It runs as a separate (within the context of its own process) windows Service named “DDNS Enterprise Client”. The file has been seen being downloaded from mail-attachment.googleusercontent.com and multiple other hosts.
MD5:
81051bcc2cf1bedf378224b0a93e2877
SHA-1:
ba8ab5a0280b953aa97435ff8946cbcbb2755a27
SHA-256:
7eb70257593da06f682a3ddda54a9d260d4fc514f645237f5ca74b08f8da61a6
Scanner detections:
0 / 68
Status:
Clean (as of last analysis)
Analysis date:
4/24/2024 9:41:13 PM UTC (today)
File type:
Executable application (Win64 EXE)
Common path:
C:\Windows\System32\verifpcp.exe
ActiveX Install
Name:
{CE871B16-BDB0-4C89-89CE-02C1068F3C85}
Internet Explorer Extension
Name:
{17A27031-71FC-11d4-815C-005004D0F1FA}
Mozilla Extension
Name:
installed-extensions.txt
Policies Script
Name:
Default Domain Policy 0
Service
Display name:
DDNS Enterprise Client
Description:
Update compent for the DDNS Enterprise Client.
The file verifpcp.exe has been discovered within the following programs.
www.acs.com.hk
About 1% of users remove it
AudibleManager is a free simple way for users of Audible, an online audio bookstore, to organize their purchased books, podcasts, and other media.
9% remove it
netopia.com/software/products/tb2
About 1% of users remove it
www.paessler.com
About 3% of users remove it
Powered by Should I Remove It?
The file verifpcp.exe has been seen being distributed by the following 50 URLs.
https://mail-attachment.googleusercontent.com/attachment/u/.../?ui=2&ik=fe2ae35279&view=att&th=1552d56633cd823c&attid=0.1&disp=safe&zw&saddbat=ANGjdJ_6pxeBOv6Fug703uJUgVJ894PigYKT1K2arXwiNF9IX5eO71SL8migFxiZ1F7gNuXZck832ykWU4gUbGMEcG5SqTlhMl8_PaK9e_Tb_PRvpGeXsZZCmJJ5divxwre7LqsQglY5pKcBSBXwuGGdHiAm6S5vb_WOqFsF2v4pW5qtrbFcseuhtvgCord6kD4YK9230TvCds3czFTVmLevZHsMRrQLb2cfKuMPj25g_hoyeBMh61jhsZE3C41ORUCf0ridHNDvQFugBrQ0pB0qQzu165RwKdtholBtaPcrbza_63yiFY0CvA4cXlgLYXipolZDV0gJLdDhGJe9yVfTlZ5rScoMj5bYoBNzpyx4XMPAL1R8XmbIziEanglO7ZQg4F644t0Wuqj2rLe5njPyepq8Wbr16ertR8kudNz0WYlWfyEFIIweVyczijDpJ1quIu9d2RWKzmsporYItYBzSFKTSLrMMHTIN8eJIZS4lNxM3BYAs70ROEMdViQwrk8JxmRwBffQKBE-cZock0Ur_z1hvaBWJLbn99gzqudA42XjUoVvpm4giSWCVnBoh90DNDZmAI9LX0tytOS_LNaH2FjC7Lxgf-EdyCZq5bboFX-7bHDW5yLBdQ9naQVP1Jz_d8yn91BpqKS3C83t
