URLhaus Database

You are currently viewing the URLhaus database entry for http://npncl.gov.np/wp-content/docs/yiUcupFdv3UNtNi/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:619329
URL: http://npncl.gov.np/wp-content/docs/yiUcupFdv3UNtNi/
URL Status:Offline
Host: npncl.gov.np
Date added:2020-09-28 22:30:36 UTC
Last online:2020-10-03 22:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-28 22:32:03 UTC to ramesh{at}nitc[dot]gov[dot]np)
Takedown time:4 days, 23 hours, 43 minutes Bad (down since 2020-10-03 22:15:26 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-03Attachment_2020_09_30_004.docdoc e0258571e1d8611f96c3055b84dc22f8ec48cf8e4dcc0f777eb9fc30ae7074d5n/a Heodo
2020-10-01Attachment_2020_09_30_004.docdoc 63db1bc5c13bfb3affe44157723323f778d076a2808cab99a458889e3d800558n/a Heodo
2020-09-30Attachment_2020_09_30_004.docdoc de341112110dd20311c5dfdf3feea3f762ca8932bb184f5f761de1f253a7d8f5n/a 
2020-09-30Attachment_2020_09_30_004.docdoc b07454218dcb173160992f388674d654dbbd54eabbb7f2424014f2f837e1d009Virustotal results 24.59%Heodo
2020-09-302282350.docdoc 80f5d2e808b8c7de7bea25770b1eaf9399318da561276024a0208d1c72ece2faVirustotal results 24.19%Heodo
2020-09-30REP 20200930 I2893.docdoc 29cf37c04f72ed5d56812624874e7e603b09fc8211174cfca2f1b43682ca54a6Virustotal results 24.19%Heodo
2020-09-30Mes_2020_09_30_NCN031.docdoc 5f1b7ea2789bf23bdbd87c87daded72bb53aad07fc776bd6622709482c002b33Virustotal results 24.19%Heodo
2020-09-30Inf_U34868.docdoc f83ac83b76893b32fe71e9ce9fff80c0392ffae0ad66425140513c71a568885cn/aHeodo
2020-09-30arc_RRM2693.docdoc 98a129783214c4f848182d4ee393f9778ea81fad1808c5d1e589afa4738e38adVirustotal results 24.19%Heodo
2020-09-30Mes Y540171.docdoc 68dd7aa959c3372cabdf60a0289523cae756ae66539433b1d820a562c5ce028bn/a Heodo
2020-09-30arc-20200930-XB072.docdoc becbef4fe13176643c7678d6c33728a02fa46ee45a254b11f278e3916f61abcan/a Heodo
2020-09-30List_YT151.docdoc 474e98ac6c34b1dbed9d3d6f37a832b26f9d3184d0dae75de7c1c64a5dc0cf13n/a Heodo
2020-09-30INF-2020_09_30-XV576.docdoc a1d858afd3d6fdcc0099f4c5146e2accbb80343f2ce91aa738e3e2198be52275n/a Heodo
2020-09-30UNTITLED_2020_09_30_444310.docdoc 71fab1168e2801f8e3f7dfe611546315e8c59d421fb32c20cfeccc05a1f9adbbn/a Heodo
2020-09-30dat_2020_09_30_C7270.docdoc 9de1bdcf72ea8c8ce0193e92d5ff45078bddb01bae82850d95deecc9d4fe772an/a Heodo
2020-09-30doc-2020_09_30-UJ10215.docdoc d369ce3145ebcff9f0c8a26e73bc932142a4dac2dfac18a840976d66f8c427baVirustotal results 22.58%Heodo
2020-09-30Mes 57076.docdoc 160c9e3df75295770be2388dfcd4290f10148ab7a0af2f4836c3dccdca7d06een/a Heodo
2020-09-30MES_20200930_8070043.docdoc 6f919e7d5a1f3c267e48476548099a3c985df1ddbcc9b5f768ece404f2b1e509n/a Heodo
