https://bieldruk.pl/wp-admin/paclm/iCwuJIoIoMuW/
| Engine | Download Report | Detection | Info |
|---|---|---|---|
|
malicious
|
||
|
malicious
Score: 100
|
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
|
| IP | Country | Detection |
|---|---|---|
| 192.198.91.138 | United States |  |
| 79.96.189.196 | Poland | |
| 185.51.201.252 | Iran (ISLAMIC Republic Of) | |
| Click to see the 1 hidden entries | ||
| 104.27.164.253 | United States | |
| Name | IP | Detection |
|---|---|---|
| innhanmachn.com | 104.27.164.253 | |
| shomalhouse.com | 185.51.201.252 | |
| bieldruk.pl | 79.96.189.196 | |
| Name | Detection |
|---|---|
| 0 |  |
| http://shomalhouse.com/wp-includes/ID3/IDz/ | |
| https://192.198.91.138:443/aF69rl5McY/ | |
| Click to see the 1 hidden entries | |
| http://innhanmachn.com/wp-admin/sA/ | |
| Name | File Type | Hashes | Detection |
|---|---|---|---|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\arc DW2569.doc.24u1z8i.partial |
8 | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\arc DW2569[1].doc |
8 | # | |
C:\Users\user\AppData\Local\Temp\JavaDeployReg.log |
ASCII text, with CRLF line terminators | # | |
| Click to see the 17 hidden entries | |||
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\MpCmdRun.log |
data | # | |
C:\Users\user\Pjq6t3_\Jvnk7yk\N1pjur3u.exe |
data | # | |
C:\Users\user\Documents\20201029\PowerShell_transcript.405464.i1j9t+6v.20201029161016.txt |
UTF-8 Unicode (with BOM) text, with very long lines, with CRLF, CR line terminators | # | |
C:\Users\user\AppData\Roaming\Microsoft\Templates\~$Normal.dotm |
data | # | |
C:\Users\user\AppData\Local\Temp\~DF8006A8F24FC3066B.TMP |
data | # | |
C:\Users\user\AppData\Local\Temp\~DF56E66D9CFC893531.TMP |
data | # | |
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_cn0ub0wy.mcs.ps1 |
very short file (no magic) | # | |
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_3asrafp3.zpd.psm1 |
very short file (no magic) | # | |
C:\Users\user\AppData\Local\Temp\VBE\MSForms.exd |
data | # | |
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{D9A38B1A-1A3B-11EB-90E4-ECF4BB862DED}.dat |
Microsoft Word Document | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive |
data | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\arc DW2569.doc:Zone.Identifier |
very short file (no magic) | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\arc DW2569.doc.24u1z8i.partial:Zone.Identifier |
ASCII text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{CF1AB38E-1905-4EC1-BE4C-6FFA9ED57B59}.tmp |
data | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{89B20F84-FD47-4939-890C-E07F099CA386}.tmp |
data | # | |
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\B782485F-1FA1-4C30-B4DF-7B04C3E40378 |
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{D9A38B1C-1A3B-11EB-90E4-ECF4BB862DED}.dat |
Microsoft Word Document | # | |
