flash

http://ogsrealestate.com/icon.png

Status: finished
Submission Time: 22.02.2020 23:39:50
Malicious

Comments

Tags

Details

  • Analysis ID:
    210238
  • API (Web) ID:
    317738
  • Analysis Started:
    22.02.2020 23:39:51
  • Analysis Finished:
    22.02.2020 23:45:09
  • Technologies:
Full Report Engine Info Verdict Score Reports

System: Windows 10 64 bit (version 1803) with Office 2016, Adobe Reader DC 19, Chrome 70, Firefox 63, Java 8.171, Flash 30.0.0.113

malicious
56/100

malicious
6/71

IPs

IP Country Detection
50.87.253.17
United States

Domains

Name IP Detection
ogsrealestate.com
50.87.253.17

URLs

Name Detection
http://ogsrealestate.com/icon.png
http://ogsrealestate.com/favicon.ico
http://www.wikipedia.com/
Click to see the 8 hidden entries
http://www.amazon.com/
http://ogsrealestate.com/icon.pngRoot
http://www.nytimes.com/
http://www.live.com/
http://www.reddit.com/
http://www.twitter.com/
http://ogsrealestate.com/favicon.ico6
http://www.youtube.com/

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{EBEA7583-560F-11EA-AADB-C25F135D3C65}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{EBEA7585-560F-11EA-AADB-C25F135D3C65}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{EBEA7586-560F-11EA-AADB-C25F135D3C65}.dat
Microsoft Word Document
#
Click to see the 15 hidden entries
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\6aw4uvh\imagestore.dat
data
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\icon[1].png
data
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VINVDFP6\favicon[1].ico
PC bitmap, Windows 3.x format, 16 x 16 x 24
#
C:\Users\user\AppData\Local\Temp\~DF3206954208B07E02.TMP
data
#
C:\Users\user\AppData\Local\Temp\~DF40E7F8FD102F0FD5.TMP
data
#
C:\Users\user\AppData\Local\Temp\~DFF59F4EE89ABF4A2F.TMP
data
#