Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 4 16:06:23 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 4 16:06:23 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 4 16:06:23 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 4 16:06:23 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 4 16:06:23 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
Chrome Cache Entry: 120
|
PNG image data, 350 x 234, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 121
|
ASCII text, with very long lines (32086)
|
dropped
|
||
|
Chrome Cache Entry: 122
|
PNG image data, 958 x 119, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 123
|
PNG image data, 960 x 960, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 124
|
PNG image data, 960 x 960, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 125
|
ASCII text, with very long lines (57790)
|
downloaded
|
||
|
Chrome Cache Entry: 127
|
ASCII text, with very long lines (11700)
|
downloaded
|
||
|
Chrome Cache Entry: 128
|
PNG image data, 550 x 623, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 130
|
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=360, bps=0, PhotometricIntepretation=RGB,
orientation=upper-left, width=480], progressive, precision 8, 352x264, components 3
|
downloaded
|
||
|
Chrome Cache Entry: 132
|
assembler source, ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 133
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 145x145, components
3
|
downloaded
|
||
|
Chrome Cache Entry: 134
|
PNG image data, 360 x 240, 8-bit colormap, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 138
|
assembler source, ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 141
|
PNG image data, 705 x 329, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 145
|
HTML document, ASCII text, with very long lines (398)
|
downloaded
|
||
|
Chrome Cache Entry: 146
|
ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 147
|
HTML document, ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 148
|
PNG image data, 192 x 192, 8-bit colormap, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 149
|
HTML document, ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 151
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components
3
|
downloaded
|
||
|
Chrome Cache Entry: 152
|
JSON data
|
downloaded
|
||
|
Chrome Cache Entry: 153
|
Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
|
downloaded
|
||
|
Chrome Cache Entry: 154
|
PNG image data, 350 x 224, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 155
|
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=658, bps=0, PhotometricIntepretation=RGB,
orientation=upper-left, width=640], progressive, precision 8, 150x154, components 3
|
dropped
|
||
|
Chrome Cache Entry: 156
|
MS Windows icon resource - 1 icon, 39x34, 32 bits/pixel
|
downloaded
|
||
|
Chrome Cache Entry: 157
|
HTML document, ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 158
|
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=237, bps=0, PhotometricIntepretation=RGB,
orientation=upper-left, width=350], progressive, precision 8, 237x350, components 3
|
downloaded
|
||
|
Chrome Cache Entry: 159
|
ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 160
|
PNG image data, 138 x 133, 8-bit colormap, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 161
|
PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 162
|
ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 163
|
PNG image data, 94 x 93, 8-bit colormap, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 164
|
PNG image data, 1000 x 2500, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 166
|
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=960, bps=0, PhotometricIntepretation=RGB,
orientation=upper-left, width=960], progressive, precision 8, 150x150, components 3
|
dropped
|
||
|
Chrome Cache Entry: 167
|
PNG image data, 528 x 53, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 168
|
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=730, bps=0, PhotometricIntepretation=RGB,
orientation=upper-left, width=729], progressive, precision 8, 150x150, components 3
|
dropped
|
||
|
Chrome Cache Entry: 169
|
PNG image data, 608 x 456, 8-bit/color RGB, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 170
|
assembler source, ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 171
|
PNG image data, 360 x 240, 8-bit colormap, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 172
|
Unicode text, UTF-8 text, with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 173
|
ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 174
|
PNG image data, 100 x 100, 8-bit colormap, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 175
|
PNG image data, 360 x 240, 8-bit colormap, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 176
|
ASCII text, with very long lines (51030)
|
downloaded
|
||
|
Chrome Cache Entry: 177
|
ASCII text, with very long lines (65348)
|
downloaded
|
||
|
Chrome Cache Entry: 180
|
Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
||
|
Chrome Cache Entry: 181
|
ASCII text, with very long lines (29177)
|
downloaded
|
||
|
Chrome Cache Entry: 182
|
ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 183
|
ASCII text, with very long lines (65326)
|
downloaded
|
||
|
Chrome Cache Entry: 184
|
PNG image data, 192 x 192, 8-bit colormap, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 185
|
GIF image data, version 89a, 184 x 182
|
downloaded
|
||
|
Chrome Cache Entry: 187
|
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=642, bps=0, PhotometricIntepretation=RGB,
orientation=upper-left, width=640], progressive, precision 8, 150x150, components 3
|
downloaded
|
||
|
Chrome Cache Entry: 188
|
ASCII text, with very long lines (65350)
|
dropped
|
||
|
Chrome Cache Entry: 190
|
ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 193
|
ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 194
|
RIFF (little-endian) data, Web/P image
|
downloaded
|
||
|
Chrome Cache Entry: 196
|
ASCII text, with very long lines (8139)
|
downloaded
|
||
|
Chrome Cache Entry: 200
|
JSON data
|
dropped
|
||
|
Chrome Cache Entry: 203
|
ASCII text, with very long lines (8010)
|
downloaded
|
||
|
Chrome Cache Entry: 205
|
ASCII text, with very long lines (30837)
|
downloaded
|
||
|
Chrome Cache Entry: 207
|
HTML document, ASCII text, with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 209
|
PNG image data, 192 x 192, 8-bit colormap, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 210
|
Web Open Font Format (Version 2), TrueType, length 73852, version 1.0
|
downloaded
|
||
|
Chrome Cache Entry: 213
|
ASCII text, with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 214
|
PNG image data, 300 x 200, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 215
|
ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 216
|
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=2015, bps=0, PhotometricIntepretation=RGB,
orientation=upper-left, width=1504], progressive, precision 8, 150x150, components 3
|
dropped
|
||
|
Chrome Cache Entry: 217
|
PNG image data, 705 x 243, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 219
|
HTML document, Unicode text, UTF-8 text, with very long lines (371), with CRLF line terminators
|
downloaded
|
There are 66 hidden files, click here to show them.
