Engine | Download Report | Detection | Info |
---|---|---|---|
|
malicious
|
||
|
malicious
Score: 100
|
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
|
IP | Country | Detection |
---|---|---|
145.14.145.31 | Netherlands | |
145.14.145.191 | Netherlands | |
145.14.144.43 | Netherlands | |
Click to see the 2 hidden entries | ||
145.14.144.70 | Netherlands | |
145.14.145.233 | Netherlands |
Name | IP | Detection |
---|---|---|
us-east-1.route-1.000webhost.awex.io | 145.14.144.70 | |
dfewfwefwefwefwe.000webhostapp.com | 0.0.0.0 | |
84.102.13.0.in-addr.arpa | 0.0.0.0 |
Name | Detection |
---|---|
http://www.fontbureau.comals | |
http://www.fontbureau.com/designers? | |
http://www.founder.com.cn/cn/bThe | |
Click to see the 97 hidden entries | |
http://fontfabrik.comX | |
http://www.fontbureau.com/designers/? | |
http://www.msn.com/?ocid=iehpLMEM | |
https://dfewfwefwefwefwe.000webhostapp.com/92C486B30AED6179B7C5C1072329CBE9.html | |
http://www.fontbureau.com/designersG | |
http://www.msn.com/de-ch/?ocid=iehpLMEMp | |
https://dfewfwefwefwefwe.000webhostapp.com/925C31CCC028CA75143AE3F6FA8B1217.html | |
https://dfewfwefwefwefwe.000webhostapp.com/2CDFCAB19318859AF668AE7A5A5041EC.html | |
https://dfewfwefwefwefwe.000webhostapp.com/11034993C59AC5C07B20687467073238.html | |
https://dfewfwefwefwefwe.000webhostapp.com/6A071D5805C8601A560EBF9B738C134F.html | |
https://dfewfwefwefwefwe.000webhostapp.com/6DFD3E685EF767E83A691AD1B333BBDE.html | |
https://dfewfwefwefwefwe.000webhostapp.com/16B43815BAB4EFE6749704A2080B64E9.html | |
http://www.jiyu-kobo.co.jp/i | |
https://dfewfwefwefwefwe.000webhostapp.com/9492461B65B6BBA42EE290CEE36D78A1.html | |
https://adservice.google.co.uk/ddm/fls/i/src=2542116;type=chrom322;cat=chrom01g;or | |
https://dfewfwefwefwefwe.000webhostapp.com/5C519EAC017CA04C92D968C813E81624.html | |
https://dfewfwefwefwefwe.000webhostapp.com/57542D696A1025F7625292B7CC145348.html | |
https://dfewfwefwefwefwe.000webhostapp.com/7570F7DA73E60F0B0DA95536C9789D60.html | |
http://www.jiyu-kobo.co.jp/v | |
http://www.fontbureau.com/designers/frere-jones.html | |
http://en.w% | |
http://foo.com/foo | |
http://www.galapagosdesign.com/staff/dennis.htm | |
http://www.sajatypeworks.coml | |
http://www.fontbureau.com/designerst | |
http://www.fontbureau.comueed | |
http://www.sakkal.com | |
https://contextual.media.net/checksync.phphttps://contextual.media.net/checksync.php?&vsSync=1&cs=1& | |
http://www.sandoll.co.kr | |
http://www.fonts.com | |
http://www.fontbureau.comcom | |
https://contextual.media.net/checksync.php?&vsSync=1&cs=1&hb=1&cv=37&ndec=1&cid=8HBI57XIG&prvid=77%2 | |
https://dfewfwefwefwefwe.000webhostapp.com/9FE68748F157444236AF889CF03248FB.html | |
http://fontfabrik.com | |
https://2542116.fls.doubleclick.net/activityi;src=2542116;type=chrom322;cat=chrom01g;ord=30055406629 | |
http://www.carterandcone.coml | |
http://www.typography.netD | |
http://www.tiro.comlict | |
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/streetaddresszhttp://schemas.xmlsoap.org/ws/20 | |
http://fontfabrik.comH. | |
http://www.carterandcone.com | |
http://www.goodfont.co.kr | |
http://www.jiyu-kobo.co.jp/Y0s | |
http://www.jiyu-kobo.co.jp/jp/1 | |
http://www.tiro.com | |
https://dfewfwefwefwefwe.000webhostapp.com/F6E31BBEEC57707C7C6129DB6410903E.html | |
http://www.fontbureau.comod | |
http://www.sajatypeworks.com | |
http://www.ascendercorp.com/typedesigners.html | |
https://contextual.media.net/medianet. | |
http://www.galapagosdesign.com/DPlease | |
https://dfewfwefwefwefwe.000webhostapp.com/8186998821E16666BC375C53F0289070.html | |
http://www.fontbureau.com/ | |
http://whatismyipaddress.com/- | |
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/authorizationdecisionzhttp://schemas.xmlsoap.o | |
https://dfewfwefwefwefwe.000webhostapp.com/B24B28A064B07CFF9FA5F4163B26651E.html | |
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/denyonlysid | |
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/x500distinguishednamejhttp://schemas.xmlsoap.o | |
http://www.founder.com.cn/cn/cThe | |
https://dfewfwefwefwefwe.000webhostapp.com/C4EFF0DBE2515DED6746B9D0CF7B7048.html | |
http://www.site.com/logs.php | |
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/authentication | |
http://www.fontbureau.coml1 | |
https://dfewfwefwefwefwe.000webhostapp.com/14B2AC6B97B24C31FF76FCE3CE0E49CE.html | |
