IOC Report
https://copilotse.blob.core.windows.net/$web/hgyxxxtrdfr76tfgfs821yhgh.html?sp=r&st=2024-12-08T12:55:44Z&se=2024-12-31T20:55:44Z&spr=https&sv=2022-11-02&sr=b&sig=7dYMitXSX9zEmg0mEsN7rfqS0sBAZEqtrbG4v8YyfsM%3D#robert.webber@phillyshipyard.com

loading gif

Files

File Path
Type
Category
Malicious
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
Chrome Cache Entry: 100
ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 101
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 102
PNG image data, 128 x 128, 8-bit/color RGB, non-interlaced
downloaded
Chrome Cache Entry: 104
ASCII text
downloaded
Chrome Cache Entry: 105
HTML document, Unicode text, UTF-8 text
downloaded
Chrome Cache Entry: 106
ASCII text
dropped
Chrome Cache Entry: 107
JSON data
downloaded
Chrome Cache Entry: 108
XML 1.0 document, Unicode text, UTF-8 (with BOM) text
downloaded
Chrome Cache Entry: 109
ASCII text, with very long lines (32030)
dropped
Chrome Cache Entry: 110
JSON data
dropped
Chrome Cache Entry: 111
ASCII text, with very long lines (14181)
downloaded
Chrome Cache Entry: 113
ASCII text, with very long lines (19015)
downloaded
Chrome Cache Entry: 119
ASCII text, with very long lines (13061)
downloaded
Chrome Cache Entry: 120
ASCII text, with very long lines (60130)
downloaded
Chrome Cache Entry: 87
ASCII text, with very long lines (32012)
downloaded
Chrome Cache Entry: 88
Web Open Font Format (Version 2), TrueType, length 78168, version 331.-31196
downloaded
Chrome Cache Entry: 92
ASCII text, with very long lines (32065)
downloaded
Chrome Cache Entry: 93
JSON data
downloaded
Chrome Cache Entry: 95
ASCII text, with very long lines (48664)
downloaded
Chrome Cache Entry: 98
ASCII text, with very long lines (50758)
dropped
Chrome Cache Entry: 99
ASCII text, with very long lines (26500)
dropped
There are 13 hidden files, click here to show them.

Domains

Name
IP
Malicious
logo.clearbit.com
unknown
malicious
stackpath.bootstrapcdn.com
104.18.10.207
d26p066pn2w0s0.cloudfront.net
13.227.8.47
code.jquery.com
151.101.130.137
cdnjs.cloudflare.com
104.17.25.14
ipinfo.io
34.117.59.81
maxcdn.bootstrapcdn.com
104.18.10.207
www.google.com
142.250.181.100
image.thum.io
34.200.110.203
api.telegram.org
149.154.167.220
dns.google
8.8.8.8
ka-f.fontawesome.com
unknown
kit.fontawesome.com
unknown
There are 3 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
20.60.23.161
unknown
United States
104.18.10.207
stackpath.bootstrapcdn.com
United States
104.18.40.68
unknown
United States
192.168.2.16
unknown
unknown
216.58.208.227
unknown
United States
172.217.19.202
unknown
United States
151.101.130.137
code.jquery.com
United States
8.8.8.8
dns.google
United States
149.154.167.220
api.telegram.org
United Kingdom
34.200.110.203
image.thum.io
United States
172.217.19.170
unknown
United States
64.233.162.84
unknown
United States
172.217.17.42
unknown
United States
104.21.26.223
unknown
United States
172.217.19.238
unknown
United States
1.1.1.1
unknown
Australia
172.217.17.78
unknown
United States
34.117.59.81
ipinfo.io
United States
172.217.17.35
unknown
United States
172.67.139.119
unknown
United States
142.250.181.100
www.google.com
United States
104.18.11.207
unknown
United States
239.255.255.250
unknown
Reserved
13.227.8.64
unknown
United States
104.17.25.14
cdnjs.cloudflare.com
United States
13.227.8.47
d26p066pn2w0s0.cloudfront.net
United States
142.250.181.74
unknown
United States
There are 17 hidden IPs, click here to show them.