Engine | Download Report | Detection | Info |
---|---|---|---|
|
malicious
Score: 100
|
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
|
IP | Country | Detection |
---|---|---|
37.247.115.2 | Turkey | ![]() |
149.154.167.220 | United Kingdom | ![]() |
104.21.112.1 | United States | ![]() |
Click to see the 1 hidden entries | ||
158.101.44.242 | United States | ![]() |
Name | IP | Detection |
---|---|---|
mail.burbaymedikal.com | 37.247.115.2 | ![]() |
reallyfreegeoip.org | 104.21.112.1 | ![]() |
api.telegram.org | 149.154.167.220 | ![]() |
Click to see the 2 hidden entries | ||
checkip.dyndns.com | 158.101.44.242 | ![]() |
checkip.dyndns.org | 0.0.0.0 | ![]() |
Name | Detection |
---|---|
http://schemas.xmlsoap.org/wsdl/ | ![]() |
https://www.google.com/images/branding/product/ico/googleg_alldp.ico | ![]() |
https://www.ecosia.org/newtab/v20 | ![]() |
Click to see the 39 hidden entries | |
http://checkip.dyndns.org/ | ![]() |
http://51.38.247.67:8081/_send_.php?L | ![]() |
http://crl.micro | ![]() |
https://reallyfreegeoip.org/xml/161.77.13.2 | ![]() |
https://aka.ms/pscore6lB | ![]() |
http://anotherarmy.dns.army:8081 | ![]() |
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search | ![]() |
http://checkip.dyndns.org/q | ![]() |
http://aborters.duckdns.org:8081 | ![]() |
https://contoso.com/ | ![]() |
https://nuget.org/nuget.exe | ![]() |
https://duckduckgo.com/chrome_newtabv209h | ![]() |
https://reallyfreegeoip.org | ![]() |
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name | ![]() |
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q= | ![]() |
https://gemini.google.com/app?q= | ![]() |
http://51.38.247.67:8081/_send_.php?LCapplication/x-www-form-urlencoded | ![]() |
https://reallyfreegeoip.org/xml/ | ![]() |
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q= | ![]() |
http://nuget.org/NuGet.exe | ![]() |
https://duckduckgo.com/ac/?q= | ![]() |
https://api.telegram.org | ![]() |
http://pesterbdd.com/images/Pester.png | ![]() |
https://api.telegram.org/bot | ![]() |
http://schemas.xmlsoap.org/soap/encoding/ | ![]() |
http://www.apache.org/licenses/LICENSE-2.0.html | ![]() |
https://contoso.com/License | ![]() |
https://api.telegram.org/bot/sendMessage?chat_id=&text=%20%0D%0A%0D%0APC%20Name:841618%0D%0ADate%20and%20Time:%2025/03/2025%20/%2009:39:06%0D%0ACountry%20Name:%20%0D%0A%5B%20841618%20Clicked%20on%20the%20File%20If%20you%20see%20nothing%20this's%20mean%20the%20system%20storage's%20empty.%20%5D | ![]() |
https://contoso.com/Icon | ![]() |
https://www.office.com/ | ![]() |
https://ac.ecosia.org?q= | ![]() |
http://checkip.dyndns.org | ![]() |
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command= | ![]() |
https://reallyfreegeoip.org/xml/161.77.13.2$ | ![]() |
https://api.telegram.org/bot/sendMessage?chat_id=&text= | ![]() |
https://chrome.google.com/webstore?hl=en | ![]() |
http://varders.kozow.com:8081 | ![]() |
https://github.com/Pester/Pester | ![]() |
https://api.telegram.org/bot/sendMessage?chat_id=&text=%20%0D%0A%0D%0APC%20Name:841618%0D%0ADate%20a | ![]() |
Name | File Type | Hashes | Detection |
---|---|---|---|
C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\PO250116 - #U304a#U3088#U3073#U8cfc#U5165#U5951#U7d04- Offer Z01G-00008D SUPPLY - H64PO_2403.exe.log |
ASCII text, with CRLF line terminators | # | ![]() |