URLhaus Database

You are currently viewing the URLhaus database entry for http://anizonehealthcare.com/wp-includes/I/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	760826
URL:	http://anizonehealthcare.com/wp-includes/I/
URL Status:	Offline
Host:	anizonehealthcare.com
Date added:	2020-10-28 12:25:09 UTC
Last online:	2020-11-23 13:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
dns0.eu :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2020-10-28 12:26:03 UTC to abuse{at}phoenixnap[dot]com)
Takedown time:	26 days, 1 hours, 21 minutes (down since 2020-11-23 13:47:59 UTC)
Tags:	emotet epoch1 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-11-01	pQRjqZ8RfxnXJnX1.exe	exe	5ccb874823af8edbe0186e1fc27a8c7db73c2de410c1e431cf2b13cb8baa0e3c	61.97%	Heodo
2020-10-29	j8tyD1HEIQxIYdd.exe	exe	0789140d0ae2c6c0e9e98e032d9e73febb4729b0d7fb0efd3da2a376ca610c94	n/a	Heodo
2020-10-29	vneWkOegFoXg.exe	exe	f5f87d1778a796dd61d5e42c86a962d20dfc7ee5a73a6141983da6702fb87eba	n/a	Heodo
2020-10-29	1c0CGvCT5nYo.exe	exe	26d0b4bcd7234629282046cd608b435a00ad786ef61b1c290cc4983f2eb7511b	n/a	Heodo
2020-10-29	3fqSgIxw.exe	exe	615cbe87662502754936130cba8a340d76b5c6d1268b4da9018e95d69be1464e	22.54%	Heodo
2020-10-29	LtfKk6oCYQQlJl.exe	exe	8b1a1f9019af7a609f9fa232417c84c46b79563e9f82c775eb0b76eaa7f0e538	n/a	Heodo
2020-10-29	XNNWbtPQ.exe	exe	53b10d7a3361331efba4c45cf0007df844b8bb310674d26c0ce6ba9ba0858e5e	n/a	Heodo
2020-10-29	aXEUcncWGPb70ngLp.exe	exe	9a975e574923dfa35efc17af90d670fd9e95a1f22a5894f5d72e0713693fdbfb	15.25%	Heodo
2020-10-29	Mhp.exe	exe	1f44c212420e3b650f8b294fe78a91384a853f17d161ab7b80921d2316a9a61f	n/a	Heodo
2020-10-29	ADd1DGQlWd4cMCpVeHd.exe	exe	987c8d3885bd590b86beda4901da2b690534adf0609c2ac7302cefd59d77e92a	18.31%	Heodo
2020-10-29	mlYbKKCkgHKLqvk2F.exe	exe	09e6259b6f051a67878eb5edb32b2b4b9ec4523e9dcab403a505e61854a07ad5	15.28%	Heodo
2020-10-29	GCF5wDR6w.exe	exe	69bbc417cee18cd379338e1d81cd9d99d3128e95761217192bf208758e78384a	n/a	Heodo
2020-10-29	MzFjdtay1.exe	exe	365b5caf607b8b34a68c8f29e4696d9a3364af297d8324b28d482251f096cccb	17.14%	Heodo
2020-10-29	6JaClNP0xF0N0tIcJqI.exe	exe	cc6cc427868db75205f7d7016a329f7381763b7a934a3236612bcfface20e900	n/a	Heodo
2020-10-29	xfnK4x.exe	exe	2539e16aa73e3a556d95e1c4801f4de606652e131832c98f6256ca3cbb46fbb5	15.71%	Heodo
2020-10-29	WwclKNPeex5.exe	exe	e4269b56096aef38b0de1877e72ecc6fb70deeb838e376873bd6edd82305266d	n/a	Heodo
2020-10-29	xyRav6uRDaJwk.exe	exe	4091de1fcf0a245c4ba09df775db52a2accc4dd3e1d63c5911eed405003dc920	15.49%	Heodo
2020-10-29	GbubToLbN23BZtTYW.exe	exe	8f8743ab977ccd419f127e874263da38071f31133bd23eb13aea52202340d34d	11.27%	Heodo
2020-10-29	uQi1Yfa.exe	exe	e44db825df014857c1f6956e3f7a7d0b0c78dc4733daf518f516abfeac6c5d34	12.50%	Heodo
2020-10-29	PIoU.exe	exe	dc8e39f1ee9d5d0bb1e3dd0398def047cbe82d4a14eb191e5a69e670b9a07160	n/a	Heodo
2020-10-29	5OcvVyj73CbD1otW9dA.exe	exe	643794f692697108af9253ccebdf1cc18529fdcdfaf8deb15749f09bd8a94589	n/a	Heodo
2020-10-29	f12r3wa10nqp0KYCy7.exe	exe	bcac193ae09fab7c4eda4eeddcb3df964a1ea39b93f1a9e7129c21ddde3cfc7c	38.24%	Heodo
