top title background image
flash

infestation.exe

Status: finished
Submission Time: 2024-10-21 22:56:09 +02:00
Clean

Comments

Tags

  • exe

Details

  • Analysis ID:
    1538882
  • API (Web) ID:
    1538882
  • Analysis Started:
    2024-10-21 22:56:10 +02:00
  • Analysis Finished:
    2024-10-21 23:02:31 +02:00
  • MD5:
    31b847dce20657b3a81e34b5885b93fd
  • SHA1:
    824e766bf7f02b000a9d72650acbcc0e0e754821
  • SHA256:
    39a22b3c5eddd715c26b2998c78c8837e7936b4297d4ea53e701f352ae109bad
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
clean
Score: 3
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

IPs

IP Country Detection
172.64.155.119
United States
3.94.218.138
United States
160.8.238.22
Sweden
Click to see the 29 hidden entries
3.221.23.73
United States
150.171.27.10
United States
3.165.206.124
United States
216.58.212.130
United States
150.171.28.10
United States
216.58.206.36
United States
18.203.166.1
United States
142.250.181.230
United States
104.22.59.128
United States
18.245.86.87
United States
142.250.185.70
United States
239.255.255.250
Reserved
160.8.235.16
Sweden
54.154.229.188
United States
172.217.18.2
United States
172.217.18.6
United States
142.250.184.230
United States
172.67.37.210
United States
142.250.186.70
United States
52.29.48.188
United States
63.140.62.222
United States
66.235.152.221
United States
52.58.254.85
United States
66.235.152.225
United States
18.172.112.55
United States
23.21.60.248
United States
50.16.7.188
United States
54.72.42.29
United States
142.250.65.162
United States

Domains

Name IP Detection
zn8l9hquzk9i3pdgd-nidx.siteintercept.qualtrics.com
0.0.0.0
11849458.fls.doubleclick.net
0.0.0.0
js.driftt.com
0.0.0.0
Click to see the 41 hidden entries
customer.api.drift.com
0.0.0.0
www.ni.com
0.0.0.0
bootstrap.driftapi.com
0.0.0.0
dpm.demdex.net
0.0.0.0
1421715-15.chat.api.drift.com
0.0.0.0
conversation.api.drift.com
0.0.0.0
ni.scene7.com
0.0.0.0
log.api.drift.com
0.0.0.0
cm.everesttech.net
0.0.0.0
delta.ni.com
0.0.0.0
kit.fontawesome.com
0.0.0.0
targeting.api.drift.com
0.0.0.0
service.force.com
0.0.0.0
ni.tt.omtrdc.net
0.0.0.0
api.ni.com
0.0.0.0
bs.serving-sys.com
0.0.0.0
zn3dtdyc8qsewhj6t-nidx.siteintercept.qualtrics.com
0.0.0.0
smetrics.ni.com
0.0.0.0
ka-p.fontawesome.com
0.0.0.0
adserver-prod-alb-2056226458.eu-central-1.elb.amazonaws.com
52.29.48.188
dart.l.doubleclick.net
142.250.184.230
afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com
3.94.218.138
ad.doubleclick.net
142.250.181.230
ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com
3.221.23.73
adservice.google.com
216.58.212.130
ax-0001.ax-msedge.net
150.171.28.10
ni500z.btttag.com
104.22.59.128
dl7g9llrghqi1.cloudfront.net
18.245.86.87
adobetarget.data.adobedc.net
66.235.152.221
d1nie5ipy0d64w.cloudfront.net
18.172.112.55
ni.com.ssl.d2.sc.omtrdc.net
63.140.62.222
www.google.com
216.58.206.36
td.doubleclick.net
172.217.18.2
location.l.force.com
160.8.238.22
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com
18.203.166.1
fls.doubleclick.net
172.217.18.6
geolocation.onetrust.com
172.64.155.119
metrics.api.drift.com
0.0.0.0
target.ni.com
0.0.0.0
nationalinsturments.demdex.net
0.0.0.0
siteintercept.qualtrics.com
0.0.0.0

