flash

http://xn-----7kcrb6bedbhgo4av.top

Status: finished
Submission Time: 11.09.2019 20:42:56
Malicious

Comments

Tags

Details

  • Analysis ID:
    173095
  • API (Web) ID:
    240659
  • Analysis Started:
    11.09.2019 20:42:57
  • Analysis Finished:
    11.09.2019 20:48:30
  • Technologies:
Full Report Engine Info Verdict Score Reports

System: Windows 10 64 bit (version 1803) with Office 2016, Adobe Reader DC 19, Chrome 70, Firefox 63, Java 8.171, Flash 30.0.0.113

malicious
48/100

malicious

clean

IPs

IP Country Detection
185.104.45.21
Ukraine
185.39.224.54
Ukraine
64.233.184.156
United States

Domains

Name IP Detection
www.ukraine.com.ua
185.39.224.54
stats.l.doubleclick.net
64.233.184.156
xn-----7kcrb6bedbhgo4av.top
185.104.45.21
Click to see the 1 hidden entries
stats.g.doubleclick.net
0.0.0.0

URLs

Name Detection
http://jqueryui.com
https://stats.g.doubleclick.net/r/collect?t=dc&aip=1&_r=3&
https://www.ukraine.com.ua/faq/oshibka-403-forbidden.html(
Click to see the 52 hidden entries
http://www.amazon.com/
http://www.twitter.com/
https://fontawesome.comhttps://fontawesome.comFont
https://www.ukraine.com.ua
https://fontawesome.com
http://www.opensource.org/licenses/mit-license.php
https://www.ukraine.com.ua/faq/
https://www.ukraine.com.ua/faq/oshibka-403-forbidden.html#
https://github.com/krux/postscribe/blob/master/LICENSE.
https://www.ukraine.cotop/V
https://stats.g.doubleclick.net/j/collect
http://flesler.blogspot.com/2007/10/jqueryscrollto.html
http://www.reddit.com/
https://wiki.ukraine.com.ua
https://wiki.ukraine.com.ua/hosting:errors:403.
https://www.ukraine.com.ua/
http://dev.iceburg.net/jquery/jqModal/)
http://www.nytimes.com/
https://adm.tools/
https://www.ukraine.com.ua/design/ukraine/img/logo.png
http://fontello.com
https://www.ukraine.com.ua/favicon.ico~
https://www.ukraine.com.ua/faq/oshibka-403-forbidden.html
http://opensource.org/licenses/MIT
https://schema.org
http://github.com/semantic-org/semantic-ui/
https://www.ukraine.com.ua/user/register/
http://creativecommons.org/ns#
https://www.ukraine.co
https://adm.tools/support/accessrestore/
http://xn-----7kcrb6bedbhgo4av.top/favicon.ico
http://fancyapps.com/fancybox/
http://jqueryui.com/themeroller/?ffDefault=Lucida%20Grande%2CLucida%20Sans%2CArial%2Csans-serif&fwDe
http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd
https://login.tools/?return_url=
https://www.google.%/ads/ga-audiences
http://fontello.comCopyright
https://www.ukraine.com.ua/domains/?z%5B1%5D%5B691%5D=true&z%5B1%5D%5B726%5D=true&z%5B2%5D%5B678%5D=
http://xn-----7kcrb6bedbhgo4av.top/
https://twitter.com/ukrainecomua
http://www.youtube.com/
http://malsup.com/jquery/block/
https://login.tools/?return_url=https%3A%2F%2Fwww.ukraine.com.ua%2Ffaq%2Foshibka-403-forbidden.html&
http://flesler.blogspot.com
http://www.gnu.org/licenses/gpl.html
http://www.wikipedia.com/
https://adm.tools/support/
https://wiki.ukraine.com.ua/hosting:errors:403
https://www.ukraine.com.ua/favicon.ico
http://www.live.com/
https://www.ukraine.com.ua/faq/oshibka-403-foRoot
http://www.inkscape.org/namespaces/inkscape

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\1PAMY2N7\www.ukraine.com[1].xml
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{90E39044-D50F-11E9-AADE-44C1B3FB757B}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{90E39046-D50F-11E9-AADE-44C1B3FB757B}.dat
Microsoft Word Document
#
Click to see the 46 hidden entries
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{9753670A-D50F-11E9-AADE-44C1B3FB757B}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-314712940\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\6o07ku1\imagestore.dat
data
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3PRWWXOM\best_domain[1].png
PNG image data, 46 x 18, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3PRWWXOM\bg_gray[1].png
PNG image data, 2 x 200, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3PRWWXOM\gtm[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3PRWWXOM\icu_domain[1].png
PNG image data, 181 x 62, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3PRWWXOM\jquery.blockUI[1].js
ISO-8859 text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3PRWWXOM\jquery.fancybox.min[1].css
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3PRWWXOM\jquery.fancybox.min[1].js
UTF-8 Unicode text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3PRWWXOM\right_corner[1].gif
GIF image data, version 89a, 226 x 309
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8WQYDQEU\bottom_1[1].png
PNG image data, 26 x 544, 16-bit gray+alpha, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8WQYDQEU\css[1].css
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8WQYDQEU\currency[1].js
ISO-8859 text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8WQYDQEU\ec[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8WQYDQEU\favicon[1].ico
MS Windows icon resource - 1 icon, 16x16, 24 bits/pixel
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8WQYDQEU\fontello[1].eot
Embedded OpenType (EOT), fontello family
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8WQYDQEU\oshibka-403-forbidden[1].htm
HTML document, ISO-8859 text, with very long lines, with CRLF, LF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8WQYDQEU\style[1].css
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8WQYDQEU\ufo[1].css
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8WQYDQEU\xyz_domain[1].svg
SVG Scalable Vector Graphics image
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATZL2J9G\KFOkCnqEu92Fr1Mu51xMIzQ[1].woff
Web Open Font Format, TrueType, length 30716, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATZL2J9G\analytics[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATZL2J9G\fa-regular-400[1].eot
Embedded OpenType (EOT), Font Awesome 5 Free Regular family
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\LTYLVBDO\club_domain[1].png
PNG image data, 80 x 28, 8-bit colormap, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\LTYLVBDO\css[1].css
data
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\LTYLVBDO\fa-solid-900[1].eot
Embedded OpenType (EOT), Font Awesome 5 Free Solid family
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\LTYLVBDO\jquery-migrate-1.1.0.min[1].js
UTF-8 Unicode text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\LTYLVBDO\org_domain[1].svg
SVG Scalable Vector Graphics image
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\LTYLVBDO\raven.min[1].js
ASCII text, with very long lines, with LF, NEL line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\LTYLVBDO\semantic--noglobal.min[1].css
UTF-8 Unicode text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\LTYLVBDO\semantic.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Temp\datCD22.tmp
Web Open Font Format, TrueType, length 7108, version 1.0
#
C:\Users\user\AppData\Local\Temp\datCD81.tmp
Web Open Font Format, TrueType, length 6320, version 1.0
#
C:\Users\user\AppData\Local\Temp\~DF08EADCC4D4D0E1B0.TMP
data
#
C:\Users\user\AppData\Local\Temp\~DFA0EAE3BE036ECF81.TMP
data
#
C:\Users\user\AppData\Local\Temp\~DFD10D51F77C70C9AB.TMP
data
#