FAKTURA I PARAGONY.exe
| Engine | Download Report | Detection | Info |
|---|---|---|---|
|
malicious
Score: 76
|
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
|
|
|
|
malicious
Score: 100
|
System: Windows 10 64 bit 20H2 Native physical Machine for testing VM-aware malware (Office 2019, Chrome 93, Firefox 91, Adobe Reader DC 21, Java 8 Update 301
Run Condition: Suspected Instruction Hammering
|
| IP | Country | Detection |
|---|---|---|
| 188.93.227.195 | Portugal |  |
| 172.217.168.46 | United States |  |
| 142.250.185.161 | United States | |
| Name | IP | Detection |
|---|---|---|
| tccinfaes.com | 188.93.227.195 | |
| mail.tccinfaes.com | 0.0.0.0 | |
| x1.i.lencr.org | 0.0.0.0 | |
| Click to see the 3 hidden entries | ||
| drive.google.com | 172.217.168.46 | |
| googlehosted.l.googleusercontent.com | 142.250.185.161 | |
| doc-00-88-docs.googleusercontent.com | 0.0.0.0 | |
| Name | Detection |
|---|---|
| https://blackstonesbarandgrill.net/wp-includes/js/service/jp/login.php | |
| http://costacars.es/ico/ortodox.php | |
| http://www.whitehouseknutsford.co.uk/invoice-status/please-pull-invoice-684594/ | |
| Click to see the 97 hidden entries | |
| http://shdjhgftyhgjklolkjio.dns.navy/bcz/document.doc | |
| http://tempuri.org/ | |
| http://masgiO.info/cd/cd.php?id=%s&ver=g | |
| http://stmichaelolivewood.com/templates/landofchrist/css/msg.jpg | |
| http://110.42.4.180: | |
| http://spywaresoftstop.com/load.php?adv=141 | |
| http://sds.clrsch.com/x | |
| http://javafx.com | |
| http://www.mva.by/tags/ariscanin1.e | |
| http://tbapi.search.ask.comxb | |
| http://wac.edgecastcdn.net/800952/5b595c13-aea5-4a6c-a099-d29c4678f6f2-api/gfbs | |
| https://remote.bittorrent.com | |
| http://www.searchmaid.com/ | |
| https://bit.ly/3kvdcmi | |
| http://js.f4321y.com/ | |
| https://irecruiter.immentia.com/storage/framework/cache/data/0e/nC7vWe43YwJjj.php | |
| http://app.whenu.com/Offers | |
| http://www.51jetso.com/ | |
| http://office-service-secs.com/blm.task | |
| http://www.niepicowane.pl/ | |
| http://m.mworld.vn/MWorld30/data20.xm?a=getip&g=3&sex=Android | |
| https://mort2021.s3-eu-west-1.amazonaws.com/image2.png | |
| https://eeyhh567.s3.eu-west-3.amazonaws.com/image2.png | |
| https://raw.githubusercontent.com/ | |
| http://blogsemasacaparnab.blogspot.com/ | |
| http://aerytyre.blogspot.com/ | |
| https://kiwisanagustin.com/wp-admin/includes/opo.php%22%20method%3d%22post%22%20style%3d%22box-sizin | |
| http://verred.net/?1309921 | |
| http://www.chatzum.com/statistics/?affid=$RPT_AFFID&cztbid=$RPT_UID&inst=$RTP_SETINST&sethp=$RTP_SET | |
| http://avnisevinc.blogspot.com/ | |
| http://www.pcpurifier.com/buynow/? | |
| http://handjobheats.com/xgi-bin/q.php | |
| https://bit.ly/3kthd4j | |
| https://jabaltoor.com/copy/img/blog/cat-post/r7gnor1h0.php | |
| http://data1.yoou8.com/ | |
| http://artishollywoodbikini.blogspot.com/ | |
| http://team.afcorp.afg/chr/crt-ho_30/newjflibrary | |
| http://www.trotux.com/?z= | |
| https://pigeonious.com/img/ | |
| http://boscumix.com/optima/index.php | |
| http://82.98.235. | |
| http://seunelson.com.br/js/content.xml | |
| http://maringareservas.com.br/queda/index.php | |
| http://149.3.170.235/qw-fad/ | |
| http://t.zer9g.com/ | |
| http://66.148.74.7/zu2/zc.php | |
| http://www.xiuzhe.com/ddvan.exe | |
| https://xmrig.com/wizard | |
| http://207.154.225.82/report.json?type=mail&u=$muser&c= | |
| http://playsong.mediasongplayer.com/ | |
| http://139.162. | |
| http://actresswallpaperbollywood.blogspot.com/ | |
| http://sesame96.orange.ero0101.com/set_inf.php?id=ero257.wmv&sid= | |
| http://canonicalizer.ucsuri.tcs/3 | |
| https://jovial-pasteur.159-89-118-202.plesk.page/wp-content/uploads/index.php | |
| http://akrilikkapak.blogspot.com/ | |
