IOC Report
https://sharesync.serverdata.net/us/s/kQGbuGpOyjwFkYowji449I003d1010

loading gif

Files

File Path
Type
Category
Malicious
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 16:19:31 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 16:19:31 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 16:19:31 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 16:19:31 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 16:19:31 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
Chrome Cache Entry: 105
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 106
ASCII text, with very long lines (45004), with no line terminators
downloaded
Chrome Cache Entry: 107
JSON data
downloaded
Chrome Cache Entry: 108
PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 109
ASCII text, with very long lines (5585), with no line terminators
downloaded
Chrome Cache Entry: 111
ASCII text, with very long lines (24190)
downloaded
Chrome Cache Entry: 112
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 113
JSON data
dropped
Chrome Cache Entry: 114
PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 115
JSON data
downloaded
Chrome Cache Entry: 118
JSON data
downloaded
Chrome Cache Entry: 119
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 250
dropped
Chrome Cache Entry: 121
PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 122
PNG image data, 1410 x 833, 8-bit/color RGB, non-interlaced
downloaded
Chrome Cache Entry: 123
Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
downloaded
Chrome Cache Entry: 125
ASCII text, with very long lines (4655), with no line terminators
downloaded
Chrome Cache Entry: 127
GIF image data, version 89a, 24 x 24
downloaded
Chrome Cache Entry: 128
Web Open Font Format (Version 2), TrueType, length 171088, version 2.0
downloaded
Chrome Cache Entry: 129
PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 130
ASCII text, with very long lines (1510), with no line terminators
downloaded
Chrome Cache Entry: 131
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 132
ASCII text, with very long lines (604), with no line terminators
downloaded
Chrome Cache Entry: 135
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 136
ASCII text, with very long lines (32030)
downloaded
Chrome Cache Entry: 137
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 138
PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 140
JSON data
downloaded
Chrome Cache Entry: 141
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 143
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1636
dropped
Chrome Cache Entry: 144
Unicode text, UTF-8 text, with very long lines (26752)
downloaded
Chrome Cache Entry: 145
HTML document, ASCII text
dropped
Chrome Cache Entry: 147
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 149
JSON data
downloaded
Chrome Cache Entry: 151
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 152
ASCII text, with very long lines (65447)
downloaded
Chrome Cache Entry: 153
PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 154
PNG image data, 7 x 16, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 155
ASCII text, with very long lines (6908), with no line terminators
downloaded
Chrome Cache Entry: 156
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 157
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 513
downloaded
Chrome Cache Entry: 158
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 159
MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
downloaded
Chrome Cache Entry: 160
openssl enc'd data with salted password
downloaded
Chrome Cache Entry: 162
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 164
PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 166
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 167
ASCII text, with very long lines (57732)
downloaded
Chrome Cache Entry: 168
ASCII text, with very long lines (39064)
downloaded
Chrome Cache Entry: 170
PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 171
ASCII text, with very long lines (47992), with no line terminators
downloaded
Chrome Cache Entry: 174
PNG image data, 300 x 60, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 175
PNG image data, 16 x 17, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 180
ASCII text, with very long lines (1058), with no line terminators
downloaded
Chrome Cache Entry: 181
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 182
PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 183
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 7390
downloaded
Chrome Cache Entry: 185
PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 186
ASCII text, with very long lines (9265)
downloaded
Chrome Cache Entry: 187
ASCII text, with very long lines (65447)
downloaded
Chrome Cache Entry: 190
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 191
PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 194
HTML document, ASCII text
downloaded
Chrome Cache Entry: 197
JSON data
downloaded
Chrome Cache Entry: 198
JSON data
downloaded
Chrome Cache Entry: 201
ASCII text, with very long lines (7791), with no line terminators
downloaded
Chrome Cache Entry: 203
HTML document, ASCII text, with very long lines (945)
downloaded
Chrome Cache Entry: 205
ASCII text, with very long lines (25529), with no line terminators
downloaded
Chrome Cache Entry: 206
ASCII text, with very long lines (1230), with no line terminators
downloaded
Chrome Cache Entry: 207
Web Open Font Format (Version 2), TrueType, length 174092, version 2.0
downloaded
Chrome Cache Entry: 208
ASCII text, with no line terminators
dropped
Chrome Cache Entry: 209
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 211
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 212
PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 214
PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 217
PNG image data, 64 x 64, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 218
ASCII text, with very long lines (52208)
downloaded
Chrome Cache Entry: 219
PNG image data, 19 x 19, 8-bit gray+alpha, non-interlaced
dropped
There are 74 hidden files, click here to show them.

