http://vyboh.com/doc/Adobe-Reader-PDF-Plugin-5.0.2.exe
| Engine | Download Report | Detection | Info |
|---|---|---|---|
|
malicious
Score: 84
|
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
|
| IP | Country | Detection |
|---|---|---|
| 208.95.112.1 | United States |  |
| 195.181.249.13 | Slovakia (SLOVAK Republic) | |
| 209.141.34.150 | United States | |
| Name | IP | Detection |
|---|---|---|
| ip-api.com | 208.95.112.1 | |
| vyboh.com | 195.181.249.13 | |
| grelkafestivales.com | 209.141.34.150 | |
| Name | Detection |
|---|---|
| http://grelkafestivales.com/nss3.dll | |
| https://search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command= | |
| http://grelkafestivales.com/vcruntime140.dlldTD | |
| Click to see the 29 hidden entries | |
| http://grelkafestivales.com/vcruntime140.dllTSt | |
| http://grelkafestivales.com/freebl3.dll | |
| http://grelkafestivales.com/softokn3.dll | |
| https://support.mozilla.org | |
| http://grelkafestivales.com/softokn3.dllAA | |
| https://sp.ask.com/sh/i/a16/favicon/favicon.icohttps://www.ask.com/web?q= | |
| http://ip-api.com/line/3VU | |
| http://grelkafestivales.com/freebl3.dll) | |
| https://autosuggest.search.aol.com/autocomplete/get?output=json&it=&q= | |
| http://grelkafestivales.com/mozglue.dll | |
| http://vyboh.com/doc/Adobe-Reader-PDF-Plugin-5.0.2.exe | |
| http://grelkafestivales.com/msvcp140.dllMA | |
| http://crl.thawte.com/ThawteTimestampingCA.crl0 | |
| http://grelkafestivales.com/freebl3.dll?ddosprotected=1 | |
| https://support.mozilla.org/en-US/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=fire | |
| http://grelkafestivales.com/302 | |
| http://grelkafestivales.com/vcruntime140.dllISk | |
| http://ip-api.com/line/ | |
| https://search.yahoo.com/favicon.icohttps://search.yahoo.com/search | |
| http://grelkafestivales.com/ | |
| https://search.aol.com/favicon.icohttps://search.aol.com/aol/search?q= | |
| http://www.mozilla.com0 | |
| https://support.mozilla.org/en-US/products/firefoxgro.allizom.troppus. | |
| http://ocsp.thawte.com0 | |
| http://grelkafestivales.com/msvcp140.dll | |
| http://grelkafestivales.com/vcruntime140.dll | |
| http://ip-api.com/line/yy | |
| http://www.mozilla.com/en-US/blocklist/ | |
| http://ss.ask.com/query?q= | |
| Name | File Type | Hashes | Detection |
|---|---|---|---|
C:\Users\user\Desktop\download\Adobe-Reader-PDF-Plugin-5.0.2.exe |
PE32 executable (GUI) Intel 80386, for MS Windows | # |  |
C:\ProgramData\QNVBXFG8KQARRZNZICIUFDO2Y\history |
SQLite 3.x database, user version 52, last written using SQLite version 3024000 | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WERDB33.tmp.xml |
XML 1.0 document, ASCII text, with CRLF line terminators | # | |
| Click to see the 69 hidden entries | |||
C:\ProgramData\QNVBXFG8KQARRZNZICIUFDO2Y\files\screenshot.jpg |
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1280x1024, frames 3 | # | |
C:\ProgramData\QNVBXFG8KQARRZNZICIUFDO2Y\files\information.txt |
ASCII text, with CRLF line terminators | # | |
C:\ProgramData\QNVBXFG8KQARRZNZICIUFDO2Y\files\cookie_list.txt |
ASCII text, with CRLF line terminators | # | |
C:\ProgramData\QNVBXFG8KQARRZNZICIUFDO2Y\files\History\history_Mozilla Firefox_6c4zjj0s.default.txt |
ASCII text, with CRLF line terminators | # | |
C:\ProgramData\QNVBXFG8KQARRZNZICIUFDO2Y\files\Files\myname1.zip |
Zip archive data (empty) | # | |
C:\ProgramData\QNVBXFG8KQARRZNZICIUFDO2Y\files\Cookies\cookies_Mozilla Firefox_6c4zjj0s.default.txt |
ASCII text, with CRLF line terminators | # | |
C:\ProgramData\QNVBXFG8KQARRZNZICIUFDO2Y\files\Cookies\Google Chrome_Default.txt |
ASCII text, with CRLF line terminators | # | |
C:\ProgramData\QNVBXFG8KQARRZNZICIUFDO2Y\c |
SQLite 3.x database, user version 9, last written using SQLite version 3023001 | # | |
