{"id":3192,"date":"2015-08-25T18:17:49","date_gmt":"2015-08-25T18:17:49","guid":{"rendered":"http:\/\/www.hexacorn.com\/blog\/?p=3192"},"modified":"2024-12-08T00:10:10","modified_gmt":"2024-12-08T00:10:10","slug":"enter-sandbox-part-8-all-those-host-names-will-be-lost-in-time-like-tears-in-rain","status":"publish","type":"post","link":"https:\/\/www.hexacorn.com\/blog\/2015\/08\/25\/enter-sandbox-part-8-all-those-host-names-will-be-lost-in-time-like-tears-in-rain\/","title":{"rendered":"Enter Sandbox \u2013 part 8:  All those&#8230; host names&#8230; will be lost, in time, like tears&#8230; in&#8230; rain"},"content":{"rendered":"<p><strong>Update 2024-12-07<\/strong><\/p>\n<p>Added a bunch of host names from https:\/\/raw.githubusercontent.com\/1337cstealer1337\/vt-bypass\/main\/pc_username_list.txt<\/p>\n<p><strong>Update 2020-05-21<\/strong><\/p>\n<p>Added some user names<\/p>\n<p><strong>Update 2017-12-18<\/strong><\/p>\n<ul>\n<li>Added a list of sandbox names from the &#8216;The Adventures of AV and the Leaky Sandbox&#8217; <a href=\"https:\/\/www.blackhat.com\/docs\/us-17\/thursday\/us-17-Kotler-The-Adventures-Of-Av-And-The-Leaky-Sandbox.pdf\">preso [PDF]<\/a>\u00a0by SafeBreach Labs<\/li>\n<li>Removed &#8216;wscript.shell&#8217; name that was accidentally added to the list<\/li>\n<\/ul>\n<p><strong>Old post (2015-08-25)<\/strong><\/p>\n<p>Analysis of malware often leads to a discovery of anti-sandbox tricks. Many of them rely on long lists of &#8216;known sandbox computer names&#8217; (i.e. computer network names given to sandboxes) and &#8216;known sandbox user names&#8217; (i.e. user names for accounts under which sandbox executes samples).<\/p>\n<p>The topic of exploiting sandbox frameworks in order to reveal their secrets is not new and many malware-related forums discuss them in details. In this short post I am dropping a bunch (800+) of host names that are commonly recognized by malware as sandboxish. I gathered it over a couple of years from sample analysis, posts online, my own research on various malware forums and lists I got from other people. There may be certainly errors in this list, but I made any effort possible to ensure it is correct. I do not own any copyright on it, but&#8230; lots of work went into it &#8211; if you want to use it in a commercial product, courses, slides &#8211; at least mention where you got it from. Thanks \ud83d\ude42<\/p>\n<p>In any case, if you own them, it&#8217;s time for randomization, because some malware samples already know them!