URLhaus Database

You are currently viewing the URLhaus database entry for http://ezisync.com/home/wp-content/esp/uG1EJHr01MHO/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:625269
URL: http://ezisync.com/home/wp-content/esp/uG1EJHr01MHO/
URL Status:Offline
Host: ezisync.com
Date added:2020-09-29 22:18:06 UTC
Last online:2020-10-06 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-29 22:20:40 UTC to google-cloud-compliance{at}google[dot]com)
Takedown time:6 days, 16 hours, 54 minutes Bad (down since 2020-10-06 15:15:19 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-01Untitled 79434.docdoc f685aa8cf1ff2ed10ad6a26aedef21430e2e232ba17e79dc31c4ab50655279c9n/aHeodo
2020-10-01arc-2020_10_01-7040.docdoc a781877d21e10d3d41927fa45111c52a960125350e3113661f2a35d4d0c03a05n/aHeodo
2020-10-01DAT-2020_10_01.docdoc a7292a6521eaab6444c49f8413d95107f58a42a97f65b9422ce799e14c593046n/aHeodo
2020-10-01471428 20201001 CJ23941.docdoc 84dfd6f333e5d662e14f69dac5adab6bd6eb7f272c4a4cb48609c3a16061a1bbn/aHeodo
2020-10-01Dat_499.docdoc d199ffc644282ddce1abe32fe185f18f4ab42f281a15f99ee3009741007e1ec4n/aHeodo
2020-10-01mes 8377390.docdoc e0f75fd1da01c160ddd7d2e17d64c51d2d04ea2979f26e35f7e7c7493a7b08cfVirustotal results 30.00%Heodo
2020-10-01DAT-20201001-SQU396709.docdoc dc39971b11bac88ccead0c170436a904cd1b00c5b49dbb629aa5c7f81f1a3edan/aHeodo
2020-10-01Inf-318.docdoc 52a9bd05cde43182553fb872699d2595d0a84299ffe4b707c3e1cc25844c8102n/aHeodo
2020-10-0109909-20201001-3992.docdoc f500682624f2e7ca6a407eee8ea4d347097c36bc08e8717a8cf6496152f9a627Virustotal results 35.48%Heodo
2020-10-01dat_2020_10_01_OFF4598.docdoc 033fa28cdbf40b41870947400cf8607c9cde669b8fcf25abe947f276b062205cVirustotal results 37.10%Heodo
2020-10-01FILE_2020_10_01_66775.docdoc dc08afe4ed308f6184aa8d80fd1fb44a00cb3c46c7f3b4a49702845b145d3fc0Virustotal results 37.10%Heodo
2020-10-01File_2020_10_01.docdoc 14086c7d40516a5e11471a163fc4c4d594adfd1c5965e0ae0ea7ddcd013252e1n/aHeodo
2020-10-01LIST_20201001_087.docdoc d09def23b85e52761ab948f8a0a73e9d2f43f1a06c27f35973dcedbc87954564n/aHeodo
2020-10-01doc_2020_10_01_3281777.docdoc 777127cbba49b66a0abc912156156af484a0903a78b298981ed5e34b107cc08cn/aHeodo
2020-10-01Inf 6721382.docdoc 3752d44a336a1308bc775061d23d850cf0df14c0b3a126258d83dcac71d482b5n/aHeodo
2020-10-01REP SWT31755.docdoc 4b931434cdbde8e532c7a09e37b78dd2166f37a0fecbabaecdd38a2217049341Virustotal results 37.70%Heodo
2020-10-01rep 20201001.docdoc c37536624e100c6928618bde49c7c002a4795fe400199b57806f7e5a6bfb1c4en/aHeodo
2020-10-01File-20201001-WUM6562.docdoc 86dbb41d6058264e118fb00ad05407dbef472020460a4c9f0de0ada45e794935Virustotal results 37.10%Heodo
2020-10-01list 2020_10_01 QYB362493.docdoc 2316491908b1b0175a9782d21fef85f16d29b5dd05d72c00c8dc943ee110afb4Virustotal results 35.48%Heodo
2020-10-01rep 20201001 639.docdoc 180e17d6d6ede320ae7e947ea1e473ebdb11480a9200cb3bdeb8d38a15e5e4b3Virustotal results 35.48%Heodo
