URLhaus Database

You are currently viewing the URLhaus database entry for http://gamemechanics.com/twitch/ELf/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	188076
URL:	http://gamemechanics.com/twitch/ELf/
URL Status:	Offline
Host:	gamemechanics.com
Date added:	2019-04-30 15:50:04 UTC
Last online:	2019-05-15 18:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
dns0.eu :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2019-04-30 15:50:10 UTC to abuse{at}a2hosting[dot]com)
Takedown time:	15 days, 3 hours, 4 minutes (down since 2019-05-15 18:54:44 UTC)
Tags:	emotet epoch1 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2019-05-02	ezwxhz0a4ron1ki.exe	exe	2cfca42cbb8df0aae0fbfaf6c3b77452176285b9ff52da37e56791aa51ee8652	30.99%	Heodo
2019-05-02	ohnrcboz4.exe	exe	09ab57c6d3d152efdab9eebf9aa4fd29f585ee6f647406682ca179102b98116b	30.99%	Heodo
2019-05-02	ln8vjxpsz2fp.exe	exe	489ed6140b742d4bb2682ff7da80c5e2d67499ca2f97a1e2930472d4ab08da61	30.56%	Heodo
2019-05-02	4gsc6.exe	exe	8401b00b6fb0f3bf6507d6576475c909a6a013b998449a80b27321d6fd52f0f9	31.51%	Heodo
2019-05-02	rk88ilejlxqd.exe	exe	acba54a4b5b72bba9b5b9036485fa0257c5dda20856f360dc8ea8cf0d764bac6	22.54%	Heodo
2019-05-02	nbujqk7um0opzs.exe	exe	f157b22a20feeb0434ca66806ab77e590603a97c863656f0f734f1cde5e87b95	21.43%	Heodo
2019-05-02	e0gctd4bj.exe	exe	f4456e473304e3d438a3e7cf58d601c5b56d16b1b81ddcf5e5e16b1ec20c172a	44.29%	Heodo
2019-05-02	s7rqzwa6r9.exe	exe	4384db57f8098be4eb16caa008dc7d87a349b02d9574c4ab5b13f50ee888fa54	36.11%	Heodo
2019-05-02	103lsp8c.exe	exe	90cb1f8d6e6d54ac207dada4c686c794ecc03bcd232719e7bf37e1ecea96a199	35.71%	Heodo
2019-05-02	yqd9r7j9nra3g03.exe	exe	94e3dd6d07d2ccb2b4a5dee974af9c815c25777aa5e87962348d24f5991a182b	n/a	Heodo
2019-05-02	3fq111l36.exe	exe	5820dd4ee3893dc9f2a0cd523d4927cd23a9e4fb63a8d8dddd78e79869fa4333	43.06%	Heodo
2019-05-02	ptb90kr526hv7fs.exe	exe	223fc1e77320c0a515a20fb2de9c1914a47708dad5aaae4454b91288156dbe6e	47.22%	Heodo
2019-05-02	4q1gb0twgtsp.exe	exe	66aa942d8dc8714c54e31c733d37d5f6d29eb27ff64e3cdac40ee9ffcbed2f42	n/a	Heodo
2019-05-02	tshll0djjbw16u.exe	exe	79a44b5796a6c8f3dbe3050dcb7cd9a53abd0b568903b5eb079d33d93f1d8a7e	38.36%	Heodo
2019-05-02	1h67jd.exe	exe	3b5acf6213221055de8d43376ca1cb56555d30a944ff9f60ffe8cec6a8bd325b	38.36%	Heodo
2019-05-02	c45dh9py40.exe	exe	fc7cf3f6bf9b02163ad46c045e008583b8e4432ebdbfb2f7d2bd4f098a91074a	36.11%	Heodo
2019-05-02	5gxpl.exe	exe	ccd26cf9cf606fb49a237a501e9e441cae962090bb6e5b24e4e93898ac5b3383	37.50%	Heodo
2019-05-02	vi8ww3q2avfbwo.exe	exe	c6a767ba8c7fbd15990e376a2ecf6acd3933770982b7c591d35cce684770e719	30.99%	Heodo
