IOC Report
https://e.trustifi.com/#/fff2a6/655144/3ac50c/e93bb8/594e42/41c163/f1cd98/92ee40/e8666a/ef542d/85972d/627493/9a11d6/1f4096/1d247f/848a7a/9632d0/879ea4/bcfc0d/744595/93daa1/f34456/a15015/3ddaed/fad545/1fd970/328bf8/9bb3f0/c514cd/df7a51/88456c/c9366d/790245/fb6752/33794d/6e0d28/60381b/a98a06/87eaef/01

loading gif

Files

File Path
Type
Category
Malicious
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 28 17:19:59 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 28 17:19:58 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:54:41 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 28 17:19:58 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 28 17:19:58 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 28 17:19:58 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
dropped
Chrome Cache Entry: 101
ASCII text, with very long lines (47671)
dropped
Chrome Cache Entry: 102
ASCII text, with very long lines (65447)
dropped
Chrome Cache Entry: 104
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
dropped
Chrome Cache Entry: 105
RIFF (little-endian) data, Web/P image
downloaded
Chrome Cache Entry: 107
ASCII text, with very long lines (8168), with no line terminators
dropped
Chrome Cache Entry: 108
HTML document, ASCII text, with very long lines (4997)
downloaded
Chrome Cache Entry: 109
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 110
ASCII text, with very long lines (2306)
downloaded
Chrome Cache Entry: 111
ASCII text, with very long lines (2343)
dropped
Chrome Cache Entry: 112
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 113
Web Open Font Format (Version 2), TrueType, length 13408, version 1.0
downloaded
Chrome Cache Entry: 114
ASCII text, with very long lines (5945)
dropped
Chrome Cache Entry: 117
ASCII text, with very long lines (50758)
downloaded
Chrome Cache Entry: 119
HTML document, ASCII text
downloaded
Chrome Cache Entry: 120
PNG image data, 90 x 49, 8-bit/color RGB, non-interlaced
dropped
Chrome Cache Entry: 122
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 123
ASCII text, with very long lines (32065)
dropped
Chrome Cache Entry: 125
ASCII text, with very long lines (3379)
downloaded
Chrome Cache Entry: 127
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 129
ASCII text, with very long lines (8081), with no line terminators
downloaded
Chrome Cache Entry: 130
PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
dropped
Chrome Cache Entry: 131
RIFF (little-endian) data, Web/P image
downloaded
Chrome Cache Entry: 133
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 134
Web Open Font Format (Version 2), TrueType, length 13528, version 1.0
downloaded
Chrome Cache Entry: 136
ASCII text, with very long lines (5945)
downloaded
Chrome Cache Entry: 138
Web Open Font Format (Version 2), TrueType, length 13388, version 1.0
downloaded
Chrome Cache Entry: 140
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 141
ASCII text, with very long lines (6713), with no line terminators
downloaded
Chrome Cache Entry: 142
ASCII text, with very long lines (33960)
downloaded
Chrome Cache Entry: 144
ASCII text, with very long lines (59119)
downloaded
Chrome Cache Entry: 99
ASCII text, with very long lines (19948), with no line terminators
downloaded
There are 28 hidden files, click here to show them.

