Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 14:33:51 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 14:33:51 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 14:33:51 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 14:33:51 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 14:33:51 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
Chrome Cache Entry: 102
|
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 104
|
PNG image data, 420 x 94, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 105
|
PNG image data, 2446 x 899, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 107
|
ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 108
|
SVG Scalable Vector Graphics image
|
downloaded
|
||
|
Chrome Cache Entry: 109
|
Web Open Font Format (Version 2), TrueType, length 43596, version 1.0
|
downloaded
|
||
|
Chrome Cache Entry: 110
|
Web Open Font Format, TrueType, length 35970, version 1.0
|
downloaded
|
||
|
Chrome Cache Entry: 111
|
PNG image data, 75 x 26, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 112
|
Web Open Font Format (Version 2), TrueType, length 93276, version 1.0
|
downloaded
|
||
|
Chrome Cache Entry: 113
|
ASCII text, with very long lines (51734)
|
downloaded
|
||
|
Chrome Cache Entry: 115
|
HTML document, ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 118
|
HTML document, Unicode text, UTF-8 text, with very long lines (1360)
|
dropped
|
||
|
Chrome Cache Entry: 119
|
SVG Scalable Vector Graphics image
|
downloaded
|
||
|
Chrome Cache Entry: 120
|
PNG image data, 2160 x 443, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 121
|
very short file (no magic)
|
downloaded
|
||
|
Chrome Cache Entry: 122
|
HTML document, ASCII text, with very long lines (65209), with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 124
|
Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 125
|
ASCII text, with very long lines (1476), with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 127
|
PNG image data, 506 x 303, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 128
|
Web Open Font Format (Version 2), TrueType, length 28584, version 1.66
|
downloaded
|
||
|
Chrome Cache Entry: 129
|
ASCII text, with very long lines (48316), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 132
|
ASCII text, with very long lines (42690)
|
downloaded
|
||
|
Chrome Cache Entry: 133
|
ASCII text, with very long lines (636)
|
downloaded
|
||
|
Chrome Cache Entry: 135
|
ASCII text, with very long lines (45667)
|
downloaded
|
||
|
Chrome Cache Entry: 136
|
ASCII text, with very long lines (65447)
|
downloaded
|
||
|
Chrome Cache Entry: 137
|
Web Open Font Format, TrueType, length 36696, version 1.0
|
downloaded
|
||
|
Chrome Cache Entry: 138
|
ASCII text, with very long lines (1434), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 86
|
ASCII text, with very long lines (10450)
|
downloaded
|
||
|
Chrome Cache Entry: 87
|
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 88
|
PNG image data, 108 x 24, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 89
|
ASCII text, with very long lines (10017)
|
downloaded
|
||
|
Chrome Cache Entry: 90
|
SVG Scalable Vector Graphics image
|
dropped
|
||
|
Chrome Cache Entry: 91
|
PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 92
|
HTML document, ASCII text, with very long lines (1445), with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 93
|
ASCII text, with very long lines (23398), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 94
|
SVG Scalable Vector Graphics image
|
dropped
|
||
|
Chrome Cache Entry: 95
|
SVG Scalable Vector Graphics image
|
dropped
|
||
|
Chrome Cache Entry: 99
|
Web Open Font Format (Version 2), TrueType, length 28000, version 1.66
|
downloaded
|
There are 35 hidden files, click here to show them.
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://mail.pfl.fyi/v1/messages/0190749a-2f6a-7c9f-b37a-88f0ae969ede/click?link_id=0190749a-2ffa-7f41-ad16-3ecda235df51&signature=3e892faf1c0137166fda82e5ff5c6a3150c2cec9
|
 |
||
|
https://plother.spectomi.com/XBXMBWXBHIRZAOKG827919180316877905977HILMYDATQSFHPNIGPYWCTQE?4474001581746548WCAEYFVLMJJBGRONXLWSSNYRZ
|
|
||
|
https://plother.spectomi.com/Pho51EkR/
|
|
||
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/3qy76/0x4AAAAAAAeOZQ0VZruNVa92/auto/normal
|
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
plother.spectomi.com
|
188.114.97.3
|
|
|
|
a.nel.cloudflare.com
|
35.190.80.1
|
||
|
perfecthikersexpedition.com
|
162.144.36.99
|
||
|
github.com
|
140.82.121.4
|
||
|
code.jquery.com
|
151.101.194.137
|
||
|
d2vgu95hoyrpkh.cloudfront.net
|
13.227.219.47
|
||
|
u28997765.ct.sendgrid.net
|
167.89.123.122
|
||
|
cdnjs.cloudflare.com
|
104.17.24.14
|
||
|
mail.pfl.fyi
|
188.114.96.3
|
||
|
link.mail.beehiiv.com
|
104.18.69.40
|
||
|
challenges.cloudflare.com
|
104.17.3.184
|
||
|
www.google.com
|
216.58.206.36
|
||
|
d19d360lklgih4.cloudfront.net
|
65.9.86.83
|
||
|
g40p.p9j32.com
|
172.67.182.147
|
||
|
objects.githubusercontent.com
|
185.199.108.133
|
||
|
www.perfecthikersexpedition.com
|
unknown
|
||
|
cdn.socket.io
|
unknown
|
||
|
ok4static.oktacdn.com
|
unknown
|
There are 8 hidden domains, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
188.114.97.3
|
plother.spectomi.com
|
European Union
|
|
|
|
192.168.2.17
|
unknown
|
unknown
|
||
|
65.9.86.83
|
d19d360lklgih4.cloudfront.net
|
United States
|
||
|
192.168.2.16
|
unknown
|
unknown
|
||
|
192.168.2.4
|
unknown
|
unknown
|
||
|
216.58.206.36
|
www.google.com
|
United States
|
||
|
104.17.3.184
|
challenges.cloudflare.com
|
United States
|
||
|
151.101.194.137
|
code.jquery.com
|
United States
|
||
|
35.190.80.1
|
a.nel.cloudflare.com
|
United States
|
||
|
142.250.184.227
|
unknown
|
United States
|
||
|
142.250.184.206
|
unknown
|
United States
|
||
|
13.227.219.47
|
d2vgu95hoyrpkh.cloudfront.net
|
United States
|
||
|
167.89.123.122
|
u28997765.ct.sendgrid.net
|
United States
|
||
|
104.17.24.14
|
cdnjs.cloudflare.com
|
United States
|
||
|
1.1.1.1
|
unknown
|
Australia
|
||
|
216.58.212.138
|
unknown
|
United States
|
||
|
74.125.133.84
|
unknown
|
United States
|
||
|
172.67.182.147
|
g40p.p9j32.com
|
United States
|
||
|
162.144.36.99
|
perfecthikersexpedition.com
|
United States
|
||
|
216.58.206.67
|
unknown
|
United States
|
||
|
140.82.121.4
|
github.com
|
United States
|
||
|
239.255.255.250
|
unknown
|
Reserved
|
||
|
142.250.185.131
|
unknown
|
United States
|
||
|
188.114.96.3
|
mail.pfl.fyi
|
European Union
|
||
|
185.199.108.133
|
objects.githubusercontent.com
|
Netherlands
|
||
|
104.18.69.40
|
link.mail.beehiiv.com
|
United States
|
||
|
108.156.39.22
|
unknown
|
United States
|
||
|
104.17.2.184
|
unknown
|
United States
|
||
|
172.217.16.196
|
unknown
|
United States
|
There are 19 hidden IPs, click here to show them.