Engine | Download Report | Detection | Info |
---|---|---|---|
|
malicious
Score: 76
|
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
|
|
|
malicious
Score: 92
|
System: Windows 10 64 bit 20H2 Native physical Machine for testing VM-aware malware (Office 2019, Chrome 93, Firefox 91, Adobe Reader DC 21, Java 8 Update 301
Run Condition: Suspected Instruction Hammering
|
IP | Country | Detection |
---|---|---|
142.250.185.142 | United States |
Name | IP | Detection |
---|---|---|
drive.google.com | 142.250.185.142 | |
edge-web.dual-gslb.spotify.com | 35.186.224.25 | |
spclient.wg.spotify.com | 0.0.0.0 |
Name | Detection |
---|---|
https://drive.google.com/I | |
https://drive.google.com/A |
Name | File Type | Hashes | Detection |
---|---|---|---|
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_RegAsm.exe_bf83f564e97574c9bbf23ac35112572b5de6d5_e9e275a3_bac2586d-6b28-40ad-af6b-2dc7bcda6e5d\Report.wer |
Little-endian UTF-16 Unicode text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WEREA47.tmp.dmp |
Mini DuMP crash report, 14 streams, Mon Sep 27 15:37:07 2021, 0x1205a4 type | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WEREFC6.tmp.WERInternalMetadata.xml |
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators | # | |
Click to see the 5 hidden entries | |||
C:\ProgramData\Microsoft\Windows\WER\Temp\WERF092.tmp.xml |
XML 1.0 document, ASCII text, with CRLF line terminators | # | |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\029C0225-A9FE-4247-9FEB-6A4C69D031CD\MpSigStub.exe |
PE32+ executable (GUI) x86-64, for MS Windows | # | |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\029C0225-A9FE-4247-9FEB-6A4C69D031CD\mpasdlta.vdm |
PE32+ executable (DLL) (console) x86-64, for MS Windows | # | |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\029C0225-A9FE-4247-9FEB-6A4C69D031CD\mpavdlta.vdm |
PE32+ executable (DLL) (console) x86-64, for MS Windows | # | |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\MpSigStub.log |
Little-endian UTF-16 Unicode text, with CRLF, CR line terminators | # |