file.exe
| Engine | Download Report | Detection | Info |
|---|---|---|---|
|
malicious
|
||
|
malicious
Score: 100
|
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
|
| IP | Country | Detection |
|---|---|---|
| 149.154.167.99 | United Kingdom |  |
| 162.55.53.18 | United States |  |
| Name | IP | Detection |
|---|---|---|
| t.me | 149.154.167.99 | |
| Name | Detection |
|---|---|
| https://t.me/ | |
| https://t.me/m | |
| https://t.me/memve4erin | |
| Click to see the 66 hidden entries | |
| https://steamcommunity.com/profiles/76561199699680841 | |
| https://162.55.53.18:9000/vcruntime140.dllA | |
| https://162.55.53.18:9000/ZG | |
| https://162.55.53.18:9000/$ | |
| https://162.55.53.18:9000nbfoldnt-Disposition: | |
| https://162.55.53.18:9000/Zm | |
| https://ac.ecosia.org/autocomplete?q= | |
| https://162.55.53.18:9000/vcruntime140.dll | |
| https://www.ecosia.org/newtab/ | |
| https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016ost.exe | |
| https://162.55.53.18:9000ming | |
| https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016 | |
| https://162.55.53.18:9000/nss3.dlloft | |
| http://upx.sf.net | |
| https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q= | |
| https://162.55.53.18:9000tel | |
| https://162.55.53.18:9000tacrosoft | |
| https://162.55.53.18:9000/freebl3.dll | |
| https://162.55.53.18:9000/cG4 | |
| https://162.55.53.18:9000/vcruntime140.dllppet | |
| https://162.55.53.18:9000/nss3.dllJ | |
| https://162.55.53.18:9000 | |
| https://162.55.53.18:9000/softokn3.dll2 | |
| https://162.55.53.18:90001234567890hrome | |
| https://162.55.53.18:9000/nss3.dll | |
| https://162.55.53.18:9000/4 | |
| https://162.55.53.18/ | |
| https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples | |
| https://162.55.53.18:9000/freebl3.dll~ | |
| https://162.55.53.18:9000/mozglue.dll | |
| https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q= | |
| https://162.55.53.18:9000/.53.18:9000/ | |
| https://duckduckgo.com/chrome_newtab | |
| https://162.55.53.18:9000/freebl3.dllu | |
| https://162.55.53.18:9000/softokn3.dll | |
| https://162.55.53.18:9000/tm | |
| https://162.55.53.18:9000/msvcp140.dll | |
| https://162.55.53.18:9000/46ff6le | |
| https://162.55.53.18:9000646ff6le | |
| https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17 | |
| https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command= | |
| https://162.55.53.18:9000/sqlt.dll | |
| https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17rer.exe | |
| https://162.55.53.18:9000/softokn3.dll10.15; | |
| https://web.telegram.org | |
| https://162.55.53.18:9000/B | |
| https://duckduckgo.com/ac/?q= | |
| https://162.55.53.18:9000/A | |
| https://162.55.53.18:9000/softokn3.dllEdge | |
| https://162.55.53.18:9000FID | |
| https://162.55.53.18:9000al | |
| https://162.55.53.18:9000/msvcp140.dllEdge | |
| https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install | |
| https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search | |
| https://t.me/memve4erin& | |
| https://162.55.53.18:9000/vcruntime140.dllUser | |
| https://162.55.53.18:9000/p | |
| https://162.55.53.18:9000/MH | |
| https://162.55.53.18:9000/l | |
| http://www.sqlite.org/copyright.html. | |
| https://162.55.53.18:9000/freebl3.dllsposition: | |
| https://www.google.com/images/branding/product/ico/googleg_lodp.ico | |
| https://162.55.53.18:9000/bW | |
| https://162.55.53.18:9000/vcruntime140.dlle | |
| https://162.55.53.18:9000/ | |
| https://162.55.53.18:9000/sqlt.dllB | |
| Name | File Type | Hashes | Detection |
|---|---|---|---|
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_file.exe_9fe2b44b45cabaf5e9b80eb2becdba8923fcbda_d2f759d2_2d8cec74-354d-460a-95ad-bf7884ef09de\Report.wer |
Unicode text, UTF-16, little-endian text, with CRLF line terminators | # | |
C:\ProgramData\ECGDBFCBKFID\AEBGHD |
SQLite 3.x database, last written using SQLite version 3042000, file counter 11, database pages 7, cookie 0x3, schema 4, UTF-8, version-valid-for 11 | # | |
C:\ProgramData\ECGDBFCBKFID\BAEHIE |
SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3 | # | |
| Click to see the 12 hidden entries | |||
C:\ProgramData\ECGDBFCBKFID\CBKFBA |
SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1 | # | |
C:\ProgramData\ECGDBFCBKFID\DBGHJE |
SQLite 3.x database, last written using SQLite version 3035005, file counter 2, database pages 31, cookie 0x18, schema 4, UTF-8, version-valid-for 2 | # | |
C:\ProgramData\ECGDBFCBKFID\DGHIDH |
SQLite 3.x database, last written using SQLite version 3035005, page size 2048, file counter 2, database pages 56, cookie 0x24, schema 4, UTF-8, version-valid-for 2 | # | |
C:\ProgramData\ECGDBFCBKFID\GDBFHD |
SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 39, cookie 0x20, schema 4, UTF-8, version-valid-for 4 | # | |
C:\ProgramData\ECGDBFCBKFID\KKEHDB |
SQLite 3.x database, last written using SQLite version 3035005, page size 2048, file counter 1, database pages 24, cookie 0xe, schema 4, UTF-8, version-valid-for 1 | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WERDCA4.tmp.dmp |
Mini DuMP crash report, 14 streams, Wed Jun 19 12:39:59 2024, 0x1205a4 type | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WERDD31.tmp.WERInternalMetadata.xml |
XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators | # | |
C:\ProgramData\Microsoft\Windows\WER\Temp\WERDD52.tmp.xml |
XML 1.0 document, ASCII text, with CRLF line terminators | # | |
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506 |
Microsoft Cabinet archive data, Windows 2000/XP setup, 71954 bytes, 1 file, at 0x2c +A "authroot.stl", number 1, 6 datablocks, 0x1 compression | # | |
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506 |
data | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\sqlt[1].dll |
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows | # | |
C:\Windows\appcompat\Programs\Amcache.hve |
MS Windows registry file, NT/2000 or above | # | |