2019-05-02	aw4wdi68tg.exe	exe	bfa9f4346764ccf4f2b721cdb1ad12813907113071e7c4336cb0f68f12a04ec6	27.54%	Heodo
2019-05-02	if2qks2f.exe	exe	eee540e958049bf14200c4004b53ae1431c2c74f1c74bd637235c04bc5aaa7af	29.58%	Heodo
2019-05-02	fs6bb.exe	exe	92528cfa2b857a8b3b1b2d0047c237293d7df35d6e2bb87f3cd9f6bd43c4a38b	28.17%	Heodo
2019-05-02	2ivzsyodn7f6db.exe	exe	e52503af4ce2b4a6ca4558b750569e51f48c78a20d69bd18677a8f88e8767ab1	29.58%	Heodo
2019-05-01	wliqskaukj84.exe	exe	df8471d7149ad3b6fd7e8fb7541de710bba9d18296a8c5c47efc10b0f21ead05	28.17%	Heodo
2019-05-01	wf40v68r.exe	exe	f4e5581ee0c9d708435206419260f8d478aa1bf82056b85b277c59da7a708e86	29.17%	Heodo
2019-05-01	ipvydzxcispeqrn.exe	exe	cee42889fdbe04188000486e783db459272855339c68ee0567fb310ebadaf42b	26.39%	Heodo
2019-05-01	pa2qctopxbaq.exe	exe	1969227c1da28bee28df639c351bbae36a6735d44df8ddd8056e7dbf8ee2b720	34.29%	Heodo
2019-05-01	e4ff7xe8h20sb.exe	exe	fc8b6e6d117dd5b2e8a1c09f67466875686b03556031b3a4c5fc160ee097d7d1	22.22%	Heodo
2019-05-01	ikbtfgg9l34rq.exe	exe	03ae027f5da19d9d7cf5c66dd74eafae7fc8e0b581d2c49163db86b03fbd4210	22.54%	Heodo
2019-05-01	7o4fe8lpfkswru8.exe	exe	9f9ede214a21709bad4f6867ef8b0d03fc6f9846c06b332d39262785a5ef09fa	20.83%	Heodo
2019-05-01	stvnw0xsg.exe	exe	e5d8aadbce59b0960dddf0d1481db1d5c6d3dc97b093938e37e82a0b5216053e	20.83%	Heodo
2019-05-01	w81jdopddp83.exe	exe	73600cd0546dc22d24b13b6f04c3fab2d0c4542e59a3eb5a8129d55253fcc886	22.54%	Heodo
2019-05-01	npBZ94zd79Pl.exe	exe	d1cc656d254e31f478b57dbb5aa14793a898454634563b54adcac8e5a9e16439	21.13%	Heodo
2019-05-01	V6DXhADpGMk.exe	exe	85b6af90e832fb63e89f08b4c88072cec50496e9744b493527b1da56abe8c12b	21.13%	Heodo
2019-05-01	zzXY4P4K.exe	exe	b2224689dcad89409f61de17385afc309bad960a29ad4536544060245d98a7ff	n/a	Heodo
2019-05-01	bBClzYfyOJx.exe	exe	f7991d54db31a411d21ef1b6ef87490aa3828576eb59fbdefa57a3861d1c728c	26.76%	Heodo
2019-05-01	52CAOP60.exe	exe	f3b63d05db4989d717bc0f8dd66fe2080cdc0d13c8ded93030ae3b70026f5e26	25.35%	Heodo
2019-05-01	j81O0rvg.exe	exe	684c52e52cd712231a6e8abc3800253ab6cd9c43225b65f859a3f6a59b5ddbd5	28.17%	Heodo
2019-05-01	mHgvN47t.exe	exe	80f992b1906e88d7356ac0e0ad51bf874b2757e0813f2d9eedadb292af0c61d5	33.82%	Heodo
2019-05-01	eEVqm37PQ.exe	exe	c7709b8129559ad7ab29b49ce7474fb0ddffd5bdac106d4df71b5b144f1b21d6	32.86%	Heodo
2019-05-01	1CIjLkRBABxy.exe	exe	a0cce57894f221b63c4d5a57f3249251010da5c365840f7b63e8e3b8ee3c10bc	n/a	Heodo
2019-05-01	XFDQWWf9txwX.exe	exe	131ca72a20ee4c1bd81246ec60a226712dfa6f0d0b6706b7b7c7c9a6f6ef5a5a	35.71%	Heodo
2019-05-01	ChJd1SVE.exe	exe	d85efb8cddbc21306a86fd25c3cc5f893af158ad8b2ead2f64cced2f8db40a48	32.39%	Heodo
2019-05-01	b4A3ReW26.exe	exe	cb41db92f2c3b9afa422fc65a6df8e55d26fadac58077fa706bc5c40929c89cb	31.43%
