IOC Report
https://velocity-fun-2217.my.salesforce.com/sfc/p/QH000002usKl/a/QH0000002nEL/LTOT56SDzrUp.yFyeUs.72X20B9VMYmnaeC6PCTUZvs

loading gif

Files

File Path
Type
Category
Malicious
C:\Users\user\Downloads\PaymentConfirmation.html.crdownload
HTML document, ASCII text, with very long lines (65536), with no line terminators
dropped
malicious
C:\Users\user\Downloads\PaymentConfirmation.html (copy)
HTML document, ASCII text, with very long lines (65536), with no line terminators
dropped
Chrome Cache Entry: 114
ASCII text, with very long lines (762)
downloaded
Chrome Cache Entry: 115
ASCII text, with very long lines (11046)
downloaded
Chrome Cache Entry: 116
ASCII text
downloaded
Chrome Cache Entry: 117
MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
dropped
Chrome Cache Entry: 118
HTML document, ASCII text
downloaded
Chrome Cache Entry: 119
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 120
ASCII text
downloaded
Chrome Cache Entry: 121
Unicode text, UTF-8 text, with very long lines (25715)
downloaded
Chrome Cache Entry: 122
ASCII text, with very long lines (3980)
downloaded
Chrome Cache Entry: 123
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 124
ASCII text, with very long lines (11046)
downloaded
Chrome Cache Entry: 125
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 126
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 127
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 128
HTML document, ASCII text
downloaded
Chrome Cache Entry: 129
MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
downloaded
There are 9 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2224 --field-trial-handle=2004,i,2822885188252190258,1000471029777493615,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://velocity-fun-2217.my.salesforce.com/sfc/p/QH000002usKl/a/QH0000002nEL/LTOT56SDzrUp.yFyeUs.72X20B9VMYmnaeC6PCTUZvs"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Downloads\PaymentConfirmation.html"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2108 --field-trial-handle=2004,i,463736402510498912,15574706923855961568,262144 /prefetch:8

