IOC Report
https://shadowline-hub-uk-limited.jimdosite.com/

loading gif

Files

File Path
Type
Category
Malicious
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 13:04:42 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 13:04:42 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:54:41 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 13:04:42 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 13:04:42 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 13:04:42 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
dropped
Chrome Cache Entry: 102
HTML document, ASCII text, with very long lines (14105), with CRLF line terminators
downloaded
Chrome Cache Entry: 104
very short file (no magic)
downloaded
Chrome Cache Entry: 105
Unicode text, UTF-8 text, with very long lines (13643)
downloaded
Chrome Cache Entry: 107
RIFF (little-endian) data, Web/P image
downloaded
Chrome Cache Entry: 108
Web Open Font Format (Version 2), TrueType, length 8000, version 1.0
downloaded
Chrome Cache Entry: 109
ASCII text, with very long lines (8133), with no line terminators
dropped
Chrome Cache Entry: 110
PNG image data, 32 x 32, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 111
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
downloaded
Chrome Cache Entry: 112
Web Open Font Format (Version 2), TrueType, length 18596, version 1.0
downloaded
Chrome Cache Entry: 113
HTML document, ASCII text, with very long lines (955), with CRLF line terminators
downloaded
Chrome Cache Entry: 115
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 117
ASCII text
downloaded
Chrome Cache Entry: 120
PNG image data, 85 x 68, 8-bit/color RGB, non-interlaced
downloaded
Chrome Cache Entry: 122
ASCII text, with very long lines (41651)
downloaded
Chrome Cache Entry: 123
ASCII text, with very long lines (65458)
dropped
Chrome Cache Entry: 125
ASCII text, with very long lines (65447)
downloaded
Chrome Cache Entry: 126
HTML document, Unicode text, UTF-8 text, with very long lines (7929)
downloaded
Chrome Cache Entry: 127
ASCII text, with very long lines (32089)
downloaded
Chrome Cache Entry: 128
ASCII text
downloaded
Chrome Cache Entry: 129
Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
downloaded
Chrome Cache Entry: 130
Web Open Font Format, TrueType, length 26288, version 0.0
downloaded
Chrome Cache Entry: 132
PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
downloaded
Chrome Cache Entry: 134
ASCII text, with very long lines (47671)
downloaded
Chrome Cache Entry: 135
Web Open Font Format (Version 2), TrueType, length 18536, version 1.0
downloaded
Chrome Cache Entry: 136
Unicode text, UTF-8 text, with very long lines (64241)
downloaded
Chrome Cache Entry: 93
ASCII text, with very long lines (48316), with no line terminators
dropped
Chrome Cache Entry: 95
PNG image data, 160 x 85, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 97
HTML document, ASCII text
downloaded
Chrome Cache Entry: 99
ASCII text, with very long lines (513), with no line terminators
downloaded
There are 26 hidden files, click here to show them.

URLs

Name
IP
Malicious
https://shadowline-hub-uk-limited.jimdosite.com/
malicious
https://85.rescindq.com/wqtyZAFZzF3hXgsogboKg/
https://shadowline-hub-uk-limited.jimdosite.com/
https://lexinvariant.com/#aHR0cHM6Ly84NS5yZXNjaW5kcS5jb20vd3F0eVpBRlp6RjNoWGdzb2dib0tnLw==

Domains

Name
IP
Malicious
85.rescindq.com
104.21.30.176
 malicious
jimdo-dolphin-static-assets-prod.freetls.fastly.net
151.101.2.79
a.nel.cloudflare.com
35.190.80.1
at.prod.jimdo.systems
3.255.10.234
code.jquery.com
151.101.130.137
lexinvariant.com
172.67.190.244
cdnjs.cloudflare.com
104.17.24.14
jimdo-storage.freetls.fastly.net
151.101.2.79
challenges.cloudflare.com
104.18.95.41
mslawasq1fdbt4smgovect8av3dfpya4jiqeyxwzdxoaokfqfbwqz289.wceescty.ru
172.67.200.84
www.google.com
172.217.21.36
fp2e7a.wpc.phicdn.net
192.229.221.95
assets.onestore.ms
unknown
ajax.aspnetcdn.com
unknown
c.s-microsoft.com
unknown
www.sharepoint.com
unknown
fonts.jimstatic.com
unknown
shadowline-hub-uk-limited.jimdosite.com
unknown
There are 8 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
104.21.30.176
85.rescindq.com
United States
malicious
152.199.19.160
unknown
United States
172.217.17.46
unknown
United States
192.168.2.17
unknown
unknown
104.18.94.41
unknown
United States
104.18.41.38
unknown
United States
2.20.41.218
unknown
European Union
216.58.208.227
unknown
United States
192.168.2.4
unknown
unknown
151.101.130.137
code.jquery.com
United States
192.168.2.5
unknown
unknown
2.16.158.32
unknown
European Union
172.217.21.35
unknown
United States
172.217.21.36
www.google.com
United States
172.67.190.244
lexinvariant.com
United States
35.190.80.1
a.nel.cloudflare.com
United States
162.159.128.70
unknown
United States
104.17.24.14
cdnjs.cloudflare.com
United States
23.218.209.163
unknown
United States
20.76.201.171
unknown
United States
1.1.1.1
unknown
Australia
172.217.17.78
unknown
United States
172.217.17.35
unknown
United States
3.255.10.234
at.prod.jimdo.systems
United States
104.18.95.41
challenges.cloudflare.com
United States
151.101.2.79
jimdo-dolphin-static-assets-prod.freetls.fastly.net
United States
184.85.178.180
unknown
United States
151.101.2.137
unknown
United States
74.125.205.84
unknown
United States
239.255.255.250
unknown
Reserved
151.101.130.79
unknown
United States
172.67.200.84
mslawasq1fdbt4smgovect8av3dfpya4jiqeyxwzdxoaokfqfbwqz289.wceescty.ru
United States
23.32.239.81
unknown
United States
162.159.129.70
unknown
United States
23.32.239.43
unknown
United States
104.17.25.14
unknown
United States
There are 26 hidden IPs, click here to show them.