| http://w.robints.us/cnzz.htmlwidth=0height=0 | |
| http://usa-national.info/gpu/band/grumble.dot | |
| http://install.outbrowse.com/logTrack.php?x | |
| http://127.0.0.1:8000/web.html?url=yac.mx&rate=501&id=%s&key=%s&pm=1x | |
| https://www.dropbox.com/ | |
| http://rghost.net/download/ | |
| http://mexicorxonline.com/glad/imagenes.html?disc=abuse&code=7867213 | |
| https://sumnermail.org/sumnerscools/school.php | |
| https://anonfiles.com/ | |
| http://185.172.110.217/robx/remit.jpg | |
| http://www.chambersign.org1 | |
| http://errors.statsmyapp.comxa | |
| http://ati.vn | |
| http://Yyl.mofish.cn/interface/SeedInstall.aspx | |
| http://today-friday.cn/maran/sejvan/get.php | |
| http://minetopsforums.ru/new_link3.php?site= | |
| http://www.cooctdlfast.com/download.php? | |
| http://www.bonusesfound.ml/update/index.php | |
| http://aklick.info/d.php?date= | |
| http://www.activision.com/games/wolfenstein/purchase.html | |
| http://kiranacorp.com/oja | |
| http://esiglass.it/glassclass/glass.php | |
| http://avnpage.info/final3.php | |
| http://www.mvps.org/vb | |
| https://bemojo.com/ds/161120.gif | |
| https://tinyurl.com/up77pck | |
| http://aartemis.com/?type=sc&ts= | |
| https://go.wikitextbooks.info | |
| http://www.slotch.com/ist/softwares/v4.0/istdownload.exe | |
| http://77.81.225.138/carnaval2017.zip | |
| https://rotf.lol/3u6d9443 | |
| http://5starvideos.com/main/K5 | |
| http://www.fbcom.review/d/9.doc | |
| http://security-updater.com/binaries/ | |
| http://tikotin.com | |
| https://sweetsizing.com/vip/ | |
| http://eduardovolpi.com.br/flipbook/postal/services/parcel) | |
| http://walden.co.jp/wp/divorce/divorce.php?id=zxjpyy5tb3jyaxnvb | |
| https://sotheraho.com/wp-content/fonts/reportexcelnew.php | |
| http://www.youtube.com/watch?v=Vjp7vgj119s | |
| http://lo0oading.blogspot.com/ | |
| Name | File Type | Hashes | Detection |
|---|---|---|---|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D |
data | # | |
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506 |
Microsoft Cabinet archive data, 61157 bytes, 1 file | # | |
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D |
data | # | |
| Click to see the 11 hidden entries | |||
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506 |
data | # | |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\5F092BAC-4701-4818-8EB0-1B8D5E2340F4\1.1.18500.10_to_1.1.18600.4_mpengine.dll._p |
data | # | |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\5F092BAC-4701-4818-8EB0-1B8D5E2340F4\1.349.0.0_to_1.351.0.0_mpasbase.vdm._p |
data | # | |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\5F092BAC-4701-4818-8EB0-1B8D5E2340F4\1.349.0.0_to_1.351.0.0_mpavbase.vdm._p |
data | # | |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\5F092BAC-4701-4818-8EB0-1B8D5E2340F4\MpSigStub.exe |
PE32+ executable (GUI) x86-64, for MS Windows | # | |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\5F092BAC-4701-4818-8EB0-1B8D5E2340F4\mpasbase.vdm |
PE32+ executable (DLL) (console) x86-64, for MS Windows | # | |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\5F092BAC-4701-4818-8EB0-1B8D5E2340F4\mpasdlta.vdm |
PE32+ executable (DLL) (console) x86-64, for MS Windows | # | |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\5F092BAC-4701-4818-8EB0-1B8D5E2340F4\mpavbase.vdm |
PE32+ executable (DLL) (console) x86-64, for MS Windows | # | |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\5F092BAC-4701-4818-8EB0-1B8D5E2340F4\mpavdlta.vdm |
PE32+ executable (DLL) (console) x86-64, for MS Windows | # | |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\MpSigStub.log |
Little-endian UTF-16 Unicode text, with CRLF, CR line terminators | # | |
\Device\ConDrv |
ASCII text, with CRLF line terminators | # | |
