URLhaus Database

You are currently viewing the URLhaus database entry for http://onlinescienceacademy.webtechpk.com/elearning/Document/gltsvo2vsd/ma1938q51440855515525039xov4lvdoi/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:520445
URL: http://onlinescienceacademy.webtechpk.com/elearning/Document/gltsvo2vsd/ma1938q51440855515525039xov4lvdoi/
URL Status:Offline
Host: onlinescienceacademy.webtechpk.com
Date added:2020-09-15 21:35:09 UTC
Last online:2020-09-19 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-09-15 21:36:41 UTC to abuse{at}a2hosting[dot]com)
Takedown time:3 days, 9 hours, 57 minutes Bad (down since 2020-09-19 07:33:49 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-17ZQ_83724488.docdoc 794d05a964943c6e59eef584b6bd5ee060dec7907a990ec1a0d71260e641c74dVirustotal results 47.46%Heodo
2020-09-17BAL_16475133369.docdoc c81ad3ff9f4ab6829b4f06308391cea0e98bb5e371462d2bad0bcee9961b99ean/aHeodo
2020-09-17DOC_83767643.docdoc cc63dfcd6635c5015409c3a12a978b586bf9c3ae9c8c9ed0af8dca8c7384350aVirustotal results 44.07%Heodo
2020-09-17UT3216743857NJ.docdoc 42672053a8a7951c0df29a2a4de07128b0577be82c17609a53a93556faffb7abVirustotal results 43.10%Heodo
2020-09-17S_RDPJ9N9ISI.docdoc 55f67049f14332814d65bbc5690f2538dd7fe24edb943627e039a7ff43ab1fb8n/aHeodo
2020-09-17DOC_YOS_090120_CCD_091720.docdoc 54e22118b677aadbd92103152e9eb98f6a37c701dba7fcc87067d84e124d0ba9Virustotal results 35.00%Heodo
2020-09-17PO_09172020EX.docdoc b1c4f3f033c7084b7df61be8340d0190e40a7ed5742d46dccb477e27ee853c96Virustotal results 35.09%Heodo
2020-09-1756445875.docdoc 88efabe81db15fabbb8cc9be7263caefef8c4fa0c482c53060ff6c60ea8631d7Virustotal results 37.29%Heodo
2020-09-17FILE_UJ7436473511BK.docdoc ef1653ce5dbebfcbaedf38b0994902c3b34b60f312dffcca34560164a435847eVirustotal results 35.59%Heodo
2020-09-179743872258.docdoc 53dda9daf6fa01985279e8148de1c182bb9957da8b396b100bc5b6f1aa67f983Virustotal results 33.96%Heodo
2020-09-17NFT_PO_09172020EX.docdoc 6274d6fc5f58fb23f021e998ce3ba08addb461bc1403267302e7e7a2abc376d4Virustotal results 32.76%Heodo
2020-09-17FILE_PO_09172020EX.docdoc 4d2275748dd3705817affba2d9a9a1eda99c5c8c05e97243b48d537c0de0bc9fVirustotal results 32.76%Heodo
2020-09-17FILE_TPOCQL1U.docdoc 9af94d901782b57efcfe1221696091455a812897cb8a8707d72bd554841ce526Virustotal results 32.20%Heodo
2020-09-17FILE_TO8040485071VN.docdoc 271414bb6de5a4a21a2068a3bc845fc9303b434e034fd244210f81a079a65c97Virustotal results 34.48%Heodo
2020-09-1749679838888708.docdoc 5a9d0acacf9a1616330ac1559a2243f80f03ec322e564298c0cff70b28014a7cn/aHeodo
2020-09-17FILE_36299160.docdoc cd7eff89ab25979594648885ed165b0e8cb844bf354d2cd77afb285047573fa3Virustotal results 30.51%Heodo
