IOC Report
https://selfcare.firma-remota.it/asmonitor/panel/login

loading gif

Files

File Path
Type
Category
Malicious
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 11:36:07 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 11:36:07 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 07:00:51 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 11:36:07 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 11:36:07 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 11:36:07 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
Chrome Cache Entry: 181
ASCII text, with very long lines (4602)
downloaded
Chrome Cache Entry: 182
ASCII text, with very long lines (60332)
downloaded
Chrome Cache Entry: 183
HTML document, ASCII text, with very long lines (1238)
downloaded
Chrome Cache Entry: 184
ASCII text, with very long lines (444)
downloaded
Chrome Cache Entry: 185
PNG image data, 70 x 56, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 186
ASCII text, with very long lines (3460), with no line terminators
downloaded
Chrome Cache Entry: 187
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 188
PNG image data, 83 x 80, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 189
HTML document, ASCII text, with very long lines (65499)
downloaded
Chrome Cache Entry: 190
Web Open Font Format (Version 2), TrueType, length 23040, version 1.0
downloaded
Chrome Cache Entry: 191
ASCII text, with very long lines (1663), with no line terminators
downloaded
Chrome Cache Entry: 192
Web Open Font Format (Version 2), TrueType, length 23580, version 1.0
downloaded
Chrome Cache Entry: 193
ASCII text, with very long lines (65450)
downloaded
Chrome Cache Entry: 194
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 195
Web Open Font Format (Version 2), TrueType, length 23040, version 1.0
downloaded
Chrome Cache Entry: 196
ASCII text, with very long lines (636)
downloaded
Chrome Cache Entry: 197
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 198
ASCII text
downloaded
Chrome Cache Entry: 199
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 200
PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 201
PNG image data, 740 x 409, 8-bit/color RGB, non-interlaced
downloaded
Chrome Cache Entry: 202
PNG image data, 740 x 539, 8-bit/color RGB, non-interlaced
downloaded
Chrome Cache Entry: 203
Unicode text, UTF-8 (with BOM) text, with very long lines (65326), with CRLF line terminators
downloaded
Chrome Cache Entry: 204
ASCII text, with very long lines (65324)
downloaded
Chrome Cache Entry: 205
XML 1.0 document, Unicode text, UTF-8 text, with very long lines (754)
downloaded
Chrome Cache Entry: 206
Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
downloaded
Chrome Cache Entry: 207
Unicode text, UTF-8 text, with very long lines (29479), with no line terminators
downloaded
Chrome Cache Entry: 208
ASCII text
downloaded
Chrome Cache Entry: 209
assembler source, ASCII text, with very long lines (337)
dropped
Chrome Cache Entry: 210
PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 211
Unicode text, UTF-8 text, with very long lines (42112), with no line terminators
downloaded
Chrome Cache Entry: 212
ASCII text, with very long lines (2405), with no line terminators
downloaded
Chrome Cache Entry: 213
HTML document, Unicode text, UTF-8 text, with very long lines (65390), with CRLF line terminators
downloaded
Chrome Cache Entry: 214
PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 215
ASCII text, with very long lines (636)
downloaded
Chrome Cache Entry: 216
ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 217
PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 218
ASCII text, with very long lines (1601)
downloaded
Chrome Cache Entry: 219
PNG image data, 17 x 17, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 220
Unicode text, UTF-8 text, with very long lines (1471), with no line terminators
downloaded
Chrome Cache Entry: 221
PNG image data, 168 x 82, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 222
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 223
PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 224
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 225
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 226
PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 227
PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 228
PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 229
ASCII text
downloaded
Chrome Cache Entry: 230
PNG image data, 2 x 32, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 231
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 232
Unicode text, UTF-8 (with BOM) text, with very long lines (39257), with CRLF line terminators
downloaded
Chrome Cache Entry: 233
ASCII text, with very long lines (20322)
downloaded
Chrome Cache Entry: 234
PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 235
HTML document, ASCII text, with very long lines (627), with no line terminators
downloaded
Chrome Cache Entry: 236
ASCII text, with very long lines (51898)
downloaded
Chrome Cache Entry: 237
ASCII text
downloaded
Chrome Cache Entry: 238
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 239
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 240
ASCII text, with very long lines (2727), with no line terminators
downloaded
Chrome Cache Entry: 241
ASCII text, with very long lines (56359), with no line terminators
downloaded
Chrome Cache Entry: 242
Unicode text, UTF-8 text, with very long lines (64399)
downloaded
Chrome Cache Entry: 243
PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 244
HTML document, ASCII text, with very long lines (6424)
downloaded
Chrome Cache Entry: 245
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 370x100, components 3
downloaded
Chrome Cache Entry: 246
PNG image data, 740 x 409, 8-bit/color RGB, non-interlaced
downloaded
Chrome Cache Entry: 247
ASCII text, with very long lines (8550), with no line terminators
downloaded
Chrome Cache Entry: 248
PNG image data, 224 x 49, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 249
PNG image data, 70 x 56, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 250
PNG image data, 70 x 56, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 251
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 252
PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 253
ASCII text, with very long lines (1502), with no line terminators
downloaded
Chrome Cache Entry: 254
PNG image data, 168 x 82, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 255
PNG image data, 349 x 92, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 256
PNG image data, 190 x 44, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 257
PNG image data, 1340 x 350, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 258
MS Windows icon resource - 8 icons, 32x32, 16 colors, 4 bits/pixel, 16x16, 16 colors, 4 bits/pixel
dropped
Chrome Cache Entry: 259
PNG image data, 369 x 99, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 260
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 261
PNG image data, 180 x 90, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 262
ASCII text, with very long lines (8652), with no line terminators
downloaded
Chrome Cache Entry: 263
XML 1.0 document, ASCII text
downloaded
Chrome Cache Entry: 264
Unicode text, UTF-8 text, with very long lines (65528), with no line terminators
downloaded
Chrome Cache Entry: 265
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 266
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 267
assembler source, ASCII text, with very long lines (337)
downloaded
Chrome Cache Entry: 268
PNG image data, 16 x 8, 4-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 269
Unicode text, UTF-8 text, with very long lines (17566), with no line terminators
downloaded
Chrome Cache Entry: 270
ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 271
PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 272
Unicode text, UTF-8 (with BOM) text, with very long lines (65326), with CRLF line terminators
downloaded
Chrome Cache Entry: 273
PNG image data, 16 x 8, 4-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 274
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 275
PNG image data, 686 x 702, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 276
ASCII text, with very long lines (6697), with no line terminators
downloaded
Chrome Cache Entry: 277
ASCII text, with very long lines (2487), with no line terminators
downloaded
Chrome Cache Entry: 278
PNG image data, 130 x 44, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 279
MS Windows icon resource - 8 icons, 32x32, 16 colors, 4 bits/pixel, 16x16, 16 colors, 4 bits/pixel
downloaded
Chrome Cache Entry: 280
PNG image data, 224 x 49, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 281
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 282
PNG image data, 180 x 90, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 283
HTML document, ASCII text, with very long lines (65499)
downloaded
Chrome Cache Entry: 284
PNG image data, 168 x 82, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 285
PNG image data, 168 x 82, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 286
PNG image data, 22 x 375, 8-bit/color RGB, non-interlaced
dropped
Chrome Cache Entry: 287
PNG image data, 116 x 82, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 288
PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 289
PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 290
Unicode text, UTF-8 text, with very long lines (8560), with no line terminators
downloaded
Chrome Cache Entry: 291
