SBA_Payroll_Protection_Application_Documents_Prom_Note_Benef.exe
| Engine | Download Report | Detection | Info |
|---|---|---|---|
|
malicious
Score: 100
|
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
|
| IP | Country | Detection |
|---|---|---|
| 35.232.16.77 | United States |  |
| 23.105.131.161 | United States | |
| Name | IP | Detection |
|---|---|---|
| www.lions97.com | 0.0.0.0 |  |
| site-cdn.onenote.net | 0.0.0.0 | |
| www.p8jy8r66.biz | 0.0.0.0 | |
| Click to see the 4 hidden entries | ||
| www.jamesbowiemarching.com | 0.0.0.0 | |
| www.mogaston.top | 0.0.0.0 | |
| www.749230y.info | 0.0.0.0 | |
| cqjcc.org | 35.232.16.77 | |
| Name | Detection |
|---|---|
| https://contextual.media.net/medianet.php?cid=8CU157172&crid=858412214&size=306x271&https=1LMEM | |
| http://www.imvu.comr | |
| http://myurl/myfile.bin | |
| Click to see the 11 hidden entries | |
| http://cps.letsencrypt.org0 | |
| https://cqjcc.org/bin_encrypted_1B4530.bin | |
| http://cert.int-x3.letsencrypt.org/0# | |
| http://ocsp.int-x3.letsencrypt.org0/ | |
| http://www.imvu.com | |
| https://login.yahoo.com/config/login | |
| http://www.nirsoft.net | |
| http://www.nirsoft.net/ | |
| https://cqjcc.org/builf2_encrypted_96DB6DF.bin | |
| http://cps.root-x1.letsencrypt.org0 | |
| http://www.ebuddy.com | |
| Name | File Type | Hashes | Detection |
|---|---|---|---|
C:\Users\user\AppData\Local\Temp\Stratagema\SLENTA.exe |
empty | # | |
C:\Users\user\AppData\Local\Temp\Stratagema\SLENTA.vbs |
empty | # | |
C:\Users\user\AppData\Local\Temp\Stratagema\dnwn.exe |
empty | # | |
| Click to see the 4 hidden entries | |||
C:\Users\user\AppData\Local\Temp\mromgkeganyurrxxsetqfiqsgoy |
empty | # | |
C:\Users\user\AppData\Local\Temp\rvtnul |
empty | # | |
C:\Users\user\AppData\Local\Temp\srphppteakaagjytqbyzfyqsc |
empty | # | |
C:\Users\user\AppData\Roaming\Google\logs.dat |
empty | # | |