https://attachment.outlook.office.net/owa/am.i.khan5@hotmail.com/service.svc/s/GetFileAttachment?id=AQMkADAwATY0MDABLTkyZjgtM2VlADktMDACLTAwCgBGAAADgHsWAef2FEezCUN/.../FTYwdA==&X-OWA-CANARY=K2CprBW9h0G8xVtZMiKGMeBESOmWbtMYa5PeLd0rBV9D-7ubbLAmVx8ZDOwSDwKuyg3XlRHyP18.&token=bd9291db-0187-4f01-b544-1fe471e0d566&owa=outlook.live.com
http://mail38b.webmail.libero.it/cp/ps/Mail/.../ATT00001.txt
https://attachment.outlook.office.net/owa/TorunnRJ@hotmail.com/service.svc/s/GetFileAttachment?id=AQMkADAwATYwMAItOTYyNi0xMzk3LTAwAi0wMAoARgAAA6hGHSe4J/1NrXncz0hcQBkHAM09DXx0CaBJvPyunSm/.../RUQAAAAwC9yAAAAAARIAEACvlN4PL9JNTrAxnVAelMmq&X-OWA-CANARY=sHUMaMGZhUmqIYQO5PG3uVD10c5QzNMYYg9_RU9tOrfSPw1NQMC9wcl8zekkrbofeqUMC_qsn-o.&token=dc3cf8b8-34df-4042-be90-2db80f54d1bf&owa=outlook.live.com&isc=1
https://attachment.outlook.office.net/owa/PatrickDeck@msn.com/service.svc/.../GetFileAttachment?id=AQMkADAwATIwMTAwAC0wMTNkLTI5ZjUtMDACLTAwCgBGAAADPaKNnP1d4kC0KRoPc56nTwcAwELdlUZEfE2c4wRa053AAAADAQwAAADAQt2VRkR8TZzjBFrTncAAAAHBoDykAAAAARIAEABbvAGanXNlSo2hCNGtaVQr&X-OWA-CANARY=cdmZpZoIKEekVuNvchQl2lDxDw6EvdMYvZK3_pPoD3_otCLuvIQ2LTIm26ITtTmzDKhSfaoMYuM.&token=fd3f580c-f75b-4446-8ba0-a8a7127958da&owa=outlook.live.com&isc=1
http://download3.operacdn.com/pub/opera/desktop/41.0.2353.46/.../Opera_41.0.2353.46_Setup.exe
https://attachment.outlook.office.net/owa/faridurrutia@hotmail.com/service.svc/s/GetFileAttachment?id=AQMkADAwATY3ZmYAZS04N2Y4LTRkZjctMDACLTAwCgBGAAAD3jJ vOElWE6ep7UGcJYsVAcAvYCIxnSiaUm0 W0nIcNVPAAAAgEMAAAAvYCIxnSiaUm0 W0nIcNVPAAAAF2SfKgAAAABEgAQAP4WFgCSbep/.../mLl&X-OWA-CANARY=74SPSygcpk6CBOV3ePjgoHDkfHUe1tMYQTowPu1rFNr_WoCWIV98rXWgA7gQ0ezgIoonva9rmgY.&token=2b8f95f8-f65c-450c-bfeb-35b81ad8836f&owa=outlook.live.com&isc=1
http://download.microsoft.com/download/1/A/F/1AF0211E-69A7-4B58-8189-8BA9014AE03A/enu_netfx/.../netfx_fullcab.exe
https://attachment.outlook.office.net/owa/Abdelrahman.Amro@hotmail.com/service.svc/.../GetFileAttachment?id=AQMkADAwATY3ZmYAZS1lNGMxLWM3MGMtMDACLTAwCgBGAAADVqJI9FBadkGBqMBPUjGJNgcABcPxF2nPBEOHMYxYAP7hsQAAAgEMAAAABcPxF2nPBEOHMYxYAP7hsQAAALZ2uhwAAAABEgAQAJnoB2MThGhDh7DvrzuWZfQ=&X-OWA-CANARY=UMAvAIw7eE-cp2LrfqAEA6CSEQEyn9MYimpM0sWz6KzU2yHncPZ7USwIEqENCM1c39DqWVCyL1M.&token=095b1452-e6b1-4723-b5e4-26ece1b9c752&owa=outlook.live.com&isc=1