ASCII text, with very long lines (65447)
downloaded
Chrome Cache Entry: 292
ASCII text, with very long lines (632)
downloaded
Chrome Cache Entry: 293
ASCII text, with very long lines (57791)
downloaded
Chrome Cache Entry: 294
ASCII text, with very long lines (548)
downloaded
Chrome Cache Entry: 295
ASCII text, with very long lines (400), with no line terminators
downloaded
Chrome Cache Entry: 296
ASCII text, with very long lines (8774), with no line terminators
downloaded
Chrome Cache Entry: 297
HTML document, ASCII text, with very long lines (65499)
downloaded
Chrome Cache Entry: 298
ASCII text, with very long lines (1277), with no line terminators
downloaded
Chrome Cache Entry: 299
HTML document, ASCII text, with very long lines (627), with no line terminators
downloaded
Chrome Cache Entry: 300
Web Open Font Format (Version 2), TrueType, length 23580, version 1.0
downloaded
Chrome Cache Entry: 301
ASCII text, with very long lines (10205)
downloaded
Chrome Cache Entry: 302
ASCII text, with very long lines (13268)
downloaded
Chrome Cache Entry: 303
ASCII text
downloaded
Chrome Cache Entry: 304
MS Windows icon resource - 8 icons, 32x32, 16 colors, 4 bits/pixel, 16x16, 16 colors, 4 bits/pixel
dropped
Chrome Cache Entry: 305
PNG image data, 168 x 78, 8-bit/color RGBA, interlaced
dropped
Chrome Cache Entry: 306
PNG image data, 740 x 539, 8-bit/color RGB, non-interlaced
dropped
Chrome Cache Entry: 307
PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 308
PNG image data, 1340 x 350, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 309
PNG image data, 740 x 539, 8-bit/color RGB, non-interlaced
dropped
Chrome Cache Entry: 310
ASCII text, with very long lines (65499)
downloaded
Chrome Cache Entry: 311
MS Windows icon resource - 8 icons, 32x32, 16 colors, 4 bits/pixel, 16x16, 16 colors, 4 bits/pixel
downloaded
Chrome Cache Entry: 312
HTML document, Unicode text, UTF-8 text, with very long lines (427), with no line terminators
downloaded
Chrome Cache Entry: 313
ASCII text, with very long lines (11312)
downloaded
Chrome Cache Entry: 314
ASCII text, with very long lines (17699)
downloaded
Chrome Cache Entry: 315
ASCII text
downloaded
Chrome Cache Entry: 316
PNG image data, 22 x 375, 8-bit/color RGB, non-interlaced
downloaded
Chrome Cache Entry: 317
PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 318
ASCII text
downloaded
Chrome Cache Entry: 319
PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 320
PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 321
ASCII text, with very long lines (1398)
downloaded
Chrome Cache Entry: 322
PNG image data, 130 x 44, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 323
ASCII text, with very long lines (39555)
downloaded
Chrome Cache Entry: 324
PNG image data, 168 x 78, 8-bit/color RGBA, interlaced
downloaded
Chrome Cache Entry: 325
PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 326
ASCII text, with very long lines (1400), with no line terminators
downloaded
Chrome Cache Entry: 327
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 328
PNG image data, 190 x 44, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 329
ASCII text, with very long lines (6482), with no line terminators
downloaded
Chrome Cache Entry: 330
HTML document, ASCII text
downloaded
Chrome Cache Entry: 331
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 332
HTML document, ASCII text, with very long lines (42028), with no line terminators
downloaded
Chrome Cache Entry: 333
PNG image data, 2 x 32, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 334
PNG image data, 116 x 82, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 335
ASCII text, with very long lines (7976)
downloaded
Chrome Cache Entry: 336
ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
downloaded
Chrome Cache Entry: 337
XML 1.0 document, Unicode text, UTF-8 text, with very long lines (754)
downloaded
Chrome Cache Entry: 338
ASCII text, with very long lines (5325), with no line terminators
downloaded
Chrome Cache Entry: 339
XML 1.0 document, Unicode text, UTF-8 text, with very long lines (754)
downloaded
Chrome Cache Entry: 340
ASCII text
downloaded
Chrome Cache Entry: 341
PNG image data, 70 x 56, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 342
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1864x70, components 3
dropped
Chrome Cache Entry: 343
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 344
JSON data
dropped
Chrome Cache Entry: 345
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 346
Web Open Font Format (Version 2), TrueType, length 23580, version 1.0
downloaded
Chrome Cache Entry: 347
PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 348
ASCII text, with very long lines (2363)
downloaded
Chrome Cache Entry: 349
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 370x100, components 3
dropped
Chrome Cache Entry: 350
PNG image data, 180 x 90, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 351
ASCII text, with very long lines (32207)
downloaded
Chrome Cache Entry: 352
ASCII text, with very long lines (29961)
downloaded
Chrome Cache Entry: 353
Unicode text, UTF-8 (with BOM) text, with very long lines (39257), with CRLF line terminators
downloaded
Chrome Cache Entry: 354
PNG image data, 740 x 409, 8-bit/color RGB, non-interlaced
dropped
Chrome Cache Entry: 355
ASCII text, with very long lines (65499)
downloaded
Chrome Cache Entry: 356
JSON data
downloaded
Chrome Cache Entry: 357
PNG image data, 740 x 409, 8-bit/color RGB, non-interlaced
dropped
Chrome Cache Entry: 360
PNG image data, 80 x 76, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 361
PNG image data, 349 x 92, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 362
Web Open Font Format, CFF, length 57844, version 1.0
downloaded
Chrome Cache Entry: 363
ASCII text, with very long lines (34379)
downloaded
Chrome Cache Entry: 364
ASCII text, with very long lines (65499)
downloaded
Chrome Cache Entry: 365
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 366
ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 367
HTML document, ASCII text, with very long lines (627), with no line terminators
downloaded
Chrome Cache Entry: 368
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1864x70, components 3
downloaded
Chrome Cache Entry: 369
PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 370
ASCII text, with very long lines (3106), with no line terminators
downloaded
Chrome Cache Entry: 371
PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 372
ASCII text, with very long lines (982), with CRLF line terminators
downloaded
Chrome Cache Entry: 373
ASCII text, with very long lines (7023), with no line terminators
downloaded
Chrome Cache Entry: 374
PNG image data, 740 x 539, 8-bit/color RGB, non-interlaced
downloaded
Chrome Cache Entry: 375
PNG image data, 369 x 99, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 376
PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 377
PNG image data, 83 x 80, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 378
PNG image data, 686 x 702, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 379
ASCII text, with very long lines (65499)
downloaded
Chrome Cache Entry: 380
Unicode text, UTF-8 text
downloaded
Chrome Cache Entry: 381
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 382
PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 383
PNG image data, 80 x 76, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 384
PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 385
Web Open Font Format (Version 2), TrueType, length 18028, version 1.589
downloaded
Chrome Cache Entry: 386
ASCII text, with very long lines (6774), with no line terminators
downloaded
Chrome Cache Entry: 387
PNG image data, 17 x 17, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 388
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 389
PNG image data, 180 x 90, 8-bit/color RGBA, non-interlaced
dropped
There are 204 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=1904,i,7110544913896648715,9179182868871502647,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://selfcare.firma-remota.it/asmonitor/panel/login"

URLs

Name
IP
Malicious
https://selfcare.firma-remota.it/asmonitor/panel/login
https://stats.g.doubleclick.net/g/collect
unknown
https://developers.google.com/recaptcha/docs/faq#localhost_support
unknown
https://selfcare.firma-remota.it/asmonitor/javax.faces.resource/selfcare-style.css.xhtml?ln=css
217.61.8.139
https://registrazionespid.aruba.it
unknown
https://d6tizftlrpuof.cloudfront.net/themes/production/aruba-italy-aruba-2021-basic-inpage-6cac8584191ce485eb6e11121e5b2bb3.css
52.222.206.22
https://support.google.com/recaptcha#6262736
unknown
http://jqueryui.com
unknown
https://selfcare.firma-remota.it/
217.61.8.139
https://piwik.org/free-software/bsd/
unknown
https://selfcare.firma-remota.it/asmonitor/images/04_sm_info.png
217.61.8.139
https://blueimp.github.io/Gallery/css/blueimp-gallery.min.css
185.199.108.153
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Le9QCYTAAAAALtKxbL-6WvASf3xM49M7zzRbbZO&co=aHR0cHM6Ly9zZWxmY2FyZS5maXJtYS1yZW1vdGEuaXQ6NDQz&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=normal&cb=67iabom3zyq
https://img.sct.eu1.usercentrics.eu/1.gif?dgi=171bc42f-3eec-4afe-be43-f3c81c141fa7
169.150.247.38
https://guide.pec.it/funzionalita-pannello-firma-remota.aspx#a_1474450182479
about:blank
https://selfcare.firma-remota.it/asmonitor/javax.faces.resource/cookiebot.css.xhtml?ln=css
217.61.8.139
https://riconoscimento.aruba.it
unknown
https://support.google.com/recaptcha/?hl=en#6223828
unknown
https://px.ads.linkedin.com/collect?
