imedpub_2.xls
| Engine | Download Report | Detection | Info |
|---|---|---|---|
|
malicious
|
||
|
malicious
Score: 100
|
System: Windows 7 x64 SP1 with Office 2010 SP1 (IE 11, FF52, Chrome 57, Adobe Reader DC 15, Flash 25.0.0.127, Java 8 Update 121, .NET 4.6.2)
|
| IP | Country | Detection |
|---|---|---|
| 192.254.71.210 | United States |  |
| 131.100.24.231 | Brazil | |
| 46.55.222.11 | Bulgaria | |
| Click to see the 45 hidden entries | ||
| 41.76.108.46 | South Africa | |
| 173.212.193.249 | Germany | |
| 45.176.232.124 | Colombia | |
| 178.79.147.66 | United Kingdom | |
| 212.237.5.209 | Italy | |
| 162.243.175.63 | United States | |
| 176.104.106.96 | Serbia | |
| 207.38.84.195 | United States | |
| 164.68.99.3 | Germany | |
| 185.157.82.211 | Poland | |
| 212.237.56.116 | Italy | |
| 104.168.155.129 | United States | |
| 45.142.114.231 | Germany | |
| 203.114.109.124 | Thailand | |
| 209.59.138.75 | United States | |
| 159.8.59.82 | United States | |
| 129.232.188.93 | South Africa | |
| 58.227.42.236 | Korea Republic of | |
| 158.69.222.101 | Canada | |
| 104.251.214.46 | United States | |
| 50.116.54.215 | United States | |
| 212.237.17.99 | Italy | |
| 79.172.212.216 | Hungary | |
| 110.232.117.186 | Australia | |
| 173.214.173.220 | United States | |
| 212.24.98.99 | Lithuania | |
| 138.185.72.26 | Brazil | |
| 178.63.25.185 | Germany | |
| 160.16.102.168 | Japan | |
| 81.0.236.90 | Czech Republic | |
| 103.75.201.2 | Thailand | |
| 216.158.226.206 | United States | |
| 45.118.115.99 | Indonesia | |
| 51.15.4.22 | France | |
| 159.89.230.105 | United States | |
| 162.214.50.39 | United States | |
| 91.240.118.168 | unknown | |
| 200.17.134.35 | Brazil | |
| 217.182.143.207 | France | |
| 107.182.225.142 | United States | |
| 51.38.71.0 | France | |
| 45.118.135.203 | Japan | |
| 195.154.133.20 | France | |
| 162.241.211.118 | United States |  |
| 103.138.189.128 | India | |
| Name | IP | Detection |
|---|---|---|
| dtmconsulting.ca | 162.241.211.118 | |
| praachichemfood.com | 103.138.189.128 | |
| www.praachichemfood.com | 0.0.0.0 | |
| Name | Detection |
|---|---|
| https://lodev7.com/wp-content/dpwjiJivrpgO1F2/ | |
| https://haileywells.com/cgi-bin/ | |
| http://91.240.118.168/zqqw/zaas/fe.htmlP | |
| Click to see the 97 hidden entries | |
| http://estiloindustria.com.br/wp-content/49cRLeDYqr6uVF7i/PE3 | |
| https://www.yepproject.org/wp-includes/lC45zFsHmmsMDElKT/ | |
| https://haileywells.com/cgi-bin/KJUOaq/ | |
| http://91.240.118.168/zqqw/zaas/fe.htmlB | |
| https://futurelube.com/wp-admin/6GLpl4ehsdCBX3z/PE3 | |
| http://www.praachichemfood.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0 | |
| http://www.praachichemfood.com/wp-content/themes/brooklyn/css/ut.core.fonts.min.css?ver=5.9 | |
| http://91.240.118.168/zqqw/zaas/fe.htmlWinSta0 | |
| http://91.240.118.168/zqqw/zaas/fe.htmlN | |
| http://www.praachichemfood.com/wp-includes/wlwmanifest.xml | |
| http://91.240.118.168/zqqw/zaas/fe.htmlP41yl | |
| http://bakultante.com/tee5oeot/Q/PE3 | |
| http://www.praachichemfood.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 | |
| https://trochoi80club.com/wp-con | |
| http://91.240.11 | |
| https://mortgageadviser.directory/xw8ok/icCYdBSpbFrf5s/ | |
| https://haileywells.com/cgi-bin/KJUOaq/PE3 | |
| http://www.praachichemfood.com/wp-content/plugins/mystickyelements/css/mystickyelements-front.min.cs | |
| https://futurelube.com/wp-admin/6GLpl4ehsdCBX3z/ | |
| http://www.praachichemfood.com/wp-content/plugins/ut-shortcodes/js/plugins/modernizr/modernizr.min.j | |
| http://91.240.118.168/zqqw/zaas/fe.html.0 | |
| http://91.240.118.168/zqqw/zaas/fe.htmlfunction | |
| http://www.praachichemfood.com/wp-content/plugins/mystickyelements/css/font-awesome.min.css?ver=2.0. | |
| http://praachichemfood.com/wp-content/themes/brooklyn/images/default/fav-72.png | |
| https://lodev7.com/wp-content/dpwjiJivrpgO1F2/PE3 | |
| http://91.240.118.168 | |
| http://91.240.118.168/zqqw/zaas/fe.htmlhttp://91.240.118.168/zqqw/zaas/fe.html | |
| http://www.praachichemfood.com/wp-content/themes/brooklyn/css/ut.vc.shortcodes.min.css?ver=5.9 | |
| http://www.praachichemfood.com/wp-content/themes/brooklyn/css/ut.shortcode.min.css?ver=5.9 | |
| http://praachichemfood.com | |
| https://mortgageadviser.directory/xw8ok/icCYdBSpbFrf5s/PE3 | |
| https://trochoi80club.com/wp-content/6shnRU/PE3 | |
| https://onewaymedia.ro/wp-includes/k/ | |
| https://www.praachichemfood.com/xmlrpc.php?rsd | |