http://www.fontbureau.com/designers | |
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/stateorprovince | |
http://www.jiyu-kobo.co.jp//d | |
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddressxhttp://schemas.xmlsoap.org/ws/200 | |
https://dfewfwefwefwefwe.000webhostapp.com/67038FC3562884EA0413BCBFC53D073E.html | |
http://www.fontbureau.comessedm | |
https://contextual.media.net/checksync.php?&vsSync=1&cs=1&hb=1&cv=37&ndec=1&cid=8H | |
http://cdp.rapidssl.com/RapidSSLRSACA2018.crl0L | |
http://www.jiyu-kobo.co.jp/R | |
http://www.fontbureau.comaI | |
http://www.sajatypeworks.com.40 | |
http://www.jiyu-kobo.co.jp/sm | |
https://2542116.fls.doubleclick.net/activityi;src=2542116;type=2542116;cat=chom0;ord=9774759596232;g | |
https://dfewfwefwefwefwe.000webhostapp.com/E96AAF636CAC3285A52A0AAEEA38D8CD.html | |
https://dfewfwefwefwefwe.000webhostapp.com/BD275894C0FD532F00C7EC83499B4EAC.html | |
https://dfewfwefwefwefwe.000webhostapp.com/B6335E45F5786D740EBA42E9FB47F21B.html | |
http://www.fontbureau.comcomo | |
http://www.msn.com/?ocid=iehphttp://www.msn.com/http://www.msn.com/de-ch/?ocid=iehphttp://www.msn.co | |
https://dfewfwefwefwefwe.000webhostapp.com/973C68F4CB95A6DC2724A56BF4B71E7A.html | |
https://pastebin.com/raw/W63zsRav | |
https://dfewfwefwefwefwe.000webhostapp.com/BFB70F71B8D8C8602FC5378DBE3DAFA3.html | |
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/dateofbirthrhttp://schemas.xmlsoap.org/ws/2005 | |
https://2542116.fls.doubleclick.net/activi | |
http://status.rapidssl.com0= | |
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier | |
http://www.jiyu-kobo.co.jp/ief | |
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name | |
http://www.founder.com.cn/cniai | |
http://www.zhongyicts.com.cn | |
http://www.nirsoft.net/ | |
http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt0 | |
http://www.urwpp.deDPlease | |
https://contextual.media.net/medianet.php?cid=8CU157172&crid=722878611&size=306x271&https=1https://c |
Name | File Type | Hashes | Detection |
---|---|---|---|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\company certificate.exe:Zone.Identifier |
ASCII text, with CRLF line terminators | # | |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\company certificate.exe |
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows | # | |
C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\company certificate.exe.log |
ASCII text, with CRLF line terminators | # | |
Click to see the 15 hidden entries | |||
C:\ProgramData\Microsoft\Windows\WER\Temp\WERC641.tmp.dmp |
Mini DuMP crash report, 15 streams, Sun Oct 11 21:05:18 2020, 0x1205a4 type | # | |
C:\Users\user\AppData\Roaming\pidloc.txt |
ASCII text, with no line terminators | # | |
C:\Users\user\AppData\Roaming\pid.txt |
ASCII text, with no line terminators | # | |
C:\Users\user\AppData\Local\Temp\holderwb.txt |
Little-endian UTF-16 Unicode text, with no line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WERF6B9.tmp.WERInternalMetadata.xml |
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WERE727.tmp.dmp |
Mini DuMP crash report, 14 streams, Sun Oct 11 21:05:25 2020, 0x1205a4 type | # | |
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_company certific_4af3781f95f718c5ce113893f62bb5a6b457f7e_5cf1796d_12489b88\Report.wer |
Little-endian UTF-16 Unicode text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WER841A.tmp.xml |
XML 1.0 document, ASCII text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WER81C7.tmp.WERInternalMetadata.xml |
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WER65D2.tmp.dmp |
Mini DuMP crash report, 14 streams, Sun Oct 11 21:04:49 2020, 0x1205a4 type | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WER243.tmp.xml |
XML 1.0 document, ASCII text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WER1B49.tmp.xml |
XML 1.0 document, ASCII text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WER124F.tmp.WERInternalMetadata.xml |
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_company certific_e6ba50f9ea5dd35a8481fe74abc9cb76d2b73f1_5cf1796d_03ad52f1\Report.wer |
Little-endian UTF-16 Unicode text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_company certific_7b182c7b85769a7d682f445e274acf348099_b4684fc6_16c53920\Report.wer |
Little-endian UTF-16 Unicode text, with CRLF line terminators | # |