Engine | Download Report | Detection | Info |
---|---|---|---|
|
malicious
|
||
|
malicious
Score: 100
|
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
|
IP | Country | Detection |
---|---|---|
104.16.154.36 | United States | |
104.16.155.36 | United States |
Name | IP | Detection |
---|---|---|
whatismyipaddress.com | 104.16.155.36 | |
4.179.10.0.in-addr.arpa | 0.0.0.0 |
Name | Detection |
---|---|
https://dl.google.com/tag/s/appguid%3D%7B8A69D345-D564-463C-AFF1-A69D9E530F96%7D%26iid%3D%7B9B620FEE | |
http://www.jiyu-kobo.co.jp/jp/ | |
http://whatismyipaddress.com | |
Click to see the 97 hidden entries | |
https://whatismyipaddress.comx& | |
https://www.google.com/chrome/static/images/download-browser/pixel_tablet.png | |
https://www.google.com/chrome/static/js/installer.min.js | |
https://adservice.google.co.uk/ddm/fls/i/src=2542116;type=chrom322;cat=chrom01g;ord=3005540662929;gt | |
http://www.urwpp.de | |
http://www.urwpp.delar | |
http://www.founder.cz$i | |
https://www.google.com/chrome/thank-you.html?statcb=0&installdataindex=empty&defaultbrowser=0 | |
http://www.sandoll.co.kr | |
http://www.fonts.com | |
https://img.img-taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_311%2Cw_207%2Cc_fill%2Cg_faces:au | |
https://www.google.com/chrome/static/images/fallback/icon-youtube.jpg | |
http://www.founder.com.cn/cn/SC | |
https://contextual.media.net/checksync.php?&vsSync=1&cs=1&hb=1&cv=37&ndec=1&cid=8HBI57XIG&prvid=77%2 | |
http://fontfabrik.com | |
http://www.typography.netD | |
http://www.fontbureau.comT.TTF | |
http://www.carterandcone.com. | |
https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/434d91f2e635/RCfd484f9188564713bbc5d13d862ebbf | |
https://www.google.com/chrome/static/images/fallback/icon-description-white-blue-bg.jpg | |
https://www.google.com/chrome/static/js/main.v2.min.js | |
https://assets.adobedtm.com/launch-EN7b3d710ac67a4a1195648458258f97dd.min.js | |
https://contextual.media.net/checksync.php | |
http://www.sajatypeworks.com | |
http://www.fontbureau.coml1 | |
https://www.google.com/chrome/static/images/homepage/homepage_features.png | |
https://www.google.com/chrome/static/images/chrome-logo.svg | |
http://google.com/chrome | |
http://www.fontbureau.comessed | |
https://www.google.com/chrome/static/images/fallback/google-chrome-logo.jpg | |
http://www.carterandcone.comva | |
http://foo.com/fooT | |
https://www.google.com/chrome/static/images/folder-applications.svg | |
http://www.msn.com/de-ch/entertainment/_h/c920645c/webcore/externalscripts/oneTrustV2/scripttemplate | |
http://www.fontbureau.comdK | |
http://www.carterandcone.com) | |
http://cookies.onetrust.mgr.consensu.org/onetrust-logo.svg | |
https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/434d91f2e635/RC54c8a2b02c3446f48a60b41e8a5ff47 | |
https://cvision.media.net/new/286x175/3/248/152/169/520bb037-5f8d-42d6-934b-d6ec4a6832e8.jpg?v=9 | |
https://contextual.media.net/medianet.php?cid=8CU157172&crid=722878611&size=306x271&https=1 | |
http://www.monotype. | |
http://www.zhongyicts.com.cnva | |
http://www.founder.com.cn/cn | |
http://www.fontbureau.com/designers/cabarga.htmlN | |
https://www.google.com/chrome/static/images/icon-file-download.svg | |
http://www.msn.com/de-ch/?ocid=iehp | |
https://www.google.com/chrome/static/images/homepage/google-beta.png | |
http://www.tiro.comslnt~ | |
https://www.google.com/chrome/static/images/download-browser/pixel_phone.png | |
https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/434d91f2e635/RC5bdddb231cf54f958a5b6e76e9d8eee | |
http://www.carterandcone.comY | |
https://www.google.com/chrome/static/images/fallback/icon-file-download.jpg | |
https://adservice.google.com/ddm/fls/i/src=2542116;type=chrom322;cat=chrom01g;ord=3005540662929;gtm= | |
http://www.carterandcone.como. | |
http://www.zhongyicts.com.cn | |
http://whatismyipaddress.com/ | |
https://contextual.media.net/medianet.php?cid=8CU157172&crid=722878611&size=306x271&https=1https://c | |
http://www.site.com/logs.php | |
http://www.itcfonts. | |