| https://www.yepproject.org/wp-includes/lC45zFsHmmsMDElKT/PE3 | |
| http://bakultante.com/tee5oeot/Q/ | |
| http://91.240.118.168/zqqw/zaas/fe.htmlmshta | |
| http://91.240.118.168/zqqw/zaas/fe.htmlHEAP_SIGNATURE4 | |
| http://www.praachichemfood.com/wp-content/themes/brooklyn/style.css?ver=4.9.7.2 | |
| https://dtmconsulting.ca/wp-incl | |
| http://praachichemfood.com/wp-content/themes/brooklyn/images/default/fav-144.png | |
| https://www.praachichemfood.com/comments/feed/ | |
| https://onewaymedia.ro/wp-includes/k/PE3 | |
| http://91.240.118.168/zqqw/zaas/fe.png | |
| http://estiloindustria.com.br/wp-content/49cRLeDYqr6uVF7i/ | |
| http://91.240.118.168/zqqw/zaas/ | |
| http://www.praachichemfood.com/wp-content/themes/brooklyn/css/ut.core.plugins.min.css?ver=5.9 | |
| http://www.praachichemfood.com/wp-content/themes/brooklyn/js/ut-scriptlibrary.min.js?ver=4.9.7.2 | |
| https://www.yepproject.org/wp-in | |
| http://www.praachichemfood.com | |
| https://trochoi80club.com/wp-content/6shnRU/ | |
| http://praachichemfood.com/public_html/SWmteCWBUkA89/ | |
| http://91.240.118.168/zqqw/zaas/fe.htmlW59wo | |
| http://praachichemfood.com/publi | |
| http://praachichemfood.com/wp-content/themes/brooklyn/images/default/fav-32.png | |
| https://dtmconsulting.ca/wp-includes/dkCFwyE/ | |
| http://praachichemfood.com/wp-content/themes/brooklyn/images/default/fav-57.png | |
| http://bakultante.com/tee5oeot/Q | |
| https://www.praachichemfood.com/wp-json/ | |
| http://www.praachichemfood.com/wp-content/themes/brooklyn/css/ut.theme.min.css?ver=4.9.7.2 | |
| http://praachichemfood.com/public_html/SWmteCWBUkA89/PE3 | |
| https://lodev7.com/wp-content/dp | |
| https://onewaymedia.ro/wp-includ | |
| http://praachichemfood.com/wp-content/themes/brooklyn/images/default/fav-114.png | |
| https://dtmconsulting.ca | |
| http://91.240.118.168/zqqw/zaas/fe.html | |
| http://91.240.118.168/zqqw/zaas/fe.htmlE59em | |
| https://futurelube.com/wp-admin/ | |
| http://91.240.118.168/zqqw/zaas/fe.htmlEL | |
| http://www.praachichemfood.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.4 | |
| https://www.praachichemfood.com/feed/ | |
| http://www.praachichemfood.com/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.5 | |
| https://dtmconsulting.ca/wp-includes/dkCFwyE/PE3 | |
| https://worldaviationhub.com/wp-includes/Lik/PE3 | |
| https://worldaviationhub.com/wp- | |
| https://worldaviationhub.com/wp-includes/Lik/ | |
| http://www.praachichemfood.com/xmlrpc.php | |
| http://estiloindustria.com.br/wp | |
| http://91.240.118.168/zqqw/zaas/fe.pngPE3 | |
| http://www.protware.com&wa | |
| http://www.piriform.com/ccleaner | |
| http://crl.pkioverheid.nl/DomOrganisatieLatestCRL-G2.crl0 | |
| https://secure.comodo.com/CPS0 | |
| http://www.diginotar.nl/cps/pkioverheid0 | |
| http://crl.entrust.net/2048ca.crl0 | |
| http://ocsp.entrust.net03 | |
| https://gmpg.org/xfn/11 | |
| http://crl.pkioverheid.nl/DomOvLatestCRL.crl0 | |
| http://www.protware.com/ | |
| https://lodev7.c | |
| https://oss.maxcdn.com/html5shiv/3.7.3/html5shiv.min.js | |
| https://api.w.org/ | |
| http://www.piriform.com/ccleanerhttp://www.piriform.com/ccleanerv | |
| http://crl.entrust.net/server1.crl0 | |
| https://mortgageadviser.director | |
| http://www.protware.com | |
| http://ocsp.entrust.net0D | |
| Name | File Type | Hashes | Detection |
|---|---|---|---|
C:\ProgramData\QWER.dll |
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows | # | |
C:\Users\user\Desktop\imedpub_2.xls |
Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, Code page: 1251, Author: xXx, Last Saved By: xXx, Name of Creating Application: Microsoft Excel, Create Time/Date: Thu Jan 27 11:58:35 2022, Last Saved Time/Date: Thu Jan 2 (…) | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\fe[1].htm |
data | # | |
| Click to see the 6 hidden entries | |||
C:\Users\user\AppData\Local\Temp\48F2.tmp |
Composite Document File V2 Document, Cannot read section info | # | |
C:\Users\user\AppData\Local\Temp\~DF0A9EAC97075E8A20.TMP |
data | # | |
C:\Users\user\AppData\Local\Temp\~DF81471AFDD24A7D20.TMP |
data | # | |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\2HUD8O4FXE81UE2DXS2A.temp |
data | # | |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\590aee7bdd69b59b.customDestinations-ms (copy) |
data | # | |
C:\Windows\SysWOW64\Vnljigstknrhjwnk\pagi.wrr (copy) |
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows | # | |
