IOC Report
https://www-bbc-co-uk.cdn.ampproject.org/c/s/ANToniopneus.com.br/dayo/laits/captcha/ZGUud2l0dGUuYm9ub0BkZW1lLWdyb3VwLmNvbQ==$%C3%A3%E2%82%AC%E2%80%9A

loading gif

Files

File Path
Type
Category
Malicious
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 11:43:03 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 11:43:03 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 11:43:03 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 11:43:03 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 11:43:03 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
Chrome Cache Entry: 67
MS Windows icon resource - 6 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 24x24 with PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
downloaded
Chrome Cache Entry: 68
GIF image data, version 89a, 352 x 3
downloaded
Chrome Cache Entry: 69
gzip compressed data, from Unix, original size modulo 2^32 113355
downloaded
Chrome Cache Entry: 70
HTML document, ASCII text, with CRLF, LF line terminators
downloaded
Chrome Cache Entry: 71
gzip compressed data, original size modulo 2^32 3651
dropped
Chrome Cache Entry: 72
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 76
gzip compressed data, from Unix, original size modulo 2^32 3551
downloaded
Chrome Cache Entry: 77
gzip compressed data, original size modulo 2^32 1864
downloaded
Chrome Cache Entry: 78
PNG image data, 280 x 60, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 79
gzip compressed data, from Unix, original size modulo 2^32 447049
downloaded
Chrome Cache Entry: 80
gzip compressed data, original size modulo 2^32 513
downloaded
Chrome Cache Entry: 81
gzip compressed data, from Unix, original size modulo 2^32 15767
downloaded
Chrome Cache Entry: 82
GIF image data, version 89a, 352 x 3
downloaded
Chrome Cache Entry: 84
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1420x1200, components 3
downloaded
Chrome Cache Entry: 86
gzip compressed data, from Unix, original size modulo 2^32 223841
downloaded
Chrome Cache Entry: 87
gzip compressed data, from Unix, original size modulo 2^32 26679
downloaded
Chrome Cache Entry: 89
gzip compressed data, from Unix, original size modulo 2^32 141462
downloaded
Chrome Cache Entry: 90
gzip compressed data, from Unix, original size modulo 2^32 55503
downloaded
There are 15 hidden files, click here to show them.

URLs

Name
IP
Malicious
https://www-bbc-co-uk.cdn.ampproject.org/c/s/ANToniopneus.com.br/dayo/laits/captcha/ZGUud2l0dGUuYm9ub0BkZW1lLWdyb3VwLmNvbQ==$%C3%A3%E2%82%AC%E2%80%9A
malicious
https://microsoft-office-offic365.pawradar.com.br/?offic=ZGUud2l0dGUuYm9ub0BkZW1lLWdyb3VwLmNvbQ==$%C3%83%C2%A3%C3%A2%C2%82%C2%AC%C3%A2%C2%80%C2%9A&sso_reload=true
malicious
https://microsoft-office-offic365.pawradar.com.br/?offic=ZGUud2l0dGUuYm9ub0BkZW1lLWdyb3VwLmNvbQ==$%C3%83%C2%A3%C3%A2%C2%82%C2%AC%C3%A2%C2%80%C2%9A
malicious
https://6f8b5f67-5240a3ad.pawradar.com.br/Prefetch/Prefetch.aspx
https://antoniopneus-com-br.cdn.ampproject.org/c/s/ANToniopneus.com.br/dayo/laits/captcha/ZGUud2l0dGUuYm9ub0BkZW1lLWdyb3VwLmNvbQ==$%C3%A3%E2%82%AC%E2%80%9A
https://antoniopneus.com.br/dayo/laits/captcha/ZGUud2l0dGUuYm9ub0BkZW1lLWdyb3VwLmNvbQ==$%C3%A3%E2%82%AC%E2%80%9A

Domains

Name
IP
Malicious
b5794ac5-5240a3ad.pawradar.com.br
134.209.234.126
malicious
l1ve.pawradar.com.br
134.209.234.126
malicious
38448e97-5240a3ad.pawradar.com.br
134.209.234.126
malicious
810debeb-5240a3ad.pawradar.com.br
134.209.234.126
malicious
6f8b5f67-5240a3ad.pawradar.com.br
134.209.234.126
malicious
4d9e3863-5240a3ad.pawradar.com.br
134.209.234.126
malicious
8380f30c-5240a3ad.pawradar.com.br
134.209.234.126
malicious
microsoft-office-offic365.pawradar.com.br
134.209.234.126
malicious
antoniopneus.com.br
191.252.141.106
www.google.com
142.250.186.68
cdn-content.ampproject.org
142.250.184.225
antoniopneus-com-br.cdn.ampproject.org
unknown
www-bbc-co-uk.cdn.ampproject.org
unknown
There are 3 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
134.209.234.126
b5794ac5-5240a3ad.pawradar.com.br
United States
malicious
192.168.2.16
unknown
unknown
malicious
142.250.184.195
unknown
United States
142.250.186.68
www.google.com
United States
142.250.185.129
unknown
United States
1.1.1.1
unknown
Australia
142.250.186.170
unknown
United States
192.168.2.17
unknown
unknown
64.233.166.84
unknown
United States
142.250.181.238
unknown
United States
239.255.255.250
unknown
Reserved
142.250.185.174
unknown
United States
142.250.184.225
cdn-content.ampproject.org
United States
191.252.141.106
antoniopneus.com.br
Brazil
172.217.18.99
unknown
United States
There are 5 hidden IPs, click here to show them.