file.exe
| Engine | Download Report | Detection | Info |
|---|---|---|---|
|
malicious
|
||
|
malicious
Score: 100
|
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
|
| IP | Country | Detection |
|---|---|---|
| 104.102.42.29 | United States |  |
| 116.202.5.235 | Germany |  |
| 149.154.167.99 | United Kingdom | |
| Name | IP | Detection |
|---|---|---|
| steamcommunity.com | 104.102.42.29 | |
| t.me | 149.154.167.99 | |
| Name | Detection |
|---|---|
| https://116.202.5.235:9000/soft | |
| https://116.202.5.235:9000/softokn3.dllP | |
| https://116.202.5.235:9000/msvcp140.dll | |
| Click to see the 97 hidden entries | |
| https://steamcommunity.com/market/ | |
| https://116.202.5.235:9000/vcruntime140.dllO | |
| https://steamcommunity.com/discussions/ | |
| https://116.202.5.235:9000/b | |
| https://community.akamai.steamstatic.com/public/javascript/promo/stickers.js?v=upl9NJ5D2xkP&l=en | |
| https://116.202.5.235:9000/f | |
| https://116.202.5.235:9000/ | |
| https://116.202.5.235:9000/mozglue.dll | |
| https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17 | |
| https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org | |
| http://store.steampowered.com/subscriber_agreement/ | |
| https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command= | |
| https://community.akamai.steamstatic.com/public/css/applications/community/main.css?v=5CgcHEsWGAFt&a | |
| https://store.steampowered.com/news/ | |
| https://community.akamai.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1 | |
| https://help.steampowered.com/en/ | |
| https://116.202.5.235:9000/v | |
| https://web.telegram.org | |
| https://116.202.5.235:9000/vcruntime140.dll. | |
| https://t.me/ | |
| https://steamcommunity.com/my/wishlist/ | |
| https://116.202.5.235:9000/vcruntime140.dllUser | |
| https://store.steampowered.com/about/ | |
| https://116.202.5.235:9000/nss3.dllft | |
| https://community.akamai.steamstatic.com/public/javascript/jquery-1.11.1.min.js?v=.isFTSRckeNhC | |
| http://www.sqlite.org/copyright.html. | |
| https://community.akamai.steamstatic.com/public/javascript/prototype-1.7.js?v=.55t44gwuwgvw | |
| https://store.steampowered.com/ | |
| https://116.202.5.235/ | |
| https://116.202.5.235:9000/freebl3.dll | |
| https://116.202.5.235:9000/vcruntime140.dllc | |
| https://116.202.5.235:9000/msvcp140.dllD | |
| https://www.google.com/images/branding/product/ico/googleg_lodp.ico | |
| https://community.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=-DH0xTYpnVe2&l=engl | |
| https://community.akamai.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v=pSv | |
| https://116.202.5.235:9000/vcruntime140.dllh | |
| https://community.akamai.steamstatic.com/public/javascript/applications/community/main.js?v=soQOTmUz | |
| https://store.steampowered.com/stats/ | |
| https://community.akamai.steamstatic.com/public/javascript/webui/clientcom.js?v=L3Ed_Gybseku&l=e | |
| https://community.akamai.steamstatic.com/public/javascript/reportedcontent.js?v=dAtjbcZMWhSe&l=e | |
| https://store.steampowered.com/legal/ | |
| https://steamcommunity.com/workshop/ | |
| https://steamcommunity.com/profiles/76561199686524322/badges | |
| https://steamcommunity.com/profiles/76561199686524322/inventory/ | |
| https://t.me/k0mono | |
| https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search | |
| https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install | |
| https://store.steampowered.com/steam_refunds/ | |
| https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples | |
| https://community.akamai.steamstatic.com/public/javascript/applications/community/manifest.js?v=6MtR | |
| https://116.202.5.235:9000/softokn3.dllf | |
| https://community.akamai.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=OeNIgrpEF8tL | |
| https://116.202.5.235:9000/nss3.dll2 | |
| https://community.akamai.steamstatic.com/public/shared/css/shared_global.css?v=SPpMitTYp6ku&l=en | |
| https://community.akamai.steamstatic.com/public/javascript/profile.js?v=Iy1ies1ROjUT&l=english | |
| https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback | |
| https://community.akamai.steamstatic.com/public/shared/css/shared_responsive.css?v=sHIIcMzCffX6& | |