2020-10-01file 20201001 959.docdoc 34bce035f84a22c00827f1722c2caaedd1f3d7ea059b4a4a695e8867874de5b9Virustotal results 35.48%Heodo
2020-10-01rep_20201001_GD963218.docdoc bc473e3c095e5c8fc312b29ee596cfb5c7f89bd4795e09377e0a3258761b3c25n/aHeodo
2020-10-01mes 20201001 030.docdoc d382a8d884d288f590e7382d6f5a50924269e1098dbeff15c664104aece75ddeVirustotal results 29.03%Heodo
2020-10-01rep-20201001-2981.docdoc 2236eced769acbff98e98c0f0f46643a46d2411d661697211da7a01b9ed7eb2cn/aHeodo
2020-10-01doc-2020_10_01-201707.docdoc 5ad115d91c8d255bfc8162408ec267d672db69e95bb393c54e0055136e7fc148Virustotal results 27.42%Heodo
2020-10-01INF 20201001 UJ98438.docdoc f599f04651361e4298bea8b9c219e4588d021a8cbf00802660a69c92584446d8Virustotal results 26.67%Heodo
2020-10-01file-766398.docdoc 750f3ddf6c6bd8e7cf26c3d8103a0dd26becbf4a754fbd78bcb33a8bd165741fn/aHeodo
2020-10-01WC27700.docdoc 1a4225aa9c57fb8c97a5859dc3d004a323c5a31ad17def4ea965f4ed6fb8dd88Virustotal results 26.67%Heodo
2020-09-30Attachments_20201001.docdoc f7454110fc14b94a8de1a15f118873db33d5dff0040b860e7a74775a986c8196n/aHeodo
2020-09-30Rep-2020_10_01-679.docdoc 4eb0f14ad3f635965ea0fafdae6c9212c194249521cfb39bab99ca8a69751473n/aHeodo
2020-09-30doc 20201001 HCL624.docdoc 24a4f7d8cf601311928b7d9c78fd6067e4b6e6a47c641fbdc86703b0dd3f1ee7Virustotal results 27.42%Heodo
2020-09-30list_20201001_R924.docdoc 4775719b443e192325610b1eb79d188314e42c2dbdd27c3d2aaee14a082a5176Virustotal results 25.81%Heodo
2020-09-30Mes-20201001-PPN6895.docdoc 59218dd633aa6e55d901c1a8227ace241e21d80c34af6fbd4dd99400832ef122Virustotal results 25.81%Heodo
2020-09-30doc KTR8989.docdoc fec01c1bae4abd3f9440381c855227b0f1482882e766d147e42f80cd257cab3aVirustotal results 25.81%Heodo
2020-09-30rep-2020_10_01.docdoc 19b1eea04af9072b8f9b94aa2c85b3160cbd12770bd5d169655b334141d8ef3cn/aHeodo
2020-09-304652F_20200930_X4735.docdoc ff3315b87d2b2765a5e026ae9583280025aedf196ffd9d83606cfc049d9cc800n/aHeodo
2020-09-30YKY01853-20200930-O35101.docdoc 8f46d02ff9a3f6dd9767435624c92ff8aeb0c17d1cf0f65564c9a9b52ce5cf2cVirustotal results 22.58%Heodo
2020-09-30list.docdoc 425549332fdfd6f0e65c959673d9ccd5e6a8be2a83d6ac67a63a147bca27837cVirustotal results 24.19%Heodo
2020-09-30Mes_2020_09_30_805.docdoc 9e2da6097114ea5381a7a596fa3ec710047368b9d81a72b1685682c20766a748Virustotal results 24.59%Heodo
2020-09-30DAT_20200930_769.docdoc 5f1b7ea2789bf23bdbd87c87daded72bb53aad07fc776bd6622709482c002b33n/aHeodo
2020-09-30REP-20200930-N276392.docdoc 2d9e75292b55b3da07fd07a437ba2963d5e46d7f2610cf07eb6c16fe9795bd99Virustotal results 24.59%Heodo
2020-09-30LIST 2020_09_30 PD741.docdoc 2f161d1a3025c5e9ef5eec5cebb8c9c24e3753826e7674a8e61de0ece779a54fn/aHeodo
2020-09-30doc-2020_09_30-KJ2042.docdoc f8a0032c67b67834e10cbad2375a77947b460a0e6f59115dfdd850fef6dfd0beVirustotal results 24.19%Heodo
2020-09-30LIST_20200930.docdoc 31942ada0dac9b812b7eda1449490454af6c5ee7e421ee11d7c4c9ca467967b6n/aHeodo
