IOC Report
https://www.google.com/url?q=https://authitca-adobue-sign.us-ord-1.linodeobjects.com/apts.html&sa=D&source=editors&ust=1720118061448441&usg=AOvVaw1WUHTIwDQHQCe4Um2Fp0tG

loading gif

Files

File Path
Type
Category
Malicious
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jul 4 19:06:58 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jul 4 19:06:57 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jul 4 19:06:57 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jul 4 19:06:57 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jul 4 19:06:57 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
Chrome Cache Entry: 57
HTML document, ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 58
ASCII text, with very long lines (32030)
downloaded
Chrome Cache Entry: 59
HTML document, ASCII text, with very long lines (1604), with no line terminators
downloaded
Chrome Cache Entry: 61
HTML document, ASCII text, with very long lines (3341)
downloaded
Chrome Cache Entry: 62
MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
dropped
Chrome Cache Entry: 63
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 64
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 7390
downloaded
Chrome Cache Entry: 65
XML 1.0 document, ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 66
JSON data
dropped
Chrome Cache Entry: 67
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 250
dropped
Chrome Cache Entry: 68
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 2905
dropped
Chrome Cache Entry: 69
troff or preprocessor input, ASCII text, with very long lines (372)
downloaded
Chrome Cache Entry: 71
ASCII text, with very long lines (15005)
downloaded
Chrome Cache Entry: 72
Unicode text, UTF-8 text, with very long lines (39376)
downloaded
There are 11 hidden files, click here to show them.

URLs

Name
IP
Malicious
https://www.google.com/url?q=https://authitca-adobue-sign.us-ord-1.linodeobjects.com/apts.html&sa=D&source=editors&ust=1720118061448441&usg=AOvVaw1WUHTIwDQHQCe4Um2Fp0tG
malicious
https://www.google.com/url?q=https://authitca-adobue-sign.us-ord-1.linodeobjects.com/apts.html&sa=D&source=editors&ust=1720118061448441&usg=AOvVaw1WUHTIwDQHQCe4Um2Fp0tG
malicious
https://authitca-adobue-sign.us-ord-1.linodeobjects.com/apts.html
malicious

Domains

Name
IP
Malicious
authitca-adobue-sign.us-ord-1.linodeobjects.com
unknown
malicious
openfpcdn.io
13.32.99.103
a.nel.cloudflare.com
35.190.80.1
code.jquery.com
151.101.130.137
ba3393a6.parecorps.com
188.114.96.3
cdnjs.cloudflare.com
104.17.25.14
www.google.com
142.250.185.100
s-part-0035.t-0009.t-msedge.net
13.107.246.63
s-part-0032.t-0009.t-msedge.net
13.107.246.60

IPs

IP
Domain
Country
Malicious
142.250.186.68
unknown
United States
13.107.246.63
s-part-0035.t-0009.t-msedge.net
United States
1.1.1.1
unknown
Australia
216.58.206.74
unknown
United States
74.125.133.84
unknown
United States
192.168.2.16
unknown
unknown
142.250.185.100
www.google.com
United States
13.107.246.60
s-part-0032.t-0009.t-msedge.net
United States
151.101.130.137
code.jquery.com
United States
13.32.99.103
openfpcdn.io
United States
172.232.0.221
unknown
United States
239.255.255.250
unknown
Reserved
188.114.97.3
unknown
European Union
188.114.96.3
ba3393a6.parecorps.com
European Union
142.250.186.131
unknown
United States
35.190.80.1
a.nel.cloudflare.com
United States
216.58.212.174
unknown
United States
104.17.25.14
cdnjs.cloudflare.com
United States
There are 8 hidden IPs, click here to show them.