unknown
https://guide.pec.it/soluzioni-firma-digitale/firma-remota/riconfigurare-app-aruba-otp.aspx
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt
216.58.206.68
http://jqueryui.com/themeroller/?ffDefault=Verdana%2CArial%2Csans-serif&fwDefault=normal&fsDefault=1
unknown
https://www.google.com
unknown
https://www.youtube.com/iframe_api
unknown
http://www.opensource.org/licenses/mit-license.php
unknown
https://github.com/twbs/bootstrap/graphs/contributors)
unknown
https://d6tizftlrpuof.cloudfront.net/vendor/1.6.5/angular.min.js
52.222.206.22
https://ams.creativecdn.com/tags/v2?type=json
185.184.8.90
https://www.cookiebot.com
unknown
https://developer.matomo.org/guides/tracking-javascript-guide#multiple-piwik-trackers
unknown
https://w.usabilla.com/a/t?m=b&b=
unknown
https://connect.facebook.net/en_US/fbevents.js
157.240.0.6
https://github.com/matomo-org/matomo/blob/master/js/piwik.js
unknown
https://support.google.com/recaptcha/#6175971
unknown
https://gestionemail.pec.it
unknown
https://fatturazioneelettronica.aruba.it
unknown
https://peclog.pec.aruba.it
unknown
http://opensource.org/licenses/MIT).
unknown
http://matomo.org/free-software/bsd/
unknown
https://www.get.cloud
unknown
http://www.greensock.com
unknown
https://support.google.com/recaptcha
unknown
https://webmail.pec.it
unknown
https://w.usabilla.com/6c82bc643068.js?lv=1
52.50.116.41
https://d6tizftlrpuof.cloudfront.net/themes/production/aruba-italy-aruba-2021-basic-inpage-6cac85841
unknown
https://developer.matomo.org/api-reference/tracking-javascript
unknown
https://www.google.com/recaptcha/api2/bframe?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&k=6Le9QCYTAAAAALtKxbL-6WvASf3xM49M7zzRbbZO
https://asbfecredem.firma-automatica.it
unknown
https://selfcare.firma-remota.it/asmonitor/javax.faces.resource/jquery-ui.min.js.xhtml?ln=js
217.61.8.139
https://www.apache.org/licenses/
unknown
https://selfcare.firma-remota.it/asmonitor/
https://consentcdn.cookiebot.eu/sdk/bc-v4.min.html
https://asbfe.firma-automatica.it
unknown
https://www.pec.it/cookie-policy.aspx
https://cct.google/taggy/agent.js
unknown
https://spidtest.aruba.it
unknown
https://wa.aruba.it/piwik.php?action_name=Selfcare%20Firma%20Remota%20-%20Funzionalit%C3%A0%20ed%20utilizzo%20%7C%20Guide%20pec.it&idsite=40&rec=1&r=446105&h=8&m=36&s=42&url=https%3A%2F%2Fguide.pec.it%2Ffunzionalita-pannello-firma-remota.aspx%23a_1474450182479&_id=0c73832e80648f8f&_idn=1&send_image=0&_refts=0&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024&pv_id=kPWyfe&devicePixelRatio=1&pf_net=0&pf_srv=533&pf_tfr=354&pf_dm1=2504&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D
62.149.188.146
https://docsbot.ai/api/widget/dLbpMCFxf0DU53JB0aBU/yeJDiVixfHo5yMe4ufHx
76.76.21.21
https://blueimp.net
unknown
https://cms.gruppoaruba.it
unknown
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
unknown
https://servicematica.conservazione.docfly.it
unknown