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://s3.amazonaws.com/r3e1272/Rco.html#4eyOul3510eTKK19nejdimaazo189TBUDIERNFIMTFBQ264510CRSG907S11
|
 |
||
|
https://noreferers.com/nlp/index.php?id=z6ZMtx4EtMYwMFlVXWHY&s2=40cb09r9rftikfe93c&url_bnm_redirect=https://rmut-glo.bigwebtools.com/t/clk
|
|||
|
https://carelab.click/t/4eyOul3510eTKK19nejdimaazo189TBUDIERNFIMTFBQ264510CRSG907S11
|
|||
|
https://redirectpromotion.icu/?encoded_value=223GDT1&sub1=5824a3e00517402988098d50404e6a94&sub2=&sub3=&sub4=&sub5=19531&source_id=20241&ip=8.46.123.33&domain=www.clicknloader.com
|
|||
|
https://carelab.click/4eyOul3510eTKK19nejdimaazo189TBUDIERNFIMTFBQ264510CRSG907S11
|
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
etherdeviceexpedition.com
|
188.114.97.3
|
|
|
|
redirectpromotion.icu
|
104.21.7.33
|
||
|
app.upsellit.com
|
66.226.1.69
|
||
|
trk-consulatu.com
|
188.114.97.3
|
||
|
so-gre8.com
|
5.161.250.225
|
||
|
tls13.taboola.map.fastly.net
|
151.101.65.44
|
||
|
global.px.quantserve.com
|
91.228.74.159
|
||
|
www.clicknloader.com
|
188.114.97.3
|
||
|
d22322n8919ncg.cloudfront.net
|
65.9.7.186
|
||
|
www.fast4redirect.com
|
104.21.66.53
|
||
|
mobile-gtalk.l.google.com
|
74.125.133.188
|
||
|
adservice.google.com
|
142.250.185.66
|
||
|
spdc-global.pbp.gysm.yahoodns.net
|
54.246.144.89
|
||
|
www.upsellit.com
|
34.117.39.58
|
||
|
adobetarget.data.adobedc.net
|
66.235.152.221
|
||
|
scontent.xx.fbcdn.net
|
157.240.0.6
|
||
|
s3.amazonaws.com
|
54.231.172.248
|
||
|
cdnjs.cloudflare.com
|
104.17.24.14
|
||
|
www.google.com
|
142.250.181.228
|
||
|
subscription.trk-consulatu.com
|
188.114.97.3
|
||
|
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com
|
34.252.162.78
|
||
|
extension.secureanalytic.com
|
188.114.96.3
|
||
|
android.l.google.com
|
142.250.74.206
|
||
|
rotator-prod-uk-acai-lb.inbake.com
|
3.10.136.199
|
||
|
star-mini.c10r.facebook.com
|
157.240.253.35
|
||
|
gotrcklink.site
|
116.202.12.61
|
||
|
a.nel.cloudflare.com
|
35.190.80.1
|
||
|
secureanalytic.com
|
188.114.97.3
|
||
|
event.trk-consulatu.com
|
188.114.97.3
|
||
|
quantumgizmolab.com
|
188.114.96.3
|
||
|
cdn4image.com
|
157.90.89.60
|
||
|
carelab.click
|
139.177.206.52
|
||
|
api.zippopotam.us
|
188.114.96.3
|
||
|
googleads.g.doubleclick.net
|
172.217.16.194
|
||
|
yd-satellite-369954131.eu-central-1.elb.amazonaws.com
|
52.29.245.196
|
||
|
td.doubleclick.net
|
142.250.186.66
|
||
|
notification.secureanalytic.com
|
188.114.96.3
|
||
|
edge.gycpi.b.yahoodns.net
|
87.248.119.252
|
||
|
pushclk.com
|
172.67.171.114
|
||
|
noreferers.com
|
116.202.12.61
|
||
|
dzfq4ouujrxm8.cloudfront.net
|
13.33.187.116
|
||
|
api.taboola.com
|
unknown
|
||
|
rtr.innovid.com
|
unknown
|
||
|
use.fontawesome.com
|
unknown
|
||
|
www.mcafee.com
|
unknown
|
||
|
www.emjcd.com
|
unknown
|
||
|
connect.facebook.net
|
unknown
|
||
|
s.yimg.com
|
unknown
|
||
|
www.anrdoezrs.net
|
unknown
|
||
|
cj.dotomi.com
|
unknown
|
||
|
tags.tiqcdn.com
|
unknown
|
||
|
sp.analytics.yahoo.com
|
unknown
|
||
|
cdn.jsdelivr.net
|
unknown
|
||
|
s.go-mpulse.net
|
unknown
|
||
|
rmut-glo.bigwebtools.com
|
unknown
|
||
|
images.taboola.com
|
unknown
|
||
|
mcafeeinc.demdex.net
|
unknown
