migrate.120.exe
| Engine | Download Report | Detection | Info |
|---|---|---|---|
|
|
malicious
|
||
|
|
malicious
Score: 100
|
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
|
|
|
|
malicious
Score: 100
|
System: Windows 10 64 bit 20H2 Native physical Machine for testing VM-aware malware (Office 2019, Chrome 134, Firefox 91, Adobe Reader DC 21, Java 8 Update 301
Run Condition: Suspected Instruction Hammering
|
| Name | IP | Detection |
|---|---|---|
| boot.net.anydesk.com | 49.12.130.235 |  |
| Name | Detection |
|---|---|
| http://185.92.149.245/@sFmc05WZjBHd0hEdzVWdxVmcwhGU |  |
| https://www.linkedin.com/shareArticle?mini=true&url=https%3A//anydesk.com/&title=Try%20AnyDesk%20Rem | |
| https://anydesk.com/contact/sales | |
| Click to see the 51 hidden entries | |
| https://help.anydesk.com/it/android | |
| https://my.anydesk.com/password-generator. | |
| https://help.anydesk.com/ | |
| https://anydesk.com | |
| http://pesterbdd.com/images/Pester.png | |
| https://support.anydesk.com/knowledge/anydesk-for-android-chromeos#troubleshooting | |
| http://www.apache.org/licenses/LICENSE-2.0.html | |
| http://www.opengl.org/registry/ | |
| https://go.micro | |
| https://help.anydesk.com/lt/android | |
| https://help.anydesk.com/wol | |
| https://help.anydesk.com/$ | |
| https://help.anydesk.com/backup-alias | |
| https://github.com/Pester/Pester | |
| https://console-ui.myanydesk2.on.anydesk.com | |
| http://support.anydesk.com | |
| https://boot-01.net.anydesk.com | |
| https://datatracker.ietf.org/ipr/1524/ | |
| https://policies.google.com/privacy | |
| https://anydesk.com/company#imprint | |
| http://www.openssl.org/) | |
| https://my.anydesk.com/v2/ | |
| https://help.anydesk.com/access | |
| https://help.anydesk.com/share | |
| https://boot.net.anydesk.comabcdefABCDEFtruefalsetfInvalid | |
| https://datatracker.ietf.org/ipr/1526/ | |
| https://order.anydesk.com/trial | |
| https://anydesk.com/update | |
| https://www.google.com/chrome/privacy/eula_text.html | |
| https://www.google.com/intl/$ | |
| https://help.anydesk.com/lt/abuse | |
| https://help.anydesk.com/lt/android-battery | |
| https://my.anydesk.com | |
| https://help.anydesk.com/it/abuse | |
| https://help.anydesk.com/it/android-battery | |
| https://twitter.com/home?status=Do%20you%20know%20%23AnyDesk?%20AnyDesk%20is%20a%20small%20and%20qui | |
| https://anydesk.com/ | |
| https://anydesk.com/privacy | |
| https://support.anydesk.com/ | |
| https://www.nayuki.io/page/qr-code-generator-library | |
| https://policies.google.com/privacy?hl=it | |
| https://policies.google.com/privacy?hl=$ | |
| https://help.anydesk.com | |
| https://support.anydesk.com/AnyDesk_on_macOS | |
| https://anydesk.com/pricing/teams | |
| https://datatracker.ietf.org/ipr/1914/ | |
| https://anydesk.com/terms | |
| https://support.anydesk.com/knowledge/account-migration | |
| https://www.google.com/intl/it/chrome/privacy/eula_text.html | |
| https://anydesk.com/order | |
| http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name | |
| Name | File Type | Hashes | Detection |
|---|---|---|---|
C:\ProgramData\1.exe |
PE32 executable (GUI) Intel 80386, for MS Windows | # | |
C:\ProgramData\AnyDesk\AnyDesk.exe |
PE32 executable (GUI) Intel 80386, for MS Windows | # | |
C:\ProgramData\any.exe |
PE32 executable (GUI) Intel 80386, for MS Windows | # | |
| Click to see the 9 hidden entries | |||
C:\ProgramData\curl.exe |
PE32+ executable (console) x86-64 (stripped to external PDB), for MS Windows | # | |
C:\ProgramData\dc.exe |
PE32 executable (GUI) Intel 80386, for MS Windows | # | |
C:\ProgramData\migrate.exe |
PE32 executable (GUI) Intel 80386, for MS Windows | # | |
C:\ProgramData\wsappy.exe |
PE32 executable (GUI) Intel 80386, for MS Windows | # | |
C:\ProgramData\wsappz.exe |
PE32 executable (GUI) Intel 80386, for MS Windows | # | |
C:\Windows\System32\GroupPolicy\gpt.ini |
ASCII text, with CRLF line terminators | # | |
C:\runtimeMonitor\ComdriverSvc.exe |
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows | # | |
C:\runtimeMonitor\PsYm20I.bat |
ASCII text, with no line terminators | # | |
C:\runtimeMonitor\eW0NlR3z8rHah1r0tet2KhNAo.vbe |
data | # | |