https://widget.docsbot.ai/chat.js
169.150.247.37
https://play.google.com/log?format=json&hasfast=true
unknown
https://pec.it
unknown
https://riconoscimentobnl.aruba.it
unknown
https://selfcare.firma-remota.it/asmonitor/panel/login
217.61.8.139
http://www.opensource.org/licenses/MIT
unknown
https://areaclienti.arubapec.it
unknown
http://malsup.com/jquery/block/
unknown
https://consentcdn.cookiebot.com/sdk/bc-v4.min.html
http://cart.aruba.it
unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)
unknown
http://www.gnu.org/licenses/gpl.html
unknown
https://connect.facebook.net/signals/config/144174932978658?v=2.9.160&r=stable&domain=www.pec.it&hme=733c3732ec767f7a62e7787aff967e6d19b1e13e533937876f2e15efe07bf678&ex_m=67%2C113%2C100%2C104%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C160%2C163%2C175%2C171%2C172%2C174%2C28%2C94%2C50%2C73%2C173%2C155%2C158%2C168%2C169%2C176%2C122%2C39%2C33%2C134%2C14%2C48%2C181%2C180%2C124%2C17%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C101%2C103%2C37%2C102%2C29%2C25%2C156%2C159%2C131%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C98%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C34%2C80%2C2%2C35%2C60%2C40%2C99%2C43%2C75%2C65%2C105%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C106
157.240.0.6
https://videoriconoscimento.arubapec.it
unknown
https://td.doubleclick.net/td/ga/rul?tid=G-CBSMR1FX8C&gacid=1246374857.1720010248&gtm=45je4710v880708810z8867718176za200zb867718176&dma=0&gcs=G111&gcd=13r3r3r3r5&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=1230193440
https://consent.cookiebot.eu/uc.js?cbid=171bc42f-3eec-4afe-be43-f3c81c141fa7&implementation=gtm&consentmode-dataredaction=dynamic&culture=it
169.150.247.38
https://loginspid.aruba.it
unknown
https://consent.cookiebot.com/uc.js?cbid=
unknown
https://api.usabilla.com/v2/f/
unknown
https://selfcarespid.aruba.it
unknown
https://www.toctoc.me/
unknown
https://selfcare.firma-remota.it/asmonitor/javax.faces.resource/popper.min.js.xhtml?ln=js
217.61.8.139
https://blueimp.github.io/Gallery/js/jquery.blueimp-gallery.min.js
185.199.108.153
http://areaclienti.pec.it
unknown
https://consent.cookiebot.eu/logconsent.ashx?action=accept&nocache=1720010246841&dnt=false&method=strict&clp=true&cls=true&clm=true&cbid=171bc42f-3eec-4afe-be43-f3c81c141fa7&cbt=inlineoptin&hasdata=true&usercountry=US-06&referer=https%3A%2F%2Fwww.pec.it&rc=false
169.150.247.38
https://d6tizftlrpuof.cloudfront.net/live/resources/throbber.gif)
unknown
https://demo.docfly.it
unknown
https://d6tizftlrpuof.cloudfront.net/live/campaign/js/b1f1cccccf.in-page-form.js
52.222.206.22
https://selfcare.firma-remota.it/asmonitor/javax.faces.resource/jquery.min.js.xhtml?ln=js
217.61.8.139
http://www.google.com/search?q=growl)
unknown
https://selfcare.firma-remota.it/asmonitor/javax.faces.resource/jsf.js.xhtml?ln=javax.faces
217.61.8.139
https://www.aruba.it/documents/tc-files/it/21_informativa_privacy_aruba_spa_chatbot.pdf).