2020-09-30REP_20200930_61744.docdoc 378ef25417f8756e569ecc576b4433501b2527994d874e34e5d52bcc8aa706d6n/a Heodo
2020-09-30Arc-ZM487.docdoc 0c747e61b65648289d0afb345bb9bc1830d907c0e3c6fcf21782b3031f8fa058n/a 
2020-09-30FILE_QB682.docdoc d5498c163a2a991e582a995e8a9b67b6893917d4d75bd7a42754e332fa96ba54n/a 
2020-09-30list 14658.docdoc 95b08614e2362bf613d9f507e8c234c4df1ef631111b70ca5830373b54d5146an/a 
2020-09-30Doc_20200930_7212468.docdoc 7ea823530abaafd52baff5ff351beed5ab1caad04e3e7c4b4c7236b18459fc8en/a 
2020-09-30inf_G712459.docdoc 93a2ed7a78170e133dbdbd922f75c779845602ee85fd0af76b5550640ec8accdn/aHeodo
2020-09-30FILE_20200930_604.docdoc fd826f7ad1f1e372efdc57065d0bb9c4c29931529a7ec64c0cdc3fce95a4b547n/aHeodo
2020-09-30dat-20200930-0357796.docdoc ce1d7fe9a715dbd5b408b17ff12010a67d3d1d002a9484370931304e35254f12Virustotal results 22.95%Heodo
2020-09-30Attachment_D464.docdoc 5bf5490d9daa5f884b6597377c8d3f4200a86f12a88c613b3b633681f3998191n/aHeodo
2020-09-30429UES_FW931006.docdoc fce9dd88327154889e459164ac4d29d0063315340b5ffd9690868ad5e46c352fn/aHeodo
2020-09-30list_2020_09_30_1474615.docdoc 7517322994d207e75f7e760a7797f433ed016d4d39d3b2cc257e6b05d158c0b8n/aHeodo
2020-09-30List_2020_09_30_29627.docdoc ea0313fd5620c355be450cf83271f033601347eed4e661eddef0fbf152e5808an/aHeodo
2020-09-30Attachment_2020_09_30_04538.docdoc 9849bf91ef029b6a492bd6c1b39b888e264d7b14a1574d64502706cc65d51576Virustotal results 22.58%Heodo
2020-09-30UNTITLED-2020_09_30-QS1399.docdoc a0105d00c8554ccf45329bf8b6f502eb63dd0e844edfcde8e2bd0c6000c9e708n/aHeodo
2020-09-30Rep_G7137.docdoc 85457cce94346f14602525c4c114a035aeff9de80b2d25f2cd7aee042c5477caVirustotal results 20.97%Heodo
2020-09-30rep-2020_09_30.docdoc a3f7b976b0c108284bf0de59187798f84d509ad7182c92761cedbb9b35ba4a3dn/aHeodo
2020-09-30Inf 20200930 610204.docdoc ac02dd4f0106b2f7e7b97558983f04377892dd24af1c4babd3cb13a1ba81d7e8Virustotal results 20.97%Heodo
2020-09-30P80320_20200930.docdoc 8eb186e54929e922a6eee808ae49e03dd5a7ef9fbda95a0009ebd8f36523161dVirustotal results 20.97% Heodo
2020-09-30ARC 20200930 637315.docdoc e4c0e12e6e90cabe22fab698bc2684a13e9719668942b682bfaa1ea0bd3336a4Virustotal results 20.97%Heodo
2020-09-30Mes.docdoc 808c6ae51954138cd66d932582c8a07be3a18e18ee39218e413b49f6dc397534n/a Heodo
2020-09-30DAT-4966086.docdoc 3ed8c21a942079b90600e18a7d3da33febf89f04279e96e7797e397386cd1d9an/a Heodo
2020-09-30Attachments_2020_09_30_169.docdoc 07e2ead9e2a81067494e7f54de2373bd9754e88892afbfd2f133b44675136707n/a Heodo
2020-09-3087157373_2083.docdoc 2ec8882e6d13a39151bc6ed8d6b6f595dc82ef0802682a4d38f6e2e3f2e13769n/a Heodo
2020-09-30mes-3617.docdoc 729cf5e2c76dc33504c8d7f3e7d41bf7c059c0f235954ed8ad1869aaeee08333n/a Heodo
