Engine | Download Report | Detection | Info |
---|---|---|---|
|
malicious
|
||
|
malicious
Score: 100
|
System: Windows 7 x64 SP1 with Office 2010 SP1 (IE 11, FF52, Chrome 57, Adobe Reader DC 15, Flash 25.0.0.127, Java 8 Update 121, .NET 4.6.2)
|
IP | Country | Detection |
---|---|---|
192.3.122.180 | United States |
Name | IP | Detection |
---|---|---|
onedrive.live.com | 0.0.0.0 |
Name | Detection |
---|---|
http://192.3.122.180/......w_W.....W.........-Ww........-----Www.----............wW--------....wW-/....wW.........-w-w------W-------Ww-------......Ww......---w.w--wW.W.wbk | |
http://192.3.122.180/1100/vbc.exe | |
http://192.3.122.180/......w_W.....W.........-Ww........-----Www.----............wW--------....wW-/ | |
Click to see the 8 hidden entries | |
http://192.3.122.180/......w_W.....W.........-Ww........-----Www.----............wW--------....wW-/. | |
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check | |
http://www.%s.comPA | |
http://www.icra.org/vocabulary/. | |
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous. | |
https://onedrive.live.com/download?cid=5A | |
http://nsis.sf.net/NSIS_ErrorError | |
http://windowsmedia.com/redir/services.asp?WMPFriendly=true |
Name | File Type | Hashes | Detection |
---|---|---|---|
C:\Users\Public\vbc.exe |
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\vbc[1].exe |
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRF{E3D87781-81EF-43F9-9495-B55BE3B562FC}.tmp |
Composite Document File V2 Document, Cannot read section info | # | |
Click to see the 20 hidden entries | |||
C:\Users\user\AppData\Local\Temp\Rorqu.exe |
PE32 executable (GUI) Intel 80386, for MS Windows | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{7199A5F7-5FF6-48D3-B4C9-8BC65C6158F0}.tmp |
dBase III DBT, version number 0, next free block index 7536653 | # | |
C:\Users\user\Desktop\~$Q with Specification (Fitch Solutions).docx |
data | # | |
C:\Users\user\AppData\Roaming\Microsoft\Templates\~$Normal.dotm |
data | # | |
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat |
ASCII text, with CRLF line terminators | # | |
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\RFQ with Specification (Fitch Solutions).LNK |
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Mon Aug 30 20:08:58 2021, mtime=Mon Aug 30 20:08:58 2021, atime=Wed Dec 1 20:52:19 2021, length=10392, window=hide | # | |
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\....wW.........-w-w------W-------Ww-------......Ww......---w.w--wW.W.wbk.url |
MS Windows 95 Internet shortcut text (URL=<http://192.3.122.180/......w_W.....W.........-Ww........-----Www.----............wW--------....>), ASCII text, with CRLF line terminators | # | |
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\......w_W.....W.........-Ww........-----Www.----............wW--------....wW- on 192.3.122.180.url |
MS Windows 95 Internet shortcut text (URL=<http://192.3.122.180/......w_W.....W.........-Ww........-----Www.----............wW--------....>), ASCII text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\{BBC19062-704E-4D55-A02E-4767DF8C1005} |
data | # | |
C:\Users\user\AppData\Local\Temp\{7F82C086-01FA-4021-9D57-F207AE8DD100} |
data | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{C94CB11B-D1B2-466D-A54A-3B0D7AFF6150}.tmp |
data | # | |
C:\Users\user\AppData\Local\Microsoft\Office\14.0\OfficeFileCache\FSD-CNRY.FSD |
data | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{4C53FAE1-25F0-48E5-8083-1B02306C71A5}.tmp |
data | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\FE9853DB.wbk |
Rich Text Format data, unknown version | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\....wW.........-w-w------W-------Ww-------......Ww......---w.w--wW.W[1].wbk |
Rich Text Format data, unknown version | # | |
C:\Users\user\AppData\Local\Microsoft\Office\14.0\OfficeFileCache\LocalCacheFileEditManager\FSF-{0E1EEE64-E8C6-4E2A-9759-63CF07FD8988}.FSF |
data | # | |
C:\Users\user\AppData\Local\Microsoft\Office\14.0\OfficeFileCache\LocalCacheFileEditManager\FSD-{100A9095-3B94-4067-BA0B-E67428EA7E13}.FSD |
data | # | |
C:\Users\user\AppData\Local\Microsoft\Office\14.0\OfficeFileCache\LocalCacheFileEditManager\FSD-CNRY.FSD |
data | # | |
C:\Users\user\AppData\Local\Microsoft\Office\14.0\OfficeFileCache\FSF-CTBL.FSF |
data | # | |
C:\Users\user\AppData\Local\Microsoft\Office\14.0\OfficeFileCache\FSD-{0AFDF7DC-F944-4E41-BC7F-441FB8ADCB07}.FSD |
data | # |