URLs

Name
IP
Malicious
https://velocity-fun-2217.my.salesforce.com/sfc/p/QH000002usKl/a/QH0000002nEL/LTOT56SDzrUp.yFyeUs.72X20B9VMYmnaeC6PCTUZvs
malicious
http://www.apache.org/licenses/LICENSE-2.0
unknown
https://velocity-fun-2217.my.salesforce.com/sCSS/60.0/sprites/1705602481000/Theme3/default/gc/contentDistribution.css
3.9.187.230
https://velocity-fun-2217.my.salesforce.com/sfc/ld/QH000002usKl/a/QH0000002nEL/LTOT56SDzrUp.yFyeUs.72X20B9VMYmnaeC6PCTUZvs/aura?r=0&ui-content-components-forceContent-contentDistributionViewer.ContentDistributionViewer.getContentDistributionInfo=1
3.9.187.230
http://momentjs.com/guides/#/warnings/zone/
unknown
https://velocity-fun-2217.my.salesforce.com/sfc/ld/QH000002usKl/a/QH0000002nEL/LTOT56SDzrUp.yFyeUs.72X20B9VMYmnaeC6PCTUZvs/forceContent/contentDistributionApp.app?aura.format=JSON&aura.formatAdapter=LIGHTNING_OUT
3.9.187.230
https://velocity-fun-2217.my.salesforce.com/auraCmpDef?_au=yYM3XHVkMyjSW6pzoV07SA&_c=false&_cac=0&_def=markup://lightning:iconSvgTemplatesUtility&_density=VIEW_ONE&_ff=DESKTOP&_l=true&_l10n=en_US&_lrmc=-386269907&_style=-967093545&_uid=cTOlNQKHjpgxabUxr4qLPg&aura.app=markup://forceContent:contentDistributionApp&aura.mode=PROD
3.9.187.230
https://velocity-fun-2217.my.salesforce.com/sfc/p/QH000002usKl/a/QH0000002nEL/LTOT56SDzrUp.yFyeUs.72X20B9VMYmnaeC6PCTUZvs
3.9.187.230
https://velocity-fun-2217.lightning.force.com/aura?r=0&ui-content-components-forceContent-contentDistributionViewer.ContentDistributionViewer.getContentDistributionInfo=1
3.9.187.230
https://velocity-fun-2217.my.salesforce.com/static/111213/sfc/javascript/lib/AC_OETags.js
3.9.187.230
http://polymer.github.io/PATENTS.txt
unknown
https://velocity-fun-2217.my.salesforce.com/lightning/lightning.out.delegate.js?v=1716553090734
3.9.187.230
https://velocity-fun-2217.my.salesforce.com/sfc/ld/QH000002usKl/a/QH0000002nEL/LTOT56SDzrUp.yFyeUs.72X20B9VMYmnaeC6PCTUZvs/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22forceContent%3AcontentDistributionApp%22%2C%22serializationVersion%22%3A%221-248.10.5-5.0.10-b%22%2C%22parts%22%3A%22t%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FforceContent%3AcontentDistributionApp%22%3A%22yYM3XHVkMyjSW6pzoV07SA%22%7D%2C%22dns%22%3A%22c%22%2C%22ls%22%3A2%2C%22lrmc%22%3A%22-386269907%22%7D/appcore.js?2=
3.9.187.230
https://velocity-fun-2217.my.salesforce.com/visualforce/session?url=https%3A%2F%2Fvelocity-fun-2217.lightning.force.com%2Faura%3Fr%3D0%26ui-content-components-forceContent-contentDistributionViewer.ContentDistributionViewer.getContentDistributionInfo%3D1
3.9.187.230
https://velocity-fun-2217.my.salesforce.com/visualforce/session?url=https%3A%2F%2Fvelocity-fun-2217.lightning.force.com%2Faura%3Fr%3D1%26ui-content-components-forceContent-previewInfoProvider.PreviewInfoProvider.getPreviewInfo%3D1
3.9.187.230
http://momentjs.com/guides/#/warnings/add-inverted-param/
unknown
http://polymer.github.io/LICENSE.txt
unknown
https://velocity-fun-2217.my.salesforce.com/sfc/ld/QH000002usKl/a/QH0000002nEL/LTOT56SDzrUp.yFyeUs.72X20B9VMYmnaeC6PCTUZvs/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22forceContent%3AcontentDistributionApp%22%2C%22serializationVersion%22%3A%221-248.10.5-5.0.10-b%22%2C%22parts%22%3A%22t%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FforceContent%3AcontentDistributionApp%22%3A%22yYM3XHVkMyjSW6pzoV07SA%22%7D%2C%22dns%22%3A%22c%22%2C%22ls%22%3A2%2C%22lrmc%22%3A%22-386269907%22%7D/app.js?2=
