ed58323b...8657 | IOCs
Logo
Try VMRay Analyzer
VTI SCORE: 100/100
Dynamic Analysis Report
Classification:
Downloader
Threat Names:
Mal/HTMLGen-A

Ponuda-2020-0231.xlsm

Excel Document

Created 5 years ago

...

Indicators

File (185)
»
Filename Hash Operations Category Severity
C:\Users\aETAdzjz\Desktop\Ponuda-2020-0231.xlsm MD5: 69450923d812f3696e8280508b636955
SHA1: 1f128c49a02483d6db545c166b192648a03ea6b5
SHA256: ed58323b71a87a44ff98fbb2e30c89ef7f3439f0fcb61b4d1cf32d880b088657
SSDeep: 1536:zZCsGB+7ViGwWlw8LDY9O8i373ofoD9ybPtwvg0Cd35AsAl0GRwdxBP2r3EDXPV+:zZCsGKVtwWlw8LU9O8i373++9Mtw40E6
ImpHash: - 		Access, Create, Read Sample File
Malicious
C:\Users\aETAdzjz\AppData\Local\Temp\_uninsep.bat MD5: 483a96f25a37a60eba1e1ff3ee418c51
SHA1: 79eb26525b274ab1d7e882864d1620bd1d1776aa
SHA256: 509ae7fe892c68ab1fcdaa42a22bbf2f16d29b3ed95ef3ea2096c043598c8489
SSDeep: 6:mRoio/ek+TiU/ek+tdWI/go2Fo/zpJ23fCG:mRoJ+TB+tYNlCMaG
ImpHash: - 		Access, Create, Delete, Write Dropped File
Unknown
C:\Users\aETAdzjz\Desktop\Afrodita.dll MD5: d4b946b51dc21709f87a1a943ad7cbe3
SHA1: 8c2a1c67493eff3990ab30862e094c34e6821eea
SHA256: 9b6681103545432cd1373492297a6a12528f327d14a7416c2b71cfdcbdafc90b
SSDeep: 6144:EXrm0zIiAhjC7Cqa5ZhiIJDQ13Xdksm1Cx2tJk:EbNQaCq6iIJcdksmJtJ
ImpHash: - 		Access, Delete Downloaded File
Unknown
C:\Users\aETAdzjz\\__README_RECOVERY_.txt MD5: 28cc3f3e5bba0192515111f2eb003383
SHA1: b6b761eaa1ca867affddb0ae3354c64fc961a5ce
SHA256: 8e986cbc4513ffa5249f609138114c2c172d210623b622dfd70f3b9dbed33389
SSDeep: 96:h6L2QcEjp3sFVh9/VvqA9EF7hA9oRDFtho:h6LfL47eWeDFtO
ImpHash: - 		Access, Create, Write Dropped File
Unknown
client-encrypted-private.key MD5: 5d55172d3a76ad777ad1197d43e6dc67
SHA1: 5ecc3250f50ee9edaf742620b5c14878cdf98e1b
SHA256: 915ddd621024497f820c4d1c3bfe12f0d321668fe91c8289c03cb3aee25680c7
SSDeep: 24:uWuYlnT1AKMl2R9x2r1m2YUwI7GEKux+sTHfYh1IUWCy4:JlT1Jx2xSv0Kux+sTHfYfInCy4
ImpHash: - 		Access, Create, Read, Write Dropped File
Unknown
client-encrypted-private.key MD5: 885bcb1645597ab3850e859acd8b29e8
SHA1: af8be73836183e6d75f1476b7f9109eee1a58d38
SHA256: 1b7b39ea4494fc5490f9b20c887875556a68ea2351e27fdcb15488685f7137e3
SSDeep: 48:4x9nSPP0yljEEUnb7CgibZLKtZ8cRjh86G2FjZE4:0eHjEEQpSLKZRjh892pe4
ImpHash: - 		Dropped File
Unknown
client-public.key MD5: 708453bc940aaee8ccbee516c43b9961
SHA1: 9ce03aea69e728445e6e21640c29617fbff2c1df
SHA256: f61bc6ab9e07392815d03105f409c7a03bee2c8879a91ea9e4d9d1bd13653a47
SSDeep: 6:sLTfu6DvrFddLTm+zCmldhlytE9naYmCJtdLddrcUP0:uLu6DlbzTl/AtEMY7jc
ImpHash: - 		Access, Create, Read, Write Dropped File
Unknown
main-public.key MD5: 91b9ebb915a478a36e110b130f930c6b
SHA1: f381a5408ec2baf57cdc1d1388868c0edea8ab6e
SHA256: 0309f713e59048664d739d8c913d44a88522d193a196bec4ed20db45412d003d
SSDeep: 6:sLTWdgfDMyUIhe4ftJ/jZMvY3bVU1r9ZgKhVYogrZfwW7:udDMR4ffNMgrVOpZgQ3gdfh
ImpHash: - 		Access, Create, Read, Write Dropped File
Unknown
sheet1.xml MD5: 92a7d1ef5dc788cc054d46f9b979e15d
SHA1: 4fcc83ac342c27e95d5c47c6054357706a1375c4
SHA256: cc2defc1f4e8b1dd73ddc00da16b40d7f1176b259c4215c2470ccb283ee478e4
SSDeep: 192:YXmmZe5mQMuDKpBb9VtodMo8G985RVeF16Pqx8xCcK8pW3vr4aN4yFcF8D:YXmue5mQB+pBb1XGmahNOW
ImpHash: - 		Embedded File
Unknown
vbaProject.bin MD5: 307513404dcdd22ff85bf599a9138e8f
SHA1: 8e3556dc5ce2b3d3361aebac3dc2730aacb33d2c
SHA256: 320210c50a3fcdea7603cef1a6b35b11b884b4c1a726ec0c3ca33d283759813d
SSDeep: 192:saEyP3eFBWPY7HskvL+7byaFEShbel3xCGMi5MFax:lElBYKHrLEzFESl43xCGMi5
ImpHash: - 		Embedded File
Unknown
workbook.xml MD5: abcc080fa751d1982107b275ceacd1d0
SHA1: fbf312b6b03ee2e6a5a647aac9048ee494d28a6a
SHA256: 8221830b81cba389c3dd7cfd252daad1fa9c14069f32d07cf8fbc81f1e73552a
SSDeep: 48:cV5hmNYZK1BrPBKvBXBZB/niC4tGE+HL60tNIlBuQvX:wXmmZYBrPBsBXBZBmGEFBuQv
ImpHash: - 		Embedded File
Unknown
"C:\Users\aETAdzjz\AppData\Local\Temp\_uninsep.bat" - Access
Not Available
Afrodita.dll - Access, Create, Write
Not Available
C:\$Recycle.Bin\\__README_RECOVERY_.txt - Access, Create
Not Available
C:\BOOTSECT.BAK - Access, Create, Read
Not Available
C:\Boot\BOOTSTAT.DAT - Access, Create, Read
Not Available
C:\Boot\\__README_RECOVERY_.txt - Access, Create
Not Available
C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7.1\VBE7.DLL - Access
Not Available
C:\Users\Default\Documents\\__README_RECOVERY_.txt - Access, Create
Not Available
C:\Users\Default\Favorites\\__README_RECOVERY_.txt - Access, Create
Not Available
