US1pwXib6h.exe
| Engine | Download Report | Detection | Info |
|---|---|---|---|
|
malicious
|
||
|
malicious
Score: 100
|
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
|
| IP | Country | Detection |
|---|---|---|
| 192.71.172.145 | Sweden |  |
| 99.83.154.118 | United States | |
| Name | IP | Detection |
|---|---|---|
| netsecond.duckdns.org | 192.71.172.145 | |
| ddns.dbcdubai.com | 99.83.154.118 | |
| netno.ddns.net | 192.71.172.145 | |
| Name | Detection |
|---|---|
| ddns.dbcdubai.com:6577 | |
| netno.ddns.net:6577 | |
| netsecond.duckdns.org:6577 | |
| Click to see the 4 hidden entries | |
| http://www.yandex.com |  |
| http://nsis.sf.net/NSIS_Error | |
| http://nsis.sf.net/NSIS_ErrorError | |
| http://www.yandex.comsocks= | |
| Name | File Type | Hashes | Detection |
|---|---|---|---|
C:\Users\user\AppData\Roaming\fatbtifdnumsa\ioldfli.exe |
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive | # | |
C:\Users\user\AppData\Local\Temp\kg0wilfv6c51ffl5 |
data | # | |
C:\Users\user\AppData\Local\Temp\nhde |
data | # | |
| Click to see the 3 hidden entries | |||
C:\Users\user\AppData\Local\Temp\nsmBB29.tmp\System.dll |
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows | # | |
C:\Users\user\AppData\Local\Temp\nst9B9A.tmp\System.dll |
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows | # | |
C:\Users\user\AppData\Local\Temp\nsu6AA7.tmp\System.dll |
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows | # | |
