Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
eSignature Req#9 for austin.wilde - ADP.pdf
|
PDF document, version 1.4, 1 pages
|
initial sample
|
 |
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\669d92c6-0117-4106-9f52-11953e7424d0.tmp
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-240524034639Z-177.bmp
|
PC bitmap, Windows 3.x format, 107 x -152 x 32, cbSize 65110, bits offset 54
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages
|
SQLite 3.x database, last written using SQLite version 3040000, file counter 15, database pages 21, cookie 0x5, schema 4,
UTF-8, version-valid-for 15
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal
|
SQLite Rollback Journal
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
|
Microsoft Cabinet archive data, Windows 2000/XP setup, 69993 bytes, 1 file, at 0x2c +A "authroot.stl", number 1, 6 datablocks,
0x1 compression
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A
|
data
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
|
data
|
modified
|
||
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0F5C59F9FA661F6F4C50B87FEF3A15A
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.3396
|
PostScript document text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst (copy)
|
PostScript document text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Sign_LHP_Banner
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Upsell_Cards
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\Edit_InApp_Aug2020
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents
|
SQLite 3.x database, last written using SQLite version 3040000, file counter 25, database pages 3, cookie 0x2, schema 4, UTF-8,
version-valid-for 25
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal
|
SQLite Rollback Journal
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\MSI9ca54.LOG
|
Unicode text, UTF-16, little-endian text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\acrobat_sbx\A91s0j573_vjk0wv_2mc.tmp
|
PDF document, version 1.6, 0 pages
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-05-23 23-46-36-752.log
|
ASCII text, with very long lines (393)
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-05-24 01-23-55-752.log
|
ASCII text, with very long lines (393)
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log
|
ASCII text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\acrocef_low\108c516e-9b9c-493f-b1b6-9e6783c4460a.tmp
|
gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\acrocef_low\6ccf29a2-91b8-4296-8443-8c353bdaee06.tmp
|
gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\acrocef_low\a9af1ef9-24ac-49c4-947e-6ca91209e1ff.tmp
|
gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 773038
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\acrocef_low\c003b12e-7caa-4a68-93a4-1b699baf9a00.tmp
|
gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142
|
dropped
|
||
|
Chrome Cache Entry: 199
|
SVG Scalable Vector Graphics image
|
dropped
|
||
|
Chrome Cache Entry: 200
|
SVG Scalable Vector Graphics image
|
downloaded
|
||
|
Chrome Cache Entry: 201
|
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 202
|
ASCII text, with very long lines (1414), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 203
|
PNG image data, 7 x 58, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 204
|
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 205
|
Web Open Font Format (Version 2), TrueType, length 28000, version 1.66
|
downloaded
|
||
|
Chrome Cache Entry: 206
|
SVG Scalable Vector Graphics image
|
downloaded
|
||
|
Chrome Cache Entry: 207
|
PNG image data, 2446 x 899, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 208
|
PNG image data, 108 x 24, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 209
|
Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 210
|
SVG Scalable Vector Graphics image
|
dropped
|
||
|
Chrome Cache Entry: 211
|
SVG Scalable Vector Graphics image
|
dropped
|
||
|
Chrome Cache Entry: 212
|
PNG image data, 7 x 58, 8-bit/color RGB, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 213
|
PNG image data, 2160 x 443, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 214
|
SVG Scalable Vector Graphics image
|
downloaded
|
||
|
Chrome Cache Entry: 215
|
PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 216
|
ASCII text, with very long lines (42526)
|
downloaded
|
||
|
Chrome Cache Entry: 217
|
Web Open Font Format (Version 2), TrueType, length 28584, version 1.66
|
downloaded
|
||
|
Chrome Cache Entry: 218
|
HTML document, ASCII text, with very long lines (1238)
|
downloaded
|
||
|
Chrome Cache Entry: 219
|
ASCII text, with very long lines (23398), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 220
|
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 221
|
ASCII text, with very long lines (65447)
|
downloaded
|
||
|
Chrome Cache Entry: 222
|
Web Open Font Format, TrueType, length 35970, version 1.0
|
downloaded
|
||
|
Chrome Cache Entry: 223
|
PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 224
|
Web Open Font Format, TrueType, length 36696, version 1.0
|
downloaded
|
||
|
Chrome Cache Entry: 225
|
HTML document, ASCII text, with very long lines (1445), with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 226
|
PNG image data, 108 x 24, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 227
|
SVG Scalable Vector Graphics image
|
downloaded
|
||
|
Chrome Cache Entry: 228
|
SVG Scalable Vector Graphics image
|
dropped
|
||
|
Chrome Cache Entry: 229
|
PNG image data, 2446 x 899, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 230
|
ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 231
|
ASCII text, with very long lines (855)
|
downloaded
|
||
|
Chrome Cache Entry: 232
|
Web Open Font Format (Version 2), TrueType, length 43596, version 1.0
|
downloaded
|
||
|
Chrome Cache Entry: 233
|
PNG image data, 36 x 3, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 234
|
PNG image data, 506 x 303, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 235
|
SVG Scalable Vector Graphics image
|
downloaded
|
||
|
Chrome Cache Entry: 236
|
HTML document, Unicode text, UTF-8 text, with very long lines (309), with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 237
|
PNG image data, 36 x 3, 8-bit/color RGB, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 238
|
SVG Scalable Vector Graphics image
|
dropped
|
||
|
Chrome Cache Entry: 239
|
ASCII text, with very long lines (1437), with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 240
|
PNG image data, 506 x 303, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 241
|
ASCII text, with very long lines (45667)
|
downloaded
|
||
|
Chrome Cache Entry: 242
|
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 243
|
PNG image data, 2160 x 443, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 244
|
Web Open Font Format (Version 2), TrueType, length 93276, version 1.0
|
downloaded
|
There are 86 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
|
"C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\eSignature Req#9 for austin.wilde - ADP.pdf"
|
||
|
C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
|
"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
|
||
|
C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
|
"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService
--lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0"
--lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2092
--field-trial-handle=1736,i,2946731415688000830,9123811849381138657,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker
/prefetch:8
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://pzbbk.bmaxc.com/PZbBK/#YXVzdGluLndpbGRlQG5hdGlvbmFsbWkuY29t
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US
--service-sandbox-type=none --mojo-platform-channel-handle=2284 --field-trial-handle=2004,i,14991639144976445769,14267736630313136858,262144
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
/prefetch:8
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://pzbbk.bmaxc.com/PZbBK/#YXVzdGluLndpbGRlQG5hdGlvbmFsbWkuY29t
|
|
||
|
https://pzbbk.bmaxc.com/fgqdwyiqcxipcyfedfkvq069738076853334464471473fgesnqhkxulikfunjp?NMRVQEYPLGDPLIPMOMBAHJORX9418796650215518088MJNUOPPLRCEZQLMKRMBZFR
|
|
||
|
https://pzbbk.bmaxc.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
|
188.114.96.3
|
||
|
https://pzbbk.bmaxc.com/455SdbSn09pP2zMcabp3EfrzEAxy70
|
188.114.96.3
|
||
|
https://pzbbk.bmaxc.com/opHTkKCF2qNGgmogzDX6BgOeKnNfI9cwP0dCqyPHvpuxstSKYjpSI5QpHYJ5SK6eoSMvLugsugahcd240
|
188.114.96.3
|
||
|
https://www.godaddy.com/legal/agreements/privacy-policy?target=_blank
|
unknown
|
||
|
https://code.jquery.com/jquery-3.6.0.min.js
|
151.101.130.137
|
||
|
https://developers.google.com/recaptcha/docs/faq#localhost_support
|
unknown
|
||
|
https://sso.godaddy.com/v1/account/reset?app=o365&realm=pass
|
unknown
|
||
|
https://pzbbk.bmaxc.com/34NLpGabkeJ68915
|
188.114.96.3
|
||
|
https://support.google.com/recaptcha#6262736
|
unknown
|
||
|
https://pzbbk.bmaxc.com/rsP5BGuB34KhQuv40
|
188.114.96.3
|
||
|
https://pzbbk.bmaxc.com/efOoq4IHiyrIFPjygpdc78pOvaMmv5wkl93
|
188.114.96.3
|
||
|
https://pzbbk.bmaxc.com/PZbBK/
|
188.114.96.3
|
||
|
https://pzbbk.bmaxc.com/yzgItCcHX78qYyqr50
|
188.114.96.3
|
||
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=888a4ff5cf314262
|
104.17.2.184
|
||
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=888a4cdc0a3f7c99
|
104.17.2.184
|
||
|
https://challenges.cloudflare.com/turnstile/v0/b/695da7821231/api.js
|
104.17.3.184
|
||
|
https://support.google.com/recaptcha/?hl=en#6223828
|
unknown
|
||
|
https://a.nel.cloudflare.com/report/v4?s=UNTuFWHJ%2FDX4Hd7nu0Xu%2Fn4uRi1B8x4OWXDNTNSYrn3dCbhLilZQJI4HFZn8cdX66OdqZb0C9YE5F3AgB9fcG42UDmGgRFWLwUMT0DTjJpsTnFKCmJ7JAg%2Fd6R8fyw%3D%3D
|
35.190.80.1
|
||
|
https://cloud.google.com/contact
|
unknown
|
||
|
https://pzbbk.bmaxc.com/yza655UytwPvxNsTaPu6mn0wKv4aW3uLGKTYZ9CA5pF90172
|
188.114.96.3
|
||
|
https://pzbbk.bmaxc.com/ab6nGtJCpqKtecd21
|
188.114.96.3
|
||
|
https://www.godaddy.com/legal/agreements/cookie-policy
|
unknown
|
||
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/958966319:1716520531:jp36mfbmqkjyZOlJhAo92DyxZu0ifQ-TQqWm3PtkCYs/888a4cdc0a3f7c99/4bc27c0bcdef59f
|
104.17.2.184
|
||
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/888a4cdc0a3f7c99/1716522405471/63c35392c5d76ec2e5da5927260563f5e1779a8db350be2adab6d4d93333c0fc/zftVzdvLqSLspZW
|
104.17.2.184
|
||
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/888a4ff5cf314262/1716522532350/tplweGKAMsZ5l7g
|
104.17.2.184
|
||
|
https://www.google.com/recaptcha/api.js
|
142.250.184.196
|
||
|
https://pzbbk.bmaxc.com/mnL9qQzKboKenpc3Qqmzpz0R2O9n1anpSijWu8jxUjN0X77tq2kz5fhr3fB90150
|
188.114.96.3
|
||
|
https://support.google.com/recaptcha/#6175971
|
unknown
|
||
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1244738033:1716520527:3q-Y1pW0PRM8X-7F9TL8ehQ1A3nug3zJDCsGZhlVs3Q/888a4ff5cf314262/c89861bcddb28ab
|
104.17.2.184
|
||
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
|
104.17.2.184
|
||
|
https://pzbbk.bmaxc.com/kl7YmrdjpRn4KuuhHOFgl9QGinOXww7zaWOzIBgXuf56OIpGgRreO7sh99OXtKWK80Klwx218
|
188.114.96.3
|
||
|
https://pzbbk.bmaxc.com/34YSyFAZhqQqBLBswa8rNn4ZOO0TklxGL3d5tPZQQU89110
|
188.114.96.3
|
||
|
https://pzbbk.bmaxc.com/web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket
|
188.114.96.3
|
||
|
https://pzbbk.bmaxc.com/hxZlEX2nDPuSKeUqb6lV35gNoHGeh2z76eREEQEwdEK331ntNV3AUdkJvenb
|
188.114.96.3
|
||
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/0f5kx/0x4AAAAAAAYuliEKcdKl1b40/auto/normal
|
|||
|
https://www.google.com/recaptcha/api2/
|
unknown
|
||
|
https://pzbbk.bmaxc.com/rs8qirWT5OBjlKX6XVZ2VX9Zy0ijGMHjQcu05CaOxU2BIWYOkpPxcd200
|
188.114.96.3
|
||
|
https://pzbbk.bmaxc.com/favicon.ico
|
188.114.96.3
|
||
|
https://pzbbk.bmaxc.com/ypcNe3ItLpYMxa13FfuNBDn958tVLvUr5yTAY88V2DvBQef
|
188.114.96.3
|
||
|
https://support.google.com/recaptcha
|
unknown
|
||
|
https://pzbbk.bmaxc.com/ijwhsJjIlQ3R4JCzO9ZwL32d1qrFNI80C933hGsCbPhgmwZVAeFeab230
|
188.114.96.3
|
||
|
https://pzbbk.bmaxc.com/gh6f4w5Kl6WlEZfwcky3gpzRpxFUmnDpxyAaSdmWQmJFmHNiCo12210
|
188.114.96.3
|
||
|
https://cloud.google.com/recaptcha-enterprise/billing-information
|
unknown
|
||
|
https://recaptcha.net
|
unknown
|
||
|
https://www.apache.org/licenses/
|
unknown
|
||
|
https://pzbbk.bmaxc.com/PZbBK/?NZaustin.wilde@nationalmi.com
|
188.114.96.3
|
||
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/888a4cdc0a3f7c99/1716522405470/FL2oCMb4emzpZXI
|
104.17.2.184
|
||
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/888a4ff5cf314262/1716522532348/bb6b8bdfd5d28c30cb7ba5c66737d4c946c41fb0bc52c393a5d3d03532fbc2f4/rl3qEEqSB5rCLC5
|
104.17.2.184
|
||
|
https://pzbbk.bmaxc.com/opojMoxbiQKz9R1r3ef1gZhJlAggj6vjvbVy67140
|
188.114.96.3
|
||
|
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
|
unknown
|
||
|
https://www.gstatic.c..?/recaptcha/releases/joHA60MeME-PNviL59xVH9zs/recaptcha__.
|
unknown
|
||
|
https://play.google.com/log?format=json&hasfast=true
|
unknown
|
||
|
https://www.adobe.co
|
unknown
|
||
|
https://www.godaddy.com/
|
unknown
|
||
|
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
|
unknown
|
||
|
https://cdn.socket.io/4.6.0/socket.io.min.js
|
18.245.31.89
|
||
|
https://pzbbk.bmaxc.com/90k0p8G4b2kZen7t9aNUPoI12R55cXzPlyz80
|
188.114.96.3
|
||
|
https://pzbbk.bmaxc.com/uvPESfo4avjhaXSkzlKPB8AqYITMzopNbZPQaHOxe34124
|
188.114.96.3
|
||
|
https://a.nel.cloudflare.com/report/v4?s=twS5Zr4dx8%2FQVp%2FUKLHjmei3u26DN2r1dlC3GRmMW2DVJ7qkm0ejjp6H2O04kmJkOYq8Hqvm9RIqa1u1dH4ZvmDIaDBo%2BUaRzzwYf7%2BODJAeZWrsKQZCpAaVeBAZIA%3D%3D
|
35.190.80.1
|
||
|
https://pzbbk.bmaxc.com/90Jb0oHJul0tKVhEn67KceGst55
|
188.114.96.3
|
There are 52 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
bg.microsoft.map.fastly.net
|
199.232.210.172
|
||
|
a.nel.cloudflare.com
|
35.190.80.1
|
||
|
code.jquery.com
|
151.101.130.137
|
||
|
d2vgu95hoyrpkh.cloudfront.net
|
18.245.31.89
|
||
|
pzbbk.bmaxc.com
|
188.114.96.3
|
||
|
challenges.cloudflare.com
|
104.17.3.184
|
||
|
www.google.com
|
142.250.185.164
|
||
|
cdn.socket.io
|
unknown
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
192.168.2.7
|
unknown
|
unknown
|
||
|
54.227.187.23
|
unknown
|
United States
|
||
|
104.17.3.184
|
challenges.cloudflare.com
|
United States
|
||
|
151.101.130.137
|
code.jquery.com
|
United States
|
||
|
142.250.185.164
|
www.google.com
|
United States
|
||
|
35.190.80.1
|
a.nel.cloudflare.com
|
United States
|
||
|
142.250.184.196
|
unknown
|
United States
|
||
|
18.245.31.89
|
d2vgu95hoyrpkh.cloudfront.net
|
United States
|
||
|
23.47.168.24
|
unknown
|
United States
|
||
|
239.255.255.250
|
unknown
|
Reserved
|
||
|
188.114.97.3
|
unknown
|
European Union
|
||
|
188.114.96.3
|
pzbbk.bmaxc.com
|
European Union
|
||
|
104.17.2.184
|
unknown
|
United States
|
There are 3 hidden IPs, click here to show them.
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
|
aFS
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
|
tDIText
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
|
tFileName
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
|
tFileSource
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
|
sFileAncestors
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
|
sDI
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
|
sDate
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
|
uFileSize
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
|
uPageCount
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
|
sAssetId
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
|
bisSharedFile
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c2
|
aFS
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c2
|
tDIText
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c2
|
tFileName
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c2
|
sDI
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c2
|
sDate
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c2
|
uFileSize
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c2
|
uPageCount
|
There are 8 hidden registries, click here to show them.
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://pzbbk.bmaxc.com/PZbBK/#YXVzdGluLndpbGRlQG5hdGlvbmFsbWkuY29t
|
|
|
|
https://pzbbk.bmaxc.com/fgqdwyiqcxipcyfedfkvq069738076853334464471473fgesnqhkxulikfunjp?NMRVQEYPLGDPLIPMOMBAHJORX9418796650215518088MJNUOPPLRCEZQLMKRMBZFR
|
|
|
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/0f5kx/0x4AAAAAAAYuliEKcdKl1b40/auto/normal
|
||
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/0f5kx/0x4AAAAAAAYuliEKcdKl1b40/auto/normal
|
||
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/0f5kx/0x4AAAAAAAYuliEKcdKl1b40/auto/normal
|
||
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/0f5kx/0x4AAAAAAAYuliEKcdKl1b40/auto/normal
|
||
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/0f5kx/0x4AAAAAAAYuliEKcdKl1b40/auto/normal
|