CTO-DTU-20200521-01A - COVID-19 IoCs.pdf
| Engine | Download Report | Detection | Info |
|---|---|---|---|
|
malicious
Score: 48
|
Error: Incomplete analysis, please check the report for detailed error information
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
|
| IP | Country | Detection |
|---|---|---|
| 104.24.109.135 | United States |  |
| Name | IP | Detection |
|---|---|---|
| maylnk.ml | 104.24.108.135 |  |
| Name | Detection |
|---|---|
| http://maylnk.ml/DBY/five/fre.phpRoot | |
| http://maylnk.ml/DBY/five/fre.php | |
| http://www.wikipedia.com/ | |
| Click to see the 6 hidden entries | |
| http://www.amazon.com/ | |
| http://www.nytimes.com/ | |
| http://www.live.com/ | |
| http://www.reddit.com/ | |
| http://www.twitter.com/ | |
| http://www.youtube.com/ | |
| Name | File Type | Hashes | Detection |
|---|---|---|---|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml |
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\~DFF61DE5FC39039026.TMP |
data | # | |
C:\Users\user\AppData\Local\Temp\~DFEC589F165BA7D3E6.TMP |
data | # | |
| Click to see the 28 hidden entries | |||
C:\Users\user\AppData\Local\Temp\~DF14885E9D577C4C0E.TMP |
data | # | |
C:\Users\user\AppData\Local\Temp\ArmUI.ini |
Little-endian UTF-16 Unicode text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\AdobeARM.log |
ASCII text, with CRLF, CR line terminators | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VTIIBVU5\bullet[1] |
PNG image data, 15 x 15, 8-bit colormap, non-interlaced | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VINVDFP6\http_404[1] |
HTML document, UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VINVDFP6\httpErrorPagesScripts[1] |
UTF-8 Unicode (with BOM) text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VINVDFP6\background_gradient[1] |
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1x800, frames 3 | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VINVDFP6\ErrorPageTemplate[1] |
UTF-8 Unicode (with BOM) text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\V5D02472\info_48[1] |
PNG image data, 47 x 48, 8-bit/color RGBA, non-interlaced | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\errorPageStrings[1] |
UTF-8 Unicode (with BOM) text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\down[1] |
PNG image data, 15 x 15, 8-bit colormap, non-interlaced | # | |
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml |
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml |
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators | # | |
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Cache\data_1 |
data | # | |
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml |
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml |
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml |
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml |
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml |
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml |
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{84F6A0AB-9BBB-11EA-AADD-C25F135D3C65}.dat |
Microsoft Word Document | # | |
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{7E6CEEE2-9BBB-11EA-AADD-C25F135D3C65}.dat |
Microsoft Word Document | # | |
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{7E6CEEE0-9BBB-11EA-AADD-C25F135D3C65}.dat |
Microsoft Word Document | # | |
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal |
data | # | |
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages |
SQLite 3.x database, last written using SQLite version 3024000 | # | |
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-200521233240Z-223.bmp |
PC bitmap, Windows 3.x format, 107 x -152 x 32 | # | |
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Visited Links |
data | # | |
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG |
ASCII text | # | |
