DHL Express shipment notification.exe
| Engine | Download Report | Detection | Info |
|---|---|---|---|
|
malicious
Score: 80
|
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
|
|
|
|
malicious
Score: 100
|
System: Windows 10 64 bit 20H2 Native physical Machine for testing VM-aware malware (Office 2019, Chrome 93, Firefox 91, Adobe Reader DC 21, Java 8 Update 301
Run Condition: Suspected Instruction Hammering
|
| IP | Country | Detection |
|---|---|---|
| 142.250.186.78 | United States |  |
| 142.250.185.206 | United States | |
| 142.250.185.161 | United States | |
| Click to see the 3 hidden entries | ||
| 194.85.248.156 | Russian Federation | |
| 216.58.212.161 | United States | |
| 93.184.220.29 | European Union | |
| Name | IP | Detection |
|---|---|---|
| docs.google.com | 142.250.186.78 | |
| A2Q.my.to | 194.85.248.156 | |
| drive.google.com | 142.250.185.206 | |
| Click to see the 3 hidden entries | ||
| googlehosted.l.googleusercontent.com | 216.58.212.161 | |
| doc-10-6k-docs.googleusercontent.com | 0.0.0.0 | |
| doc-0c-74-docs.googleusercontent.com | 0.0.0.0 | |
| Name | Detection |
|---|---|
| https://docs.google.com/nonceSigner?nonce=g9j0jkqh8v4q0&continue=https://doc-0c-74-docs.googleuserco | |
| https://doc-10-6k-docs.googleusercontent.com/ | |
| https://doc-10-6k-docs.googleusercontent.com/XM | |
| Click to see the 30 hidden entries | |
| http://www.google.com/support/accounts/answer/151657?hl=en | |
| https://api.msn.com/g | |
| https://drive.google.com/ | |
| https://doc-10-6k-docs.googleusercontent.com/%%doc-10-6k-docs.googleusercontent.com | |
| https://doc-0c-74-docs.googleusercontent.com/docs/securesc/sk5nfb6a71bsi4kb0hoi93t8ubc457n9/ga5uidumionb8nmhr97qp7gio0ican94/1638383175000/11612195336931281153/13277406679786744507Z/1wMeKQgvhtbFhUc179qeysF4NuF_7Rf9g?e=download | |
| https://api.msn.com/ | |
| https://www.msn.com/en-us/news/us/texas-gov-abbott-sends-miles-of-cars-along-border-to-deter-migrant | |
| https://windows.msn.com:443/shell | |
| https://www.msn.com/en-us/news/crime/charges-man-snapped-killed-4-then-left-bodies-in-field/ar-AAOGa | |
| https://drive.google.com/( | |
| https://github.com/syohex/java-simple-mine-sweeperC: | |
| https://www.msn.com:443/en-us/feed | |
| https://assets.msn.com/weathermapdata/1/static/svg/72/MostlySunnyDay.svg | |
| https://csp.withgoogle.com/csp/report-to/gse_l9ocaq | |
| https://api.msn.com/v1/news/Feed/Windows? | |
| https://api.msn.com/v1/news/Feed/Windows?activityId=5696A836803C42E0B53F7BB2770E5342&timeOut=10000&o | |
| https://aka.ms/odirm | |
| https://doc-0c-74-docs.googleusercontent.com/docs/securesc/sk5nfb6a71bsi4kb0hoi93t8ubc457n9/ga5uidum | |
| http://schemas.micro | |
| http://www.foreca.com | |
| https://docs.google.com/nonceSigner?nonce=g9j0jkqh8v4q0&continue=https://doc-0c-74-docs.googleusercontent.com/docs/securesc/sk5nfb6a71bsi4kb0hoi93t8ubc457n9/ga5uidumionb8nmhr97qp7gio0ican94/1638383175000/11612195336931281153/13277406679786744507Z/1wMeKQgvhtbFhUc179qeysF4NuF_7Rf9g?e%3Ddownload&hash=e91gtvc094ihcc9ia8q0ll4kbtb8mnkn | |
| https://doc-0c-74-docs.googleusercontent.com/docs/securesc/sk5nfb6a71bsi4kb0hoi93t8ubc457n9/ga5uidumionb8nmhr97qp7gio0ican94/1638383175000/11612195336931281153/13277406679786744507Z/1wMeKQgvhtbFhUc179qeysF4NuF_7Rf9g?e=download&nonce=g9j0jkqh8v4q0&user=13277406679786744507Z&hash=rku0rgkmu2p00qlf7mek88sknpvsopf2 | |
| https://doc-0c-74-docs.googleusercontent.com/ | |
| https://www.msn.com/en-us/news/technology/facebook-oversight-board-reviewing-xcheck-system-for-vips/ | |
| https://api.msn.com:443/v1/news/Feed/Windows? | |
| https://csp.withgoogle.com/csp/report-to/DriveUntrustedContentSignerHttp/external | |
| https://doc-10-6k-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/4tipe54913jcp7asj48qkhdgaodfoob7/1638383100000/11612195336931281153/*/1wMeKQgvhtbFhUc179qeysF4NuF_7Rf9g?e=download | |
| https://doc-0c-74-docs.googleusercontent.com/#9 | |
| https://www.msn.com/en-us/tv/celebrity/tarek-el-moussa-tests-positive-for-covid-19-shuts-down-filmin | |
| https://doc-10-6k-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/4tipe549 | |
| Name | File Type | Hashes | Detection |
|---|---|---|---|
C:\ProgramData\images.exe |
PE32 executable (GUI) Intel 80386, for MS Windows | # |  |
C:\ProgramData\images.exe:Zone.Identifier |
ASCII text, with CRLF line terminators | # | |