C:\Users\Default\NTUSER.DAT - Access, Create, Read
Not Available
C:\Users\Default\\__README_RECOVERY_.txt - Access, Create
Not Available
C:\Users\Public\Music\Sample Music\Kalimba.mp3 - Access, Read
Not Available
C:\Users\Public\Music\Sample Music\Maid with the Flaxen Hair.mp3 - Access
Not Available
C:\Users\Public\Music\Sample Music\Sleep Away.mp3 - Access
Not Available
C:\Users\Public\Pictures\Sample Pictures\Chrysanthemum.jpg - Access, Create, Read
Not Available
C:\Users\Public\Pictures\Sample Pictures\Desert.jpg - Access, Create, Read
Not Available
C:\Users\Public\Pictures\Sample Pictures\Hydrangeas.jpg - Access, Read
Not Available
C:\Users\Public\Pictures\Sample Pictures\Jellyfish.jpg - Access
Not Available
C:\Users\\__README_RECOVERY_.txt - Access, Create
Not Available
C:\Users\aETAdzjz\AppData\Local\Temp - Access
Not Available
C:\Users\aETAdzjz\Desktop - Access, Delete
Not Available
C:\Users\aETAdzjz\Desktop\2aq7p.bmp - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Desktop\6B76.jpg - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Desktop\95xUt47AbijA.bmp - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Desktop\9CRtGY2A89XcaykHpG3.gif - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Desktop\K4mIpmW6vUhLGLUOiRu.mp4 - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Desktop\KlKT6biv0qr3fXe8ZLw.pdf - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Desktop\OxMww.mp4 - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Desktop\P1q_gQVI1atmi.m4a - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Desktop\QxC2SVht\PaSMkSpJh9MPQ7.jpg - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Desktop\QxC2SVht\h7agd\9tLI9nxXaZzh9.m4a - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Desktop\QxC2SVht\h7agd\KUph73OZjJumfxT-Jz.bmp - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Desktop\QxC2SVht\h7agd\c6g0Q-idTbsxw8 U.mkv - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Desktop\QxC2SVht\h7agd\s0VZWILpQ6p.jpg - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Desktop\QxC2SVht\lgC1uEyqtWk70\8P7m1IM_.rtf - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Desktop\QxC2SVht\lgC1uEyqtWk70\U4KFvX52Yhd\7ZIEiuvn.mp4 - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Desktop\QxC2SVht\lgC1uEyqtWk70\U4KFvX52Yhd\U1X_w5u uucB4fGC_DL.m4a - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Desktop\QxC2SVht\lgC1uEyqtWk70\U4KFvX52Yhd\lpqEv9Vo5Xzhum.odt - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Desktop\QxC2SVht\lgC1uEyqtWk70\momc0kk7Y1nwgJ1.mp4 - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Desktop\QxC2SVht\pPpiKF55Mg6kGAXE9.mp4 - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Desktop\XKHEvV6j.docx - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Desktop\bA3PMe-q.ots - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Desktop\lY1ptQ.mp4 - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Desktop\oj2i.bmp - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Desktop\vyvjpynXuaK7NKfhTd8.png - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Desktop\xcZN1FIgV-wu.bmp - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Desktop\y5WUe1.xls - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Desktop\~$Ponuda-2020-0231.xlsm - Access
Not Available
C:\Users\aETAdzjz\Documents\-6Aa4DUoBhp.pptx - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\49bX5RXotUOHctFeO.docx - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\7Szrc KGP_Uqu4\-UrxtR191pP-Q7_4.rtf - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\7Szrc KGP_Uqu4\4e 4-ReKBJyB628XhUaO.pps - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\7Szrc KGP_Uqu4\Jz2e\4i3GIqVN4udeOkdAO.xls - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\7Szrc KGP_Uqu4\Jz2e\80wc2TP.doc - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\7Szrc KGP_Uqu4\Jz2e\aNZF2c7 wBbPDJ.doc - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\7Szrc KGP_Uqu4\Ssqz.rtf - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\7Szrc KGP_Uqu4\d3fT21PwheGRdxYHEY.pptx - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\7Szrc KGP_Uqu4\jCfQlyCcXaBOC.ots - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\7Szrc KGP_Uqu4\s7-eygci4\3U_2W.ppt - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\7Szrc KGP_Uqu4\s7-eygci4\5 vtkHUp.ots - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\7Szrc KGP_Uqu4\s7-eygci4\AXap_S 51DM.odp - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\7Szrc KGP_Uqu4\s7-eygci4\Sj6Dy1j9.ppt - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\7Szrc KGP_Uqu4\s7-eygci4\Uq-4toqcoMBtaMY1.ods - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\7Szrc KGP_Uqu4\s7-eygci4\VtQGrA9rBcACZhpKTX.doc - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\7Szrc KGP_Uqu4\s7-eygci4\mvYV TmeoVwm8.ods - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\7Szrc KGP_Uqu4\s7-eygci4\rAwCp HH5R9iHp\9qbxqTV68fCbbXuRFd.csv - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\7Szrc KGP_Uqu4\s7-eygci4\rAwCp HH5R9iHp\WP3bSGzJNnlvwE7NV4Hh.odp - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\7Szrc KGP_Uqu4\s7-eygci4\rAwCp HH5R9iHp\__eKpZ1gkQmn.odp - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\7Szrc KGP_Uqu4\s7-eygci4\rAwCp HH5R9iHp\dwXaqlIAyr7msbh.ods - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\7Szrc KGP_Uqu4\s7-eygci4\rAwCp HH5R9iHp\laJmgVWiocDY.ods - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\814w0a-e6T.pptx - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\ACtQkflWmL0LaCSZGV.docx - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\CWRVNcM6-D_cNOzliQP.xlsx - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\Database1.accdb - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\HwNuVkeXNhZ2Os.docx - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\OGIH FJ.csv - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\Outlook Files\sdjwh@dive.djh.pst - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\RHJQv_4t05.pptx - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\T5RL.rtf - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\Tz__LsAIF.xlsx - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\a0nWO5h.pptx - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\bcrgdQhIu6v.xlsx - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\ltx3hp7.xlsx - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\obCtNAqzPBEwBHr.docx - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\refoZ3jM8.pptx - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\rhSsrjHW.xlsx - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\tUnbSvuPZT_E\3jcPs uUSK7nwsgjw.xlsx - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\tUnbSvuPZT_E\5-jL5oI2e8JDLX.ods - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\tUnbSvuPZT_E\9e4jSYwemj6gw.pptx - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\tUnbSvuPZT_E\syzrW\YzA_l_EY2ED5ycwinYME.pdf - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\tUnbSvuPZT_E\syzrW\kESZ.odt - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\tUnbSvuPZT_E\uRO-7txJ10VozDJD.doc - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\wwRSPYMyvzuOuwCnr.xlsx - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Documents\zm3E3mwnV8YuGDtu.docx - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Music\E b_DyV8MJdc3v.m4a - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Music\IJHXWc6qwk5Nd.m4a - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Music\OP9O3gaFfbh1RYM.m4a - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Music\SVe82Ii7C5h0hq93wwvV.mp3 - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Music\XUBr96iM8bsBpTRrbVh.m4a - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Music\bPVNxpM\1FPnMgpF.m4a - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Music\bPVNxpM\7sXGCAD1U3XM.mp3 - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Music\bPVNxpM\BSYe 7 iQ.mp3 - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Music\bPVNxpM\Mpqv2lrcLhBajTN8Pf.mp3 - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Music\bPVNxpM\MsGZhcJuXB3rmI.m4a - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Music\bPVNxpM\Rv9qQo18Z627V2bO2.m4a - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Music\bPVNxpM\VAD11G3ICAn5OTaJGOp\3D6NxzBUtJlk.m4a - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Music\bPVNxpM\VAD11G3ICAn5OTaJGOp\69FnVY7Bfk.m4a - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Music\bPVNxpM\VAD11G3ICAn5OTaJGOp\ZBOkAgkMizoYxQWYgWK_.mp3 - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Music\bPVNxpM\VAD11G3ICAn5OTaJGOp\wbXHNm2iF3Y5G2c-R.m4a - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Music\bPVNxpM\f_eku Et.mp3 - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Music\bPVNxpM\lTwcLUf3ag.m4a - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Music\bPVNxpM\xhE pC -uNw901N_.m4a - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Music\hy34DIdb70v.mp3 - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Music\xKPU.mp3 - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Music\ytfhWL439i.mp3 - Access, Create, Read