2020-09-17T_PO_09172020EX.docdoc e3998db1ed2b104cf11b261e6edfb0149fb053276f1e0d43b619466b5feac4bfVirustotal results 36.21%Heodo
2020-09-17RGDT_F65F9LN.docdoc 208e89fb766998ab21cbde91b170f04f5833e9d0d69257b3654828d00dc79933Virustotal results 35.59%Heodo
2020-09-17BU_2931974826215995156.docdoc 919424657e6e74b9e81c27aa8efe577743913599bf121e13c3be9bfe56405e76Virustotal results 36.21%Heodo
2020-09-17BAL_ISN_090120_ZQS_091720.docdoc 9bf20dfb53d447d25176c2839e17ba601117c7a1a4f051777df513d7641ebd80Virustotal results 37.93%Heodo
2020-09-1750237332.docdoc 79d28b1f906f26beea84fa259a3953fa6fedf70176ec6a5bcd77e724f4d326abn/aHeodo
2020-09-17FILE_64808891.docdoc fe6c61d58e613b1737dd42c11ceb421b40f8f854324adeecb71245e245ed3a34Virustotal results 36.21%Heodo
2020-09-17FILE_1HM0P2TXR6.docdoc e0e9dac7a50485ca1030fc7dd02b0654cdb97f93294d975d06d9d8b8317d8e6eVirustotal results 29.82%Heodo
2020-09-17P_KJL_090120_NVN_091720.docdoc fd0f987936c01acfb91bb84e9e9c3e6f425f55d07887f14ee595ec418d252849Virustotal results 40.00%Heodo
2020-09-17YVB_090120_NYY_091720.docdoc 51d460db7db57fd212907c9aed23bba4891c43175f73978da2c791c60a412c43Virustotal results 38.98%Heodo
2020-09-17PO_09172020EX.docdoc aee3fb0f9a09817e17c7844a0ed7f8c34fbd6c30a83fa529ebe838670c0c4a21n/aHeodo
2020-09-17BAL_01462609.docdoc c3474c39b7b924e42872d74244d0854423f1a19a0bc7bf53337994e269cad134Virustotal results 41.38%Heodo
2020-09-175FL7R9J365OCIYZ.docdoc 9e4278eac329ac03d6c9b60c69594f50d2efb41914b428309216bdfe5ae15904Virustotal results 39.66%Heodo
2020-09-17INV_L48CIGGU534KJI6F.docdoc d15ec5002184364b882e5c3dc5c4fad1d083eeac52de352b2d263205c92e3165Virustotal results 41.82%Heodo
2020-09-17BAL_DN2109540425FG.docdoc 8d1ff2bacfbda66fbafa8dd2c05aa1912c32f694f2d0aaac4ac43897edcb677fVirustotal results 35.59%Heodo
2020-09-17BS_329109089767158.docdoc f3905c73171c859ac62800e08e653b667959363d0f57538eb82202c92543f12eVirustotal results 30.51%Heodo
2020-09-17REP_99542764.docdoc e09973ac979e2a9efbdb59ea10416f8714545ff719579b21a48327219a3ec797Virustotal results 37.93%Heodo
2020-09-17FILE_82221919.docdoc 6ae2e4149596565feec5f8af0750c8e0a86040b93c237bd20be37f723bbba750Virustotal results 36.84%Heodo
2020-09-179Y8MUA0UDOB2.docdoc 7787b958e5df87b1f31bc7382f7b5ff4b6bd764b807e381f75b8b2756623f393Virustotal results 38.60%Heodo
2020-09-17INV_04846017.docdoc 430ef6af760d2105f3c14655f66ff5dc191916c938a26256085965a4a536c827Virustotal results 32.20%Heodo
2020-09-17KUO6V2T6HW8TS.docdoc 8f30ed97624714bbc4dd8ce51400050e106aef3630f8510ffd8195e28c9ea6e9n/aHeodo
2020-09-17REP_76729737.docdoc 6d9cad95f8aa3d8219f21391e294a8dedbde904308f501b7f4be63eb92a8dcf4Virustotal results 33.90%Heodo
2020-09-17DOC_DM6942325052RQ.docdoc a9c8d3bb56d6abf69a804578bde7b85ae2717ff03d86c79d9f96d313d82552b5Virustotal results 28.81%Heodo