unknown
https://selfcare.firma-remota.it/asmonitor/javax.faces.resource/cookiepolicy.js.xhtml?ln=js
217.61.8.139
https://selfcare.firma-remota.it/asmonitor/javax.faces.resource/bootstrap.min.js.xhtml?ln=js
217.61.8.139
https://conservazione.docfly.it
unknown
https://cloud.google.com/contact
unknown
https://selfcare.firma-remota.it/asmonitor/login.xhtml
https://stats.g.doubleclick.net/g/collect?v=2&tid=G-CBSMR1FX8C&cid=1246374857.1720010248&gtm=45je4710v880708810z8867718176za200zb867718176&aip=1&dma=0&gcs=G111&gcd=13r3r3r3r5&npa=0&frm=0
142.250.110.157
There are 90 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
docsbot.ai
76.76.21.21
selfcare.firma-remota.it
217.61.8.139
prod-consentcdneu.b-cdn.net
169.150.247.39
w.usabilla.com
52.50.116.41
fp2e7a.wpc.phicdn.net
192.229.221.95
ams.creativecdn.com
185.184.8.90
stats.g.doubleclick.net
142.250.110.157
bg.microsoft.map.fastly.net
199.232.210.172
1589314308.rsc.cdn77.org
156.146.33.141
blueimp.github.io
185.199.108.153
scontent.xx.fbcdn.net
157.240.0.6
analytics-alv.google.com
216.239.36.181
d6tizftlrpuof.cloudfront.net
52.222.206.22
googleads.g.doubleclick.net
172.217.18.98
docsbot-widget.b-cdn.net
169.150.247.37
prod-consenteu.b-cdn.net
169.150.247.38
www.google.com
142.250.186.68
uc-img-sct.b-cdn.net
169.150.247.38
td.doubleclick.net
142.250.186.34
wa.aruba.it
62.149.188.146
docsbot.b-cdn.net
169.150.247.38
cdn.docsbot.ai
unknown
u360.d-bi.fr
unknown
img.sct.eu1.usercentrics.eu
unknown
script.crazyegg.com
unknown
imgsct.cookiebot.com
unknown
guide.pec.it
unknown
www.pec.it
unknown
consentcdn.cookiebot.com
unknown
consent.cookiebot.com
unknown
connect.facebook.net
unknown
px.ads.linkedin.com
unknown
consentcdn.cookiebot.eu
unknown
consent.cookiebot.eu
unknown
tags.creativecdn.com
unknown
snap.licdn.com
unknown
analytics.google.com
unknown
widget.docsbot.ai
unknown
mediacdn.aruba.it
unknown
There are 29 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
142.250.186.68
www.google.com
United States
192.168.2.8
unknown
unknown
169.150.247.38
prod-consenteu.b-cdn.net
United States
169.150.247.39
prod-consentcdneu.b-cdn.net
United States
169.150.247.36
unknown
United States
169.150.247.37
docsbot-widget.b-cdn.net
United States
76.76.21.21
docsbot.ai
United States
142.250.186.34
td.doubleclick.net
United States
52.222.206.22
d6tizftlrpuof.cloudfront.net
United States
185.184.8.90
ams.creativecdn.com
Poland
239.255.255.250
unknown
Reserved
62.149.188.146
wa.aruba.it
Italy
52.50.116.41
w.usabilla.com
United States
185.199.108.153
blueimp.github.io
Netherlands
217.61.8.139
selfcare.firma-remota.it
Italy
52.222.206.77
unknown
United States
157.240.0.6
scontent.xx.fbcdn.net
United States
172.217.18.98
googleads.g.doubleclick.net
United States
216.239.36.181
analytics-alv.google.com
United States
142.250.185.132
unknown
United States
216.58.206.68
unknown
United States
185.93.1.244
unknown
Czech Republic
156.146.33.141
1589314308.rsc.cdn77.org
United States
There are 13 hidden IPs, click here to show them.