2020-09-30MES 2020_09_30.docdoc 03ccdef0373b330f7b53ee344be6ccf4126ec193d925e8e5f723e3bc3995f0c0n/a Heodo
2020-09-30Mes_2020_09_30_223.docdoc 777ed51762cdf7c9ed20931beb449b4f0bd14d2cb318d3f8bb8e5efa49925fb8n/a Heodo
2020-09-30DAT-R189752.docdoc 8617f44af48070e4b968b0f30c97ec7131b5222e397e5ac73baf4f2d9e6266een/a Heodo
2020-09-30INF-20200930-KZB250593.docdoc a9cce48d79bdd292953e2a5f9e9be38a017b2be62e95757cee933c624448b528n/a Heodo
2020-09-30FS90047_1064360.docdoc 643a118d94807a21df75a7aede93130326ac04ce84a10d9fa67b1f5f87d3467aVirustotal results 39.34%Heodo
2020-09-30rep 2020_09_30 527.docdoc bff3cbff5d9288bd163a48b49e1c60ed5beafcec670b0e5b76ae3f7970c9758cn/a Heodo
2020-09-30rep_20200930_426.docdoc 06dba2c6983d5da073b2f1c4a51305ffc042c1e5cd384cd1e29072c3662b173bn/a Heodo
2020-09-30Inf_20200930_45272.docdoc f906d70efeb5209fa8fee7a01ab31750170f9905b2c644fa51d95ae055340e14n/a Heodo
2020-09-30Arc-FZN1621.docdoc 329d9911d2004877126f938ba6875d9f348d33b31e1ccd880a2a62adb461d1a9Virustotal results 32.26%Heodo
2020-09-3064997-2020_09_30-3351.docdoc 92bd3dc9d86b512073c13b556d95c4748f909dbead47a8e9a3aa3f7bb427e83en/a Heodo
2020-09-30arc UB816.docdoc b3209c6972bdb3ddba9f14b30f6a49d2ee49d09003fca07ae1f28646011f0a0bn/aHeodo
2020-09-30216590-2020_09_30-IU38823.docdoc 6d2c4dec8469a132bd730d884c35dfc082efba02dfddfd701d74a9227fd80f63n/a Heodo
2020-09-30rep 20200930 HS580441.docdoc 92a86653fdf97d82dae3347e7f9b8c8f4b61dd89a3ff9b091b9b0db125a5c7bfn/a Heodo
2020-09-30Attachment_20200930_200.docdoc 02c3c1d0653a24c203ad1bcef154e65e155db910100619634569eed5982b5d26n/aHeodo
2020-09-29Mes-2020_09_30.docdoc 062aea8b9d819fd8ca4c2e152ebf86c16f46dd2d581330f6cbd51835ce4a5c1en/a Heodo
2020-09-29mes 20200930 HN62045.docdoc 1d742e585ed7b4c237726a945da11795c46da01716e9da561d98fff100ee938fVirustotal results 31.15%Heodo
2020-09-29arc-2020_09_30-M82652.docdoc 2ce2a7979c53158a0e7454224e6755704290a5a16a092aec69088da9eb3571a3Virustotal results 29.03%Heodo
2020-09-2935661DGG_2020_09_30.docdoc e7d3de1844977926a2db718f9070a7a0e3558b8a8b50961f39271e286a423963Virustotal results 19.35% Heodo
2020-09-29UNTITLED-20200930-RW361.docdoc 32a76ed8013dd82d6e6063013236d7fb37bb205dbd6ff84ab785e5af12e6b3f0Virustotal results 19.35% Heodo
2020-09-29LIST 20200930 728.docdoc 7648018b8c4adbf35857437140f242c6924a3758cbaa9dd55b12d852c04c8859Virustotal results 19.67%Heodo
2020-09-2978645933_2020_09_30_GU017339.docdoc c0cae413ab00c9e45d756cd575f3e0f0e54dd6c352907f481966f8b33bd016cfn/a 
2020-09-29ARC 20200930.docdoc 1ab513ef8643ef1f9d7344b9576d759daf9063fa5501a182bc55c02b65d212a0n/a 
2020-09-29Attachments_INR432224.docdoc 291c686d6c932c46d3262457d9e3c45028c6363d201cb79afb0b21e15c342899n/a 
