0lm81UZm7Y.exe
| Engine | Download Report | Detection | Info |
|---|---|---|---|
|
malicious
|
||
|
malicious
Score: 100
|
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
|
| IP | Country | Detection |
|---|---|---|
| 88.99.75.82 | Germany |  |
| 159.69.203.58 | Germany | |
| Name | IP | Detection |
|---|---|---|
| mas.to | 88.99.75.82 | |
| Name | Detection |
|---|---|
| http://159.69.203.58/mozglue.dll |  |
| http://159.69.203.58/msvcp140.dll | |
| https://ac.ecosia.org/autocomplete?q= | |
| Click to see the 25 hidden entries | |
| https://search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command= | |
| https://mas.to/@killern0 | |
| https://media.mas.to | |
| http://159.69.203.58/freebl3.dll | |
| https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q= | |
| http://159.69.203.58/1008 | |
| http://159.69.203.58/vcruntime140.dll | |
| https://duckduckgo.com/chrome_newtabSQLite | |
| https://mas.to/ | |
| http://159.69.203.58/softokn3.dll | |
| http://159.69.203.58/ | |
| http://crl.thawte.com/ThawteTimestampingCA.crl0 | |
| http://159.69.203.58/nss3.dll | |
| https://duckduckgo.com/chrome_newtab | |
| https://mas.to/.well-known/webfinger?resource=acct%3Akillern0%40mas.to | |
| https://mas.to; | |
| https://mas.to/users/killern0 | |
| https://search.yahoo.com/favicon.icohttps://search.yahoo.com/search | |
| https://mas.to | |
| https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q= | |
| http://www.mozilla.com0 | |
| http://ocsp.thawte.com0 | |
| https://www.google.com/images/branding/product/ico/googleg_lodp.ico | |
| https://duckduckgo.com/ac/?q= | |
| http://www.mozilla.com/en-US/blocklist/ | |
| Name | File Type | Hashes | Detection |
|---|---|---|---|
C:\ProgramData\nss3.dll |
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\softokn3[1].dll |
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\mozglue[1].dll |
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows | # | |
| Click to see the 15 hidden entries | |||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\freebl3[1].dll |
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\nss3[1].dll |
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\vcruntime140[1].dll |
PE32 executable (DLL) (console) Intel 80386, for MS Windows | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\msvcp140[1].dll |
PE32 executable (DLL) (console) Intel 80386, for MS Windows | # | |
C:\ProgramData\vcruntime140.dll |
PE32 executable (DLL) (console) Intel 80386, for MS Windows | # | |
C:\ProgramData\softokn3.dll |
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows | # | |
C:\ProgramData\CP8Z9ZN3KMVU03RJRFJ2Y5TWZ\d06ed635-68f6-4e9a-955c-4899f5f57b9a5820605205.zip |
Zip archive data, at least v2.0 to extract | # | |
C:\ProgramData\msvcp140.dll |
PE32 executable (DLL) (console) Intel 80386, for MS Windows | # | |
C:\ProgramData\mozglue.dll |
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows | # | |
C:\ProgramData\freebl3.dll |
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows | # | |
C:\ProgramData\CP8Z9ZN3KMVU03RJRFJ2Y5TWZ\files\temp |
SQLite 3.x database, last written using SQLite version 3032001 | # | |
C:\ProgramData\CP8Z9ZN3KMVU03RJRFJ2Y5TWZ\files\screenshot.jpg |
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1280x1024, frames 3 | # | |
C:\ProgramData\CP8Z9ZN3KMVU03RJRFJ2Y5TWZ\files\information.txt |
ISO-8859 text, with very long lines, with CRLF line terminators | # | |
C:\ProgramData\CP8Z9ZN3KMVU03RJRFJ2Y5TWZ\files\Files\Default.zip |
Zip archive data (empty) | # | |
C:\ProgramData\CP8Z9ZN3KMVU03RJRFJ2Y5TWZ\files\Cookies\Google Chrome_Default.txt |
ASCII text, with CRLF line terminators | # | |
