https://onedrive.live.com/view.aspx?resid=DEE5B7E6B473EA8!297&wdo=2&authkey=!AJzT10c65dPX7EI
| Engine | Download Report | Detection | Info |
|---|---|---|---|
|
malicious
Score: 80
|
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
|
|
|
|
clean
0/100
|
| IP | Country | Detection |
|---|---|---|
| 40.90.142.224 | United States |  |
| 104.16.19.94 | United States | |
| 152.199.23.37 | United States | |
| Click to see the 14 hidden entries | ||
| 239.255.255.250 | Reserved | |
| 142.250.145.154 | United States | |
| 172.217.168.78 | United States | |
| 192.124.249.68 | United States | |
| 192.95.39.145 | Canada | |
| 40.90.142.226 | United States | |
| 18.66.188.202 | United States | |
| 142.250.185.142 | United States | |
| 172.217.168.3 | United States | |
| 142.250.203.97 | United States | |
| 172.217.168.45 | United States | |
| 157.240.17.15 | United States | |
| 172.217.168.68 | United States | |
| 172.217.168.40 | United States | |
| Name | IP | Detection |
|---|---|---|
| amcdn.msftauth.net | 0.0.0.0 | |
| c.live.com | 0.0.0.0 | |
| ajax.aspnetcdn.com | 0.0.0.0 | |
| Click to see the 33 hidden entries | ||
| stats.g.doubleclick.net | 0.0.0.0 | |
| clients2.googleusercontent.com | 0.0.0.0 | |
| clients2.google.com | 0.0.0.0 | |
| code.jquery.com | 0.0.0.0 | |
| onedrive.live.com | 0.0.0.0 | |
| p.sfx.ms | 0.0.0.0 | |
| messaging.office.com | 0.0.0.0 | |
| www.onenote.com | 0.0.0.0 | |
| onenoteonlinesync.onenote.com | 0.0.0.0 | |
| aadcdn.msftauth.net | 0.0.0.0 | |
| storage.live.com | 0.0.0.0 | |
| connect.facebook.net | 0.0.0.0 | |
| skyapi.onedrive.live.com | 0.0.0.0 | |
| spoprod-a.akamaihd.net | 0.0.0.0 | |
| apis.google.com | 0.0.0.0 | |
| scontent.xx.fbcdn.net | 157.240.17.15 | |
| cs1100.wpc.omegacdn.net | 152.199.23.37 | |
| accounts.google.com | 172.217.168.45 | |
| plus.l.google.com | 172.217.168.78 | |
| d3v4i80726wzko.cloudfront.net | 18.66.188.202 | |
| stats.l.doubleclick.net | 142.250.145.154 | |
| i-am3p-cor002.api.p001.1drv.com | 40.90.142.226 | |
| www.ttucorp.com | 192.124.249.68 | |
| ttucorp.com | 192.124.249.68 | |
| gstaticadssl.l.google.com | 172.217.168.3 | |
| i-am3p-cor003.api.p001.1drv.com | 40.90.142.224 | |
| cdnjs.cloudflare.com | 104.16.19.94 | |
| www.google.com | 172.217.168.68 | |
| ssl-google-analytics.l.google.com | 172.217.168.40 | |
| rollingproductions.co | 192.95.39.145 | |
| clients.l.google.com | 142.250.185.142 | |
| googlehosted.l.googleusercontent.com | 142.250.203.97 | |
| s.w.org | 192.0.77.48 | |
| Name | Detection |
|---|---|
| https://rollingproductions.co/form/vendor/ |  |
| https://rollingproductions.co/form/vendor/ | |
| https://pki.goog/repository/0 | |
| Click to see the 97 hidden entries | |
| http://www.opensource.org/licenses/mit-license.php) | |
| https://ttucorp.com/wp-content/plugins/woocommerce-gateway-authorize-net-aim/lib/skyverge/woocommerce/payment-gateway/assets/css/frontend/sv-wc-payment-gateway-payment-form.min.css?ver=4.7.1 | |
| https://ttucorp.com/wp-content/themes/tonda/assets/js/modules/plugins/owl.carousel.min.js | |
| https://www.onenote.com/ | |
| https://www.google.com/images/dot2.gif | |
| https://ttucorp.com/wp-includes/js/jquery/ui/core.min.js?ver=1.11.4 | |
| https://ttucorp.com/wp-content/themes/tonda/assets/css/woocommerce.min.css | |
| https://ttucorp.com/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.parallax.min.js?version=5.4.8 | |
| https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdB1ugUAAAAAB1Et-FDaYGbmKyWVLMkviNHi7e2&co=aHR0cHM6Ly93d3cudHR1Y29ycC5jb206NDQz&hl=en&v=kcXVPRWG7fMILHmzon0--fD3&size=invisible&cb=lh2pb45igvi | |
| https://ttucorp.com/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=5.7) | |
| https://ttucorp.com/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.slideanims.min.js?version=5.4.8 | |
| https://ttucorp.com/wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.4.8.3V | |
| https://apis.google.com/ | |
| https://ttucorp.com/wp-content/themes/tonda/assets/css/ion-icons/fonts/ionicons.ttf?v=2.0.0 | |
| https://spoprod-a.akamaihd.net/files/fabric/assets/icons/fabricmdl2icons.woff | |
| https://ttucorp.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.4.8.3 | |
| http://api.jqueryui.com/category/ui-core/ | |
| https://ttucorp.com/wp-includes/js/jquery/ui/tabs.min.js?ver=1.11.4 | |
| https://payments.google.com/payments/v4/js/integrator.js | |
| https://www.google.com/recaptcha/api.js?render=6LdB1ugUAAAAAB1Et-FDaYGbmKyWVLMkviNHi7e2&ver=3.0 | |
| https://ttucorp.com/wp-content/uploads/js_composer/js_composer_front_custom.css?ver=5.7 | |
| https://ttucorp.com/wp-includes/js/underscore.min.js?ver=1.8.3 | |
| https://ttucorp.com/wp-content/plugins/yith-woocommerce-wishlist/assets/css/font-awesome.min.css?ver | |
| http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions | |
| https://ttucorp.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=3.7.0 | |
| https://github.com/bas2k/jquery.appear/ | |
| https://d3v4i80726wzko.cloudfront.net/wp-content/uploads/20190503082942/INT2969_WEBSITEIMAGES_19-1890x1100.jpg | |
| https://aadcdn.msftauth.net/ests/2.1/content/images/picker_more_7568a43cf440757c55d2e7f51557ae1f.svg | |
| https://www.google.com/recaptcha/api.js?render=6LdB1ugUAAAAAB1Et-FDaYGbmKyWVLMkviNHi7e2&ver=3.0U | |
| https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdB1ugUAAAAAB1Et-FDaYGbmKyWVLMkviNHi7e2&co=aHR0 | |
| http://crl.pki.goog/gsr1/gsr1.crl0; | |
| https://ttucorp.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.j | |
| https://ttucorp.com/wp-content/themes/tonda/assets/css/font-awesome/fonts/fontawesome-webfont.woff2? | |
| https://feedback.googleusercontent.com | |
| https://ttucorp.com/wp-content/themes/tonda/assets/js/modules/plugins/packery-mode.pkgd.min.js | |
| https://ttucorp.com/wp-content/plugins/easy-fancybox/js/jquery.easing.min.js?ver=1.4.1 | |
| https://ttucorp.com/wp-content/plugins/js_composer/assets/lib/bower/isotope/dist/isotope.pkgd.min.js?ver=5.7 | |
| https://ttucorp.com/wp-content/plugins/tonda-core/shortcodes/countdown/assets/js/plugins/jquery.coun | |
| https://github.com/js-cookie/js-cookie | |
| https://apis.google.com/js/platform.js1 | |
| http://www.ianlunn.co.uk/plugins/jquery-parallax/ | |
| https://ttucorp.com/wp-includes/css/dist/block-library/style.min.css | |
| https://d3v4i80726wzko.cloudfront.net/wp-content/uploads/20190503060452/INT2969_WEBSITEIMAGES_23-630x3751.jpg | |
| http://malsup.com/jquery/block/ | |
| https://ttucorp.com/wp-content/plugins/woocommerce/assets/js/select2/select2.full.min.js?ver=4.0.3c | |
| https://ttucorp.com/wp-content/plugins/woocommerce-gateway-authorize-net-aim/lib/skyverge/woocommerc | |
| http://tools.ietf.org/html/rfc1950 | |
| https://ttucorp.com/wp-content/plugins/yith-woocommerce-wishlist/assets/css/style.css?ver=2.2.13 | |
| https://easylist.to/) | |
| https://d3v4i80726wzko.cloudfront.net/wp-content/uploads/20190502234305/footer-cards.png | |
| http://www.opensource.org/licenses/mit-license.php | |
| https://ttucorp.com/wp-content/plugins/woochimp/assets/css/skins/woochimp_skin_2.css | |
| https://preprod-hangouts-googleapis.sandbox.google.com | |
| http://api.jqueryui.com/jQuery.widget/ | |
| https://ttucorp.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/style.css?ver=2.3.0 | |