2019-05-01	CFaXxZ8ycF9a.exe	exe	90042c714cf8671807ad4290921c16abf0a59816c0ab4296a076a7b10ba46c00	31.94%	Heodo
2019-05-01	6Ao60OJpXjJ.exe	exe	768f9ac2e34c329924c37e8eea52fbdaa52d6b7ea102bdeea5c4de83c9a44545	31.94%	Heodo
2019-05-01	jlrf6v7dEd.exe	exe	12f53950de8323c610cb7ceee7d9e86f686bd8c991866f51f7c3dac0f3b862d2	n/a	Heodo
2019-05-01	9EezCintR.exe	exe	953c39c126e8688290f832b85f4fbf232e9d4becce8a7b401b557ec0975318da	29.17%	Heodo
2019-05-01	xjE1AUobVC6.exe	exe	563495968b838ec4e58f67a177e80b3eb6e7f83907b96c18d3641104be5f5d63	n/a	Heodo
2019-05-01	n4lK9hLXquu.exe	exe	63b1b0237b6dab649df12992446651e40953d68c004af4792130d64acb5910da	28.57%	Heodo
2019-05-01	tqAzMsdq.exe	exe	ac3294e2c0f1c250454f7d8e5dc18a4fd20f36772eb1978d8ed676389e6c77e9	27.78%	Heodo
2019-05-01	F71iV1C95SYX.exe	exe	d5ddfce986949236d061a8ecf8683419ac9be02f0afbf9886c983a243edaea55	29.17%	Heodo
2019-05-01	9crJkGBvPy.exe	exe	a9c78c029559c3c146ad88b1bd4537c81431df7366be87f9feb903593ef2ace6	n/a	Heodo
2019-05-01	KygTJEz4QDiv.exe	exe	ba8eece35e64b6fbbd12f239162ad352288bee75fa295f79cb85875bd6072b87	28.17%	Heodo
2019-05-01	R4TOQUgxC.exe	exe	3755e12eb843299abafaa75b6556891a3cd18d4547695cf67ae492c85bb78a6a	30.99%	Heodo
2019-04-30	cyGUiHjf.exe	exe	ceaacb8a9656034956154e6ff56f9a4f9587431f9bc863d8d976909dcbf1de47	30.56%	Heodo
2019-04-30	QueK0VrbrX.exe	exe	323f79a427c06cdac69877dff7b50d55ebaace0df0e2ad2685ddbfcd3d6441d8	30.99%	Heodo
2019-04-30	TiGr8NeE5CU.exe	exe	aa5ee46ea3617e3484c5e86aecfd1ce6a91dcb179bbbd129d2c7b48842a370d7	30.99%	Heodo
2019-04-30	ZHLiD59BClD.exe	exe	0e4d8f94695835678762132e57f4852358b6612b173b2bd1232742118d009e31	30.99%	Heodo
2019-04-30	nE221gYjkJa.exe	exe	0b8e05b035da25640a50f1450f3a92288473a33e421d585fa940187f4d8261d0	30.99%	Heodo
2019-04-30	K57uwuYfs.exe	exe	2604db869657cbebcd60e6f4d7ebed7026f68e21209cdf171bb2fb70bc02655f	31.43%	Heodo
2019-04-30	sJfpuBSLWhe.exe	exe	bbe981142aea9ae1d00ffc2a8dfb41c74b1adad9144f08892362b2b18e2056dc	30.56%	Heodo
2019-04-30	rWsT2qZ9BOtk.exe	exe	f6f6d4cbd6b700b791b6e155ae2774f8b984cb749fe8f38e62b3f47bc1bc1b0e	30.99%	Heodo
2019-04-30	5Oxoskqv8Wpz.exe	exe	eee3a9097bd48436b7bf4fdf5204ebf7990da77c9e4494fe13879d45fc60ad24	30.99%	Heodo
2019-04-30	d1eWBfltnV.exe	exe	66e1569771a34ec272ba8d59685a00b73b9974bb237c5116a82cffbf3378f596	27.78%	Heodo
2019-04-30	1exGEeY7ol.exe	exe	6c206c29700d87e034c7cb6679ee3ec5a894439638843e38f1272cd9d97222d6	27.94%	Heodo
2019-04-30	pTNNVNWa56yM.exe	exe	10294a1dbf6dedf9ebe35eff1807e078f1164b6900f3527a2d35988f49ab7a5b	30.99%	Heodo
2019-04-30	9AgwNNx8TT.exe	exe	aec7f3a8926b4ae3cca4393f7635923876a35651e2f3498ec54da21e4bd559cf	25.35%	Heodo