2020-09-3012081818_VRS30905.docdoc d8001dcb320e9cea74bbfed4d771877abb643b6b5bf9c2718e2ca6dc92fc36e8Virustotal results 22.95%Heodo
2020-09-30List_2020_09_30_395.docdoc 04915e9435d0c968b84a0de13b3b3d29e0dbfd252c36163903be138ef94a7b26n/aHeodo
2020-09-30ARC_191942.docdoc c69355e7d2f37fb8a04b2808e24c6abe076f296b1063e2fa5eadb435d4105da3Virustotal results 22.58%Heodo
2020-09-3089349737-0743.docdoc 2888b551e17e7d62e62ca0cec57591c6d9e40b39c0db60b31ba14b2e39fd86e0Virustotal results 22.58%Heodo
2020-09-30Inf_20200930_07693.docdoc 7f8d213072a938b3dec61b257ef1f7e16e73b1404964364f3c2bd1f7fb24a8f9n/aHeodo
2020-09-30doc_2020_09_30_QX395592.docdoc 9ac40a72e7924e44c504e25d64e72256f0b7003d884c6dd0e77eacdca2cc10a1n/aHeodo
2020-09-30Attachment-2020_09_30-932.docdoc 4038d38d4c957482462c94556199ce2c3724320b291a7141716e0ca752915298n/aHeodo
2020-09-30file 931606.docdoc d8e405782c4f5b141b6031715d78b4d56a4b64b6f8f61f6de6af59c7cac4e96cVirustotal results 21.31%Heodo
2020-09-30Rep 20200930 NW946.docdoc 81938069c13e85f030801520a48447b0048460b290398887bb5bcb308c39d139n/aHeodo
2020-09-30REP_20200930_64894.docdoc 4ebff15117e2aee0ae124e202b18a7ea9fbcd113a26f227177306daf71103ea1Virustotal results 24.59%Heodo
2020-09-30MES 2020_09_30.docdoc 85247823ff78f679302c4390b3fa30ff8fb4f6ed53ea662d3caec79013219200n/aHeodo
2020-09-30inf 2020_09_30 275.docdoc 93a2ed7a78170e133dbdbd922f75c779845602ee85fd0af76b5550640ec8accdn/aHeodo
2020-09-30File-2020_09_30-47565.docdoc 7b8afaa8ced8e3b84f65f7067ef8db774d5c9278d4b96f18b35e2064a60f5974n/aHeodo
2020-09-30UNTITLED-20200930-412.docdoc be1d469e7f434641202ffde45e666cd4b1d255814f8cbf344a3aff1e78e86768Virustotal results 23.33%Heodo
2020-09-30Untitled 20200930 Q681.docdoc f5de87215c12489f4834be4a1b71fda51d010a845429e71980e6024e221b86ben/aHeodo
2020-09-30file 04193.docdoc 1c19fac3068aaf8a893e43175cf7304a5dc037ad05a31eaec72df3b1f9de9905n/aHeodo
2020-09-30Dat_BR027.docdoc 0dc8b5cefd0791007bbc51f60516c87fd6d938fe4d44c7f7249e47f38cc3c73an/aHeodo
2020-09-30LIST-5921.docdoc a8a91cff68ca5fc9c63a5b96d4182d936a2729ba52949c006bd3ff2973b4f7d8n/aHeodo
2020-09-30FILE-2020_09_30-G390.docdoc 5dc39fed6361864ebfcfe504125bbc05e085ad4f1fb6c92a3367bcad83b695cbn/aHeodo
2020-09-30mes 20200930 298.docdoc d2bb090ca35305b0fad24fda5d80294d4d4213ac4dd4c733e8df0f8550810b1bn/aHeodo
2020-09-30List 20200930.docdoc a0105d00c8554ccf45329bf8b6f502eb63dd0e844edfcde8e2bd0c6000c9e708n/aHeodo
2020-09-30Mes 20200930 176532.docdoc 25b7f727f0f1e44dc0b90a12f28264418053fc308ea16c0050ae887a1db7d5abn/aHeodo
2020-09-30515881-OCP147352.docdoc c2edb2ad04c0e8b248b53ba0f3cc0abd7942c1ff70d3f3b697af056d6dda904fn/aHeodo
2020-09-30Inf 2020_09_30 68728.docdoc 05674b023509b9764ea5b6a44beb92fc22f3e2c6ec3f1e8e96723fb0cf522056n/aHeodo
2020-09-30mes-20200930.docdoc e750318c6f5ae04efc1b912fd250a9bdf7c83ce3289a31f303d03bc0e9e4b11cn/aHeodo