3.9.187.230
file:///C:/Users/user/Downloads/PaymentConfirmation.html
http://momentjs.com/guides/#/warnings/dst-shifted/
unknown
https://wearned.com/outstandingi.php
unknown
http://polymer.github.io/AUTHORS.txt
unknown
https://velocity-fun-2217.my.salesforce.com/sfc/ld/QH000002usKl/a/QH0000002nEL/LTOT56SDzrUp.yFyeUs.72X20B9VMYmnaeC6PCTUZvs/aura?r=1&ui-content-components-forceContent-previewInfoProvider.PreviewInfoProvider.getPreviewInfo=1
3.9.187.230
https://velocity-fun-2217.my.salesforce.com/sCSS/60.0/sprites/1705602481000/Theme2/default/gc/contentDistribution.css
3.9.187.230
https://velocity-fun-2217.my.salesforce.com/sfc/p/#QH000002usKl/a/QH0000002nEL/LTOT56SDzrUp.yFyeUs.72X20B9VMYmnaeC6PCTUZvs
http://momentjs.com/guides/#/warnings/js-date/
unknown
https://velocity-fun-2217.my.salesforce.com/sfc/ld/QH000002usKl/a/QH0000002nEL/LTOT56SDzrUp.yFyeUs.72X20B9VMYmnaeC6PCTUZvs/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22forceContent%3AcontentDistributionApp%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FforceContent%3AcontentDistributionApp%22%3A%22yYM3XHVkMyjSW6pzoV07SA%22%7D%2C%22mlr%22%3A1%2C%22pathPrefix%22%3A%22%2Fsfc%2Fld%2FQH000002usKl%2Fa%2FQH0000002nEL%2FLTOT56SDzrUp.yFyeUs.72X20B9VMYmnaeC6PCTUZvs%22%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/resources.js?pv=1716187966000941953407&rv=-1
3.9.187.230
https://velocity-fun-2217.my.salesforce.com/sfc/ld/QH000002usKl/a/QH0000002nEL/LTOT56SDzrUp.yFyeUs.72X20B9VMYmnaeC6PCTUZvs/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22forceContent%3AcontentDistributionApp%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FforceContent%3AcontentDistributionApp%22%3A%22yYM3XHVkMyjSW6pzoV07SA%22%7D%2C%22mlr%22%3A1%2C%22pathPrefix%22%3A%22%2Fsfc%2Fld%2FQH000002usKl%2Fa%2FQH0000002nEL%2FLTOT56SDzrUp.yFyeUs.72X20B9VMYmnaeC6PCTUZvs%22%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/bootstrap.js?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..bOxVYoKntZu4qBsP3ckfz5ree_X3jQxAuytH6jE55fc
3.9.187.230
https://velocity-fun-2217.my.salesforce.com/sfc/ld/QH000002usKl/a/QH0000002nEL/LTOT56SDzrUp.yFyeUs.72X20B9VMYmnaeC6PCTUZvs/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22forceContent%3AcontentDistributionApp%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FforceContent%3AcontentDistributionApp%22%3A%22yYM3XHVkMyjSW6pzoV07SA%22%7D%2C%22styleContext%22%3A%7B%22c%22%3A%22webkit%22%2C%22x%22%3A%5B%22isDesktop%22%5D%2C%22tokens%22%3A%5B%22markup%3A%2F%2Fforce%3AsldsTokens%22%2C%22markup%3A%2F%2Fforce%3Abase%22%2C%22markup%3A%2F%2Fforce%3AformFactorLarge%22%5D%2C%22tuid%22%3A%22Co0Kry3W16Y_2a-Eqon3-w%22%2C%22cuid%22%3A-967093545%7D%2C%22pathPrefix%22%3A%22%2Fsfc%2Fld%2FQH000002usKl%2Fa%2FQH0000002nEL%2FLTOT56SDzrUp.yFyeUs.72X20B9VMYmnaeC6PCTUZvs%22%7D/app.css?2=
3.9.187.230
https://velocity-fun-2217.lightning.force.com/aura?r=1&ui-content-components-forceContent-previewInfoProvider.PreviewInfoProvider.getPreviewInfo=1
3.9.187.230
https://velocity-fun-2217.my.salesforce.com/sfc/ld/QH000002usKl/a/QH0000002nEL/LTOT56SDzrUp.yFyeUs.72X20B9VMYmnaeC6PCTUZvs/auraCmpDef?_au=yYM3XHVkMyjSW6pzoV07SA&_c=false&_cac=0&_density=VIEW_ONE&_ff=DESKTOP&_l=true&_l10n=en_US&_lrmc=-386269907&_style=-967093545&aura.app=markup://forceContent:contentDistributionApp&aura.mode=PROD&_def=markup://lightning:iconSvgTemplatesUtility&_uid=LATEST