http://www.filedropper.com/.../filedownload.php?id=projectspare_11
http://zalacznik.wp.pl/.../0/.../list.txt?tsn=1466180122836&zalf=Nowe&wid=836&p=1.1&o2=5&t=TEXT&ct=QkFTRTY0&cs=dXRmLTg=&s=1
https://attachment.outlook.office.net/owa/K_Kinniburgh@hotmail.com/service.svc/.../GetFileAttachment?id=AQMkADAwATZiZmYAZC1lNWVjLWIyYWUtMDACLTAwCgBGAAADSVSb2Dj0CkO6dRJ9j0KGCAcAp5KM9QQYBkuozLqugjI2lQAAAgEMAAAAp5KM9QQYBkuozLqugjI2lQAAAMragqAAAAABEgAQANecG6FBVWNFiTy4z Wywzg=&X-OWA-CANARY=ZlsbgR2VCE2J2n7dg-FnkMAgR5sojtMYRMifl5qaIkFD6wVi_4WU4MI68zFb7qfU1ZV6OaVqZHE.&token=20d36033-7c80-4940-a99d-4cd8a1c6c99e&owa=outlook.live.com&isc=1
https://attachment.outlook.office.net/owa/anargon@hotmail.fr/service.svc/s/GetFileAttachment?id=AQMkADAwATZiZmYAZC05OQAwMS0yNTRhLTAwAi0wMAoARgAAA1kqSbIjtLBPh/ZeJNHyHagHAFWI8TNtG/.../ghvVRx9Nsa7DbNP0CjM=&X-OWA-CANARY=Q5VKkJe-IEym-1PRVW6o5uAfSdmhndMYE5Pr0Yd9HphJkzmnr_fbiLjqNMWqkVgHH1Oca9EAXmY.&token=e02e11d1-eacf-433c-9c60-0ab06dcff557&owa=outlook.live.com&isc=1
https://dl-mail.ymail.com/ws/download/mailboxes/@.id==VjJ-U1rULrXeSDx9U1VmteS3nWN2Fy0TFZmPghQvsmJ88fj8XedNfSKN0DT-DpyociMg4XB-6CX6X-9zGBDuT_cTjA/messages/@.id==AK52imIABSzDV5fTBgATiH_qG9E/content/parts/@.id==3/raw?appid=YahooMailNeo&ymreqid=0d42396e-3b35-23c9-01db-190011010000&token=ZylH2AKAoOfSb3zA8IO3aDxIONsjLfSqHbcB-NLpC_s4ospXcwNH6fXU3NzX6c3Xm845EefRBh7WdGvCJdgpvA&error=https://mx-mg5.mail.yahoo.com/.../iframemsg?id=bbcd76c7-0621-c748-534b-bc1c1cf94812
https://dub112.afx.ms/.../GetAttachment.aspx?file=99ffc065-8ee1-423f-8775-fb72ecfe0abc&ct=dGV4dC9wbGFpbg_3d_3d&name=dW5uYW1lZA_3d_3d&inline=0&rfc=0&empty=False&cid=d87e1ed6b3e998f3&shared=1&entryPt=download&biciPrevious=979bcb67-91ef-4e94-9eda-22e3256d7656_0587b1413e2_5722&hm__login=flogru&hm__domain=hotmail.fr&ip=10.211.28.8&d=d2534&mf=0&hm__ts=Mon, 23 Nov 2015 17:44:22 GMT&st=(00067FFEA5D2515A)&hm__ha=01_f80caf9db0e1c4085ba7f439bbc7f28b889b45aa81d279a017b0d3e1bf453593&oneredir=1