2020-10-29	udnXCb73pKzWS6k8X.exe	exe	3a39d6556ae844754f4fd6c75cd640d331b4fc14efbe86ee6ce5a930fe4107cc	n/a	Heodo
2020-10-29	sLZrFFfl.exe	exe	b9ed46200d259d262bc6bb1698ce2c12628dd0926cd9b207551538da65821708	36.11%	Heodo
2020-10-29	lvs3mkE8FtfUHKFUqyABU.exe	exe	75bf0a796ecdd768d8203c53d2e950871bb51a0cce6f3e4f4bc189586fb8b1cd	n/a	Heodo
2020-10-29	76pco0Jgf6Ak.exe	exe	a154beae56b636bc14a610ecd0eeb2c731a9bf96857c62fb418be91f3511241f	n/a	Heodo
2020-10-29	9nDAHfcBeI3Jgv.exe	exe	c6dccde01e8585d511e5e7c18944e3e3fe782c0c0e77bb5f2d0c42762224485a	n/a	Heodo
2020-10-29	HqH3.exe	exe	ad4a70afc5fa635c073dfd7209ae02b7c8f9b09c5e3357471e238262a1eeca5b	n/a	Heodo
2020-10-29	8umwtwfrsLYvdqJbvW7.exe	exe	1f6d5adde5c705aad44438eac35ddb162f629cf7664dfabd177e673c271e72a8	n/a	Heodo
2020-10-29	Yr0ZGWOWqog4i.exe	exe	4549f42a6edf51ef5ffc91db8227175612dc04027ad82ff0cb12f580b11a0336	n/a	Heodo
2020-10-29	aIyKetg6qd8NiIGFAJLj.exe	exe	1fbd3ee64990841a0093ce04a390c520f88a0d79986e9ce290b4ed57e270225e	17.14%	Heodo
2020-10-29	O1r1uxg.exe	exe	0c34f3a09683d839d3255fb9077b4044d5da9c03e424f7aab0ba7770d67c47cf	18.31%	Heodo
2020-10-29	7UPCEhk49pQD7ocwT.exe	exe	47357d7c4f44c434a6b5d435f04999fbd0021abff5185706f0436e83c679a108	n/a	Heodo
2020-10-29	N8L5G2i6LL.exe	exe	0977b484241c35495acfc15b05d281d38707eeb1ff1147caf1681ca4c07578e2	n/a	Heodo
2020-10-29	yUpMni4YeF.exe	exe	43c3a17ce42011555c85672dcb01b2a4d9bcdf648dffdc92a12f4e14f7bf4385	16.90%	Heodo
2020-10-29	y8cO1J1Rks3DDD.exe	exe	a12f4f3aa67953acc3873ab92dd73d7025f79defd63eb47f4cee8fbd15d64ff0	16.90%	Heodo
2020-10-29	TmZux0.exe	exe	d638040f47e23390fd5152429c61e35eb108b42ec826f613322e31e00844060a	n/a	Heodo
2020-10-29	fN7F7tC.exe	exe	d1c41ee2a639a77521f7cc8f5f1852fe589ce9154f93b60f9bece32db7bcb2e6	16.90%	Heodo
2020-10-29	iWLGUrpOhBjwDMniEOGZH.exe	exe	e2b1acdea91fd631facf92d977205619a32bb9d52e6edc38fa50d5bdd2c4a45e	n/a	Heodo
2020-10-29	v5SdbGJ.exe	exe	18eb0b0521c433e07dc7354c571746e8c72f02c4a0827b7d38e2f359a6f3a462	n/a	Heodo
2020-10-29	HgO6z.exe	exe	cbfeda3993dc3cb3514b25dad4767de76472ede990fac55a9a30fb50fef98995	n/a	Heodo
2020-10-29	In26eufks.exe	exe	3819440ada82d4003707d74511f5ee9b92f41bfd35e56553a607268a0fe69eab	n/a	Heodo
2020-10-29	8zEqRGSV3hYfuG.exe	exe	2a8f6a85ed6ed06c7bcc9eb8b76594037e4acc26a395371531b1a612874409f0	18.97%	Heodo
2020-10-28	MwH.exe	exe	bb6d62ec4b4a7cebd07611515f8bd78043042153460056b0994638c93b0fffc5	21.43%	Heodo
2020-10-28	sxOCOal6fzv5N.exe	exe	d4468b499941d4ee9ef8980afb349d4a2e2c7c554196077d43edb673b59e96ef	n/a	Heodo
2020-10-28	q31Fls.exe	exe	7db6bf0a1ac146d043fa08a717aef73179e4e4fa10167efc95aa7dd858ad581f	15.71%	Heodo
2020-10-28	5RU4HpBgMnMCZWmo.exe	exe	1611e2dac050a56226d46897da62b42ea76cb7f1d19d313193665e0947cc2223	n/a	Heodo
2020-10-28	VfmScLnPvrEjW7LwQQiF.exe	exe	318ad8ed341a0e670c532d95903481e4cf0e39021f4f8b53bd9f6fe244c384fc	12.86%	Heodo
2020-10-28	rZgtmDtSuyK.exe	exe	4e8379fcf8bd5eaa71e8a0188d0ebb9d09b474ec1d5a43744fd8063dfae1e18a	n/a	Heodo
2020-10-28	tUeiHyo7vEIb3z1.exe	exe	9feb045876da2093f952d53854f116b22b9c9bfd72a429dacf13dde81358ca29	n/a	Heodo
2020-10-28	uBIasBoxVeLSJTvryAjhI.exe	exe	35c781ccaf48a7eef4c24db90146535313cf25fdf182a551996b5e25fbb7c710	n/a	Heodo