinlogon.exe
1
msappview32.exe
1
windrum.exe
1
winfirewalls.exe
1