http://161.35.236.24/tddwrt7s.sh
| Engine | Download Report | Detection | Info |
|---|---|---|---|
|
malicious
Score: 56
|
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
|
| IP | Country | Detection |
|---|---|---|
| 172.217.168.45 | United States |  |
| 172.217.168.36 | United States | |
| 239.255.255.250 | Reserved | |
| Click to see the 2 hidden entries | ||
| 142.250.203.110 | United States | |
| 161.35.236.24 | United States | |
| Name | IP | Detection |
|---|---|---|
| accounts.google.com | 172.217.168.45 | |
| www.google.com | 172.217.168.36 | |
| clients.l.google.com | 142.250.203.110 | |
| Click to see the 1 hidden entries | ||
| clients2.google.com | 0.0.0.0 | |
| Name | Detection |
|---|---|
| http://161.35.236.24/tddwrt7s.sh |  |
| https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=104.0.5112.81&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 | |
| https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard | |
| Name | File Type | Hashes | Detection |
|---|---|---|---|
C:\Users\user\Downloads\144431e0-e111-4e5a-ac50-52e448af83b2.tmp |
Bourne-Again shell script, ASCII text executable | # | |
C:\Users\user\Downloads\tddwrt7s.sh (copy) |
Bourne-Again shell script, ASCII text executable | # | |
C:\Users\user\Downloads\tddwrt7s.sh.crdownload (copy) |
Bourne-Again shell script, ASCII text executable | # | |
