http://bihhwidigojbtkic.lfllavv.com/kampo/Y29ycG9yYXRlLmFjdGlvbnMuYXUyQGlnLmNvbQ==
| Engine | Download Report | Detection | Info |
|---|---|---|---|
|
malicious
Score: 76
|
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
|
| IP | Country | Detection |
|---|---|---|
| 185.132.82.145 | Iran (ISLAMIC Republic Of) |  |
| 52.186.153.24 | United States | |
| Name | IP | Detection |
|---|---|---|
| bihhwidigojbtkic.lfllavv.com | 52.186.153.24 | |
| sanatiamlak.com | 185.132.82.145 | |
| Name | Detection |
|---|---|
| http://bihhwidigojbtkic.lfllavv.com/kampo/Y29ycG9yYXRlLmFjdGlvbnMuYXUyQGlnLmNvbQ==Root |  |
| https://sanatiamlak.com/wp-content/upgrade/s7m8ltg71guzhecccs888xuj.php?MTYwNjM1OTQ4MTZkMDZjNTRlMTMzYjlkYjc1ZjYxZDhiY2U4OTBlZWU4OTcyNmFkYTE1MDk1MWM5OTc5YjQwYzJjMzgwNjE0YTk0OTZiYWE4Zg==&data=Y29ycG9yYXRlLmFjdGlvbnMuYXUyQGlnLmNvbQ== | |
| http://bihhwidigojbtkic.lfllavv.com/kampo/Y29ycG9yYXRlLmFjdGlvbnMuYXUyQGlnLmNvbQ== | |
| Click to see the 6 hidden entries | |
| https://sanatiamlak.com/wp-content/upgrade/lib/img/favicon.ico~ | |
| https://sanatiamlak.com/wp-content/upgrade/lib/img/favicon.ico | |
| https://sanatiamlak.com/wp-content/upgrade/?corporate.actions.au2 | |
| https://sanatiamlak.com/wp-content/upgrade/lib/img/favicon.ico~( | |
| https://sanatiamlak.com/wp-content/upgrade/s7m8ltg71guzhecccs888xuj.php?MTYwNjM1OTQ4MTZkMDZjNTRlMTMz | |
| https://sanatiamlak.coc.lfllavv.com/kampo/Y29ycG9yYXRlLmFjdGlvbnMuYXUyQGlnLmNvbQ==m/wp-content/upgra | |
| Name | File Type | Hashes | Detection |
|---|---|---|---|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\s7m8ltg71guzhecccs888xuj[1].htm |
HTML document, UTF-8 Unicode text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{2C0A73EE-2F93-11EB-90EB-ECF4BBEA1588}.dat |
Microsoft Word Document | # | |
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{2C0A73F0-2F93-11EB-90EB-ECF4BBEA1588}.dat |
Microsoft Word Document | # | |
| Click to see the 13 hidden entries | |||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{35E4EA04-2F93-11EB-90EB-ECF4BBEA1588}.dat |
Microsoft Word Document | # | |
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\gee00pr\imagestore.dat |
data | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\Y29ycG9yYXRlLmFjdGlvbnMuYXUyQGlnLmNvbQ==[1].htm |
HTML document, ASCII text | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\login[1].css |
ASCII text, with very long lines | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\white_ellipsis[1].svg |
SVG Scalable Vector Graphics image | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\logo2[1].svg |
SVG Scalable Vector Graphics image | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\arrow[1].svg |
SVG Scalable Vector Graphics image | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\background[1].jpg |
[TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2], progressive, precision 8, 1920x1080, frames 3 | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\favicon[1].ico |
MS Windows icon resource - 6 icons, 128x128, 16 colors, 72x72, 16 colors | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\logo3[1].png |
PNG image data, 342 x 72, 4-bit colormap, non-interlaced | # | |
C:\Users\user\AppData\Local\Temp\~DF058445AA7ACBCBBD.TMP |
data | # | |
C:\Users\user\AppData\Local\Temp\~DF0C7E4045ADA69AC9.TMP |
data | # | |
C:\Users\user\AppData\Local\Temp\~DFECEF3B821227381B.TMP |
data | # | |