2020-09-29FILE_2020_09_29_6504.docdoc 6e9937e0de64e6e6709dd288b93c891a5961b7cbe07418d82e19983e4d4eff95n/a 
2020-09-29doc 20200929 ZG453.docdoc 97e2317aa548df7365789722e63b61311f03889a4a959cda80e0d10550bdd9cen/a 
2020-09-29rep-20200929-PN336.docdoc 66e0d59d4c4e46b4e5589d41dbb45277b6dd25aba1efb68deada81d72a492aebn/aHeodo
2020-09-29DAT_MJB96275.docdoc 140254a1f60e331ddaaa70ddd79ef03759dd73aa778c4e098be6ee6d8513c08an/aHeodo
2020-09-29Rep_20200929_WQ513.docdoc 685e3e4ea0851f195ade4ba3673387a5c69eb1633d3daae4666e5aad9dabaf7eVirustotal results 19.35%Heodo
2020-09-29rep.docdoc 885cb015e8924282f5028218981fc2fa18f0632d756276439b9da9a64a36db29Virustotal results 17.74%Heodo
2020-09-29Attachment-2020_09_29-RF292086.docdoc 44676aa73329636e8617421e00eb5aa1a6049e763ba4fd02dc03df647d4486bbn/aHeodo
2020-09-29863-20200929-2444.docdoc 275a46a9c86fcb536d7dee38a273fadc27066204b68ef852423568f9f925ae81Virustotal results 18.03% Heodo
2020-09-29LIST_MQ3493.docdoc 9c63be4876df25d70bf6db105dbf74f1a3a048a3f70c876e669f397f69fadf75n/a 
2020-09-29MES_20200929.docdoc a084ac95ff739e6bc8d1f357cfee604b374e8f518ac04518054f3299482cf1d2n/a 
2020-09-29UNTITLED 2020_09_29 4108011.docdoc 7e53075b1f2f56c42c52ff823d6b2a0d862138f5dfbb2ecb30bd3e9c4e4b5d05n/a 
2020-09-29Attachments_2020_09_29.docdoc fac0d40dcdd4139d1d7cba16a7b9dbb483b748cc86cb88500fd84ce78a0d44d1n/a 
2020-09-29Arc_2020_09_29_1421.docdoc 184b11461d8fc802dbd0d1c79b7055703157e91031fc1d341bec62d3a705624cn/a 
2020-09-29MES-PQW0274.docdoc 3faf67ca8c320091dbcdb1e3621080a1cdf6e0c58cf46a673c1f5cda8da8d4cfn/a Heodo
2020-09-29arc-20200929-V439.docdoc 5503a80a75505f55e0d12c4ab3fc1f6dc4060b253beef169c36b2abe78d440efn/a 
2020-09-29File-20200929-786.docdoc c757273539a5d1d309e2915dfb6c4b3284eb00103ea2db914ab86865937216can/a 
2020-09-29RP3048_20200929_5684271.docdoc af7c73e34b40cd0fb54d465470a93b8970b711a2793f3341f48aaf5e3abb8611n/aHeodo
2020-09-29MES-2020_09_29-XUV86530.docdoc acad2ac78e852dc0d92e4c6b0391b0b5b943d4f53e6e18f9cb3ec4217b92ab64n/a 
2020-09-29Attachment-2020_09_29-781.docdoc 5bbf9036cb65f737e16247a2b8d11056651df9bf272db624bda0766accf28bccn/a 
2020-09-29Dat 20200929 FW16593.docdoc 66bf348e1132fecc6d71e70f931f10bc3525c9c9705b152e16203c24d036e25bn/aHeodo
2020-09-29File_20200929.docdoc 90bbebfb3f41606e87b0e49c89747c7ca24e3ebbddd545016b8c9507390467d0n/aHeodo
2020-09-29Untitled 029232.docdoc aef1553160a730913e114ff63310a0511bb11b89cc95e591abbe55dfc55f5098n/aHeodo
2020-09-29file_2020_09_29.docdoc 2184b04d9d840af86cf5ca1ce1456ee071aa92eb2fe601363e6340eedcbbcc79n/aHeodo
2020-09-29Arc-RD6778.docdoc e0058745c1cd85f4d628a90a9aa61a222d863b27bee2393c8228ec6a1e4a533cn/aHeodo
