Shipping doc.exe
| Engine | Download Report | Detection | Info |
|---|---|---|---|
|
|
malicious
Score: 100
|
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
|
| IP | Country | Detection |
|---|---|---|
| 113.197.35.45 | Singapore |  |
| 149.154.167.220 | United Kingdom |  |
| 193.122.130.0 | United States | |
| Click to see the 1 hidden entries | ||
| 104.21.64.1 | United States | |
| Name | IP | Detection |
|---|---|---|
| webmail.gvictery.com | 113.197.35.45 | |
| reallyfreegeoip.org | 104.21.64.1 | |
| api.telegram.org | 149.154.167.220 | |
| Click to see the 2 hidden entries | ||
| checkip.dyndns.com | 193.122.130.0 | |
| checkip.dyndns.org | 0.0.0.0 | |
| Name | Detection |
|---|---|
| https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search | |
| https://api.telegram.org/bot7452517787:AAFRCQzX_IamMx-kAJG8lXDhSv2cnnBqR7U/sendDocument?chat_id=7256026967&caption=%20Pc%20Name:%20user%20%7C%20/%20VIP%20Recovery%20%5C%0D%0A%0D%0ACookies%20%7C%20user%20%7C%20VIP%20Recovery | |
| https://api.telegram.org/bot/sendMessage?chat_id=&text=%20%0D%0A%0D%0APC%20Name:035347%0D%0ADate%20and%20Time:%2024/02/2025%20/%2017:00:56%0D%0ACountry%20Name:%20United%20States%0D%0A%5B%20035347%20Clicked%20on%20the%20File%20If%20you%20see%20nothing%20this's%20mean%20the%20system%20storage's%20empty.%20%5D | |
| Click to see the 42 hidden entries | |
| http://checkip.dyndns.org/ | |
| https://github.com/mgravell/protobuf-neti | |
| https://tools.ietf.org/html/rfc4253#section-4.2 | |
| https://www.office.com/4 | |
| https://api.telegram.org/bot/sendMessage?chat_id=&text=%20%0D%0A%0D%0APC%20Name:035347%0D%0ADate%20a | |
| http://51.38.247.67:8081/_send_.php?L | |
| http://anotherarmy.dns.army:8081 | |
| https://stackoverflow.com/q/11564914/23354; | |
| https://stackoverflow.com/q/2152978/23354 | |
| https://ac.ecosia.org/autocomplete?q= | |
| http://checkip.dyndns.org/q | |
| https://api.telegram.org/bot7452517787:AAFRCQzX_IamMx-kAJG8lXDhSv2cnnBqR7U/sendDocument?chat_id=7256 | |
| https://chrome.google.com/webstore?hl=enlB | |
| https://reallyfreegeoip.org/xml/8.46.123.189$ | |
| https://reallyfreegeoip.org | |
| http://api.telegram.org | |
| http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name | |
| https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q= | |
| http://51.38.247.67:8081/_send_.php?LCapplication/x-www-form-urlencoded | |
| https://reallyfreegeoip.org/xml/ | |
| http://webmail.gvictery.com | |
| https://duckduckgo.com/chrome_newtab | |
| https://duckduckgo.com/ac/?q= | |
| https://stackoverflow.com/q/14436606/23354 | |
| https://reallyfreegeoip.org/xml/8.46.123.189 | |
| https://api.telegram.org | |
| https://github.com/mgravell/protobuf-netJ | |
| https://www.google.com/images/branding/product/ico/googleg_lodp.ico | |
| https://api.telegram.org/bot | |
| https://www.office.com/lB | |
| https://github.com/mgravell/protobuf-net | |
| https://www.office.com/ | |
| https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q= | |
| http://checkip.dyndns.org | |
| https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command= | |
| https://chrome.google.com/webstore?hl=en4 | |
| https://api.telegram.org/bot/sendMessage?chat_id=&text= | |
| https://chrome.google.com/webstore?hl=en | |
| https://www.ecosia.org/newtab/ | |
| http://varders.kozow.com:8081 | |
| https://tools.ietf.org/html/rfc4253#section-4.2ion-4.2 | |
| http://aborters.duckdns.org:8081 | |
No malicious files found. See full and IOC report for all dropped files.
