Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 22 21:14:15 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 22 21:14:15 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 22 21:14:15 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 22 21:14:15 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 22 21:14:15 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
Chrome Cache Entry: 64
|
ASCII text, with very long lines (625)
|
downloaded
|
||
|
Chrome Cache Entry: 65
|
HTML document, ASCII text, with very long lines (1238)
|
downloaded
|
||
|
Chrome Cache Entry: 66
|
GIF image data, version 89a, 1 x 1
|
downloaded
|
||
|
Chrome Cache Entry: 67
|
GIF image data, version 89a, 1 x 1
|
dropped
|
||
|
Chrome Cache Entry: 68
|
GIF image data, version 89a, 1 x 1
|
downloaded
|
||
|
Chrome Cache Entry: 69
|
HTML document, ASCII text, with very long lines (1238)
|
dropped
|
||
|
Chrome Cache Entry: 70
|
GIF image data, version 89a, 1 x 1
|
dropped
|
||
|
Chrome Cache Entry: 71
|
GIF image data, version 89a, 1 x 1
|
downloaded
|
||
|
Chrome Cache Entry: 72
|
GIF image data, version 89a, 1 x 1
|
dropped
|
There are 6 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US
--service-sandbox-type=none --mojo-platform-channel-handle=2380 --field-trial-handle=2268,i,13333434112454993632,18005403485139377619,262144
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
/prefetch:8
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://fdx-vip.com/"
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://fdx-vip.com/
|
|||
|
https://fdx-vip.com/html/skin/images/10.png
|
104.21.31.254
|
||
|
https://hm.baidu.com/hm.js?fda0423c3306b4585f61536ed833bc01
|
111.45.11.83
|
||
|
https://fdx-vip.com/html/skin/images/services-3-3.png
|
104.21.31.254
|
||
|
https://a.nel.cloudflare.com/report/v4?s=AeHT3ogD4YujFO8NSbT5pth41Pn1xxmdpsZRHyyd2Q19LbVULCPxmyAVMzOy0EY3XuFVUvM8rUGJgTesBtevioruVeNaqvH6iFotU90DmOZbgUhfqoTl%2BdfTi8I3iQ%3D%3D
|
35.190.80.1
|
||
|
https://fdx-vip.com/html/uploads/190816/1-1ZQ6111352592.jpg
|
104.21.31.254
|
||
|
https://fdx-vip.com/html/skin/images/2.png
|
104.21.31.254
|
||
|
https://fdx-vip.com/html/skin/css/style.css
|
104.21.31.254
|
||
|
https://fdx-vip.com/html/skin/images/11.png
|
104.21.31.254
|
||
|
https://fclog.baidu.com/log/ocpcagl?type=behavior&emd=euc
|
unknown
|
||
|
https://fdx-vip.com/html/skin/images/fenxiang.png
|
104.21.31.254
|
||
|
https://fdx-vip.com/html/uploads/190816/1-1ZQ61111541B.jpg
|
104.21.31.254
|
||
|
https://fdx-vip.com/html/skin/images/3.png
|
104.21.31.254
|
||
|
https://fdx-vip.com/html/skin/images/2014062961592429.png
|
104.21.31.254
|
||
|
https://hmcdn.baidu.com/static
|
unknown
|
||
|
https://hm.baidu.com/hm.gif?hca=787242377477420C&cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=907&ep=14197%2C14197&et=3&ja=0&ln=en-us&lo=0&rnd=1800107105&si=fda0423c3306b4585f61536ed833bc01&v=1.3.2&lv=1&sn=35542&r=0&ww=1280&u=https%3A%2F%2Ffdx-vip.com%2F
|
111.45.11.83
|
||
|
https://fdx-vip.com/html/skin/images/12.png
|
104.21.31.254
|
||
|
http://tongji.baidu.com/hm-web/welcome/ico
|
unknown
|
||
|
https://fdx-vip.com/html/uploads/190816/1-1ZQ6114GOQ.jpg
|
104.21.31.254
|
||
|
https://fdx-vip.com/html/skin/images/services-1-1.png
|
104.21.31.254
|
||
|
https://fdx-vip.com/html/skin/images/4.png
|
104.21.31.254
|
||
|
https://hm.baidu.com/hm.gif?hca=787242377477420C&cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=907&et=0&ja=0&ln=en-us&lo=0&rnd=29427789&si=fda0423c3306b4585f61536ed833bc01&v=1.3.2&lv=1&sn=35542&r=0&ww=1280&u=https%3A%2F%2Ffdx-vip.com%2F&tt=%E4%B8%9C%E8%8E%9E%E5%BE%8B%E4%BD%B3%E6%B3%95%E5%8A%A1%E5%92%A8%E8%AF%A2%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
|
111.45.11.83
|
||
|
https://fdx-vip.com/html/skin/images/address-bg.png
|
104.21.31.254
|
||
|
https://fdx-vip.com/html/skin/images/5.png
|
104.21.31.254
|
||
|
https://fdx-vip.com/html/uploads/190816/1-1ZQ6111241946.jpg
|
104.21.31.254
|
||
|
https://fdx-vip.com/
|
|||
|
https://fdx-vip.com/html/skin/images/2015010652407685.jpg