2020-09-17BC_BDI_090120_CXG_091720.docdoc 528a62bc2a5bb42529a57abc0367b0a612ebe84f846906aa5a6737e759d6ae84Virustotal results 25.42%Heodo
2020-09-17FILE_FJZ_090120_HTZ_091720.docdoc 4fc07945a17ff1e3422b0c95992fa2750006aeb21b1e886f0c2876d4ef69a14bVirustotal results 25.42%Heodo
2020-09-17FILE_PO_09172020EX.docdoc 85ecc831aac84128028e315d8229777d99b91e6adba5a437b18e0f2a3c34e76eVirustotal results 25.86%Heodo
2020-09-17BAL_85883533017896.docdoc 89c63f940c17124065f94ee04b40a3cf2f048fb270b93b38fe1b1e937ab4abffVirustotal results 25.42%Heodo
2020-09-16FILE_PO_09172020EX.docdoc 1ecaceaeb20649c823b3a63accf639925ba8e4c350b2509496c04dbd622d5d4eVirustotal results 25.86% Heodo
2020-09-16A_485718360543621975919381.docdoc b88f5009f8b75ec0a35f549fa777d05a819b0ca478eedb65a7b0a9fd01d51e30Virustotal results 25.86% Heodo
2020-09-16BAL_96925565183.docdoc b3f921be965718a9741b8f63d9b29dba0345f98cdfda7a0cabae90ffabc8043aVirustotal results 25.42% Heodo
2020-09-16BAL_PO_09172020EX.docdoc d1df096853342d0030f71b7be3c608ee35fd1c81bce971a45e00b001a7d85d3bVirustotal results 29.31%Heodo
2020-09-16YJWJ_06091939.docdoc ca5204766a181d5961896a0f4c506ed00718fad078c3a951d9343e52ad7f16d4Virustotal results 28.07%Heodo
2020-09-16PO_09172020EX.docdoc 6ba572ac222372c95a63401ec2b6710af0a9445d6c38efc7cf8397461ab1fd8eVirustotal results 27.12%Heodo
2020-09-16BAL_85029700977443289992722.docdoc ba46d0a65699ff5ec5670d31287ae8d04710450b5d267d9e4a2fdf0e94078194n/aHeodo
2020-09-16BAL_666366751167.docdoc 7a8024cf777ab45c5c969c5efff3dd4f289bc22baf1c91bd884fc2d29435c884Virustotal results 25.86%Heodo
2020-09-16Z_17963811.docdoc 53838205956eab8a004b3f1cd4ecb92e6cfc4eae4cb978b4dafd2a8560c5186cVirustotal results 25.42%Heodo
2020-09-1699105992390449547.docdoc fc4eb4fb15308d6878f61e096934ed77f56f5f25b48dc2f5f30f0f02cf23a0ecVirustotal results 26.32%Heodo
2020-09-16REP_SSD_090120_TOR_091620.docdoc c0418ebecc711ff38d29eb29f832c78c462b0c3f55201223702aac43a15f8e1dVirustotal results 25.42%Heodo
2020-09-16BAL_8KNQW1TFY1M8V7E.docdoc 66bd50b4b2f0524aff6b9f64fcad5a686d04778fc56eae470249da88f7c40077Virustotal results 25.42%Heodo
2020-09-16DOC_5R6UTA45PAWJLRR.docdoc fd4fb3464a7f787ee4d5b1795fe7b4d8ffde4a1683fc6620602fb78ba52f52a9Virustotal results 26.32% Heodo
2020-09-16SGX_090120_HYC_091620.docdoc c95b5dca5208b5d4dea488991b6cae5bc1d6e7686af278285ea7e77a3b71cd03n/aHeodo
2020-09-16JLU_090120_GYJ_091620.docdoc 7ad1bb86cc5ab4b2563548f2fc53faf9ed64e5216c895c9a425aea815a45b6b4Virustotal results 40.68% Heodo
2020-09-16JNO_090120_KOD_091620.docdoc 9ca5390e9af21757dc77575f56e9d0528c527843951ae719c3aedd2d8680ce7aVirustotal results 39.66% Heodo