|
||
|
www.facebook.com
|
unknown
|
||
|
id.mcafee.com
|
unknown
|
||
|
secure.quantserve.com
|
unknown
|
||
|
mcafee12.tt.omtrdc.net
|
unknown
|
||
|
s-static.innovid.com
|
unknown
|
||
|
pixel.quantserve.com
|
unknown
|
||
|
c.go-mpulse.net
|
unknown
|
There are 54 hidden domains, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
188.114.97.3
|
trk-consulatu.com
|
European Union
|
|
|
|
139.177.206.52
|
carelab.click
|
United States
|
||
|
142.250.74.206
|
android.l.google.com
|
United States
|
||
|
66.235.152.221
|
adobetarget.data.adobedc.net
|
United States
|
||
|
35.190.80.1
|
a.nel.cloudflare.com
|
United States
|
||
|
142.250.186.72
|
unknown
|
United States
|
||
|
142.250.185.66
|
adservice.google.com
|
United States
|
||
|
104.18.186.31
|
unknown
|
United States
|
||
|
172.217.18.3
|
unknown
|
United States
|
||
|
239.255.255.250
|
unknown
|
Reserved
|
||
|
52.29.245.196
|
yd-satellite-369954131.eu-central-1.elb.amazonaws.com
|
United States
|
||
|
151.101.65.44
|
tls13.taboola.map.fastly.net
|
United States
|
||
|
91.228.74.159
|
global.px.quantserve.com
|
United Kingdom
|
||
|
66.226.1.69
|
app.upsellit.com
|
United States
|
||
|
142.250.184.238
|
unknown
|
United States
|
||
|
54.246.144.89
|
spdc-global.pbp.gysm.yahoodns.net
|
United States
|
||
|
157.240.253.35
|
star-mini.c10r.facebook.com
|
United States
|
||
|
172.217.16.194
|
googleads.g.doubleclick.net
|
United States
|
||
|
34.252.162.78
|
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com
|
United States
|
||
|
3.10.136.199
|
rotator-prod-uk-acai-lb.inbake.com
|
United States
|
||
|
104.21.66.53
|
www.fast4redirect.com
|
United States
|
||
|
157.90.89.60
|
cdn4image.com
|
United States
|
||
|
184.28.89.23
|
unknown
|
United States
|
||
|
172.67.142.245
|
unknown
|
United States
|
||
|
192.168.2.16
|
unknown
|
unknown
|
||
|
172.217.23.106
|
unknown
|
United States
|
||
|
116.202.12.61
|
gotrcklink.site
|
Germany
|
||
|
157.240.0.6
|
scontent.xx.fbcdn.net
|
United States
|
||
|
172.217.23.110
|
unknown
|
United States
|
||
|
13.33.187.116
|
dzfq4ouujrxm8.cloudfront.net
|
United States
|
||
|
87.248.119.252
|
edge.gycpi.b.yahoodns.net
|
United Kingdom
|
||
|
95.101.54.218
|
unknown
|
European Union
|
||
|
104.21.7.33
|
redirectpromotion.icu
|
United States
|
||
|
5.161.250.225
|
so-gre8.com
|
Germany
|
||
|
34.117.39.58
|
www.upsellit.com
|
United States
|
||
|
104.17.24.14
|
cdnjs.cloudflare.com
|
United States
|
||
|
74.125.133.188
|
mobile-gtalk.l.google.com
|
United States
|
||
|
172.67.171.114
|
pushclk.com
|
United States
|
||
|
65.9.7.186
|
d22322n8919ncg.cloudfront.net
|
United States
|
||
|
216.58.206.68
|
unknown
|
United States
|
||
|
142.250.185.170
|
unknown
|
United States
|
||
|
64.233.167.84
|
unknown
|
United States
|
||
|
89.207.16.75
|
unknown
|
Sweden
|
||
|
104.21.27.152
|
unknown
|
United States
|
||
|
142.250.185.131
|
unknown
|
United States
|
||
|
54.231.172.248
|
s3.amazonaws.com
|
United States
|
||
|
142.250.181.228
|
www.google.com
|
United States
|
||
|
188.114.96.3
|
extension.secureanalytic.com
|
European Union
|
||
|
142.250.186.66
|
td.doubleclick.net
|
United States
|
There are 39 hidden IPs, click here to show them.