home

2ch.nantoka-antenna_001.com

It is installed within the Mozilla Firefox web browser as part of an addin/plugin. The file has been seen being downloaded from ads.stickyadstv.com and multiple other hosts.
MD5:
07fff40b5dd495aca2ac4e1c3fbc60aa

SHA-1:
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4

SHA-256:
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 10:13:29 AM UTC  (today)

File size:
43 Bytes

Common path:
C:\users\{user}\appdata\roaming\mozilla\firefox\profiles\{user}.default\scrapbook\data\20150530040611\2ch.nantoka-antenna_001.com

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
3:CUnl/7yltxlHh/:/+/

The file 2ch.nantoka-antenna_001.com has been seen being distributed by the following 6 URLs.

http://ads.stickyadstv.com/user-registering?dataProviderId=147&userId=4363305661290019846

http://pixel.jumptap.com/e/v1/pixel/networks/1/partners/55784/.../4111599635776913490

http://data.searchinfofast.com/i?e=vitruvian-js-activity-v0001&d={"NodeGuid":"851153E5-0BF2-48EE-BE94-E9DE26F80E2E","Host":"www.google.com"}&c=DAY

http://engine.bitmedianetwork.com/udb/5682/.../i.gif?partnerId=1&userId=VxXbR7lQJjEAAFrneGgAAABP&290

http://ssp.adskom.com/.../sync?sociomantic=3229112377783166892

http://engine.bitmedianetwork.com/i.gif?e=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&s=7wIDecy3ujFcoz5mkjp8G0v7EVk

Scan 2ch.nantoka-antenna_001.com - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.