https://mail-attachment.googleusercontent.com/attachment/u/.../?ui=2&ik=66f2f5b5fd&view=att&th=155d80ecdea7c1f0&attid=0.2&disp=safe&zw&saddbat=ANGjdJ9eEf43-sh527U7djrI4HHnVkDI94fZJDEfpS07J3MGcKmjE_YABrQXAtfwdVLt5_id871-05FO0pESMtZK1mtoDHEsArYpj5PJzJk0Soo3ubunUcNYniXOA5fPtQzQYBq04riJkSFXyTqCEJVwE_TvFYUEHWdZK6jeR5z9sOfmmALUj6tB2Jtc1aod7DSo81khszzlal24SiJSaS4Rlxm5Qyl37QxhcDEuxFYLIqoANLY0sBkdIzn77P05u_J38k-1uqFsGs400wZyeSv-ynSQj29BvfAXRMMyUrOX3VRG_0mx6AJSetVU_ivCWs2cFdwuHWkuzpLO7QBTGA83wI6lnRxHFkN1rOJ5UCb-mmy7cAv7mtZbFGLSYEgpZ2bXlSYs2RmCWuT2YENlvTDBNFpvhHzOlxrJY-AAwf12NkYwKMFzxjq4DOgMVvxMPL9Rjo0p5eL0AbEIvj1Ekq-73-wJBQb2DhCm_qM_ifIaPVBqUeTbZVyi39DOcGertKxljJyzzVoa0wgdCYP-oVggaAdPK46nQAOFKoiBW8rB8kK-g3W6ucGUyRXccsPHTRWXeViiNl4YKV3U4Az0BoGt5BraXgfhFUkyuOHog9eGSGFurWRlv_rroNQN03fEkjtx8AZCC_jSw5hz8eXO
https://attachment.outlook.office.net/owa/danny.johnston12@hotmail.com/service.svc/.../GetFileAttachment?id=AQMkADAwATY0MDABLWUxNmUtOTEwMAAtMDACLTAwCgBGAAADB9cMLX7sR0SJkn0H2I0s8gcAN3dQ k2R0kGYse ljMOplAAAAgEMAAAAN3dQ k2R0kGYse ljMOplAAAAgVZAAAAARIAEAAbXeGbbPdlTYCCfZ0sZe67&X-OWA-CANARY=A589D2cj8kSh81MXqnzljvBuKdU2r9MYwryaxrhrZMdGKfUi4cUy6a2H1SG4R4JN6AMqalp0pL0.&token=88291727-2404-4ef6-a615-9dd40938cf9c&owa=outlook.live.com&isc=1
http://mail.bg/message/downloadattachment/folder/inbox/uid/76/partid/3/filename/ATT00001.txt/type/text/plain/encoding/.../
https://attachment.outlook.office.net/owa/coloniacaroyaembutidos@hotmail.com/service.svc/s/.../MmWM=&X-OWA-CANARY=3YkeHKXKk060BnszS2oqA_CRhY46ltMY1xD14R2fUg5Xp0fG_3f5a_1ZOLvN-VuwLMtul68dhvA.&token=15b363b8-5ac0-4019-8142-f536dc432034&owa=outlook.live.com&isc=1
https://attachment.outlook.office.net/owa/claudioortizc6199@hotmail.com/service.svc/.../GetFileAttachment?id=AQMkADAwATZiZmYAZC1lMDc5LTBmY2YtMDACLTAwCgBGAAAD05l698v7REKY4V5qMOh2aQcAJ7aG1ZVqK0GL95xb9Be2rgAAAgEMAAAAJ7aG1ZVqK0GL95xb9Be2rgAAALByC14AAAABEgAQABzk3NdujjBBtDl3Ah3Ujsk=&X-OWA-CANARY=izWckMqAR020mxc8cCsoWOAr6wOaiNMYqrfzkg8mqFKsRhjotqaGwNn8tmYIoxOS5gQSMTk01zc.&token=8f79a7b6-556a-4a37-8790-5fda55f15188&owa=outlook.live.com