<\/p>\n<p>05h00Gi0<br \/>\n05KvAUQKPQ<br \/>\n074evbxgva9hgql<br \/>\n093954<br \/>\n0e2e44df465c41a<br \/>\n0m9p60j5w-pc<br \/>\n1-57aa74bec7f14<br \/>\n1281412f6b<br \/>\n141700<br \/>\n1c213c79d1<br \/>\n21zLucUnfI85<br \/>\n25-5f69a00d9b64<br \/>\n333333<br \/>\n3u2v9m8<br \/>\n43By4<br \/>\n4tgiizsLimS<br \/>\n5sIBK<br \/>\n5Y3y73<br \/>\n64F2tKIqO5<br \/>\n675052<br \/>\n6cf004c2543846a<br \/>\n6O4KyHhJXBiR<br \/>\n724536<br \/>\n7DBgdxu<br \/>\n7qts0m12600mtvt<br \/>\n7wjlGX7PjlW4<br \/>\n8LnfAai9QdJR<br \/>\n8Nl0ColNQ5bq<br \/>\n8VizSM<br \/>\n9015045e99a846d<br \/>\n928100<br \/>\n9yjCPsEYIMH<br \/>\na-think<br \/>\na113b083ad3342d<br \/>\na52018701<br \/>\nAbby<br \/>\nabc-dd731ae3a20<br \/>\nabc-win7<br \/>\nabc-xp<br \/>\nabdon<br \/>\nacer-ex<br \/>\nacme-997999da9b<br \/>\nad-europe-1<br \/>\nadier-pc<br \/>\nadm<br \/>\nadm2<br \/>\nadmin<br \/>\nadmin-4ee07168e<br \/>\nadmin-85a7bf2c3<br \/>\nadmin-b2619d2d3<br \/>\nadmin-de9cb88bb<br \/>\nadmin-pc<br \/>\nadminist-722bce<br \/>\nAdministrator<br \/>\nadriano<br \/>\nadriano-pc<br \/>\nagnaldo-pc<br \/>\nahnlab-ffa1203f<br \/>\nahnlabmds<br \/>\nailton-pc<br \/>\nalam-wahla-pc<br \/>\nalanwak-pc<br \/>\nalberto-pc<br \/>\nalcimar-suexp<br \/>\nalejandro-pc<br \/>\nalessandra-pc<br \/>\nalessandro-pc<br \/>\nalessandro-pc1<br \/>\nalex-pc<br \/>\nalexandre-pc<br \/>\nalexandro-pc<br \/>\nalexpassamani<br \/>\nalfredo-pc<br \/>\nalgo-bddc445bd1<br \/>\nali<br \/>\naline-060da2530<br \/>\nalinebarreto-pc<br \/>\nallandsonwesley<br \/>\nalone<br \/>\namb01<br \/>\namd<br \/>\nAmy<br \/>\nanaclaudia-win<br \/>\nanderson-pc<br \/>\nandre-pc<br \/>\nandreluiz-pc<br \/>\nandrey-pc<br \/>\nandreza-pc<br \/>\nandroid<br \/>\nandr\u00e9luiz-pc<br \/>\nangelarita<br \/>\nangy<br \/>\nanna-client-59<br \/>\nanna-cws311<br \/>\nantonia<br \/>\nantonie<br \/>\nantony<br \/>\nantony-pc<br \/>\napiary7-pc<br \/>\nAppOnFlySupport<br \/>\napto44<br \/>\narachonpc<br \/>\narlisson-yagami<br \/>\narthur-pc<br \/>\nasd-vp-test<br \/>\nasim-pc<br \/>\nASPNET<br \/>\nassistsocial<br \/>\nast-001<br \/>\nauto<br \/>\nazure<br \/>\nbaixajat-906443<br \/>\nbal02<br \/>\nbalbino-pc<br \/>\nbanco_01<br \/>\nbarreto-f3a0ac5<br \/>\nbb-01-14<br \/>\nbb-03-21<br \/>\nbb-04-66<br \/>\nbd-urlsclav6<br \/>\nbd-urlsclav9<br \/>\nbenevide-lpix7n<br \/>\nbento-pc<br \/>\nberon<br \/>\nbesouro-pc<br \/>\nbespawl<br \/>\nbeto<br \/>\nbeton-rats1<br \/>\nbeton-ratsl<br \/>\nbiano<br \/>\nbilly<br \/>\nblr1-soumyad-v1<br \/>\nblype<br \/>\nbolacha-pc<br \/>\nborel<br \/>\nbr-taylor-87<br \/>\nbrbrb-d8fb22af1<br \/>\nbrenno-pc<br \/>\nbrian-75445f269<br \/>\nbriapc<br \/>\nbrsao0692<br \/>\nbruna<br \/>\nbruno<br \/>\nbruno-e214bfa09<br \/>\nbruno-pc<br \/>\nbrunoefam\u00edlia<br \/>\nbrunoreis<br \/>\nbtig-ht<br \/>\nBUiA1hkm<br \/>\nbuteri-pc<br \/>\nBvJChRPnsxn<br \/>\nBXw7q<br \/>\nc02tt18<br \/>\nc02tt22<br \/>\nc02tt26<br \/>\nc02tt36<br \/>\nc06tt43<br \/>\nc2f3f0b206c14e9<br \/>\nca-brian-75<br \/>\ncaio-pc<br \/>\ncaixa<br \/>\ncaixa1<br \/>\ncameras<br \/>\ncamila<br \/>\ncamp-08-pc<br \/>\ncarlosalberto<br \/>\ncarlosmello<br \/>\ncarol-pc<br \/>\ncarolina-pc<br \/>\ncarvalho-pc<br \/>\ncasa<br \/>\ncasa-010a80cf0b<br \/>\ncasa-2d7ed3857a<br \/>\ncasa-pc<br \/>\ncasa29-pc<br \/>\ncasaisestaleiro<br \/>\ncat02-pc<br \/>\ncdata<br \/>\ncen_gui_10<br \/>\ncepa-14<br \/>\ncesarmello-pc<br \/>\ncftv<br \/>\ncgjto-005<br \/>\nchangeme1<br \/>\ncharles-3cccf5a<br \/>\nchintan<br \/>\nchristia-51e582<br \/>\ncida-pc<br \/>\ncidb-pc<br \/>\ncircumstellar<br \/>\nclaudemir-pc<br \/>\nclaudia-pc<br \/>\nclaudina-pc<br \/>\nclaudio-pc<br \/>\nclayton-pc<br \/>\ncleiton-pc<br \/>\ncliente<br \/>\ncliente-1323c95<br \/>\ncliente-2223686<br \/>\ncliente-339673e<br \/>\ncliente-4659bdf<br \/>\ncliente-6c1119d<br \/>\ncliente-cec8e04<br \/>\ncliente-pc<br \/>\ncliente5518830<br \/>\nclientrep-pc<br \/>\ncM0uEGN4do<br \/>\ncmas-73f49570c3<br \/>\ncmdt001<br \/>\ncMkNdS6<br \/>\ncntsm5002<br \/>\ncomp<br \/>\ncomp-73ac1ec5e6<br \/>\ncomp-e87d7c32d1<br \/>\ncomp-home261245be<br \/>\ncomp10<br \/>\ncompaq<br \/>\ncomputad-ea50a5<br \/>\ncomputador<br \/>\ncomputador-pc<br \/>\ncomputer-pc<br \/>\ncomputer-xxxxxx<br \/>\ncomputername<br \/>\nconnect-pc<br \/>\ncontab-06<br \/>\ncoro-pc<br \/>\ncorp089120471<br \/>\ncpu-47<br \/>\ncrea-6777291f93<br \/>\ncris<br \/>\ncristiano-pc<br \/>\ncrux<br \/>\ncssv-lav-melnt<br \/>\ncti-778ee90c19e<br \/>\nctsandress<br \/>\ncuckoo05-2<br \/>\ncuckoo0801-vm<br \/>\ncuckoo0806-vm<br \/>\ncws01_20<br \/>\ncws02_n29<br \/>\ncws03_28<br \/>\ncws04_27<br \/>\ncws05d205<br \/>\ncws06d208<br \/>\ncws09d002<br \/>\ncws09ex02<br \/>\ncws10d002<br \/>\ncws10d007<br \/>\ncws12d007<br \/>\ncwsandbox<br \/>\nc\u00e1ssio-pc<br \/>\nc\u00e9lia-pc<br \/>\ndamiana-pc<br \/>\ndaniel-pc<br \/>\ndaniela-pc<br \/>\ndaniella-hp<br \/>\ndaniellemendon\u00e7<br \/>\ndanilo-pc<br \/>\ndany-pc<br \/>\ndavid-pc<br \/>\ndbd27012570<br \/>\nDdQrgc<br \/>\ndebora-pc<br \/>\ndede-pc<br \/>\nDefaultAccount<br \/>\ndell-c13c53a412<br \/>\ndell-d3e62f7e26<br \/>\ndelta<br \/>\ndener-pc<br \/>\ndesktop<br \/>\ndh4023xp<br \/>\ndh61ww<br \/>\ndhianinny-pc<br \/>\ndiego-pc<br \/>\ndiegofelix<br \/>\ndigital-pc<br \/>\ndijkstra-b459ad<br \/>\ndinda<br \/>\ndiogo-2ef6fca36<br \/>\ndionifer-pc<br \/>\ndiva-pc<br \/>\ndnapc<br \/>\ndocumentos-pc<br \/>\ndonato-pc<br \/>\ndono-pc<br \/>\ndooku01<br \/>\ndooku02<br \/>\ndouglas-ae6c0b0<br \/>\ndOuyo8RV71<br \/>\ndrogaria-pc<br \/>\ndrs-pc<br \/>\ndt-103<br \/>\nduda-pc<br \/>\ndudalina-469862<br \/>\ndulcina-sti<br \/>\nDVrzi<br \/>\ndwi-9625ac2e275<br \/>\ndxd8DJ7c<br \/>\ne60UW<br \/>\necVtZ5wE<br \/>\nedeilson-pc<br \/>\nediene<br \/>\nedithpc<br \/>\nedmara-pc<br \/>\nedna-pc<br \/>\nedson-pc<br \/>\neduardo-pc<br \/>\neduardo-win<br \/>\nEGG0p<br \/>\nelaine<br \/>\nelaine-pc<br \/>\nelchante<br \/>\neleanorepc<br \/>\nelelson-pc<br \/>\neletricista-pc<br \/>\neli-pc<br \/>\neliasepaty-pc<br \/>\neliz<br \/>\nelizange<br \/>\nelvis-pc<br \/>\nemerson<br \/>\nemilia_note<br \/>\nemiliodias-pc<br \/>\nequipo<br \/>\nequipo01<br \/>\nequZE3J<br \/>\nerick<br \/>\nescritorio<br \/>\nescritorio2<br \/>\nesf-748514fd982<br \/>\nespecialistas<br \/>\nestagcoordenada<br \/>\nestoque<br \/>\nestudiolf-pc<br \/>\neverson-pc<br \/>\nexamplepc<br \/>\nexpress-860a48f<br \/>\nfa02conpc18<br \/>\nfabiana-mega<br \/>\nfabiana-pc<br \/>\nfabinho-pc<br \/>\nfake<br \/>\nfamilia-pc<br \/>\nfamiliacabral<br \/>\nfamilycruzperez<br \/>\nfanoleoy_dp_ind<br \/>\nfaster02<br \/>\nfelipe-pc<br \/>\nfenix-pc<br \/>\nfernanda<br \/>\nfernando-pc<br \/>\nfigueiredo-pc<br \/>\nfireeye<br \/>\nflorianpc<br \/>\nflytour-pc<br \/>\nfNBDSlDTXY<br \/>\nfortinet-5b6acf<br \/>\nFrank<br \/>\nfred<br \/>\nfrederick-pc<br \/>\nG2DbYLDgzz8Y<br \/>\ngabbipc<br \/>\ngabriel82497752<br \/>\ngabriela-pc<br \/>\ngabyrodarte<br \/>\ngabyzona-pc<br \/>\ngean-397b7cd2f8<br \/>\ngems-3d59a99f5e<br \/>\ngenilson<br \/>\ngeorge<br \/>\ngeovane-1551e38<br \/>\ngeral-b1c99ac61<br \/>\ngerencia-pc<br \/>\ngerenciador<br \/>\ngerenciageral<br \/>\nGexwjQdjXG<br \/>\ngfi-client<br \/>\ngfi-client5<br \/>\nGGw8NR<br \/>\ngilvan-pc<br \/>\ngiseleeronaldo<br \/>\nGJAm1NxXVm<br \/>\nGjBsjb<br \/>\ngL50ksOp<br \/>\nglauco-pc<br \/>\ngordinho<br \/>\ngrafica<br \/>\ngt-fdccd9a7405d<br \/>\ngu17B<br \/>\nGuest<br \/>\nguilherme-pc<br \/>\ngunna-pc<br \/>\ngustavo<br \/>\ngustavo-4e92a09<br \/>\nh7dk1xPr<br \/>\nh86LHD<br \/>\nhans<br \/>\nhardxp-test<br \/>\nHarry Johnson<br \/>\nhayandra-pc<br \/>\nhbxpeng<br \/>\nhbyLdJtcKyN1<br \/>\nhd8r2jds87rew82<br \/>\nhelder-pc<br \/>\nheloisa-pc<br \/>\nhelsapc<br \/>\nheros<br \/>\nHEUeRzl<br \/>\nhmarc<br \/>\nhome<br \/>\nhome-1afd6d458b<br \/>\nhome-6eca5ee0b6<br \/>\nhome-off-d5f0ac<br \/>\nhome-pc<br \/>\nhome1<br \/>\nhoney<br \/>\nhost-932c51a1d7<br \/>\nhp<br \/>\nhp30512952714<br \/>\nhppavilion-pc<br \/>\nhudson-pc<br \/>\nice<br \/>\nicec-pc<br \/>\nICQja5iT<br \/>\nigor-pc<br \/>\nimpressora-pc<br \/>\ninfo-1a42164f8b<br \/>\ninfornet-3b9e72<br \/>\ninventarios<br \/>\nioavm<br \/>\niracema-pc<br \/>\nisabella-272349<br \/>\nitautec-pc<br \/>\nivaldo-sti<br \/>\nivis-pc<br \/>\nIVwoKUF<br \/>\nIZZuXj<br \/>\nj6SHA37KA<br \/>\nj7pNjWM<br \/>\njaime-pc<br \/>\njanaina-pc<br \/>\njanettedoe<br \/>\nJAW4Dz0<br \/>\nJcOtj17dZx<br \/>\njeferson-2c60e6<br \/>\njeff-pc<br \/>\njessica<br \/>\njessica-pc<br \/>\njfserv<br \/>\njhonata-pc<br \/>\njhonatas-pc<br \/>\njhonatta-fc85e2<br \/>\njhow<br \/>\njoe-<br \/>\njoe-8a81c76c9df<br \/>\nJohn<br \/>\njohn-pc<br \/>\njohnson-pc<br \/>\njonas-pc<br \/>\njonatham-pc<br \/>\njonathan-c561e0<br \/>\njorge-almeida<br \/>\njoripc<br \/>\njosecarlos01<br \/>\njoseluiz<br \/>\njoseroberto-pc<br \/>\njosicl\u00e9ia-pc<br \/>\njos\u00e9adelmo-pc<br \/>\njp-patricia<br \/>\njuan-pc<br \/>\njuceli-pc<br \/>\njude<br \/>\nJulia<br \/>\njuliano-pc<br \/>\njulyano-pc<br \/>\njunior-pc<br \/>\nkaik-hp<br \/>\nkamilosoft<br \/>\nkamino<br \/>\nkarine-4b483d0c<br \/>\nkatorres<br \/>\nkayky<br \/>\nkEecfMwgj<br \/>\nkFu0lQwgX5P<br \/>\nkhune-pc<br \/>\nkide-pc<br \/>\nkinho-pc<br \/>\nkl-pc<br \/>\nklone-pc<br \/>\nklone_x64-pc<br \/>\nKUv3bT4<br \/>\nl3cnbB8Ar5b8<br \/>\nlab<br \/>\nlab-fe8333022ab<br \/>\nlailla-pc<br \/>\nlair-lair-pc<br \/>\nlalo<br \/>\nlan04<br \/>\nlaptop<br \/>\nlarissa-win<br \/>\nlazaro<br \/>\nlecio-pc<br \/>\nlego-02<br \/>\nleh-hp<br \/>\nlemos-pc<br \/>\nlenovo01<br \/>\nleo<br \/>\nleonardo<br \/>\nleonardo-607757<br \/>\nlespino-pzr<br \/>\nlika-pc<br \/>\nlilian-0450a94e<br \/>\nliliane-sti<br \/>\nLisa<br \/>\nlite<br \/>\nlivia-pc<br \/>\nlK3zMR<br \/>\nlmVwjj9b<br \/>\nlogatti-0415d02<br \/>\nlopes-pc<br \/>\nLouise<br \/>\nluan-pc<br \/>\nluannarosa-pc<br \/>\nlubi53aN14cU<br \/>\nLucas<br \/>\nluis<br \/>\nluisbaggio-pc<br \/>\nlula<br \/>\nluser-pc<br \/>\nluziene-pc<br \/>\nl\u00e9ia-pc<br \/>\nm-5842fbb816684<br \/>\nm3<br \/>\nmachine_name<br \/>\nmagdo-pc<br \/>\nmahmood-pc<br \/>\nmajaslam-pc<br \/>\nmalekal<br \/>\nmalvapc<br \/>\nmamepc<br \/>\nmanoel-pc<br \/>\nmaq05<br \/>\nmaq30-ana<br \/>\nmaquina1<br \/>\nmaquina10<br \/>\nmarcelino<br \/>\nmarcelo<br \/>\nmarcelo-d936308<br \/>\nmarcelo-pc<br \/>\nmarcia-pc<br \/>\nmarcio-285c334d<br \/>\nmarcio-pc<br \/>\nmarcosaurelio<br \/>\nmarcowillma<br \/>\nmariaeliza-pc<br \/>\nmarilene<br \/>\nmarineuza-pc<br \/>\nmario-pc<br \/>\nmarta<br \/>\nmauro-64217af1b<br \/>\nmauro-ad6cc462b<br \/>\nmax<br \/>\nmaykemoraes<br \/>\nme-pc<br \/>\nmedeiros-pc<br \/>\nmelissa-pc<br \/>\nmichael-f156cf7<br \/>\nmichele<br \/>\nmichelleailton<br \/>\nmicro-casa<br \/>\nmicro-pc<br \/>\nmicro004<br \/>\nmicro02<br \/>\nmicro07<br \/>\nmicro20<br \/>\nmicrosof-3cde6c<br \/>\nmicrosof-be1a00<br \/>\nmike<br \/>\nmiki-pc<br \/>\nmilerson<br \/>\nmip-xp-cht<br \/>\nmiraely-pc<br \/>\nmirella-tecno<br \/>\nmoacir-pc<br \/>\nmorte+<br \/>\nmr-computer<br \/>\nMr.None<br \/>\nmypc<br \/>\nmy_pc_home<br \/>\nna-win<br \/>\nnageral-pc<br \/>\nnazareth-pc<br \/>\nnb00023-ar<br \/>\nneide-6950231e6<br \/>\nneila-pc<br \/>\nnelson-pc<br \/>\nneopc<br \/>\nnew775<br \/>\nniko-pc<br \/>\nnoK4zG7ZhOf<br \/>\nnone-dusez58jo1<br \/>\nnot-325<br \/>\nnote01<br \/>\nnote03<br \/>\nnoteasus<br \/>\nnotebm-pc<br \/>\nnotebook<br \/>\nnotebook_vika<br \/>\nnova-pc<br \/>\nntblucas<br \/>\nnunes-pc<br \/>\nnuria<br \/>\nnZAp7UBVaS1<br \/>\no-92cc2a5742b94<br \/>\no6jdigq<br \/>\no8yTi52T<br \/>\noem-9ecf19511ee<br \/>\nOf20XqH4VL<br \/>\noffice-d<br \/>\noficina03gh<br \/>\nOgJb6GqgK0O<br \/>\noi-d9cc29398c70<br \/>\noi-pc<br \/>\nok-pc<br \/>\nopala-ascnet<br \/>\norlando-pc<br \/>\nos2019-pc<br \/>\noscar06<br \/>\nOZFUCOD6<br \/>\npablo<br \/>\npabola-ccf85bc5<br \/>\npalmeiras-mega<br \/>\npan-1e6ecc1f78b<br \/>\nparticul-3d9849<br \/>\nparticul-c1a251<br \/>\nparticul-ec6138<br \/>\nparticular-pc<br \/>\npatex<br \/>\npatricia-9mprqb<br \/>\npatriciagurgel<br \/>\nPaul Jones<br \/>\npaulo-pc<br \/>\npaulocesar-pc<br \/>\npc<br \/>\npc-05<br \/>\npc-10-15<br \/>\npc-1central<br \/>\npc-2<br \/>\npc-2423eb1b5d14<br \/>\npc-4a095e27cb<br \/>\npc-71cfa7a097c7<br \/>\npc-7c18ad05454e<br \/>\npc-aaf7dbdc1907<br \/>\npc-fffdcbe8f2bd<br \/>\npc-jp<br \/>\npc-pc<br \/>\npc-user<br \/>\npc0<br \/>\npc01-camila<br \/>\npc02<br \/>\npc06<br \/>\npc1<br \/>\npc11545<br \/>\npc2<br \/>\npc220-michael<br \/>\npc4<br \/>\npc5<br \/>\npc8<br \/>\npc9<br \/>\npcrodrigo<br \/>\npcsuporte<br \/>\npcum<br \/>\npcvista<br \/>\npcwe<br \/>\npc_coord02<br \/>\npedrinho<br \/>\npedrosa<br \/>\npeixe<br \/>\nperry-pc<br \/>\npersonal-pc<br \/>\npessoal<br \/>\npessoal-2863f28<br \/>\npessoal-e151137<br \/>\npessoal-pc<br \/>\npetraschauff-pc<br \/>\npf5vj<br \/>\nPgfV1X<br \/>\npierre-0a6da9db<br \/>\nping-78a0089269<br \/>\nplacehol-6f699a<br \/>\nplat-1df898110e<br \/>\npositivo-ba00dc<br \/>\nPqONjHVwexsS<br \/>\npresid\u00eancia-pc<br \/>\nprofessores<br \/>\npronaf2<br \/>\npublic-ea8367e7<br \/>\npWOuqdTDQ<br \/>\nPxmdUOpVyx<br \/>\nQfofoG<br \/>\nQmIS5df7u<br \/>\nQORxJKNk<br \/>\nquad-pc<br \/>\nquarto<br \/>\nqumica_rita<br \/>\nqZo9A<br \/>\nr-pc<br \/>\nrafael<br \/>\nrafael-pc<br \/>\nraissa-pc<br \/>\nraphaelcosta<br \/>\nrats-pc<br \/>\nrB5BnfuR2<br \/>\nRDhJ0CNFevzX<br \/>\nrecepcao6<br \/>\nrecepcion<br \/>\nrecep\u00e7\u00e3o<br \/>\nregina-20130606<br \/>\nreginaldo-pc<br \/>\nreplik4tor<br \/>\nresidenc-f47065<br \/>\nresidencia<br \/>\nreynapc<br \/>\nRGzcBUyrznReg<br \/>\nrh<br \/>\nrh-00<br \/>\nricardo-pc<br \/>\nrodrigo-pc<br \/>\nrodrigo-vaio<br \/>\nroger-pc<br \/>\nrogeriocapaz<br \/>\nrogeriomaq<br \/>\nrogilene-pc<br \/>\nrog\u00e9rioejully<br \/>\nron-ac13bf686b1<br \/>\nroot-98563fe0cb<br \/>\nroot-9a37cb520d<br \/>\nroot-d<br \/>\nrosana-pc<br \/>\nrosesouza-pc<br \/>\nrsa0<br \/>\nrswt-win7-32-00<br \/>\nRt1r7<br \/>\nruan-pc<br \/>\nruizinho<br \/>\nruth-pc<br \/>\nryjIJKIrOMs<br \/>\ns3-002<br \/>\nS7Wjuf<br \/>\nsa17-testxp<br \/>\nsacada3<br \/>\nsafira1-pc<br \/>\nsal.rosenburg<br \/>\nsala1<br \/>\nsalita<br \/>\nsalut<br \/>\nsam-nb<br \/>\nsamlab<br \/>\nsamuel<br \/>\nsanches-pc<br \/>\nsandbox<br \/>\nsandra-mega<br \/>\nsandro<br \/>\nsc14_23<br \/>\nsc15_01<br \/>\nscscs&lt;u)ws##pw<br \/>\nsdd-pc<br \/>\nsecgoverno<br \/>\nsec_edu<br \/>\nselda-38a0c09e5<br \/>\nsergio-679a5b36<br \/>\nserver<br \/>\nserver<br \/>\nservidor<br \/>\nservidor-a546b3<br \/>\nservtec-41daf81<br \/>\nseven-pc<br \/>\nsharaipc<br \/>\nshawl-pc<br \/>\nshawl-vaio<br \/>\nshimelly-fb6099<br \/>\nshimohiro-pc<br \/>\nsidnei-pc<br \/>\nsimone-pc<br \/>\nsincoder-b046f9<br \/>\nsincoder-zzzzzz<br \/>\nsiraj-hp<br \/>\nsmk\u00ae<br \/>\nsos-a456b0343ef<br \/>\nsoufoda-pc<br \/>\nsp3<br \/>\nspacebr-pc<br \/>\nsportrenie<br \/>\nspurtive<br \/>\nSqgFOf3G<br \/>\nstarter-pc<br \/>\nSteve<br \/>\nsti<br \/>\nstop<br \/>\nsuene-80951215f<br \/>\nsulene-pc<br \/>\nsupport<br \/>\nsusana-hp<br \/>\nsvj03<br \/>\ntadeu-pc<br \/>\ntamires<br \/>\ntata<br \/>\ntatiana-pc<br \/>\ntato-pc<br \/>\ntayeh-pc<br \/>\ntel11s1a0<br \/>\ntequilaboomboom<br \/>\nterminal05<br \/>\ntespc0<br \/>\ntespc09<br \/>\ntest<br \/>\ntest-2f0ddd7e5f<br \/>\ntest-pc<br \/>\ntester<br \/>\ntestpc0<br \/>\nthatiane-pc<br \/>\ntHiF2T<br \/>\nthorsten-f495f3<br \/>\ntiaguinhoo-pc<br \/>\ntime6<br \/>\ntitan<br \/>\ntraxpall<br \/>\nTVM<br \/>\ntvmcom<br \/>\ntxWas1m2t<br \/>\ntz<br \/>\nuelisson-pc<br \/>\nuelitonbad-pc<br \/>\nuHUQIuwoEFU<br \/>\nUiQcX<br \/>\nultramed-02<br \/>\numyUJ<br \/>\nUox1tzaMO<br \/>\nurls-windowsref<br \/>\nuser<br \/>\nuser-2a6e79da98<br \/>\nuser-307b6f9098<br \/>\nuser-30d30d6468<br \/>\nuser-4b0c7e4c46<br \/>\nuser-55f6b64612<br \/>\nuser-69d0983294<br \/>\nuser-7add3c5ffa<br \/>\nuser-8994620187<br \/>\nuser-a03bc07abf<br \/>\nuser-b9d8d85c48<br \/>\nuser-pc<br \/>\nUser01<br \/>\nuser201<br \/>\nusername<br \/>\nuserpc<br \/>\nuserpc336346446<br \/>\nuserpcccccccccc<br \/>\nUspG1y1C<br \/>\nusu-40afa2bad72<br \/>\nusuario<br \/>\nusuario-23eef58<br \/>\nusuario-acb1418<br \/>\nusuario-bb903fa<br \/>\nusuario-pc<br \/>\nusuario-vaio<br \/>\nusuarios-a17a00<br \/>\nusu\u00e1rio<br \/>\nusu\u00e1rio-pc<br \/>\nutilizador-vaio<br \/>\nvalter<br \/>\nval\u00e9ria-pc<br \/>\nvanciefancie<br \/>\nvanderle-1bb433<br \/>\nvani-6ed3c14093<br \/>\nvania-pc<br \/>\nvanusa-pc<br \/>\nvarfileinfo<br \/>\nvendedor<br \/>\nvia07<br \/>\nvictor-pc<br \/>\nvideo<br \/>\nvip05-pc<br \/>\nvirtual<br \/>\nvirtual-7<br \/>\nvirtual-win7<br \/>\nvirtual-xp<br \/>\nvirtualxp-56529<br \/>\nvista<br \/>\nvista-real2<br \/>\nvistaexperience<br \/>\nvm-pc<br \/>\nvmg-client<br \/>\nvmg_client<br \/>\nvm_winxp<br \/>\nvpsvst01<br \/>\nvs_version_info<br \/>\nvv<br \/>\nvwin7-maltest<br \/>\nvwin7pro-maltest<br \/>\nvwinxp-mailtest<br \/>\nvwinxp-maltest<br \/>\nvwinxppro-maltest<br \/>\nvzY4jmH0Jw02<br \/>\nw0fjuOVmCcP5A<br \/>\nwanderson-pc<br \/>\nWDAGUtilityAccount<br \/>\nwellington<br \/>\nwellingtonramos<br \/>\nwilbert-sc1310<br \/>\nwilbert-sc1724<br \/>\nwilbert-sc2006<br \/>\nwilbert-sc2201<br \/>\nwilbert-sc2403<br \/>\nwilbert-sc2511<br \/>\nwilliam-pc<br \/>\nwilson-pc<br \/>\nwin-e7ejc94fkp6<br \/>\nwin-ehu9f33g4as<br \/>\nwin-lrg949qld21<br \/>\nwin-u9elnvppad0<br \/>\nwin7-maltest<br \/>\nwin7-pc<br \/>\nwin7even-pc<br \/>\nwin7pro-mailtest<br \/>\nwin7pro-maltest<br \/>\nwindows-pc<br \/>\nwindows7-pc<br \/>\nwindowshost02<br \/>\nwindowshost04<br \/>\nwindowshost06<br \/>\nwindowshost07<br \/>\nwindowsxp-sp2<br \/>\nwinxp<br \/>\nwinxp-maltest<br \/>\nwinxp01<br \/>\nwinxphostname<br \/>\nwinxppro-maltest<br \/>\nwinxpsp3<br \/>\nwinxpsp3x32<br \/>\nwinxp_re<br \/>\nwko105<br \/>\nwks-029<br \/>\nwolf<br \/>\nworkstation<br \/>\nwrightpc<br \/>\nx-pc<br \/>\nxanny<br \/>\nxjoybook54<br \/>\nXMiMmcKziitD<br \/>\nxp-449dffbc2bd5<br \/>\nxp-c374c7c20a7d<br \/>\nxp-ps3<br \/>\nxp-silo5yeiykex<br \/>\nxp-soak1<br \/>\nxp-sp3-template<br \/>\nxp1001<br \/>\nxp1002<br \/>\nxp3-host01<br \/>\nxpamas07<br \/>\nxpamas08<br \/>\nxpamas09<br \/>\nxpc<br \/>\nxPLyvzr8sgC<br \/>\nxpsp2-4f417033d<br \/>\nxpsp2-9c443b10c<br \/>\nxs946t04f78kkmi<br \/>\nxUnUy<br \/>\nxx-pc<br \/>\nxxxxx-437226f51<br \/>\nxyoreu<br \/>\nykj0egq7fze<br \/>\nymONofg<br \/>\nyour-5d270b6669<br \/>\nyuri-pc<br \/>\nz-235<br \/>\nzalo-pc<br \/>\nzgxtiqtg8837952<br \/>\nzOEsT<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Update 2024-12-07 Added a bunch of host names from https:\/\/raw.githubusercontent.com\/1337cstealer1337\/vt-bypass\/main\/pc_username_list.txt Update 2020-05-21 Added some user names Update 2017-12-18 Added a list of sandbox names from the &#8216;The Adventures of AV and the Leaky Sandbox&#8217; preso [PDF]\u00a0by SafeBreach Labs Removed &#8216;wscript.shell&#8217; &hellip; <a href=\"https:\/\/www.hexacorn.com\/blog\/2015\/08\/25\/enter-sandbox-part-8-all-those-host-names-will-be-lost-in-time-like-tears-in-rain\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[15,19,9,41],"tags":[],"_links":{"self":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts\/3192"}],"collection":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/comments?post=3192"}],"version-history":[{"count":11,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts\/3192\/revisions"}],"predecessor-version":[{"id":9713,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts\/3192\/revisions\/9713"}],"wp:attachment":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/media?parent=3192"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/categories?post=3192"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/tags?post=3192"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}