|
104.21.31.254
|
||
|
https://fdx-vip.com/html/skin/images/kehu-bg.jpg
|
104.21.31.254
|
||
|
https://goutong.baidu.com/site/
|
unknown
|
||
|
https://fdx-vip.com/html/skin/images/2014103061516877.jpg
|
104.21.31.254
|
||
|
https://fdx-vip.com/html/skin/css/shake.css
|
104.21.31.254
|
||
|
https://fdx-vip.com/html/skin/images/a-xian.gif
|
104.21.31.254
|
||
|
https://fdx-vip.com/html/skin/images/services-4-4.png
|
104.21.31.254
|
||
|
https://fdx-vip.com/html/skin/images/6.png
|
104.21.31.254
|
||
|
https://fdx-vip.com/html/skin/images/qq.png
|
104.21.31.254
|
||
|
https://fdx-vip.com/html/skin/images/services-2-2.png
|
104.21.31.254
|
||
|
https://hmcdn.baidu.com/static/tongji/plugins/
|
unknown
|
||
|
https://fdx-vip.com/html/uploads/190816/1-1ZQ61129254W.jpg
|
104.21.31.254
|
||
|
https://fdx-vip.com/html/uploads/allimg/190918/1-1Z91P941000-L.jpg
|
104.21.31.254
|
||
|
https://fdx-vip.com/html/uploads/190816/1-1ZQ6114354912.jpg
|
104.21.31.254
|
||
|
https://fdx-vip.com/html/skin/images/head-qq.png
|
104.21.31.254
|
||
|
https://fdx-vip.com/html/skin/images/7.png
|
104.21.31.254
|
||
|
https://fdx-vip.com/html/uploads/190816/1-1ZQ611294S18.jpg
|
104.21.31.254
|
||
|
https://fdx-vip.com/html/uploads/190816/1-1ZQ6112Z52M.jpg
|
104.21.31.254
|
||
|
https://fdx-vip.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
|
104.21.31.254
|
||
|
https://fdx-vip.com/html/uploads/190816/1-1ZQ611103CV.jpg
|
104.21.31.254
|
||
|
https://hm.baidu.com/hm.gif?hca=787242377477420C&cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=907&et=0&ja=0&ln=en-us&lo=0<=1729635262&rnd=1591307762&si=fda0423c3306b4585f61536ed833bc01&su=https%3A%2F%2Ffdx-vip.com%2F&v=1.3.2&lv=2&sn=35560&r=0&ww=1280&u=https%3A%2F%2Ffdx-vip.com%2F&tt=%E4%B8%9C%E8%8E%9E%E5%BE%8B%E4%BD%B3%E6%B3%95%E5%8A%A1%E5%92%A8%E8%AF%A2%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
|
111.45.11.83
|
||
|
https://fdx-vip.com/html/skin/images/huanjing-bg.png
|
104.21.31.254
|
||
|
https://fdx-vip.com/html/skin/images/2014101479790393.png
|
104.21.31.254
|
||
|
https://fdx-vip.com/html/skin/images/9.png
|
104.21.31.254
|
||
|
https://fdx-vip.com/html/skin/images/2014062962024649.png
|
104.21.31.254
|
||
|
https://fdx-vip.com/html/skin/images/t-xian.gif
|
104.21.31.254
|
||
|
https://fdx-vip.com/html/skin/images/fuwu-bg.jpg
|
104.21.31.254
|
||
|
https://fdx-vip.com/html/skin/images/8.png
|
104.21.31.254
|
||
|
https://fdx-vip.com/html/skin/images/2014062961988229.png
|
104.21.31.254
|
||
|
https://fdx-vip.com/html/uploads/allimg/190918/1-1Z91Q55S80-L.jpg
|
104.21.31.254
|
||
|
https://fdx-vip.com/html/skin/images/weixinqrcode.png
|
104.21.31.254
|
||
|
https://fdx-vip.com/html/uploads/allimg/190918/1-1Z91P950570-L.jpg
|
104.21.31.254
|
||
|
https://fdx-vip.com/html/skin/images/1.png
|
104.21.31.254
|
||
|
https://fdx-vip.com/html/skin/images/head-sq.png
|
104.21.31.254
|
||
|
https://fdx-vip.com/html/skin/images/2014111067662073.jpg
|
104.21.31.254
|
||
|
https://fdx-vip.com/html/skin/css/bootstrap.min.css
|
104.21.31.254
|
There are 51 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
bg.microsoft.map.fastly.net
|
199.232.214.172
|
||
|
a.nel.cloudflare.com
|
35.190.80.1
|
||
|
fdx-vip.com
|
104.21.31.254
|
||
|
s-part-0017.t-0009.fb-t-msedge.net
|
13.107.253.45
|
||
|
www.google.com
|
142.250.186.36
|
||
|
www.cqbuhang.com
|
47.109.69.85
|
||
|
hm.e.shifen.com
|
111.45.11.83
|
||
|
fp2e7a.wpc.phicdn.net
|
192.229.221.95
|
||
|
hm.baidu.com
|
unknown
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
142.250.186.36
|
www.google.com
|
United States
|
||
|
111.45.11.83
|
hm.e.shifen.com
|
China
|
||
|
192.168.2.7
|
unknown
|
unknown
|
||
|
192.168.2.5
|
unknown
|
unknown
|
||
|
239.255.255.250
|
unknown
|
Reserved
|
||
|
104.21.31.254
|
fdx-vip.com
|
United States
|
||
|
47.109.69.85
|
www.cqbuhang.com
|
China
|
||
|
35.190.80.1
|
a.nel.cloudflare.com
|
United States
|
||
|
14.215.183.79
|
unknown
|
China
|
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://fdx-vip.com/
|
||
|
https://fdx-vip.com/
|