DOM / HTML

URL
Malicious
https://selfcare.firma-remota.it/asmonitor/
https://selfcare.firma-remota.it/asmonitor/login.xhtml
https://selfcare.firma-remota.it/asmonitor/login.xhtml
about:blank
https://consentcdn.cookiebot.com/sdk/bc-v4.min.html
https://selfcare.firma-remota.it/asmonitor/informazioni-profilo.xhtml?faces-redirect=true
https://selfcare.firma-remota.it/asmonitor/recupero-username.xhtml
https://selfcare.firma-remota.it/asmonitor/recupero-username.xhtml
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Le9QCYTAAAAALtKxbL-6WvASf3xM49M7zzRbbZO&co=aHR0cHM6Ly9zZWxmY2FyZS5maXJtYS1yZW1vdGEuaXQ6NDQz&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=normal&cb=eu4pvst4ur1q
https://www.google.com/recaptcha/api2/bframe?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&k=6Le9QCYTAAAAALtKxbL-6WvASf3xM49M7zzRbbZO
https://selfcare.firma-remota.it/asmonitor/recupero-password.xhtml
https://selfcare.firma-remota.it/asmonitor/recupero-password.xhtml
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Le9QCYTAAAAALtKxbL-6WvASf3xM49M7zzRbbZO&co=aHR0cHM6Ly9zZWxmY2FyZS5maXJtYS1yZW1vdGEuaXQ6NDQz&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=normal&cb=67iabom3zyq
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Le9QCYTAAAAALtKxbL-6WvASf3xM49M7zzRbbZO&co=aHR0cHM6Ly9zZWxmY2FyZS5maXJtYS1yZW1vdGEuaXQ6NDQz&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=normal&cb=67iabom3zyq
https://guide.pec.it/funzionalita-pannello-firma-remota.aspx
https://guide.pec.it/funzionalita-pannello-firma-remota.aspx
https://guide.pec.it/funzionalita-pannello-firma-remota.aspx
https://guide.pec.it/funzionalita-pannello-firma-remota.aspx#a_1474450182479
https://guide.pec.it/funzionalita-pannello-firma-remota.aspx#a_1474450182479
https://d6tizftlrpuof.cloudfront.net/live/i/58987715876927b611f17d7b/518f96f18901e5fddf63f8475b196c42f4960ed4.html
https://guide.pec.it/soluzioni-firma-digitale/firma-remota/riconfigurare-app-aruba-otp.aspx
https://guide.pec.it/soluzioni-firma-digitale/firma-remota/riconfigurare-app-aruba-otp.aspx
https://guide.pec.it/soluzioni-firma-digitale/firma-remota/riconfigurare-app-aruba-otp.aspx
https://guide.pec.it/soluzioni-firma-digitale/firma-remota/riconfigurare-app-aruba-otp.aspx
https://guide.pec.it/soluzioni-firma-digitale/firma-remota/riconfigurare-app-aruba-otp.aspx
https://www.pec.it/cookie-policy.aspx
https://www.pec.it/cookie-policy.aspx
https://www.pec.it/cookie-policy.aspx
https://consentcdn.cookiebot.eu/sdk/bc-v4.min.html
https://td.doubleclick.net/td/ga/rul?tid=G-CBSMR1FX8C&gacid=1246374857.1720010248&gtm=45je4710v880708810z8867718176za200zb867718176&dma=0&gcs=G111&gcd=13r3r3r3r5&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=1230193440
There are 20 hidden doms, click here to show them.