http://www.galapagosdesign.com/DPlease | |
https://www.google.com/chrome/https://www.google.com/chrome/thank-you.html?statcb=0&installdataindex | |
http://whatismyipaddress.com/- | |
http://www.jiyu-kobo.co.jp/8 | |
http://images.outbrainimg.com/transform/v3/eyJpdSI6Ijk4OGQ1ZDgwMWE2ODQ2NDNkM2ZkMmYyMGEwOTgwMWQ3MDE2Z | |
https://www.google.com/chrome/ | |
https://www.google.com/chrome/static/images/download-browser/big_pixel_phone.png | |
https://mem.gfx.ms/me/MeControl/10.19168.0/en-US/meCore.min.js | |
https://contextual.media.net/__media__/js/util/nrrV9140.js | |
https://deff.nelreports.net/api/report?cat=msn | |
http://www.fontbureau.com/designers | |
http://www.urwpp.deo~ | |
http://www.msn.com | |
http://www.jiyu-kobo.co.jp/p | |
https://play.google.com/intl/en_us/badges/images/generic/de_badge_web_generic.png | |
https://www.google.com/chrome/static/images/homepage/google-canary.png | |
http://www.founder.com.cn/cn/bThe | |
http://www.fontbureau.com/designersTTF | |
http://www.zhongyicts.com.cnue | |
https://www.google.com/chrome/thank-you.html?statcb=0&installdataindex=empty&defaultbrowser=0https:/ | |
https://www.google.com/chrome/static/images/fallback/icon-fb.jpg | |
http://pki.goog/gsr2/GTSGIAG3.crt0) | |
http://crl.pki.goog/gsr2/gsr2.crl0? | |
https://www.google.com/accounts/servicelogin | |
https://cvision.media.net/new/286x175/2/189/134/171/257b11a9-f3a3-4bb3-9298-c791f456f3d0.jpg?v=9 | |
https://www.google.com/chrome/static/images/fallback/icon-help.jpg | |
https://www.google.com/chrome/static/css/main.v2.min.css | |
http://www.jiyu-kobo.co.jp/o | |
http://www.carterandcone.comx | |
https://www.google.com/chrome/static/images/fallback/google-logo-one-color.jpg | |
http://www.msn.com/ | |
http://www.carterandcone.coml | |
https://2542116.fls.doubleclick.net/activityi;src=2542116;type=clien612;cat=chromx;ord=1;num=7859736 | |
https://srtb.msn.com/auction?a=de-ch&b=fa1a6a09db4c4f6fbf480b78c51caf60&c=MSN&d=http%3A%2F%2Fwww.msn | |
https://mem.gfx.ms/meversion?partner=RetailStore2&market=en-us&uhf=1 | |
https://pki.goog/repository/0 | |
https://2542116.fls.doubleclick.net/activityi;src=2542116;type=2542116;cat=chom0;ord=9774759596232;g | |
https://www.google.com/chrome/static/images/homepage/hero-anim-top-right.png |
Name | File Type | Hashes | Detection |
---|---|---|---|
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_Y4lA02GQNd.exe_60753151586da6ad53e8a6edb12e67833acf0f_38362fb7_138348a5\Report.wer |
Little-endian UTF-16 Unicode text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Microsoft\CLR_v2.0_32\UsageLogs\WindowsUpdate.exe.log |
ASCII text, with CRLF line terminators | # | |
C:\Users\user\AppData\Roaming\WindowsUpdate.exe |
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows | # | |
Click to see the 11 hidden entries | |||
C:\Users\user\AppData\Roaming\WindowsUpdate.exe:Zone.Identifier |
ASCII text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_y4la02gqnd.exe_178ee3b5024b0b66f123353bb86e09aa51078fc_00000000_199b036f\Report.wer |
Little-endian UTF-16 Unicode text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WER3193.tmp.mdmp |
Mini DuMP crash report, 14 streams, Tue Mar 22 23:44:28 2022, 0x60521 type | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WER3E17.tmp.WERInternalMetadata.xml |
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WER3F41.tmp.xml |
XML 1.0 document, ASCII text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WEREFA8.tmp.WERInternalMetadata.xml |
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WERF0E2.tmp.xml |
XML 1.0 document, ASCII text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\bhv748A.tmp |
Extensible storage user DataBase, version 0x620, checksum 0xb56e199f, page size 32768, DirtyShutdown, Windows version 10.0 | # | |
C:\Users\user\AppData\Local\Temp\holderwb.txt |
Little-endian UTF-16 Unicode text, with no line terminators | # | |
C:\Users\user\AppData\Roaming\pid.txt |
ASCII text, with no line terminators | # | |
C:\Users\user\AppData\Roaming\pidloc.txt |
ASCII text, with no line terminators | # |