URLs

Name Detection
https://cdn.cookielaw.org/vendorlist/googleData.json
https://metrics.api.drift.com/monitoring/metrics/event3/bulk
https://www.ni.com/niassets/js/survey.js
Click to see the 97 hidden entries
https://www.ni.com/en/support/downloads/software-products/download.academic-volume-license.html
https://kit-uploads.fontawesome.com
http://www.ni.com/rteFinder?dest=lvrte
https://js.driftt.com/core/assets/css/8.6ac3976b.chunk.css
https://cdn.cookielaw.org/vendorlist/iab2Data.json
https://www.ni.com/70533feeace8/484b70bb80b7/launch-4c2e40cfd60e-development.min.js
https://fontawesome.com/license
https://ni.scene7.com/is/image/ni/play_button?fmt=png-alpha)
http://www.ni.com/70533feeace8/484b70bb80b7/052f9be7bd2e/RC18ada7d9fe1f4d60b8dad0a0b61a1a2d-source.j
https://ni500z.btttag.com/btt.js
https://www.ni.com/privacy
https://conversation.api.drift.com
https://js.driftt.com/core/assets/js/24.0583f85b.chunk.js
https://www.ni.com/en.html
https://www.ni.com/70533feeace8/484b70bb80b7/launch-92d1a8272fcb.min.js
https://zn3dtdyc8qsewhj6t-nidx.siteintercept.qualtrics.com/WRSiteInterceptEngine/?Q_ZID=ZN_3DTdyc8qs
http://www.ni.com/rteFinder?dest=lvrte&version=&platform=Win7_&lang=shell32.dllole32.dllCoInitialize
https://www.ni.com/en/shop/labview/select-edition.html
http://jqueryui.com/themeroller/?ffDefault=Trebuchet%20MS%2CTahoma%2CVerdana%2CArial%2Csans-serif&fw
https://cdn.cookielaw.org
https://log.api.drift.com/log
https://www.ni.com/en/about-ni/legal/terms-of-use.html
http://www.ni.com/rteFinder?dest=lvrte&version=23.1&platform=Win7_64&lang=ene
https://ni.scene7.com/is/image/ni/Multisim_BG?$ni-icon-pm$
http://www.ni.com/70533feeace8/484b70bb80b7/052f9be7bd2e/RC4f2f14eb977f4a17b53da177409a21c2-source.j
http://www.ni.com/70533feeace8/484b70bb80b7/052f9be7bd2e/RC15ec4e4dd4d14b68a1ea55f1846053f7-source.j
https://js.driftt.com/core/assets/js/42.f634da7c.chunk.js
https://smetrics.ni.com/b/ss/ni-prd/1/JS-2.22.0-LEWM/s28409748554503?AQB=1&pccr=true&vidn=338B601B5F7DCD4D-60001A4665E2C1AF&g=none&AQE=1
https://js.driftt.com/core/assets/js/9.4a3e9801.chunk.js
https://kit.fontawesome.com/5806b6a478.js
https://www.ni.com/fr/support/downloads/software-products/download.labview-runtime.html
https://s.qualtrics.com/spoke/all/jam
https://www.ni.com/70533feeace8/484b70bb80b7/launch-66e1cff30f54-development.min.js
https://td.doubleclick.net
https://www.ni.com/70533feeace8/484b70bb80b7/launch-7b1333090b24-development.js
http://www.ni.com/70533feeace8/484b70bb80b7/052f9be7bd2e/EXf111162c5acd422892eda1f607ac206b-libraryC
https://www.ni.com/en-us.html:
http://www.ni.com/rteFinder?dest=lvrte&version=23.1&platform=Win7_64&lang=enf
https://kit.fontawesome.com
http://fontawesome.io/license
https://js.driftt.com/core/assets/js/16.e4031a09.chunk.js
https://getbootstrap.com/)
https://ni.scene7.com/is/image/ni/Icon
http://www.ni.com/70533feeace8/484b70bb80b7/052f9be7bd2e/RC5c86d9d81d6941a7ac9f3b637ea15f4a-source.j
http://www.ni.com/rteFinder?dest=lvrte&version=23.1&platform=Win7_64&lang=en~
https://www.ni.com/70533feeace8/484b70bb80b7/launch-4c2e40cfd60e-development.js
http://scripts.sil.org/OFLhttp://scripts.sil.org/OFLUppercase
https://bs.serving-sys.com/BurstingPipe/ActivityServer.bs?cn=as&vn=omn&activityID=787854&advID=125764&var=s_3_Integrate_Sizmek_ACM_get_0&rnd=588942733418