C:\ProgramData\QNVBXFG8KQARRZNZICIUFDO2Y\CH_59407d34-c8c5-44df-a766-ba8a11cb1cb09553918492.zip |
Zip archive data, at least v2.0 to extract | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WERFF05.tmp.dmp |
Mini DuMP crash report, 15 streams, Thu Jan 23 05:34:27 2020, 0x1205a4 type | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WERF60E.tmp.xml |
XML 1.0 document, ASCII text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WERF4E4.tmp.WERInternalMetadata.xml |
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WERF197.tmp.dmp |
Mini DuMP crash report, 15 streams, Thu Jan 23 05:34:24 2020, 0x1205a4 type | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WEREB6.tmp.xml |
XML 1.0 document, ASCII text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WERE29.tmp.WERInternalMetadata.xml |
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WERDA67.tmp.WERInternalMetadata.xml |
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators | # | |
C:\ProgramData\vcruntime140.dll |
PE32 executable (DLL) (console) Intel 80386, for MS Windows | # | |
C:\Users\user\Desktop\cmdline.out |
ASCII text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VTIIBVU5\msvcp140[1].dll |
PE32 executable (DLL) (console) Intel 80386, for MS Windows | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VINVDFP6\softokn3[1].dll |
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VINVDFP6\freebl3[1].dll |
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\V5D02472\vcruntime140[1].dll |
PE32 executable (DLL) (console) Intel 80386, for MS Windows | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\V5D02472\mozglue[1].dll |
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\nss3[1].dll |
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\freebl3[1].htm |
HTML document, ASCII text, with CRLF line terminators | # | |
C:\ProgramData\QNVBXFG8KQARRZNZICIUFDO2Y\historych |
SQLite 3.x database, last written using SQLite version 3024000 | # | |
C:\ProgramData\softokn3.dll |
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows | # | |
C:\ProgramData\nss3.dll |
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows | # | |
C:\ProgramData\msvcp140.dll |
PE32 executable (DLL) (console) Intel 80386, for MS Windows | # | |
C:\ProgramData\mozglue.dll |
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows | # | |
C:\ProgramData\freebl3.dll |
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows | # | |
C:\ProgramData\QNVBXFG8KQARRZNZICIUFDO2Y\wd |
SQLite 3.x database, last written using SQLite version 3024000 | # | |
C:\ProgramData\QNVBXFG8KQARRZNZICIUFDO2Y\ld |
SQLite 3.x database, last written using SQLite version 3024000 | # | |
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_Adobe-Reader-PDF_8e6841676ecb45ff8d5e5478b7afc4a64a1b28c0_18ae589c_12b355a5\Report.wer |
Little-endian UTF-16 Unicode text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WER2971.tmp.WERInternalMetadata.xml |
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WER2624.tmp.dmp |
Mini DuMP crash report, 15 streams, Thu Jan 23 05:34:37 2020, 0x1205a4 type | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WER214.tmp.xml |
XML 1.0 document, ASCII text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WER1E85.tmp.xml |
XML 1.0 document, ASCII text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WER1DE8.tmp.WERInternalMetadata.xml |
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WER1A6C.tmp.dmp |
Mini DuMP crash report, 15 streams, Thu Jan 23 05:34:34 2020, 0x1205a4 type | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WER158.tmp.WERInternalMetadata.xml |
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_Adobe-Reader-PDF_8e6841676ecb45ff8d5e5478b7afc4a64a1b28c0_18ae589c_12bf7d42\Report.wer |