URLs

Name
IP
Malicious
https://e.trustifi.com/#/fff2a6/655144/3ac50c/e93bb8/594e42/41c163/f1cd98/92ee40/e8666a/ef542d/85972d/627493/9a11d6/1f4096/1d247f/848a7a/9632d0/879ea4/bcfc0d/744595/93daa1/f34456/a15015/3ddaed/fad545/1fd970/328bf8/9bb3f0/c514cd/df7a51/88456c/c9366d/790245/fb6752/33794d/6e0d28/60381b/a98a06/87eaef/01f4e4/642891/927008/b3d84b/be88ef/6f56ca/922d7f/c2017a/2b28ce/5f100a/ab5cfe/ca732f/ba9f64/6c13c0/db448e/12afff/ea859a/0054d0/06ab25/ddf455/c36939/fe771f/592f7f/fd9f55/51d733/4f5c46/02cddd/dbef71/7c02e0/b3eaba/7eac45/4a8768/a7dd16/2174e0/de559c/dacc2a/571f0f/f5f216/44ee34/abbbf4/b6cd49/d82da6/795ff3/bc1fdf/8febc7/4b7488/0cb4fb/7ef03b/a191c5/4d2316/483906/0c1e88
malicious
https://embe.elansconstruction.com/&redirect=ed1d28a3476cb1960063bcdadcf99d577535ba79main&uid=f253efe302d32ab264a76e0ce65be769671fd5f46e4c7
malicious
https://e.trustifi.com/#/fff2a6/655144/3ac50c/e93bb8/594e42/41c163/f1cd98/92ee40/e8666a/ef542d/85972d/627493/9a11d6/1f4096/1d247f/848a7a/9632d0/879ea4/bcfc0d/744595/93daa1/f34456/a15015/3ddaed/fad545/1fd970/328bf8/9bb3f0/c514cd/df7a51/88456c/c9366d/790245/fb6752/33794d/6e0d28/60381b/a98a06/87eaef/01f4e4/642891/927008/b3d84b/be88ef/6f56ca/922d7f/c2017a/2b28ce/5f100a/ab5cfe/ca732f/ba9f64/6c13c0/db448e/12afff/ea859a/0054d0/06ab25/ddf455/c36939/fe771f/592f7f/fd9f55/51d733/4f5c46/02cddd/dbef71/7c02e0/b3eaba/7eac45/4a8768/a7dd16/2174e0/de559c/dacc2a/571f0f/f5f216/44ee34/abbbf4/b6cd49/d82da6/795ff3/bc1fdf/8febc7/4b7488/0cb4fb/7ef03b/a191c5/4d2316/483906/0c1e88
https://embe.elansconstruction.com/

Domains

Name
IP
Malicious
embe.elansconstruction.com
188.114.97.3
malicious
be.trustifi.com
104.26.5.170
a.nel.cloudflare.com
35.190.80.1
ckbox.cloud
52.222.169.57
e.trustifi.com
172.67.72.31
static.cloudflareinsights.com
104.16.80.73
code.jquery.com
151.101.130.137
cdnjs.cloudflare.com
104.17.24.14
challenges.cloudflare.com
104.18.94.41
www.google.com
142.250.186.164

IPs

IP
Domain
Country
Malicious
188.114.97.3
embe.elansconstruction.com
European Union
malicious
99.86.4.123
unknown
United States
216.58.206.72
unknown
United States
172.217.18.14
unknown
United States
192.168.2.17
unknown
unknown
104.18.94.41
challenges.cloudflare.com
United States
142.250.185.168
unknown
United States
192.168.2.4
unknown
unknown
104.16.80.73
static.cloudflareinsights.com
United States
151.101.130.137
code.jquery.com
United States
172.217.23.110
unknown
United States
142.250.186.131
unknown
United States
35.190.80.1
a.nel.cloudflare.com
United States
104.16.79.73
unknown
United States
142.250.184.206
unknown
United States
172.67.72.31
e.trustifi.com
United States
104.17.24.14
cdnjs.cloudflare.com
United States
1.1.1.1
unknown
Australia
104.26.5.170
be.trustifi.com
United States
52.222.169.57
ckbox.cloud
United States
104.18.95.41
unknown
United States
142.251.173.84
unknown
United States
142.250.181.226
unknown
United States
142.250.185.170
unknown
United States
142.250.181.227
unknown
United States
239.255.255.250
unknown
Reserved
188.114.96.3
unknown
European Union
142.250.186.164
www.google.com
United States
172.217.16.195
unknown
United States
142.250.186.66
unknown
United States
There are 20 hidden IPs, click here to show them.