2020-09-16REP_DWP_090120_DTG_091620.docdoc d4d482bd99e2f75b977c3fe22ee3df44c1e3758bd61f0636d31c1e35c2d38be6n/a Heodo
2020-09-16INV_VN6461358829TB.docdoc ee9569804153ec417f8b82cd1c788aa8cde65d63957effbc34400dd74730ede1Virustotal results 39.66% Heodo
2020-09-16PO_09162020EX.docdoc 9c5ec196eabe90d83815fe7015b5334c7fd6bbd350de085a69e022a0fc32ad8cVirustotal results 38.98% Heodo
2020-09-16BAL_TIJ_090120_JMI_091620.docdoc e9e98328d96157a0fd47c6abe8d1d60d8521171a61378aded651b274a0619993n/a Heodo
2020-09-16DOC_33842961.docdoc 4d88090314c39059da536bb37270cdf7ffadeeda4ea768b55dcb9f2b807586f4Virustotal results 38.98% Heodo
2020-09-16INV_LA1968356511QP.docdoc 76a07e0ab995c63aa5af42dab991800d1601b24a09db2609c8850b09911d022aVirustotal results 40.68%Heodo
2020-09-16DOC_02746352.docdoc b9a6ff1bdbfdc506e17b3e590738e75cae3ce59614c8a77074df2b1d2abc3801Virustotal results 40.35%Heodo
2020-09-16BD8510549517BA.docdoc 3cddfe22684c82c3eeeb0d3c0c8745719dcd417db42c4ea6774c9a10d1a88f3bVirustotal results 39.66%Heodo
2020-09-16BAL_2916DEXO.docdoc d84e8e3441cf862fa793eb241277718737789cb1e43d92be3b8510f8bdaeddc1Virustotal results 38.98%Heodo
2020-09-16P_88VARM2QZXXI2FZ0.docdoc 0745a0b546e98bc288370d0b4faace44a060f1abb905403e159b812b2d694a7fn/aHeodo
2020-09-16DOC_XK6925383879FI.docdoc a424bb668e3635e2ea396355dcc0b960f919760ab25aab75f0e36c95feb46c12Virustotal results 32.76%Heodo
2020-09-16DOC_DPV_090120_JCM_091620.docdoc c714262e7ca075c2816149ba0cf39cd465e11d7020a2675a228f4180df6163c8Virustotal results 31.58%Heodo
2020-09-16DOC_PO_09162020EX.docdoc 361d848b59beb5b40b7839f66735d926f31725d38136435f01499fb0e4a66463Virustotal results 32.20%Heodo
2020-09-16INV_95807967588.docdoc 724fcc39162e781ef870e6512016480ea6e96ef7e11c20a9b8cd25b1496636ebn/aHeodo
2020-09-16U_49654238.docdoc d568208ba08c7d30eea80ea82899d3af70f76cbfb55c2c0700fa48c40f5aaaa5Virustotal results 25.86%Heodo
2020-09-16FILE_JZW_090120_YPE_091620.docdoc 5e7e68c80382b2ce3e2a1020acb90d0fc82146e5ce430253a08c7d8c4520952cVirustotal results 26.32%Heodo
2020-09-16PO_09162020EX.docdoc 6ba958c1d5b047f3d205a8d70c0603727e7777113e1a94b4a6cd6da9a2981de1n/aHeodo
2020-09-168M7OVSUE1NVAG.docdoc 8df40fea0429dee60fdf8fa354db52ddf3cbe643cd5945d226b5eedca75bd659Virustotal results 25.86%Heodo
2020-09-16R_PO_09162020EX.docdoc 55caf48be5ac9c86baa0a943d9733131878d5b4316acdaeb3f9fc054a2e3bd38Virustotal results 25.42%Heodo
2020-09-1609723507.docdoc bd089de03b0081c4cbcc665d5baf0f6577a7a0c7c5b2b45da1131330ce26822bVirustotal results 25.86%Heodo
2020-09-16DOC_R3CLDMEETYRFOI7.docdoc 0e0913f7c913e70406fdc7b5e47f2455d7152c4e461770cc1b9bee581491fab9n/aHeodo
2020-09-16INV_PO_09162020EX.docdoc 4a42864618e8b860f0cc23b81a63cfeb95e60a000bac0acb3edd4294f8531329Virustotal results 20.34%Heodo
