GridinSoft Threat Intelligence
document-blocked.js file report
Why it matters
Evidence available for this file
No final classification is available yet.
First seen 2017-05-21 06:06:49 (9 years ago); latest analysis 2021-01-05 14:04:36 (5 years ago).
ThreatInfo has seen this file in user or system paths listed below. Unexpected locations increase the need for local verification.
Recommended action
What to do next
- Use the hash and metadata below to verify the exact file identity.
- Review publisher, signature, paths, and PE details for inconsistencies.
- Run a local scan if the file appears unexpectedly or starts with Windows.
File context
document-blocked.js is a Windows file recorded in the ThreatInfo database. The current detection status is Undefined, based on the latest analysis from 2021-01-05 14:04:36 (5 years ago).
ThreatInfo does not have a final classification for this file yet. Use the technical details below to compare the hash, size, signature, and observed locations with the copy found on your device.
File Details
| MD5: | b4d1f6a342a69c62c760c6036eee6f18 |
| Size: | 8 KB |
| First Published: | 2017-05-21 06:06:49 (9 years ago) |
| Latest Published: | 2021-01-05 14:04:36 (5 years ago) |
| Status: | Undefined (on last analysis) | |
| Analysis Date: | 2021-01-05 14:04:36 (5 years ago) |
Common Places:
| %localappdata%\safer technologies\secure browser\user data\default\extensions\hipbooegpnbefehjohdaillhhkebombn\1.9.6.53_0\js |
| %localappdata%\safer technologies\secure browser\user data\default\extensions\icinefjdjncdfbilldboifajgdngkjlh\1.9.6.53_0\js |
| %localappdata%\ucbrowser\user data_i18n\default\extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm\1.12.4_0\js |
| %localappdata%\ucbrowser\user data_i18n\default\extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm\1.12.4_1\js |
| %localappdata%\ucbrowser\user data_i18n\default\extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm\1.12.4_2\js |
| %localappdata%\hotben\user data\default\extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm\1.12.1_1\js |
| %localappdata%\bookness\user data\default\extensions\ocifcklkibdehekfnmflempfgjhbedch\4.1_0\js |
| %localappdata%\catalinagroup\citrio\user data\default\extensions\ocifcklkibdehekfnmflempfgjhbedch\4.1_0\js |
| %localappdata%\cupduck\user data\default\extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm\1.12.4_0\js |
| %localappdata%\ataziedstervotain\chromedefaultdata\extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm\1.11.4_0\js |
ThreatInfo has observed document-blocked.js in the locations listed above. Files found in temporary folders, user profile folders, startup locations, or unusual application directories should be reviewed more carefully than files installed under a known program directory.
Geographic signal
Observed country distribution
ThreatInfo has seen document-blocked.js across 48 countries. Use this signal to compare local evidence with where the sample is most often reported.
The strongest geographic signal for this file is Russian Federation with 15.9% of observed hits. Geographic distribution can help identify targeted campaigns, regional software bundles, or where a file is most commonly reported.
OS Version:
The most common operating system signal for document-blocked.js is Windows 10 with 53.7% of observed hits. If your system differs from the common profile, check whether the file was introduced by a specific installer, archive, or removable device.
Analysis
Report conclusion
This file is still under review
ThreatInfo has not assigned a final verdict yet. Compare the file hash, location, signature, and publisher before trusting the file on a production system.