URLhaus Database

You are currently viewing the URLhaus database entry for https://paulscomputing.com/CraigsMagicSquare/H/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:940334
URL: https://paulscomputing.com/CraigsMagicSquare/H/
URL Status:Offline
Host: paulscomputing.com
Date added:2020-12-23 04:21:02 UTC
Last online:2021-03-01 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-12-23 04:38:02 UTC to abuse{at}he[dot]net)
Takedown time:2 months, 8 days, 16 hours, 48 minutes Bad (down since 2021-03-01 21:26:18 UTC)
Tags:emotet link epoch1 exe heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-12-23yERd2O.dlldll 5e9f4504b7e0938a2b2eb9a7f090be9f4b1101aa3be145a3b5895cb14bacd0efn/a Heodo
2020-12-237o4gqwwzFmvh00LmpJ.dlldll ab07b83a04dbfa27a93f58355028903e0307fecf3915885938d415aacf5e542fn/a Heodo
2020-12-2323pe.dlldll 97e951cdcbd36465e6fc359a5f09f00cf5d88dec5d4e28287d963f212777c579n/a Heodo
2020-12-23XvQoY3t9DxbLL.dlldll 9675ab36cc65dd00f1d83c845b5d5ffcb5c5652af73aee35bd29f2be9b69af3dn/a Heodo
2020-12-23gAHP9fODkTfQGO0EnVn2.dlldll 22237b8c89f646eacb2db5a4fdd1c173adf02451c5b9ab3b9190d85fed8b8526n/a Heodo
2020-12-23viOUJAW3jMlBZt0CPoGBx.dlldll e39c5dd72d3e5179ed9a96af3c813b68bdfce8e0c3d60bdbe36bf4b36dd47bc0n/a Heodo
2020-12-23KEk0Qla.dlldll 6652d6ad8441d8bff73d1ac9704d57a263f2c54cd3df05203e17bc7624a3ddc0n/a Heodo
2020-12-23sUCvhMOZ8JeBBB.dlldll 627666d563e7386e7ce63a9c05a4a5666769e9e184236f1be1ff4fc9e8896593n/a Heodo
2020-12-23P8hvH2NJAnvs5FuuYYUfsr5.dlldll 88309c8da8b7c42d9e2d9c0aebee48f0f94ed53b49cb92863bbccd2cc4d6c265n/a Heodo
2020-12-23F8HDOOH1DGzOnA2.dlldll e9bf916e6d920888872e0ae65f7f73147a0ba72d963ba4c618017154610a9a97n/a Heodo
2020-12-230qe5r2Y0RMcLLzMd.dlldll 4c7d71182fcd3da63d5276e332468c4ea57969442d15705ec32f5171e4394163n/a Heodo