2020-09-16PO_09162020EX.docdoc 1e89a5f9dafcd1d66bcda4eb3a8e391448606ae28a808d4f723c1decc91292c4n/aHeodo
2020-09-16PO_09162020EX.docdoc 8398f9c5f37ef0558a84d839ee7058340351a71fe4cf26d2590652a5a66857f8Virustotal results 21.05%Heodo
2020-09-16PAN_090120_QPJ_091620.docdoc 8cb0c890547d5517a0d6a06caec30b9b2480920b6c23bc5129f3a2e991bf647bVirustotal results 20.34%Heodo
2020-09-16BAL_95241892.docdoc c81e73cde0ba06145f34071dd88dcaa6a7a0490d9096b1c3f78886fbf5063669Virustotal results 20.34%Heodo
2020-09-16OBFFHP94UBDPTN.docdoc 8b484c91782994539291e7b9d577270efdff9bd2f8c25bfcfb043e3edd0f1e7en/aHeodo
2020-09-16DOC_ZI4909206742HV.docdoc ba7b3a0a6b1d37bb71adbceb6c77e589b2645f816957e7a2555934d893ed8033Virustotal results 20.34%Heodo
2020-09-16KS4LNNSRVKUZL1.docdoc 733150afe58d633a7748c6b98f7f64f72685083f5b0535ee970260073452bc1dn/aHeodo
2020-09-16UUF_090120_KHV_091620.docdoc 6b2eab389a7a3b060a0531979a56b8ed93a525cadb8535243ca02b29d3fdb1aen/aHeodo
2020-09-16BAL_92487179463156204.docdoc 02be4df68e31c4b3e1357d80caa4f107b113888ff35908ef3d8c4eaa057731b5Virustotal results 20.69%Heodo
2020-09-16FZE_090120_FVX_091620.docdoc 3e62fb780c0ad60d1b4e8a1cf6e61782262a3376a1b6552c72c17df57d5375eeVirustotal results 20.34%Heodo
2020-09-16PO_09162020EX.docdoc dcfdf9a342db69a880c3acc43b01f2e3f04938ed129c9b3597ee7aad3377f25dVirustotal results 20.34%Heodo
2020-09-16REP_XKT_090120_QCC_091620.docdoc a6706614d0da8c58be5ac61af02a29dd4542a4fd130464ee3bec6b26be18416fVirustotal results 20.34%Heodo
2020-09-16INV_ST6433609912QO.docdoc 1bb4012e89aef09b80eda22d99a564f0d3e923f96cbf25dc4a78ff6de6dbb31fVirustotal results 33.90%Heodo
2020-09-16INV_00792047.docdoc aa77119b93a22eb88f6ca54e820ebcb3c8df83ce1fc35435eb00f52ff88c26b4Virustotal results 33.33%Heodo
2020-09-1678445769.docdoc 901353bf497a3403db274b0c2175a9e1dfc3a0f60720e0dabb97619da3cde741n/aHeodo
2020-09-16REP_LC9217323176UD.docdoc 0b1f822ec4210b6345a48fc8f51bfe50d3713137557385c9ea7116635bac1f6bn/aHeodo
2020-09-16REP_IUF9KH0P1D.docdoc 4925033a50cdf185c0bf7ca724be9b934b182fb4052da144b80a85f5f58bfef4Virustotal results 30.51%Heodo
2020-09-16O8C1B4BY36B8AKGA.docdoc 0baae239cc9292a22eac63fb292ef0261437ef05c3ae2f0b402dee533bc9fdd3n/aHeodo
2020-09-1669082261.docdoc b55bf8d95ff3a2bbad6b0601a57de2a479f99a33add787f61befe740dad11b66Virustotal results 31.58%Heodo
2020-09-16DOC_PRI_090120_GMD_091620.docdoc 62fd09a1ff4be50f0ef342f12c9551165d6f9743f510cadc096752e52e0b296eVirustotal results 33.90%Heodo
2020-09-16ZU4528654156NE.docdoc f612c549bdd3f599721c805169c70aa6e0b6f144a0a58a323f0d59d11f23b45cVirustotal results 24.14%Heodo
2020-09-16INV_28248845.docdoc f6aeaefccc4efba1167df73a2a3ba80a76c030c8278f7e8466c4d3dc7cf0084fVirustotal results 30.51%Heodo