| https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=kcXVPRWG7fMILHmzon0--fD3I | |
| http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions-01 | |
| https://csp.withgoogle.com/csp/recaptcha | |
| https://ttucorp.com/wp-includes/js/jquery/ui/widget.min.js?ver=1.11.4 | |
| https://csp.withgoogle.com/csp/report-to/apps-themes | |
| https://p.sfx.ms/is/invis.gif | |
| https://ttucorp.com/wp-content/themes/tonda/assets/js/modules.min.jss | |
| https://ttucorp.com/wp-content/themes/tonda/assets/js/modules/plugins/parallax.min.js | |
| https://ttucorp.com/wp-includes/js/hoverIntent.min.js?ver=1.8.1 | |
| https://ttucorp.com/wp-content/themes/tonda/assets/css/modules-responsive.min.css | |
| https://aadcdn.msftauth.net/ests/2.1/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.s | |
| https://ttucorp.com/wp-content/themes/tonda/assets/js/modules/plugins/jquery.waitforimages.jspr | |
| https://apis.google.com/js/client.js | |
| http://tonda.select-themes.com | |
| https://ttucorp.com/wp-content/plugins/woocommerce/assets/js/frontend/single-product.min.js?ver=3.7.0 | |
| https://ttucorp.com/wp-content/themes/tonda/assets/css/linear-icons/fonts/Linearicons-Free.woff2?w118d | |
| https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=kcXVPRWG7fMILHmzon0--fD3 | |
| https://ttucorp.com/wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.yith-wcwl.js?ver=2.2.13 | |
| https://ttucorp.com/wp-content/plugins/tonda-membership/assets/js/membership.min.js | |
| https://aadcdn.msftauth.net/ests/2.1/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg | |
| https://spoprod-a.akamaihd.net/files/onedrive-website-release-prod_master_20210924.001//filescss1-11 | |
| https://ttucorp.com/wp-content/themes/tonda/assets/css/ion-icons/fonts/ionicons.ttf?v=2.0.0P | |
| https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p | |
| https://csp.withgoogle.com/csp/report-to/recaptcha_ | |
| https://www.google.com/tools/feedback | |
| https://aadcdn.msftauth.net/ests/2.1/content/images/applogos/53_8b36337037cff88c3df203bb73d58e41.png | |
| https://ttucorp.com/wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.selectBox.min.js?ver=1.2.0 | |
| https://ttucorp.com/wp-includes/js/mediaelement/wp-mediaelement.min.js | |
| https://stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-7528776-1&cid=2067470840.1636384772&jid=1552750421&_v=5.7.2&z=115544500 | |
| https://www.google.com/accounts/OAuthLogin?issueuberauth=1 | |
| https://ttucorp.com/ | |
| https://ttucorp.com/wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js?ver=5.7 | |
| https://ttucorp.com/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.sl | |
| https://ttucorp.com/wp-includes/js/wp-emoji-release.min.js | |
| https://ttucorp.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.1.4 | |
| https://aadcdn.msftauth.net/ests/2.1/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd. | |
| https://ttucorp.com/wp-content/plugins/woocommerce/assets/js/frontend/single-product.min.js?ver=3.7. | |
| http://crls.pki.goog/gts1c3/QOvJ0N1sT2A.crl0 | |
| https://ttucorp.com/wp-content/plugins/tonda-core/shortcodes/counter/assets/js/plugins/absoluteCount | |
| https://ttucorp.com/wp-content/plugins/js_composer/assets/lib/bower/skrollr/dist/skrollr.min.js?ver= | |
| https://ttucorp.com/wp-content/plugins/tonda-core/shortcodes/custom-font/assets/js/plugins/typed.js | |
| https://ttucorp.com/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.layeranimation.min.js?version=5.4.8 | |
No malicious files found. See full and IOC report for all dropped files.
