Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Chrome Cache Entry: 100
|
HTML document, ASCII text, with very long lines (3437), with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 101
|
Web Open Font Format, TrueType, length 35900, version 0.0
|
downloaded
|
||
|
Chrome Cache Entry: 102
|
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
|
downloaded
|
||
|
Chrome Cache Entry: 103
|
ASCII text, with very long lines (31463), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 104
|
ASCII text, with very long lines (32047)
|
downloaded
|
||
|
Chrome Cache Entry: 105
|
Web Open Font Format, TrueType, length 41280, version 0.0
|
downloaded
|
||
|
Chrome Cache Entry: 106
|
ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 107
|
PNG image data, 600 x 1, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 108
|
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
|
downloaded
|
||
|
Chrome Cache Entry: 109
|
JPEG image data, baseline, precision 8, 1920x1080, components 3
|
downloaded
|
||
|
Chrome Cache Entry: 110
|
Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 111
|
ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 112
|
Unicode text, UTF-8 text, with very long lines (64241)
|
downloaded
|
||
|
Chrome Cache Entry: 113
|
ASCII text, with very long lines (42133)
|
downloaded
|
||
|
Chrome Cache Entry: 114
|
ASCII text, with very long lines (32089)
|
downloaded
|
||
|
Chrome Cache Entry: 115
|
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
|
downloaded
|
||
|
Chrome Cache Entry: 116
|
Unicode text, UTF-8 text, with very long lines (65520), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 117
|
ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 118
|
ASCII text, with very long lines (402)
|
downloaded
|
||
|
Chrome Cache Entry: 119
|
Web Open Font Format, TrueType, length 2576, version 1.0
|
downloaded
|
||
|
Chrome Cache Entry: 120
|
ASCII text, with very long lines (65536), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 121
|
ASCII text, with very long lines (1245), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 122
|
PNG image data, 342 x 72, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 123
|
ASCII text, with very long lines (42690)
|
downloaded
|
||
|
Chrome Cache Entry: 124
|
Web Open Font Format, TrueType, length 33556, version 0.0
|
downloaded
|
||
|
Chrome Cache Entry: 125
|
PNG image data, 342 x 72, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 126
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 127
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
|
downloaded
|
||
|
Chrome Cache Entry: 128
|
PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 129
|
PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 130
|
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
|
dropped
|
||
|
Chrome Cache Entry: 131
|
Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 132
|
Web Open Font Format, TrueType, length 33556, version 0.0
|
downloaded
|
||
|
Chrome Cache Entry: 133
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113355
|
downloaded
|
||
|
Chrome Cache Entry: 134
|
JPEG image data, baseline, precision 8, 1920x1080, components 3
|
dropped
|
||
|
Chrome Cache Entry: 135
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
|
downloaded
|
||
|
Chrome Cache Entry: 136
|
ASCII text, with very long lines (45724)
|
downloaded
|
||
|
Chrome Cache Entry: 137
|
ASCII text, with very long lines (994), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 138
|
ASCII text, with very long lines (32089)
|
downloaded
|
||
|
Chrome Cache Entry: 139
|
PNG image data, 23 x 10, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 140
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 4.2.9], baseline, precision