https://attachment.outlook.office.net/owa/lornas2009@hotmail.com/service.svc/s/GetFileAttachment?id=AQMkADAwATZiZmYAZC1hYmQzLTBkNzEtMDACLTAwCgBGAAADyLtj5IdBqkGciY4XiedpgQcAoNOn92jbkkasgZ/Py KwfgAAAgEMAAAAoNOn92jbkkasgZ/.../JFEd1jc5Eiz3W3LBH091g==&X-OWA-CANARY=zEr76CJ5Y0K4l9l-8TnM9RAf-ft13NMYrRg3HeUmSwrdvD7_SB0WeEjZ7zoAr2W7wvI7pp1Kn0E.&token=c2f125b4-6c8c-4bf3-ab48-c430ca710632&owa=outlook.live.com&isc=1
https://attachment.outlook.office.net/owa/santiagoedantas.rep@hotmail.com/service.svc/.../GetFileAttachment?id=AQMkADAwATZiZmYAZC1kYmVjLTYxOTctMDACLTAwCgBGAAADlhoNt66KXkmjVopcZrL6VgcAH4 n2sXEtkeI3I3PcVRi0wAAAgEMAAAAH4 n2sXEtkeI3I3PcVRi0wAAAKg577wAAAABEgAQAJJqAPvxy1tOimH6HwBzHLE=&X-OWA-CANARY=mK6YqkOKI0SkaeUNK-miQoDu1Wri0dMYQ37HOYzu6xhcuzw4K7o8rHr-G4isp10yJ157lZ0OnjI.&token=3b26b470-7040-4532-9198-95e07d24382f&owa=outlook.live.com&isc=1
https://dl-mail.ymail.com/ws/download/mailboxes/@.id==VjJ-Kw4ts2_zgBXtR-5L8ztIkJqDJzeIVozK1Wub0sUI8tx2lgUIt-wwKmsthLqgPPiZGH4nkLovJSeSm65J69qU1w/messages/@.id==AO3kimIAJuVHV8HGRgX3WE-6sUM/content/parts/@.id==2/raw?appid=YahooMailNeo&ymreqid=155bd6c3-ca9d-1a1f-01b2-4c000d010000&token=NQn5OiD4XfaQqPoTruYs14o7wkPYECUyvsjkF0duDMlHPXLkxlUoIggttGWjHzLo_tmbZU_QP6bd5QzJLzvu9w&error=https://mg.mail.yahoo.com/.../iframemsg?id=90f9f153-1189-6247-b26e-2ca75f575950
https://attachment.outlook.office.net/owa/Niel@alphawealth.co.za/service.svc/s/GetFileAttachment?id=AAMkAGQ0NDExZTBhLTRhNmMtNGE0OS1iOTBhLTQ2MGFkMjkxOWMwNABGAAAAAAB3GSBwN9/.../ er7ZiLQBwBas0qUlrwrTIn1Eqb8ijnLAAAAAAAOAABas0qUlrwrTIn1Eqb8ijnLAAM4kydfAAABEgAQAIxbLkUr5GFOtXJFEAK0 u0=&X-OWA-CANARY=tzlyIA4AmkO4c8YB2HJalPAf3AQ20tMYoC1DJBstYGJs7DqEeoHbmvcTyHIYWTu0KQqY8NPCkPQ.&token=d18f8590-9ed9-40d7-8c73-fc29cb969909&owa=outlook.office.com
https://attachment.outlook.office.net/owa/willianfabian-12@hotmail.com/service.svc/.../GetFileAttachment?id=AQMkADAwATZiZmYAZC1jMmFkLWY2Y2MALTAwAi0wMAoARgAAAwR41EMD9UZFsMTfMcABx9AHAFjmGXxCbh1Ot3LaunqwS0AAAAIBDAAAAFjmGXxCbh1Ot3LaunqwS0AAAAA1L6QkAAAAARIAEACGsZziNadfRb3TCdtQZc6G&X-OWA-CANARY=B8zLfToOAEuak6DuJcsS8pAs2xUTWNMY6Z8GOdB4WXEhPqU83DovSgIkDWkNKMi4M3hqtXnifIM.&token=4e3f3847-2bf0-4bfc-a9b4-56e3662cf88d&owa=outlook.live.com