2020-09-30ARC 20200930 614.docdoc bc1a1a8828821a74c104c0e49dc6a8456e2d89c4f2af71491ea5136f93460561Virustotal results 20.97%Heodo
2020-09-30INF-20200930-0247.docdoc aeb2040f463a73944b82179ca8dd49ea3531d9b21d9d7b837b38d6817a9bfa7eVirustotal results 20.97%Heodo
2020-09-30File-20200930-2601409.docdoc 4b795f3870e608b6c61e4a7757d87deb5525949aadeb15393e2b83cb4b34e618n/aHeodo
2020-09-30arc.docdoc 45fe2fda54ec2b495e927d8205639f79fc95f1de2c7325a84a6651092c11733bVirustotal results 47.54%Heodo
2020-09-30752495-20200930-LG033794.docdoc fe7a953a524746ec38ded3f4aa02efd66cb67e9223f9e01150cdbb36101696d8Virustotal results 45.16%Heodo
2020-09-30Attachments_20200930_13792.docdoc 869911e995bc11a3a2e87a02de6611b59d26ddd5b21c6c77e72f327620f526c2Virustotal results 45.16%Heodo
2020-09-30DAT.docdoc b91cb11be0bd9f80cec08a069751a27ef60de586e87e2ba9f8d2a4dc266f879fn/aHeodo
2020-09-30Attachments-WWR6207.docdoc 6f99b89e5bfde428715216d919a8e1dd87475900137dfbb2e07c5ba58bbb2954Virustotal results 45.16%Heodo
2020-09-30mes-979.docdoc 6dcb7e9d3ef574e032cf8d4f7da8e1ddefaea58991677a7e53be13723839e09dn/aHeodo
2020-09-30ARC 8889.docdoc 26979e8912dc25e20f622985b767028de865e5719a3a559353389878b9fa0b64Virustotal results 45.90%Heodo
2020-09-30Attachment-20200930.docdoc 9d14d3ff8abad95d71af0043f19dd1644cfa14ceb0a6ba617a49f3bd559523cfn/aHeodo
2020-09-30File-SH75744.docdoc 6c41e3d735a4fb3193de47e7bbd9b06515ec6f7ebcb390c53ea06c00c855851en/aHeodo
2020-09-30doc-69801.docdoc 3e16472eff5bf2937b0f1833264ef998b9f6339e36a135499b25cfa8e794b33cVirustotal results 37.10%Heodo
2020-09-30DAT.docdoc 1d44cd8c3d04874dc41108bc844eb637f657064927fc28927f68c95fe596bcaaVirustotal results 32.79%Heodo
2020-09-30MES 20200930 392.docdoc b6c45e66c35cf5d894ba5932c824d162c760459d59644fd0d41bc5ab63604b06n/aHeodo
2020-09-30rep.docdoc 07f05248ebd561f95c8b5988fddd0396c6d3c0a61015e3cf154e1e97f2af015aVirustotal results 32.26%Heodo
2020-09-30Dat-2020_09_30-NH335.docdoc a87836e6fbf70862d74980ad32f16b6dfe157bcea1172817e7235764aae0c4den/aHeodo
2020-09-30Mes.docdoc 10f4a118d75e59c1f0ae83e7e44c9553fd6925a4bcf21a4cb62559c38c550147n/aHeodo
2020-09-30File.docdoc 8b094b3853afcb79ef514333bfa570faac9b7996f06500f174020ce0e5a31751Virustotal results 31.67%Heodo
2020-09-2915208591-2020_09_30-SIG4670.docdoc 98c87f2f2e124f5e8444896304f556a844430d6543223343abc894702abf99e3n/aHeodo
2020-09-29mes.docdoc 1d742e585ed7b4c237726a945da11795c46da01716e9da561d98fff100ee938fVirustotal results 31.15%Heodo
2020-09-29INF_2020_09_30.docdoc 349dd2ac63132716ea7360223fd038575e1b7144925c60d87589880fbd488670Virustotal results 29.03% Heodo
2020-09-29Untitled_2020_09_30.docdoc 983b893183f765c9cb504afa4937e5f72818641d7da81c106af480225799ec0bn/a Heodo
2020-09-29INF_2020_09_30.docdoc 32a76ed8013dd82d6e6063013236d7fb37bb205dbd6ff84ab785e5af12e6b3f0Virustotal results 19.35% Heodo
2020-09-29ARC 51905.docdoc 48ebe336fa3c33ff63a0c39c304a9c707bca857dc12cc26343602e088ec7dd18n/aHeodo