2020-09-29Rep 2020_09_29 90826.docdoc ccada8de538c78ee378b802f0f2593cc6db80c62d9f03559e4ccaeccc3c67a4dn/a 
2020-09-29Arc-QNV7564.docdoc e7a32c2fd03290f993bc25c0201a1fb1da73447fb789cbd1efeaf6522e7c8562n/a 
2020-09-29List.docdoc 0bcfacab64f601267d906d1647e2ccddb4c6e73d409369cfe084e0de6c27a784n/aHeodo
2020-09-29Arc 2020_09_29 MHD3094.docdoc 8f3f64a249482b0a6dd6361950555bb3bee2b9be6a613991d66eb5e221573bban/aHeodo
2020-09-29doc_20200929_2332.docdoc b13c4bdf87762781f0e22b667bdc49e9093b43c91efd43276efc13d6eb0453ban/a 
2020-09-29Untitled 20200929 050883.docdoc f6fe6c86f0147278430a9d09854970da3785b0637adfbe4c96bf78785de64c5bn/a 
2020-09-29List 6793.docdoc 5127839a49b01453a0160b61ebf6d658a150fbbcbfcc0355d21626696a1fe26bn/a 
2020-09-29file-PFY000095.docdoc 0fecfde61b7f7f3534c0bc1768d898beeef96c53f2ff2aea67835319b4c5fe91n/aHeodo
2020-09-29rep-2020_09_29-3978458.docdoc 2736746136aa008810964784664c237c4f9a466da0f8738149b0dd8a5658d293n/aHeodo
2020-09-29Arc_833244.docdoc 4d091ba4a73f59285de8614c58ec636232663ec3cbefe997d048e7665cbee478Virustotal results 24.19%Heodo
2020-09-29Arc_2020_09_29_984.docdoc f3b23a085e2e3f5af161d9327d5bb8700a864d1b97fa267ce4756e91d9e61533n/a 
2020-09-29Inf-9394843.docdoc 04294cc35bb4b9e53c2a9ea52df413f050d90dcaf88bcc81d469f3d2457bd64dn/aHeodo
2020-09-29inf-375616.docdoc c55d038ff7a51d4af92262c4d4c1cbc26f9a665407845e87f6602616035a1e2dn/aHeodo
2020-09-29rep_2020_09_29_UQ909359.docdoc eafccb99b1d640491547d4449feb5cec8d14374e9d8cc833f6152cd684b3f5e7Virustotal results 24.59%Heodo
2020-09-29LIST 2020_09_29 LU181.docdoc 2f55dc605b861cc034fbd6aece9b487a969e5b98b6128e4d80728a377ff8eea8Virustotal results 24.19%Heodo
2020-09-292641-2020_09_29-TAD14227.docdoc 63a579750829b23e29d7af140f466d2120b814721f7071d50652242ed7c41dddVirustotal results 24.59%Heodo
2020-09-299326944 20200929 UO547932.docdoc 950e1826d1acdd8daba1b68f52bcae990b7df66b1fa6ad09e9ce8e65a83e84bfn/aHeodo
2020-09-29INF-20200929-668433.docdoc ed9cef79f5dceb4cae1a46854e3724794bb5d809266cd39d048a6edad7aa90a3n/aHeodo
2020-09-29LIST_20200929_57389.docdoc 831c896b4d6b4ad14823c8d4b0aba608b79c4198ae79804ef5843c2915dd6881Virustotal results 40.32%Heodo
2020-09-29Arc 20200929 D779.docdoc b931610dea9b316791c9c7635aecf47fb73bd717556802c87afaf7b24f8f4ebdn/a Heodo
2020-09-29Mes-2020_09_29-455.docdoc d322f39db21a4e77c922661189e3d1fe4f132910d885552141f52c7fb071de04n/a Heodo
2020-09-29Attachments-20200929-335171.docdoc 04750784026628f3c1386d09c4391369c1593ac59f2beb5ba47950ea43fa2f89n/a Heodo
2020-09-29Dat-1247.docdoc c5c227b4edfba0030c87f21e99bd03d4f8c7ca1a6e8f1ea3b2926fbfb649552an/a Heodo
2020-09-29Attachment-KB7779.docdoc 3184b735586ea6892d4f5c4bec6449588ec3fff93ed18217821c8421de495a5bn/a Heodo
