Rechnungskorrektur 2022.20.05_1305.lnk
| Engine | Download Report | Detection | Info |
|---|---|---|---|
|
malicious
|
||
|
malicious
Score: 100
|
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
|
| IP | Country | Detection |
|---|---|---|
| 173.82.82.196 | United States |  |
| 103.89.5.69 | Indonesia |  |
| Name | IP | Detection |
|---|---|---|
| mandom.co.id | 103.89.5.69 | |
| Name | Detection |
|---|---|
| https://173.82.82.196:8080/ | |
| https://173.82.82.196/ | |
| https://173.82.82.196:8080/t | |
| Click to see the 58 hidden entries | |
| http://pacemaker.cd/images/Xc/ | |
| http://marmaris.com.br/wp-admin/2cfpSuAH/ | |
| http://mandom.co.id/assets/TpIIt7SmNBsWCECLoHrS/ | |
| http://masidiomas.com/D4WStats/GAhmgvhLgUn6/ | |
| https://173.82.82.196:8080/tem | |
| https://bpsjambi.id/about/VPe69A9Tk/ | |
| https://%s.xboxlive.com | |
| https://dev.virtualearth.net/mapcontrol/logging.ashx | |
| https://ecn.dev.virtualearth.net/mapcontrol/mapconfiguration.ashx?name=native&v= | |
| https://dev.virtualearth.net/REST/v1/Locations | |
| https://dev.ditu.live.com/mapcontrol/mapconfiguration.ashx?name=native&v= | |
| https://dev.virtualearth.net/REST/v1/JsonFilter/VenueMaps/data/ | |
| https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gd?pv=1&r= | |
| http://mandom.co.id | |
| https://dev.virtualearth.net/webservices/v1/LoggingService/LoggingService.svc/Log? | |
| http://crl.ver) | |
| https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gdi?pv=1&r= | |
| https://github.com/Pester/Pester | |
| https://dynamic.api.tiles.ditu.live.com/odvs/gdi?pv=1&r= | |
| https://dev.ditu.live.com/REST/v1/Transit/Stops/ | |
| https://dynamic.t | |
| http://mandom.co.idx | |
| https://dev.virtualearth.net/REST/v1/Routes/Transit | |
| https://t0.ssl.ak.tiles.virtualearth.net/tiles/gen | |
| https://dynamic.api.tiles.ditu.live.com/odvs/gdv?pv=1&r= | |
| https://activity.windows.com | |
| https://dev.ditu.live.com/REST/v1/Locations | |
| https://%s.dnet.xboxlive.com | |
| https://dev.ditu.live.com/REST/v1/JsonFilter/VenueMaps/data/ | |
| https://dynamic.api.tiles.ditu.live.com/odvs/gd?pv=1&r= | |
| http://crl.microso | |
| https://dev.ditu.live.com/REST/v1/Routes/ | |
| https://dev.virtualearth.net/REST/v1/Routes/Driving | |
| https://t0.ssl.ak.dynamic.tiles.virtualearth.net/comp/gen.ashx | |
| https://dev.ditu.live.com/REST/v1/Traffic/Incidents/ | |
| https://t0.tiles.ditu.live.com/tiles/gen | |
| https://contoso.com/License | |
| https://dev.virtualearth.net/REST/v1/Routes/Walking | |
| https://dev.virtualearth.net/mapcontrol/HumanScaleServices/GetBubbles.ashx?n= | |
| https://dev.ditu.live.com/mapcontrol/logging.ashx | |
| https://dev.ditu.live.com/REST/v1/Imagery/Copyright/ | |
| https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gri?pv=1&r= | |
| http://mandom.co.id/ | |
| https://dev.virtualearth.net/REST/v1/Transit/Schedules/ | |
| https://contoso.com/Icon | |
| https://contoso.com/ | |
| https://nuget.org/nuget.exe | |
| http://mandom.co | |
| http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name | |
| http://www.bingmapsportal.com | |
| https://ecn.dev.virtualearth.net/REST/v1/Imagery/Copyright/ | |
| https://dynamic.t0.tiles.ditu.live.com/comp/gen.ashx | |
| http://nuget.org/NuGet.exe | |
| http://yamada-shoshi.main.jp/yamada-shoshi/V61hH/ | |
| https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gdv?pv=1&r= | |
| http://pesterbdd.com/images/Pester.png | |
| http://www.apache.org/licenses/LICENSE-2.0.html | |
| https://dev.virtualearth.net/REST/v1/Routes/ | |
| Name | File Type | Hashes | Detection |
|---|---|---|---|
C:\Users\user\AppData\Local\JydgVvbPD\MevgMvopaw.BUS |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows | # | |
C:\Windows\System32\UjKMhzOwg\JWwyPPSZDhCDc.dll (copy) |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows | # | |
C:\ProgramData\Microsoft\Network\Downloader\qmgr.db |
Extensible storage engine DataBase, version 0x620, checksum 0x327a5cf0, page size 16384, DirtyShutdown, Windows version 10.0 | # | |
| Click to see the 8 hidden entries | |||
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506 |
Microsoft Cabinet archive data, 61480 bytes, 1 file | # | |
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506 |
data | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive |
data | # | |
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_mtqidudl.edj.psm1 |
very short file (no magic) | # | |
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_sjimkgkg.bpr.ps1 |
very short file (no magic) | # | |
C:\Users\user\Documents\20220523\PowerShell_transcript.123716.8mu6q_Jh.20220523085746.txt |
UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators | # | |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp |
ASCII text, with no line terminators | # | |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\MpCmdRun.log |
Little-endian UTF-16 Unicode text, with CRLF, CR line terminators | # | |