Not Available
C:\Users\aETAdzjz\NTUSER.DAT - Access
Not Available
C:\Users\aETAdzjz\Pictures\31VPjNNr3YHdw.bmp - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Pictures\5HgrJ4Z0c_aVpYp.png - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Pictures\6iNxcZ YPA3Tc2CAw ai.jpg - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Pictures\9ll 3 iWY.gif - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Pictures\AODM5XN5n6QhUSQAs.png - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Pictures\APHPqTMB.png - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Pictures\AfZZb.bmp - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Pictures\C565W921.bmp - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Pictures\DTmCDMqBwx8Gp-5.gif - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Pictures\GuDnLzx.gif - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Pictures\Gyj7IMdST.gif - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Pictures\H3oOBAUM5pAcA.png - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Pictures\K9V7.png - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Pictures\LrldXDj.png - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Pictures\O_dohW.png - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Pictures\PDsjRGYaQKiC.gif - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Pictures\QD7g.png - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Pictures\QJzBddRMJRShhYK.gif - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Pictures\UcWsyd2PO9.jpg - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Pictures\YhV2_QK.gif - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Pictures\_MeidGSp8E9S2hLv0ZIY.bmp - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Pictures\_fSDw4.jpg - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Pictures\b VyMZU5CvHn1M.jpg - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Pictures\e wA.jpg - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Pictures\ehi VCSuBxNcSeGN.bmp - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Pictures\gwkh0u7p.png - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Pictures\h9Z6TUJnO.gif - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Pictures\k De_dI.png - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Pictures\lQGZ.gif - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Pictures\nL38a-w.png - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Pictures\nMZt.bmp - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Pictures\o2s7lUO9VHDXe.gif - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Pictures\s1sJKGW9iv2Hp.bmp - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Pictures\tEMtDLkPLiLkfiR_.bmp - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Pictures\uZguBouYw0AHzV.jpg - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Pictures\weY2qIFv.png - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Pictures\wvm3KT2gEVJjNi.bmp - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Videos\0YxUtuAHRlW0t.mp4 - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Videos\4vHG1QrYJgEL.mkv - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Videos\5n4We06r.avi - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Videos\8BIFWG4ee.mp4 - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Videos\9DK0su2pT KEIoZtF.mkv - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Videos\A9znr-MwU2qNG6XAsxQ.flv - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Videos\CDwucLMye13LuKW0.flv - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Videos\DUpY0KETA0.mp4 - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Videos\EVw8H9fvfqiQuT.avi - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Videos\Ftf992oCHLnvaAjm.mkv - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Videos\QZ5feF_ijRnjZ.avi - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Videos\SlIDZ6glMdI.mp4 - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Videos\YSxp0Mp.avi - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Videos\ayWika.flv - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Videos\bXT08bIaOz455rAjs6.mp4 - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Videos\wTmxQtelGNnfZa4-m7.flv - Access, Create, Read