URLs

Name
IP
Malicious
https://sharesync.serverdata.net/us/s/kQGbuGpOyjwFkYowji449I003d1010
malicious
https://teamsmailserver.tech/drive/#hahmed@pvtgroup.com
malicious
https://teamsmailserver.tech/drive/
malicious
https://sharesync.serverdata.net/us/s/kQGbuGpOyjwFkYowji449I003d1010
https://fst.operasingersinitiative.org/
about:blank
https://sharesync.serverdata.net/us/s/file?public_share=kQGbuGpOyjwFkYowji449I003d1010
https://sharesync.serverdata.net/us/s/login?public_share=kQGbuGpOyjwFkYowji449I003d1010

Domains

Name
IP
Malicious
teamsmailserver.tech
104.21.10.189
malicious
a.nel.cloudflare.com
35.190.80.1
kms.sync.myonlinedata.net
199.193.202.112
fst.operasingersinitiative.org
20.151.89.140
s-part-0017.t-0009.t-msedge.net
13.107.246.45
sync.myonlinedata.net
199.193.202.112
auth.myonlinedata.net
162.244.197.119
s-part-0014.t-0009.t-msedge.net
13.107.246.42
4454275f.rwnbqwuligbumyzvpodsthfkaftacy.pages.dev
188.114.96.3
enatour.com
103.134.152.2
code.jquery.com
151.101.130.137
auth.sync.myonlinedata.net
199.193.202.112
cdnjs.cloudflare.com
104.17.24.14
sni1gl.wpc.omegacdn.net
152.199.21.175
www.google.com
142.250.186.68
indall.cfd
66.29.131.177
sharesync.serverdata.net
199.193.202.117
s-part-0032.t-0009.t-msedge.net
13.107.246.60
cdn.jsdelivr.net
unknown
aadcdn.msftauth.net
unknown
www.enatour.com
unknown
aadcdn.msftauthimages.net
unknown
There are 12 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
104.21.10.189
teamsmailserver.tech
United States
malicious
142.250.186.68
www.google.com
United States
142.250.186.67
unknown
United States
13.107.246.42
s-part-0014.t-0009.t-msedge.net
United States
172.67.131.178
unknown
United States
104.18.187.31
unknown
United States
13.107.246.45
s-part-0017.t-0009.t-msedge.net
United States
192.168.2.16
unknown
unknown
20.151.89.140
fst.operasingersinitiative.org
United States
13.107.246.60
s-part-0032.t-0009.t-msedge.net
United States
142.250.181.234
unknown
United States
151.101.130.137
code.jquery.com
United States
162.244.197.119
auth.myonlinedata.net
United States
103.134.152.2
enatour.com
Singapore
142.250.185.142
unknown
United States
142.250.186.131
unknown
United States
35.190.80.1
a.nel.cloudflare.com
United States
172.217.18.110
unknown
United States
142.250.74.196
unknown
United States
104.17.24.14
cdnjs.cloudflare.com
United States
1.1.1.1
unknown
Australia
66.29.131.177
indall.cfd
United States
74.125.71.84
unknown
United States
216.58.206.42
unknown
United States
199.193.202.112
kms.sync.myonlinedata.net
United States
142.250.185.170
unknown
United States
239.255.255.250
unknown
Reserved
199.193.202.117
sharesync.serverdata.net
United States
188.114.96.3
4454275f.rwnbqwuligbumyzvpodsthfkaftacy.pages.dev
European Union
152.199.21.175
sni1gl.wpc.omegacdn.net
United States
127.0.0.1
unknown
unknown
There are 21 hidden IPs, click here to show them.