8, 50x28, components 3
|
dropped
|
||
|
Chrome Cache Entry: 141
|
ASCII text, with very long lines (42133)
|
downloaded
|
||
|
Chrome Cache Entry: 142
|
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
|
dropped
|
||
|
Chrome Cache Entry: 143
|
Unicode text, UTF-8 text, with very long lines (64241)
|
downloaded
|
||
|
Chrome Cache Entry: 144
|
ASCII text, with very long lines (402)
|
downloaded
|
||
|
Chrome Cache Entry: 145
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 86
|
PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 87
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
|
dropped
|
||
|
Chrome Cache Entry: 88
|
Unicode text, UTF-8 text, with very long lines (65520), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 89
|
PNG image data, 23 x 10, 8-bit/color RGB, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 90
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
|
dropped
|
||
|
Chrome Cache Entry: 91
|
PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 92
|
Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 93
|
ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 94
|
Web Open Font Format, TrueType, length 41280, version 0.0
|
downloaded
|
||
|
Chrome Cache Entry: 95
|
ASCII text, with very long lines (31463), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 96
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 4.2.9], baseline, precision
8, 50x28, components 3
|
downloaded
|
||
|
Chrome Cache Entry: 97
|
PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 98
|
ASCII text, with very long lines (32047)
|
downloaded
|
||
|
Chrome Cache Entry: 99
|
ASCII text, with very long lines (1245), with no line terminators
|
downloaded
|
There are 51 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US
--service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1852,i,12767476324253814656,13431870517047841025,262144
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
/prefetch:8
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ayssaless.com/?dybkhjzu"
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://ayssaless.com/?dybkhjzu
|
 |
||
|
https://phvr.org/owa/
|
|
||
|
https://phvr.org/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL3BodnIub3JnLyIsImRvbWFpbiI6InBodnIub3JnIiwia2V5IjoiamY3WVhkSU1Fa0hKIiwicXJjIjpudWxsLCJpYXQiOjE3MjAwNDM0MzUsImV4cCI6MTcyMDA0MzU1NX0.JAs1Sod8yix7ia_730oaWYfQG1KpZbxKGumi-KumUlc
|
185.143.223.70
|
|
|
|
https://phvr.org/
|
185.143.223.70
|
|
|
|
https://phvr.org/aadcdn.msftauth.net/~/shared/1.0/content/js/BssoInterrupt_Core_sw-M8KkV3_nBot-G1ImRcw2.js
|
185.143.223.70
|
|
|
|
https://ayssaless.com/?dybkhjzu
|
185.143.223.70
|
|
|
|
https://ayssaless.com/?dybkhjzu=7fd3278cbad230a46aea1749c768258a239f96a4595391908a87812351a895e43093a1c5c4e9f400c6baeab531aa312d260c1bdff35b93216f7c90c5166986c9
|
|
||
|
https://phvr.org/favicon.ico
|
185.143.223.70
|
|
|
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/fozv9/0x4AAAAAAAdTh0M8wTbaildE/auto/normal
|
|||
|
https://outlook.office365.com/owa/prefetch.aspx
|
|||
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/89da16dad8d74243/1720043409263/BGklw8ERV6X92zV
|
104.17.2.184
|
||
|
https://challenges.cloudflare.com/turnstile/v0/g/d2a97f6b6ec9/api.js
|
104.17.2.184
|
||
|
http://knockoutjs.com/
|
unknown
|
||
|
https://github.com/douglascrockford/JSON-js
|
unknown
|
||
|
https://login.windows-ppe.net
|
unknown
|
||
|
https://js.monitor.azure.com/scripts/c/ms.analytics-web-2.min.js
|
unknown
|
||
|
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
|
104.17.2.184
|
||
|
http://www.json.org/json2.js
|
unknown
|
||
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/89da16dad8d74243/1720043409268/4cbea6bdec3ef6990ccfedda2ef1a55585db0d80cdc1a200bd58117d25703da1/KPMbw5S5tDAhQT0