Not Available
C:\Users\aETAdzjz\Videos\zC7Gg3sRs.mkv - Access, Create, Read
Not Available
C:\Windows\SysWOW64\cmd.exe - Access
Not Available
C:\Windows\SysWOW64\rundll32.exe - Access
Not Available
C:\\__README_RECOVERY_.txt - Access, Create, Write
Not Available
System Paging File - Access, Write
Not Available
Registry (42)
»
Registry Key Name Operations
HKEY_CLASSES_ROOT\Licenses Access
HKEY_CLASSES_ROOT\Licenses\8804558B-B773-11d1-BC3E-0000F87552E7 Access, Read
HKEY_CLASSES_ROOT\TypeLib Access
HKEY_CLASSES_ROOT\TypeLib\{00020430-0000-0000-C000-000000000046} Access
HKEY_CLASSES_ROOT\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0 Access
HKEY_CLASSES_ROOT\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0 Access
HKEY_CLASSES_ROOT\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0\win64 Access, Read
HKEY_CLASSES_ROOT\TypeLib\{00020813-0000-0000-C000-000000000046} Access
HKEY_CLASSES_ROOT\TypeLib\{00020813-0000-0000-C000-000000000046}\1.9 Access
HKEY_CLASSES_ROOT\TypeLib\{00020813-0000-0000-C000-000000000046}\1.9\0 Access
HKEY_CLASSES_ROOT\TypeLib\{00020813-0000-0000-C000-000000000046}\1.9\0\win64 Access, Read
HKEY_CLASSES_ROOT\TypeLib\{00020813-0000-0000-C000-000000000046}\1.9\409 Access
HKEY_CLASSES_ROOT\TypeLib\{00020813-0000-0000-C000-000000000046}\1.9\9 Access
HKEY_CLASSES_ROOT\TypeLib\{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52} Access
HKEY_CLASSES_ROOT\TypeLib\{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}\2.8 Access
HKEY_CLASSES_ROOT\TypeLib\{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}\2.8\0 Access
HKEY_CLASSES_ROOT\TypeLib\{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}\2.8\0\win64 Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Command Processor Access
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\AutoRun Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\CompletionChar Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DefaultColor Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DelayedExpansion Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DisableUNCCheck Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\EnableExtensions Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\PathCompletionChar Access, Read
HKEY_CURRENT_USER\Software\Microsoft\VBA\7.1\Common Access, Create
HKEY_CURRENT_USER\Software\Microsoft\VBA\7.1\Common\BackGroundCompile Access, Read
HKEY_CURRENT_USER\Software\Microsoft\VBA\7.1\Common\BreakOnAllErrors Access, Read
HKEY_CURRENT_USER\Software\Microsoft\VBA\7.1\Common\BreakOnServerErrors Access, Read
HKEY_CURRENT_USER\Software\Microsoft\VBA\7.1\Common\CompileOnDemand Access, Read
HKEY_CURRENT_USER\Software\Microsoft\VBA\7.1\Common\NotifyUserBeforeStateLoss Access, Read
HKEY_CURRENT_USER\Software\Microsoft\VBA\7.1\Common\RequireDeclaration Access, Read
HKEY_CURRENT_USER\Software\Microsoft\VBA\7.1\Common\VbaCapability Access, Read
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\AutoRun Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\CompletionChar Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\DefaultColor Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\DelayedExpansion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\DisableUNCCheck Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\EnableExtensions Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\PathCompletionChar Access, Read
Mutex (1)
»
Mutex Name Operations
835821AM3218SAZ Access
Domain (1)
»
Domain Sources Severity
riskpartner.hr PCAP, Function Log, Embedded in File
Unknown
URL (1)
»
URL Operations Category Severity
http://riskpartner.hr/wp-content/notnice.jpg GET Contacted, Extracted
Blacklisted
IP (1)
»
IP Protocols Sources
95.216.74.82 TCP, DNS, HTTP PCAP, Function Log
Export to TXT Export to JSON
Function Logfile
Download-Icon
Exit-Icon

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy". 


    

   

   

    Before
   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    After
   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    

     
      

       
       
       
       
      

     
     
     
    

   

  

  

   

    
    

     Screenshot
    

    

     Expand-Icon
    

    

     Exit-Icon
    

   

   

    

     icon_left
    

    

     icon_left
    

   

   

   

   

    image