https://bootstrap.driftapi.com/widget_bootstrap
https://js.driftt.com/core/assets/js/1.50f0b6c5.chunk.js
https://www.ni.com/es/support/downloads/software-products/download.labview-runtime.html
https://www.ni.com/site.webmanifest
https://www.ni.com/en/shop/compactrio.html
https://js.driftt.com/core/assets/css/39.eeb001f3.chunk.css
https://www.ni.com/70533feeace8/484b70bb80b7/launch-a69e4f3a49c6-development.js
https://js.driftt.com/core/assets/css/27.b5e8f5e1.chunk.css
https://www.ni.com/en/search.html?pg=1&ps=10&sn=catnav:sup.dwl.pdl
https://www.ni.com/en/partners.html
http://getbootstrap.com)
http://www.ni.com/rteFinder?dest=lvrte&version=23.1&platform=Win7_64&lang=en
https://www.ni.com/70533feeace8/ceda31ca7e5d/launch-fa701911ef13-development.js
https://www.ni.com/docs/
https://www.ni.com/en/support/downloads/software-products/download.labview-runtime.html
https://lumen.ni.com/nicif/us/header_login/content.xhtml?action=login&du=https://www.ni.com/en/suppo
https://js.driftt.com/core/assets/js/22.6b9a301a.chunk.js
https://www.ni.com/zh-cn/support/downloads/software-products/download.labview-runtime.html
https://metrics.api.drift.com
https://fontawesome.com
http://www.ni.com/70533feeace8/484b70bb80b7/052f9be7bd2e/RC7fc977963c7349388e50b250e954cdf2-source.j
https://www.ni.com/70533feeace8/ceda31ca7e5d/launch-fa701911ef13-development.min.js
https://www.ni.com/favicon-16x16.png
https://js.driftt.com/core/assets/css/28.812d5a7c.chunk.css
https://www.ni.com/ja/support/downloads/software-products/download.labview-runtime.html
https://www.ni.com/my-support/s/service-requests
https://www.ni.com/en/shop/data-acquisition/miodaq-devices.html
https://www.ni.com/en/about-ni/legal/service-terms.html
https://smetrics.ni.com/b/ss/ni-prd/1/JS-2.22.0-LEWM/s28409748554503
https://dpm.demdex.net/id?d_visid_ver=5.5.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=B3902DB45388D9620A490D4C%40AdobeOrg&d_nsid=0&d_mid=33679830491410508262970647205932486978&d_blob=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&d_cid_ic=zweb_profile_id%01anon%011&ts=1729544242919
https://www.ni.com/ko/support/downloads/software-products/download.labview-runtime.html
http://www.ni.com/70533feeace8/484b70bb80b7/052f9be7bd2e/RC9d1bf0d6c16e40e6bf8a02207d77804e-source.j
https://github.com/twbs/bootstrap/blob/master/LICENSE)
https://www.ni.com/en/shop/pxi.html
https://js.driftt.com/core/assets/css/1.fdc718c4.chunk.css
https://customer.api.drift.com
https://www.ni.com/en/shop.html#pinned-nav-section1
https://stats.g.doubleclick.net/g/collect
https://www.ni.com/cookies
https://github.com/gnarf37/jquery-requestAnimationFrame
http://sine.ni.com/apps/utf8/nios.store?action=view_cart
https://ni.scene7.com/is/image/ni/LabVIEW?$ni-icon-pm$
http://www.ni.com/70533feeace8/484b70bb80b7/052f9be7bd2e/RC553077167084441080830cd23d72cdba-source.j
https://ni.scene7.com/is/image/ni/emerson_footer_white?fmt=png-alpha
https://schema.org
http://www.ni.com/70533feeace8/484b70bb80b7/launch-92d1a8272fcb.js
https://siteintercept.qualtrics.com
https://www.ni.com/70533feeace8/484b70bb80b7/launch-a6259a07e4ab-development.min.js
https://www.ni.com/apple-touch-icon.png

Dropped files

No malicious files found. See full and IOC report for all dropped files.