Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon May 27 21:44:19 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon May 27 21:44:19 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon May 27 21:44:19 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon May 27 21:44:19 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon May 27 21:44:19 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
Chrome Cache Entry: 66
|
SVG Scalable Vector Graphics image
|
downloaded
|
||
|
Chrome Cache Entry: 67
|
PNG image data, 80 x 106, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 68
|
PNG image data, 32 x 32, 8-bit/color RGBA, interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 69
|
ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 70
|
ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 71
|
MS Windows icon resource - 1 icon, 32x32, 8 bits/pixel
|
downloaded
|
||
|
Chrome Cache Entry: 72
|
PNG image data, 18 x 22, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 73
|
ASCII text, with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 74
|
PNG image data, 32 x 32, 8-bit/color RGBA, interlaced
|
dropped
|
||
|
Chrome Cache Entry: 75
|
HTML document, ASCII text, with very long lines (65536), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 76
|
HTML document, Unicode text, UTF-8 text, with very long lines (1543), with CRLF line terminators
|
dropped
|
||
|
Chrome Cache Entry: 77
|
PNG image data, 29 x 29, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 78
|
PNG image data, 80 x 106, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 79
|
ASCII text, with very long lines (518), with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 80
|
ASCII text, with very long lines (417), with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 81
|
ASCII text, with very long lines (21777)
|
downloaded
|
||
|
Chrome Cache Entry: 82
|
Unicode text, UTF-8 (with BOM) text, with very long lines (472), with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 83
|
SVG Scalable Vector Graphics image
|
dropped
|
||
|
Chrome Cache Entry: 84
|
ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 85
|
PNG image data, 13 x 13, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 86
|
PNG image data, 13 x 8, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 87
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 88
|
PNG image data, 29 x 29, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 89
|
PNG image data, 13 x 8, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 90
|
ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 91
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 92
|
ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 93
|
PNG image data, 13 x 13, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 94
|
PNG image data, 18 x 22, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 95
|
ASCII text, with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 96
|
MS Windows icon resource - 1 icon, 32x32, 8 bits/pixel
|
dropped
|
There are 28 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US
--service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=2012,i,3164281449563933196,14320066541158217082,262144
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
/prefetch:8
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://plastic-fringe-pentagon.glitch.me/public/n0htu.htm"
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://plastic-fringe-pentagon.glitch.me/public/n0htu.htm
|
 |
||
|
https://plastic-fringe-pentagon.glitch.me/public/n0htu.htm
|
|
||
|
https://eclipse.website.yandexcloud.net/RNHouseSansW05-Regular.ttf
|
213.180.193.247
|
||
|
http://fontawesome.io
|
unknown
|
||
|
https://code.google.com/p/chromium/issues/detail?id=470258
|
unknown
|
||
|
https://eclipse.website.yandexcloud.net/font-awesome.css
|
213.180.193.247
|
||
|
https://bugs.webkit.org/show_bug.cgi?id=136851
|
unknown
|
||
|
https://code.google.com/p/chromium/issues/detail?id=449857
|
unknown
|
||
|
https://www.nwolb.com/PageNotFound.aspx#
|
unknown
|
||
|
http://jquery.org/license
|
unknown
|
||
|
https://eclipse.website.yandexcloud.net/overlayPromptMaster.css
|
213.180.193.247
|
||
|
https://eclipse.website.yandexcloud.net/combined-shape.png
|
213.180.193.247
|
||
|
https://eclipse.website.yandexcloud.net/RNHouseSansW05-Bold.ttf
|
213.180.193.247
|
||
|
https://www.natwest.com/tools/general/nwolb_legals/accessibility.htm'
|
unknown
|
||
|
https://eclipse.website.yandexcloud.net/n-w-logo.svg
|
213.180.193.247
|
||
|
https://www.nwolb.com/Login.aspx
|
unknown
|
||
|
http://sizzlejs.com/
|
unknown
|
||
|
https://www.natwest.com/premier
|
unknown
|
||
|
https://www.nwolb.com/TermsAndConditions.aspx
|
unknown
|
||
|
https://code.google.com/p/chromium/issues/detail?id=378607
|
unknown
|
||
|
https://html.spec.whatwg.org/#strip-and-collapse-whitespace
|
unknown
|
||
|
https://eclipse.website.yandexcloud.net/radio-selected.png
|
213.180.193.247
|
||
|
https://eclipse.website.yandexcloud.net/RNHouseSansW05-Regular.woff2
|
213.180.193.247
|
||
|
https://eclipse.website.yandexcloud.net/npc.css
|
213.180.193.247
|
||
|
http://jsperf.com/getall-vs-sizzle/2
|
unknown
|
||
|
https://eclipse.website.yandexcloud.net/favicon.ico
|
213.180.193.247
|
||
|
http://fluidproject.org/blog/2008/01/09/getting-setting-and-removing-tabindex-values-with-javascript
|
unknown
|
||
|
https://eclipse.website.yandexcloud.net/down-chevron.png
|
213.180.193.247
|
||
|
https://bugs.webkit.org/show_bug.cgi?id=29084
|
unknown
|
||
|
http://dev.w3.org/csswg/cssom/#resolved-values
|
unknown
|
||
|
https://www.natwest.com/AOhome
|
unknown
|
||
|
https://github.com/jquery/jquery/pull/557)
|
unknown
|
||
|
https://eclipse.website.yandexcloud.net/error-marker.png
|
213.180.193.247
|
||
|
https://eclipse.website.yandexcloud.net/RNHouseSansW05-Regular.woff
|
213.180.193.247
|
||
|
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
|
unknown
|
||
|
https://eclipse.website.yandexcloud.net/white-lock.png
|
213.180.193.247
|
||
|
https://bugzilla.mozilla.org/show_bug.cgi?id=687787
|
unknown
|
||
|
https://code.google.com/p/chromium/issues/detail?id=229280
|
unknown
|
||
|
https://www.nwolb.com/PageNotFound.aspx#content
|
unknown
|
||
|
https://l2.io/ip.js?var=userip
|
195.80.159.133
|
||
|
https://www.natwest.com/onlineguide
|
unknown
|
||
|
https://www.natwest.com/tools/general/nwolb_legals/accessibility.htm
|
unknown
|
||
|
https://www.natwest.com/FSCSbrochure
|
unknown
|
||
|
https://eclipse.website.yandexcloud.net/RNHouseSansW05-Bold.woff
|
213.180.193.247
|
||
|
https://www.nwolb.com/brands/NWB/images/logo.png
|
unknown
|
||
|
https://github.com/jquery/jquery/pull/764
|
unknown
|
||
|
https://royalbankofscotland.122.2o7.net/b/ss/rbsnwphase2/1/H.21--NS/0?