2020-09-29FILE_2020_09_29_16524.docdoc a721713b9b8dbf3f7afde4ecda5e2161a48cf67c5277c3836c0df121ca2d6b18n/aHeodo
2020-09-29Inf-2020_09_29-LOQ709.docdoc 9454416c917b10ab17bc2b8a747f5998bbc724b3fcab70cb59d8771bb94e9b49n/a Heodo
2020-09-29Attachments-20200929-M1990.docdoc ccacaaf0620f1e30eb2b1f14b38c9f54537d06b30226c5c6a743d6f2eeb854c8n/a Heodo
2020-09-29inf_RO669.docdoc 0028d5cab5558cff8e7be74cc0522d68dff4b695f5bf9e8067f2b5c61b0c05e8Virustotal results 40.32%Heodo
2020-09-29List 2020_09_29 232012.docdoc 35056c858275b8464dbfea1f6e3fe4455846537e5f7a4da8a14d0a6282aa30b3n/a Heodo
2020-09-29Attachments-F6055.docdoc 5ada01b25da79a9dad1daa245405cc02ac85dc3a8df97f2ec8adfca8bd01746an/a Heodo
2020-09-29file 20200929 ZRC711999.docdoc 658bf819d7e6b0baafd4e46ba41a1984adea5dfe3e73194e110623c819efb8dfVirustotal results 38.71%Heodo
2020-09-29Arc-2020_09_29-FE862.docdoc 837af9f23762c0d57b9940c065668be9040e3582dc9c688b99f018978821028fn/a Heodo
2020-09-29ARC-2020_09_29-1352.docdoc 4734288e85d6c3e9300ac2c1cbe27e866f93b509befa8f0aeb012fc5de0acaa0n/aHeodo
2020-09-29rep_2020_09_29_CR392761.docdoc 246477a658fa6ecb8e5a5a6509eb87dc115c85a3cd1d465a8667f2cd468aa4e9n/aHeodo
2020-09-29089KPA_20200929_PSO505591.docdoc 76625b162b7830d0e881fcc218b3a1a5e02876825b671ae1ea5234fa2c9863f8n/aHeodo
2020-09-29arc_2020_09_29_LKD5776.docdoc 6a4f1212417249a2a041859ef4fcb7c2968111ee6273aaf0fa840e06c7905b52n/aHeodo
2020-09-29FILE 2020_09_29 VUI99303.docdoc c8cdd6e19e00555ded7e47472333ec77ee1b790bb8de49d5db296688ad94470an/a Heodo
2020-09-295019APA-2020_09_29-I84811.docdoc afa3c59ecd5a7ea34b729710fb369a12eac463e7538b0fc2a72d5d10f9428b5an/aHeodo
2020-09-29Dat 2020_09_29 SO6031.docdoc c1c18b2f5ec553a9a17923d3d5ff180d6bc8c26f9a1057410e044e5ee9a09af6n/a Heodo
2020-09-29MES 2020_09_29 2648.docdoc a6dce2f62aa3f756e9c553b8a90aa762858a689da483bfcbbac5dd34ea3e57a2n/aHeodo
2020-09-29REP-2020_09_29-CV215.docdoc 1b53ec96804f9162f26fda489636a7182bee45f8cccd5a478dd92340525e7eb0n/a Heodo
2020-09-28list-QYL436.docdoc 29fbaf866f479c861b0412a5815f90424cfb7771fadf140b7c06dc462fff8244n/a Heodo
2020-09-28Dat 20200929 IWD027326.docdoc 87db481003cf7afd6d3cda5e4f25cec1329d666c4238e33a8dcaa986267b1d97Virustotal results 27.42%Heodo
2020-09-28Doc_20200929_NDX683499.docdoc 8e516b7c4991161613529ed82d29690b011ae4eba3b41913d917b111215409c8Virustotal results 27.42%Heodo
2020-09-28arc 2020_09_29 0878846.docdoc 9fcd248c2fa42d29896ea9274c9b7f05eb7a278c36aeb3aa1ab0edb3ad4bcc37n/aHeodo
2020-09-28Inf_20200929_750348.docdoc 25ba07757eed7d8e7d07336a49141f5ee33fa19b03abf8e4dffdc67175f64b7bVirustotal results 25.81%Heodo
2020-09-28dat-2020_09_29-YW354.docdoc 8df8a4b88125843ae13a6b917a6c254148014f2c7c147a37105bc940fd8f91efn/a