https://mail-attachment.googleusercontent.com/attachment/u/.../?ui=2&ik=51ee391cc4&view=att&th=156137e2f06e9ee5&attid=0.13&disp=safe&zw&saddbat=ANGjdJ81O1xxQq2W7jEvyw-86Jr5knC0KJ5HDM8ZLxy06LLB8PH31F5gKVU4RS3pBL8THaERQXftg8jXKWCnj26L4EfImUGOhOL6mBkfMqUmBq2Vt4H3MT1a-xOYr8DA6-CjB53wTTPOr34qE4m49HDu1odxlTdP9boGJVvb0w1NhFyRPuK5jP8IrNknxAnyfZ5FUAiOf5ANdLAUPs12uicMHk6s6q1hC9gbMBSDubFglVYKBNl9RTV39DeA4DmT4JuIlI5tmCrzbZKnqaPwxC4AifAafZjn1I0yiwIsg_O8fvU_L7Z2A1vwdUZy0qEWG0-QBhhcEUg28HaSAl09vnCm6qEo8B0pZ4zRpKadGKCzF7K9kbYANV631iEru1YkAIhJ3i7L2jIlU9IR7T3fblqY3Q4sxgeQm5EkkrxMKPTe9vaW23zyODlkMHlLR5aIXpYxrqPUL8gwRlhC8vCCCtqmrAevTZCfTg0u7fRaYw9rF-_5ZI3HXcy_f2o0afSZNfvu2egAcU7XfST45OFfnlpXROAGSU0KjOu0cM9u2HFDJ7nNqoPHE9V5swoqD9PFb7QUJ5grMQIs6SH5avL1LTdFYUm-aPv3HCO_yio8DT0ntTeAin40OmTGt8dAlHte1pv2he93OHdChfBggRMR
https://dl-mail.ymail.com/ws/download/mailboxes/@.id==VjJ-zyU1rVn_qOGifMk2g7h5XTmpyT7gIE4kS3uH4tZHq9_nrq2eJtDk3aGP5V7bgP4u0jLE2kfKIzOERsiq4Bz0Ow/messages/@.id==AMtLyAoAAJGtV7il9gay2MMGjF4/content/parts/@.id==5/raw?appid=YahooMailNeo&ymreqid=e7cdd319-3815-7aa5-0158-88002d010000&token=DrnOod9EGB52tK5Gc2dWltgVYxPYk5HMTo9ZViJm3Ych_0M0ucHT-Pwe6-oTkPFkxbv18JnXWajoNnVLu3UVFA&error=https://uk-mg42.mail.yahoo.com/.../iframemsg?id=4192ae8e-51de-393f-9537-f9e767fad4d4
https://3c.gmx.net/mail/client/attachment/download/.../;jsessionid=870BC6A42674E6E5C06F6E74C9609D83-n1.bs72b
http://117.55.241.13:8880/.../FileBankServlet?fileId=FileBank_7747&fileName=Error_File.txt
https://mail-attachment.googleusercontent.com/attachment/u/.../?ui=2&ik=8cc1c590a3&view=att&th=156adb19d6b967ba&attid=0.1&disp=safe&realattid=ede960934a3782cb_0.2&zw&saddbat=ANGjdJ_BVxkIpk2p_CyRucLb1cehBwie5NBOBP_A31hJrCE0K3CKE0zKkyb903x-qr2UGNF3xFgJrcZGsqwmetR_OZVmNgATcF5zIak0uV1ldAUiAEGZRxMO_qS7TjQ9-ti2ZdBirx3VnuTw1nXbXrZPTktLh327rGXphpeDEDwVSGbtuuDHiT29NFzgJ9FyEvLPpxrB7bP-O0ETCXq1RbfytLZeILkzzt29ThAFRnXFLhAz808oXYYkxc--YPDuNZHs6G0_7pcO2pFMARlRzIclD7IGhGIMjQRmIZRpKndaSLpQgjJDUB9xY_yILcbibfRGFA9Wtg4KrbtlXWmebcBV3b5ks7aL1tmlWohIBB5PMSRTANLAiuzzBZndsk26EZIwXsgQuWi-Ls6gulSZ4Pe9vj7taRXNKMYhb2Wf07a9_tqkTjpfBuDV-wgFcm36OL4Jxvitm4_83up1GLqyIo9Vu_LlYZ--q4LfnjwmU298hUv814Esa9XfSAt0lHgtHNmEgINhJcvdBTzZk3GQ08VjU0EFvQhBhEFlDy7EOM0LO9InAnriOz_hUDEVnXurZZqeUgcYk3Pof0sUQvqTr7X_uHZPl4QmxZlqRhJudPX_9gZWqj1eSoF6MOCa3LzXYDBre2z2EW67b2YY9dKV
Latest 30 of 83 download URLs