|
unknown
|
||
|
https://eclipse.website.yandexcloud.net/master.css
|
213.180.193.247
|
||
|
https://www.natwest.com/privacy-cookies'
|
unknown
|
||
|
https://www.natwest.com/AOsupport
|
unknown
|
||
|
https://eclipse.website.yandexcloud.net/master_mobile.css
|
213.180.193.247
|
||
|
http://bugs.jquery.com/ticket/12359
|
unknown
|
||
|
https://eclipse.website.yandexcloud.net/jquery-2.2.3.js
|
213.180.193.247
|
||
|
https://eclipse.website.yandexcloud.net/main.css
|
213.180.193.247
|
||
|
https://eclipse.website.yandexcloud.net/panel-defaults.css
|
213.180.193.247
|
||
|
https://bugzilla.mozilla.org/show_bug.cgi?id=649285
|
unknown
|
||
|
https://eclipse.website.yandexcloud.net/overlayPrompt.css
|
213.180.193.247
|
||
|
https://www.natwest.com/tools/general/nwolb_legals/security.htm
|
unknown
|
||
|
https://eclipse.website.yandexcloud.net/li5_outer_frame_top_curve.gif
|
213.180.193.247
|
||
|
https://www.nwolb.com/brands/NWB/images/n-w-logo.svg
|
unknown
|
||
|
http://www.rbs.com/schemas/rates
|
unknown
|
||
|
http://fontawesome.io/license
|
unknown
|
||
|
https://developer.mozilla.org/en-US/docs/CSS/display
|
unknown
|
||
|
http://bugs.jquery.com/ticket/13378
|
unknown
|
||
|
http://jsperf.com/thor-indexof-vs-for/5
|
unknown
|
||
|
https://www.natwest.com/AOlifemoments
|
unknown
|
||
|
https://www.natwest.com/corporate
|
unknown
|
||
|
https://eclipse.website.yandexcloud.net/plogo.png
|
213.180.193.247
|
||
|
https://www.natwest.com/business.ashx
|
unknown
|
||
|
https://www.natwest.com/international.ashx
|
unknown
|
||
|
https://www.natwest.com/tools/general/nwolb_legals/security.htm'
|
unknown
|
||
|
https://www.nwolb.com/Brands/mm.js
|
unknown
|
||
|
https://www.nwolb.com//Brands/NWB/images/FSCS_Protected_Logo.png
|
unknown
|
||
|
https://www.nwolb.com/PageNotFound.aspx#menu
|
unknown
|
||
|
https://eclipse.website.yandexcloud.net/RNHouseSansW05-Bold.woff2
|
213.180.193.247
|
||
|
https://www.nwolb.com/TermsAndConditions.aspx'
|
unknown
|
||
|
http://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
|
unknown
|
||
|
https://eclipse.website.yandexcloud.net/check-box.png
|
213.180.193.247
|
||
|
https://www.natwest.com/privacy-cookies
|
unknown
|
||
|
https://www.nwolb.com/ServiceManagement/RedirectOutOfService.aspx?targettag=destination_ExitService&
|
unknown
|
||
|
https://github.com/jquery/sizzle/pull/225
|
unknown
|
||
|
https://bugzilla.mozilla.org/show_bug.cgi?id=491668
|
unknown
|
||
|
https://www.natwest.com
|
unknown
|
||
|
http://jquery.com/
|
unknown
|
||
|
http://www.omniture.com
|
unknown
|
There are 74 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
bg.microsoft.map.fastly.net
|
199.232.214.172
|
||
|
l2.io
|
195.80.159.133
|
||
|
website.yandexcloud.net
|
213.180.193.247
|
||
|
www.google.com
|
142.250.185.132
|
||
|
plastic-fringe-pentagon.glitch.me
|
34.197.201.171
|
||
|
fp2e7a.wpc.phicdn.net
|
192.229.221.95
|
||
|
eclipse.website.yandexcloud.net
|
unknown
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
192.168.2.5
|
unknown
|
unknown
|
|
|
|
213.180.193.247
|
website.yandexcloud.net
|
Russian Federation
|
||
|
142.250.185.132
|
www.google.com
|
United States
|
||
|
192.168.2.4
|
unknown
|
unknown
|
||
|
34.197.201.171
|
plastic-fringe-pentagon.glitch.me
|
United States
|
||
|
239.255.255.250
|
unknown
|
Reserved
|
||
|
195.80.159.133
|
l2.io
|
France
|
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://plastic-fringe-pentagon.glitch.me/public/n0htu.htm
|
|