Little-endian UTF-16 Unicode text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WER29E0.tmp.xml |
XML 1.0 document, ASCII text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_Adobe-Reader-PDF_8e6841676ecb45ff8d5e5478b7afc4a64a1b28c0_18ae589c_11f010d7\Report.wer |
Little-endian UTF-16 Unicode text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_Adobe-Reader-PDF_8e6841676ecb45ff8d5e5478b7afc4a64a1b28c0_18ae589c_0ba3c7b9\Report.wer |
Little-endian UTF-16 Unicode text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_Adobe-Reader-PDF_8e6841676ecb45ff8d5e5478b7afc4a64a1b28c0_18ae589c_0acc2c8d\Report.wer |
Little-endian UTF-16 Unicode text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_Adobe-Reader-PDF_8e6841676ecb45ff8d5e5478b7afc4a64a1b28c0_18ae589c_0a5bf716\Report.wer |
Little-endian UTF-16 Unicode text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_Adobe-Reader-PDF_8e6841676ecb45ff8d5e5478b7afc4a64a1b28c0_18ae589c_083f4605\Report.wer |
Little-endian UTF-16 Unicode text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_Adobe-Reader-PDF_8e6841676ecb45ff8d5e5478b7afc4a64a1b28c0_18ae589c_04e01f4e\Report.wer |
Little-endian UTF-16 Unicode text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_Adobe-Reader-PDF_8e6841676ecb45ff8d5e5478b7afc4a64a1b28c0_18ae589c_02f0034b\Report.wer |
Little-endian UTF-16 Unicode text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_Adobe-Reader-PDF_8e6841676ecb45ff8d5e5478b7afc4a64a1b28c0_18ae589c_00fb6a18\Report.wer |
Little-endian UTF-16 Unicode text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WER68F1.tmp.xml |
XML 1.0 document, ASCII text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WERD7D6.tmp.dmp |
Mini DuMP crash report, 15 streams, Thu Jan 23 05:34:17 2020, 0x1205a4 type | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WERC634.tmp.xml |
XML 1.0 document, ASCII text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WERC597.tmp.WERInternalMetadata.xml |
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WERC3A2.tmp.dmp |
Mini DuMP crash report, 15 streams, Thu Jan 23 05:34:12 2020, 0x1205a4 type | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WER9A4.tmp.dmp |
Mini DuMP crash report, 15 streams, Thu Jan 23 05:34:30 2020, 0x1205a4 type | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WER7BAE.tmp.xml |
XML 1.0 document, ASCII text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WER7B4F.tmp.WERInternalMetadata.xml |
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WER78FC.tmp.dmp |
Mini DuMP crash report, 14 streams, Thu Jan 23 05:33:53 2020, 0x1205a4 type | # | |
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_Adobe-Reader-PDF_63fa1f52e3166245d92ab27f42cc3826f74486fc_18ae589c_11a7dc2b\Report.wer |
Little-endian UTF-16 Unicode text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WER6854.tmp.WERInternalMetadata.xml |
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WER665F.tmp.dmp |
Mini DuMP crash report, 14 streams, Thu Jan 23 05:33:48 2020, 0x1205a4 type | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WER547F.tmp.xml |
XML 1.0 document, ASCII text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WER5420.tmp.WERInternalMetadata.xml |
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WER51EC.tmp.dmp |
Mini DuMP crash report, 14 streams, Thu Jan 23 05:33:43 2020, 0x1205a4 type | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WER44DF.tmp.xml |
XML 1.0 document, ASCII text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WER4451.tmp.WERInternalMetadata.xml |
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WER421D.tmp.dmp |
Mini DuMP crash report, 14 streams, Thu Jan 23 05:33:39 2020, 0x1205a4 type | # | |