|
104.17.2.184
|
||
|
https://ayssaless.com/favicon.ico
|
185.143.223.70
|
||
|
https://login.microsoftonline.com
|
unknown
|
||
|
http://www.opensource.org/licenses/mit-license.php)
|
unknown
|
||
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1171513691:1720042031:V-1DSJGSRzYWJ5RQHOROFwIaAUUuh9iSOzGOqOAfpJc/89da16dad8d74243/874531de73a4462
|
104.17.2.184
|
||
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
|
104.17.2.184
|
||
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=89da16dad8d74243
|
104.17.2.184
|
||
|
https://github.com/h5bp/html5-boilerplate/blob/master/src/css/main.css
|
unknown
|
||
|
http://github.com/requirejs/almond/LICENSE
|
unknown
|
There are 16 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
phvr.org
|
185.143.223.70
|
|
|
|
bg.microsoft.map.fastly.net
|
199.232.210.172
|
||
|
ayssaless.com
|
185.143.223.70
|
||
|
challenges.cloudflare.com
|
104.17.2.184
|
||
|
sni1gl.wpc.omegacdn.net
|
152.199.21.175
|
||
|
www.google.com
|
172.217.16.132
|
||
|
HHN-efz.ms-acdc.office.com
|
52.98.228.50
|
||
|
fp2e7a.wpc.phicdn.net
|
192.229.221.95
|
||
|
s-part-0032.t-0009.t-msedge.net
|
13.107.246.60
|
||
|
c.s-microsoft.com
|
unknown
|
||
|
r4.res.office365.com
|
unknown
|
||
|
aadcdn.msftauth.net
|
unknown
|
||
|
assets.onestore.ms
|
unknown
|
||
|
i.s-microsoft.com
|
unknown
|
||
|
ajax.aspnetcdn.com
|
unknown
|
||
|
outlook.office365.com
|
unknown
|
There are 6 hidden domains, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
185.143.223.70
|
ayssaless.com
|
Russian Federation
|
|
|
|
52.98.228.50
|
HHN-efz.ms-acdc.office.com
|
United States
|
||
|
192.168.2.4
|
unknown
|
unknown
|
||
|
13.107.246.60
|
s-part-0032.t-0009.t-msedge.net
|
United States
|
||
|
239.255.255.250
|
unknown
|
Reserved
|
||
|
104.17.2.184
|
challenges.cloudflare.com
|
United States
|
||
|
172.217.16.132
|
www.google.com
|
United States
|
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://phvr.org/?y6i9iw4gm=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
|
|
|
|
https://phvr.org/?y6i9iw4gm=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmY2xpZW50LXJlcXVlc3QtaWQ9ZDZhZjgwMWItNDI2My0yODUwLWU4NDItM2Y3ZmVlMDdmN2QwJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODU1NjQwMjM3NzA3NDIxOC4wZjU1ZmU3ZC1iZWM4LTRlNDctODVjNy05Yzk3ZTY3YjE4OTAmc3RhdGU9RGNzeEZvQWdEQVJSME9keElnRVROaHhITUxTV1hsLUtQOTNFRU1LLWJFdmtsWUI2bVdvVkxoZkFrSkx0NUtrNkhROTFIMGJpQWpJZG9EWWF2S0puYXh6WGU2VDN1OU1Q&sso_reload=true
|
|
|
|
https://phvr.org/?y6i9iw4gm=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&sso_reload=true
|
|
|
|
https://ayssaless.com/?dybkhjzu=7fd3278cbad230a46aea1749c768258a239f96a4595391908a87812351a895e43093a1c5c4e9f400c6baeab531aa312d260c1bdff35b93216f7c90c5166986c9
|
||
|
https://ayssaless.com/?dybkhjzu=7fd3278cbad230a46aea1749c768258a239f96a4595391908a87812351a895e43093a1c5c4e9f400c6baeab531aa312d260c1bdff35b93216f7c90c5166986c9
|
||
|
https://ayssaless.com/?dybkhjzu=7fd3278cbad230a46aea1749c768258a239f96a4595391908a87812351a895e43093a1c5c4e9f400c6baeab531aa312d260c1bdff35b93216f7c90c5166986c9
|
||
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/fozv9/0x4AAAAAAAdTh0M8wTbaildE/auto/normal
|
||
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/fozv9/0x4AAAAAAAdTh0M8wTbaildE/auto/normal
|
||
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/fozv9/0x4AAAAAAAdTh0M8wTbaildE/auto/normal
|
||
|
https://outlook.office365.com/owa/prefetch.aspx
|
||
|
https://outlook.office365.com/owa/prefetch.aspx
|
||
|
https://outlook.office365.com/owa/prefetch.aspx
|
||
|
https://outlook.office365.com/owa/prefetch.aspx
|
||
|
https://phvr.org/owa/
|
||
|
https://privacy.microsoft.com/en-US/updates
|
There are 5 hidden doms, click here to show them.