3.9.187.230
http://momentjs.com/guides/#/warnings/define-locale/
unknown
https://velocity-fun-2217.my.salesforce.com/sfc/ld/QH000002usKl/a/QH0000002nEL/LTOT56SDzrUp.yFyeUs.72X20B9VMYmnaeC6PCTUZvs/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22forceContent%3AcontentDistributionApp%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FforceContent%3AcontentDistributionApp%22%3A%22yYM3XHVkMyjSW6pzoV07SA%22%7D%2C%22mlr%22%3A1%2C%22pathPrefix%22%3A%22%2Fsfc%2Fld%2FQH000002usKl%2Fa%2FQH0000002nEL%2FLTOT56SDzrUp.yFyeUs.72X20B9VMYmnaeC6PCTUZvs%22%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/inline.js?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..bOxVYoKntZu4qBsP3ckfz5ree_X3jQxAuytH6jE55fc
3.9.187.230
https://velocity-fun-2217.file.force.com/sfc/dist/version/download/?oid=00DQH000002usKl&ids=068QH000000nQCfYAM&d=%2Fa%2FQH0000002nEL%2FLTOT56SDzrUp.yFyeUs.72X20B9VMYmnaeC6PCTUZvs&operationContext=DELIVERY&viewId=05HQH000000GdS12AK&dpt=
3.9.187.230
https://velocity-fun-2217.my.salesforce.com/favicon.ico
3.9.187.230
https://velocity-fun-2217.my.salesforce.com/sfc/dist/version/download/?oid=00DQH000002usKl&ids=068QH000000nQCfYAM&d=/a/QH0000002nEL/LTOT56SDzrUp.yFyeUs.72X20B9VMYmnaeC6PCTUZvs&operationContext=DELIVERY&viewId=05HQH000000GdS12AK&dpt=
3.9.187.230
https://velocity-fun-2217.my.salesforce.com/lightning/lightning.out.js
3.9.187.230
https://velocity-fun-2217.my.salesforce.com/sfc/ld/QH000002usKl/a/QH0000002nEL/LTOT56SDzrUp.yFyeUs.72X20B9VMYmnaeC6PCTUZvs/_slds/icons/doctype-sprite/svg/symbols.svg?cache=10.8.2
3.9.187.230
https://velocity-fun-2217.my.salesforce.com/sfc/ld/QH000002usKl/a/QH0000002nEL/LTOT56SDzrUp.yFyeUs.72X20B9VMYmnaeC6PCTUZvs/auraFW/javascript/ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA/aura_prod.js
3.9.187.230
http://polymer.github.io/CONTRIBUTORS.txt
unknown
https://velocity-fun-2217.my.salesforce.com/sfc/p/
3.9.187.230
https://www.lightningdesignsystem.com/resources/icons/
unknown
http://momentjs.com/guides/#/warnings/min-max/
unknown
There are 32 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
bg.microsoft.map.fastly.net
199.232.214.172
gbr58.sfdc-5pakla.salesforce.com
3.9.187.230
www.google.com
142.250.185.132
fp2e7a.wpc.phicdn.net
192.229.221.95
velocity-fun-2217.lightning.force.com
unknown
velocity-fun-2217.file.force.com
unknown
velocity-fun-2217.my.salesforce.com
unknown

IPs

IP
Domain
Country
Malicious
3.9.187.230
gbr58.sfdc-5pakla.salesforce.com
United States
239.255.255.250
unknown
Reserved
192.168.2.7
unknown
unknown
142.250.185.132
www.google.com
United States

DOM / HTML

URL
Malicious
file:///C:/Users/user/Downloads/PaymentConfirmation.html
malicious
https://velocity-fun-2217.my.salesforce.com/sfc/p/#QH000002usKl/a/QH0000002nEL/LTOT56SDzrUp.yFyeUs.72X20B9VMYmnaeC6PCTUZvs
https://velocity-fun-2217.my.salesforce.com/sfc/p/#QH000002usKl/a/QH0000002nEL/LTOT56SDzrUp.yFyeUs.72X20B9VMYmnaeC6PCTUZvs
https://velocity-fun-2217.my.salesforce.com/sfc/p/#QH000002usKl/a/QH0000002nEL/LTOT56SDzrUp.yFyeUs.72X20B9VMYmnaeC6PCTUZvs
https://velocity-fun-2217.my.salesforce.com/sfc/p/#QH000002usKl/a/QH0000002nEL/LTOT56SDzrUp.yFyeUs.72X20B9VMYmnaeC6PCTUZvs