flash

http://congratulations.take-reward-now.xyz/static/_common/gcc91g1y3wqj.js

Status: finished
Submission Time: 15.01.2020 01:20:25
Clean

Comments

Tags

Details

  • Analysis ID:
    201048
  • API (Web) ID:
    299886
  • Analysis Started:
    15.01.2020 01:20:26
  • Analysis Finished:
    15.01.2020 01:25:06
  • Technologies:
Full Report Engine Info Verdict Score Reports

System: Windows 10 64 bit (version 1803) with Office 2016, Adobe Reader DC 19, Chrome 70, Firefox 63, Java 8.171, Flash 30.0.0.113

clean
1/100

IPs

IP Country Detection
138.197.73.216
United States

Domains

Name IP Detection
congratulations.take-reward-now.xyz
138.197.73.216

URLs

Name Detection
http://congratulations.take-reward-now.xyz/static/_common/gcc91g1y3wqj.js

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{67CACACB-3778-11EA-AADB-C25F135D3C65}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{67CACACD-3778-11EA-AADB-C25F135D3C65}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\gcc91g1y3wqj[1].js
ASCII text, with very long lines, with no line terminators
#
Click to see the 6 hidden entries
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VINVDFP6\gcc91g1y3wqj.js.y4cd5z3.partial
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VINVDFP6\gcc91g1y3wqj.js.y4cd5z3.partial:Zone.Identifier
ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VINVDFP6\gcc91g1y3wqj.js:Zone.Identifier
very short file (no magic)
#
C:\Users\user\AppData\Local\Temp\JavaDeployReg.log
ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\~DF3827519D2027FC31.TMP
data
#
C:\Users\user\AppData\Local\Temp\~DF7B52B549F9940EFE.TMP
data
#