2020-09-16DOC_C5W8HY5RDV6TJF.docdoc c5be1178786e06c4c3265db8da35fbe4f74a96000fe5eb06874abeb6b85fbd74Virustotal results 28.81%Heodo
2020-09-16PO_09162020EX.docdoc a643c8295a70cc3882662f7eac8da65ca398f824961fcd9a47454364138218e0Virustotal results 28.07%Heodo
2020-09-16DOC_GW0062687047JL.docdoc 1315727eb211a211a51d3c0766d9b4a340960aa2c917aaea173e6621858a2157Virustotal results 28.07%Heodo
2020-09-16FILE_PO_09162020EX.docdoc aff9c4fbadddf0c2b4c80320ddb1809027d157508adbf5e5f12d88db367c782fVirustotal results 24.14%Heodo
2020-09-16H_PO_09162020EX.docdoc 233f0708bd18c6dcfda50809ba5b1d71184f0743d6a9903de9d06dbb5fdcfdd3Virustotal results 25.86%Heodo
2020-09-16DOC_YE8344414653PX.docdoc c22a92c3f9f72a3ac154573621c47a61ea04bc8df6fbd72a14f55b0ac858f385Virustotal results 37.84%Heodo
2020-09-166796016623.docdoc c8c52e1ff627d998a9a7ab47afecc546bab7e768dddab4862fb9f2d0b25fc070Virustotal results 25.00%Heodo
2020-09-16DOC_FX9443618294HZ.docdoc 6783ef413f3dc640c8c9accbac37c09de5db05eee45604f5334cd90e7bbc109eVirustotal results 25.00%Heodo
2020-09-16FILE_68463948.docdoc d4c8ce2687fd07ab7c3991cab5500c05e719381d7906228371f0457d260ded94Virustotal results 25.42%Heodo
2020-09-16PO_09162020EX.docdoc 5b6ad999ba9c1fc2c8a7c9405f7e52131bde9eafabb19f737c031e3b6206d4b4Virustotal results 25.86%Heodo
2020-09-1606848789664048991.docdoc d4b79b30c6abd6633d513bd08d8b3b9b3de6f0705245b72b3e2ee09e0d03746fVirustotal results 25.86%Heodo
2020-09-16INV_FDC_090120_XGZ_091620.docdoc a4161a1c0ab452048658bdf4e30fe550fe9da9f47ea4525fdb2858949f42887eVirustotal results 32.76%Heodo
2020-09-15BAL_OUC_090120_EJD_091620.docdoc d2939ee7042da0a88a76cc4e60e5a8cfbc83e5b4fad03c547ffb13bb006a2c5fVirustotal results 24.14%Heodo
2020-09-15BAL_PO_09162020EX.docdoc aee8c2cd0f5858f9d9f402974a799cfa4ba52786593ce6681014c289e75f58c8Virustotal results 27.12%Heodo
2020-09-15IPLR_03550759140567.docdoc 48cf59d8b7c9372f65bd02e6ca168e0651fdbcc3b7330dd22b34a5df23c384f1n/aHeodo
2020-09-15FILE_KUM_090120_PII_091620.docdoc b408d1437535aab5eb52b147d59272e8056375f2e90e2ccef71c062980e36b2fVirustotal results 30.51%Heodo
2020-09-15G_M5TQYQUA.docdoc 52a5776503722d0ea87fa60009674bdd3ebbd4449ed9328bf502c7ec5c5ac516n/aHeodo
2020-09-15REP_PO_09162020EX.docdoc 350cf5c830bdf242f41ea336e2803b83af81ba91751cb13c418e5cff3674d95fVirustotal results 29.31%Heodo
2020-09-15PO_09162020EX.docdoc 6f04f539195c899715c54e7cc3db85949143180e021314c0e670e09722d2afacVirustotal results 24.14%Heodo
2020-09-1550401441.docdoc 722e0b21752c8eb64fbb26fcf4ef9ab58f89050b3b690fa97b068eae6a0b522fVirustotal results 25.86%Heodo
2020-09-15BAL_83804450.docdoc 9656f634b78c149e6a428cb521d7a9ae339fb27e467de4ab2d6131cc7673021aVirustotal results 25.42%Heodo