RFQ.exe.exe
| Engine | Download Report | Detection | Info |
|---|---|---|---|
|
malicious
Score: 100
|
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
|
| IP | Country | Detection |
|---|---|---|
| 52.58.78.16 | United States |  |
| 156.67.222.37 | Cyprus | |
| 54.37.152.247 | France | |
| Click to see the 5 hidden entries | ||
| 154.91.246.20 | Seychelles | |
| 63.250.45.114 | United States | |
| 199.59.242.153 | United States |  |
| 37.152.88.54 | Spain | |
| 23.20.239.12 | United States | |
| Name | IP | Detection |
|---|---|---|
| www.toaseniorhomesok.live | 0.0.0.0 | |
| cdn.onenote.net | 0.0.0.0 | |
| www.aticipant.com | 0.0.0.0 | |
| Click to see the 18 hidden entries | ||
| www.theglassship.com | 0.0.0.0 | |
| www.nusaliterainspirasi.com | 0.0.0.0 | |
| www.r52467314.win | 0.0.0.0 | |
| www.justgive2.com | 0.0.0.0 | |
| www.tgers.com | 0.0.0.0 | |
| www.teccommunications.com | 0.0.0.0 | |
| www.mailjp98347.com | 0.0.0.0 | |
| www.addis.tech | 0.0.0.0 | |
| www.sterlingsewer.info | 0.0.0.0 | |
| www.profitstree.com | 0.0.0.0 | |
| www.artiyonq.com | 63.250.45.114 | |
| www.obsoletelabs.com | 52.58.78.16 | |
| www.kmwhbl.com | 154.91.246.20 | |
| nusaliterainspirasi.com | 156.67.222.37 | |
| www.ycastama.com | 54.37.152.247 | |
| 71822.BODIS.COM | 199.59.242.153 | |
| parkingsrv0.dondominio.com | 37.152.88.54 | |
| HDRedirect-LB5-1afb6e2973825a56.elb.us-east-1.amazonaws.com | 23.20.239.12 | |
| Name | Detection |
|---|---|
| http://www.artiyonq.com/m8l/ | |
| http://www.artiyonq.com/m8l/?tVT=5W/5kEIdtxVt3n/xoeTRd2P1yDG4A43nFAD006cGMUhROXoTda6GZj7hA5S0bqxvW5XG&MR-p=0tPLH85x-lH | |
| http://www.addis.tech/m8l/?tVT=lki1ed3GPMN5Nw1jaHFlS3B9RQB9zvXEK7YHw36ZfVLkkOoQWGs0VMlLDODNdBIBI6zD&MR-p=0tPLH85x-lH | |
| Click to see the 26 hidden entries | |
| http://www.kmwhbl.com/m8l/?tVT=stAPCawU9FsBsDeLDlqawFgIxU41y6VpxlOSmtpgZq2QqlgInUNCOlYAlNLBb+BUECvq&MR-p=0tPLH85x-lH | |
| http://www.nusaliterainspirasi.com/m8l/?MR-p=0tPLH85x-lH&tVT=ovbFtOa4uTjd1a92oYI1beIGZw7s4qusWsZU0rgv2nLP+ugoFD+dLAFKen/jDfcukVqZ | |
| http://www.tgers.com/m8l/ | |
| http://www.obsoletelabs.com/m8l/?tVT=HCt+Yhx/h4l+FCj3nKRKOvS7Xa1e0tc/Egfr+bgHKkeQjLAOt82B/JBt+eO2F9D4/3gd&MR-p=0tPLH85x-lH | |
| http://www.teccommunications.com/m8l/ | |
| http://www.teccommunications.com/m8l/?MR-p=0tPLH85x-lH&tVT=PZkH6llHoqFvvgYvV7p0jyJ4zE2wugCWkpTMu12MC83jrlv2PlfP15O4FxttxOVUzuUw | |
| http://www.nusaliterainspirasi.com/m8l/ | |
| http://www.tgers.com/m8l/?MR-p=0tPLH85x-lH&tVT=dcH6q++BfneLHwYr+7wkAtOqeHmKUMZpIhb6VvBnwf4Bd/1QFFGV2dHI+mdn934ofCRD | |
| http://www.addis.tech/m8l/ | |
| http://www.obsoletelabs.com/m8l/ | |
| http://www.sakkal.com | |
| http://www.founder.com.cn/cn/cThe | |
| http://www.zhongyicts.com.cn | |
| http://www.sandoll.co.kr | |
| http://www.fonts.com | |
| http://www.%s.comPA | |
| http://www.jiyu-kobo.co.jp/ | |
| http://www.founder.com.cn/cn | |
| http://fontfabrik.com | |
| http://www.typography.netD | |
| http://www.sajatypeworks.com | |
| http://www.carterandcone.coml | |
| http://www.goodfont.co.kr | |
| http://www.tiro.com | |
| http://www.founder.com.cn/cn/bThe | |
| http://www.apache.org/licenses/LICENSE-2.0 | |
| Name | File Type | Hashes | Detection |
|---|---|---|---|
C:\Users\user\AppData\Local\Temp\DB1 |
SQLite 3.x database, last written using SQLite version 3024000 | # | |
C:\Users\user\AppData\Local\Temp\Wajuduf\ebplgh1bmx.exe |
PE32 executable (GUI) Intel 80386, for MS Windows | # | |
C:\Users\user\AppData\Roaming\8-LP7Q9T\8-Llogrf.ini |
data | # | |
| Click to see the 5 hidden entries | |||
C:\Users\user\AppData\Roaming\8-LP7Q9T\8-Llogri.ini |
data | # | |
C:\Users\user\AppData\Roaming\8-LP7Q9T\8-Llogrv.ini |
data | # | |
C:\Users\user\AppData\Roaming\8-LP7Q9T\8-Llogim.jpeg |
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1280x1024, frames 3 | # | |
C:\Users\user\AppData\Roaming\8-LP7Q9T\8-Llogrg.ini |
data | # | |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\f01b4d95cf55d32a.automaticDestinations-ms |
MS Windows shortcut, Item id list present, Points to a file or directory, Read-Only, Directory, ctime=Wed Apr 11 22:38:20 2018, mtime=Wed Jun 24 09:53:15 2020, atime=Wed Jun 24 09:53:15 2020, length=8192, window=hide | # | |