| https://community.akamai.steamstatic.com/public/javascript/global.js?v=B7Vsdo1okyaC&l=english | |
| https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17rer.exe | |
| https://community.akamai.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png | |
| https://116.202.5.235:9000/mozglue.dllEdge | |
| https://116.202.5.235:9000/freebl3.dllEdge | |
| https://community.akamai.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png | |
| https://community.akamai.steamstatic.com/public/css/promo/summer2017/stickers.css?v=HA2Yr5oy3FFG& | |
| http://www.valvesoftware.com/legal.htm | |
| https://community.akamai.steamstatic.com/public/shared/images/header/logo_steam.s | |
| https://116.202.5.235:9000/softokn3.dlldge | |
| https://community.akamai.steamstatic.com/public/javascript/modalContent.js?v=L35TrLJDfqtD&l=engl | |
| https://community.akamai.steamstatic.com/public/javascript/applications/community/libraries~b28b7af6 | |
| https://store.steampowered.com/subscriber_agreement/ | |
| https://steamcommunity.com/?subsection=broadcasts | |
| https://duckduckgo.com/ac/?q= | |
| https://duckduckgo.com/chrome_newtab | |
| https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016 | |
| https://116.202.5.235:9000EB | |
| https://community.akamai.steamstatic.com/public/shared/images/responsive/header_logo.png | |
| https://community.akamai.steamstatic.com/public/javascript/modalv2.js?v=dfMhuy-Lrpyo&l=english | |
| https://community.akamai.steamstatic.com/public/css/globalv2.css?v=PAcV2zMBzzSV&l=english | |
| https://community.akamai.steamstatic.com/public/shared/javascript/shared_global.js?v=REEGJU1hwkYl&am | |
| https://community.akamai.steamstatic.com/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0 | |
| https://116.202.5.235:9000/softokn3.dll2 | |
| https://116.202.5.235:9000/softokn3.dll | |
| https://store.steampowered.com/privacy_agreement/ | |
| https://avatars.akamai.steamstatic.com/fef49e7fa7e1997310d705b2a6158ff8dc1cdfeb_full.jpg | |
| https://www.ecosia.org/newtab/ | |
| https://community.akamai.steamstatic.com/public/css/skin_1/profilev2.css?v=M_qL4gO2sKII&l=englis | |
| https://steamcommunity.com/_ | |
| https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q= | |
| https://store.steampowered.com/points/shop/ | |
| https://116.202.5.235:9000ing | |
| https://116.202.5.235:9000/sqlx.dll | |
| http://store.steampowered.com/privacy_agreement/ | |
| https://steamcommunity.com/login/home/?goto=profiles%2F76561199686524322 | |
| https://116.202.5.235:9000/msvcp140.dlldge | |
| https://116.202.5.235:9000/vcruntime140.dllets | |
| https://116.202.5.235:9000 | |
| https://community.akamai.steamstatic.com/public/css/skin_1/header.css?v=NFoCa4OkAxRb&l=english | |
| Name | File Type | Hashes | Detection |
|---|---|---|---|
C:\ProgramData\KJDGIJECFIEB\DHCFID |
SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 39, cookie 0x20, schema 4, UTF-8, version-valid-for 4 | # | |
C:\ProgramData\KJDGIJECFIEB\EBAEBF |
SQLite 3.x database, last written using SQLite version 3035005, file counter 2, database pages 31, cookie 0x18, schema 4, UTF-8, version-valid-for 2 | # | |
C:\ProgramData\KJDGIJECFIEB\FHJEGI |
SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3 | # | |
| Click to see the 6 hidden entries | |||
C:\ProgramData\KJDGIJECFIEB\GCGHJE |
SQLite 3.x database, last written using SQLite version 3035005, page size 2048, file counter 1, database pages 24, cookie 0xe, schema 4, UTF-8, version-valid-for 1 | # | |
C:\ProgramData\KJDGIJECFIEB\HDBGDH |
SQLite 3.x database, last written using SQLite version 3035005, page size 2048, file counter 2, database pages 56, cookie 0x24, schema 4, UTF-8, version-valid-for 2 | # | |
C:\ProgramData\KJDGIJECFIEB\KFBAEC |
SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1 | # | |
C:\ProgramData\KJDGIJECFIEB\KJDGIJ |
SQLite 3.x database, last written using SQLite version 3042000, file counter 11, database pages 7, cookie 0x3, schema 4, UTF-8, version-valid-for 11 | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\76561199686524322[1].htm |
HTML document, Unicode text, UTF-8 text, with very long lines (2969), with CRLF, LF line terminators | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\sqlx[1].dll |
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows | # | |
