.: H.D.E. Spy 2.1.5 :.
Released 16 years, 10 months ago. Aug 2005
By Shell32.dll::actions

Additional Details
- From: Turkey
- Coded by: Shell32.dll
- Version: H.D.E. Spy 2.1.5
- Released date: Aug 2005, 16 years, 10 months ago.
- Coded in: Visual Basic
- Family: H.D.E. Spy 2.1.5
- Category: Information Stealer
MegaSecurity Notes
Server: dropped files: c:\Program Files\Common Files\System\aemail.zpd Size: 84,641 bytes c:\Program Files\Common Files\System\Office10.exe Size: 73,728 bytes c:\Program Files\Common Files\System\picformat32.zpd Size: 40,960 bytes c:\Program Files\Common Files\System\picformat32.zpo Size: 6,767 bytes c:\WINDOWS\system32\Aemail.dll Size: 184,320 bytes c:\WINDOWS\system32\picformat32.ocx Size: 36,864 bytes c:\WINDOWS\system32\zlib.dll Size: 53,248 bytes startup: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "MS Office" data: C:\Program Files\Common Files\System\Office10.exe tested on Windows XP February 24, 2006
URL's and mails were automatically redacted (filtered) for reader's safety. However the filter is not perfect and can't find all harmful elements. If you find something dangerous including file link, website, mail address, profanity... contact me immediately at sub7crew@protonmail.com, thank you in advance.