Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Dec 22 04:36:44 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Dec 22 04:36:43 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Dec 22 04:36:43 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Dec 22 04:36:43 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Dec 22 04:36:43 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
Chrome Cache Entry: 100
|
PNG image data, 214 x 20, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 101
|
HTML document, ASCII text, with very long lines (654)
|
downloaded
|
||
|
Chrome Cache Entry: 102
|
ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 103
|
ASCII text, with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 104
|
data
|
downloaded
|
||
|
Chrome Cache Entry: 105
|
PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 106
|
ASCII text, with very long lines (18299)
|
dropped
|
||
|
Chrome Cache Entry: 107
|
PNG image data, 32 x 27, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 108
|
ASCII text, with very long lines (65536), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 109
|
Unicode text, UTF-8 text, with very long lines (9887)
|
downloaded
|
||
|
Chrome Cache Entry: 110
|
ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 111
|
ASCII text, with very long lines (65536), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 112
|
data
|
dropped
|
||
|
Chrome Cache Entry: 113
|
ASCII text, with very long lines (1434), with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 114
|
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 115
|
PNG image data, 39 x 28, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 116
|
SVG Scalable Vector Graphics image
|
dropped
|
||
|
Chrome Cache Entry: 117
|
Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
|
downloaded
|
||
|
Chrome Cache Entry: 118
|
PNG image data, 27 x 29, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 119
|
ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 120
|
HTML document, ASCII text, with very long lines (654)
|
dropped
|
||
|
Chrome Cache Entry: 121
|
ASCII text, with very long lines (18299)
|
downloaded
|
||
|
Chrome Cache Entry: 122
|
ASCII text, with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 123
|
PNG image data, 187 x 18, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 124
|
PNG image data, 32 x 27, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 125
|
Web Open Font Format (Version 2), TrueType, length 15340, version 1.0
|
downloaded
|
||
|
Chrome Cache Entry: 126
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components
3
|
downloaded
|
||
|
Chrome Cache Entry: 127
|
MS Windows icon resource - 1 icon, 32x32, 8 bits/pixel
|
dropped
|
||
|
Chrome Cache Entry: 128
|
PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 129
|
PNG image data, 27 x 29, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 130
|
PNG image data, 214 x 20, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 131
|
ASCII text, with very long lines (1434), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 132
|
PNG image data, 20 x 18, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 133
|
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 134
|
Unicode text, UTF-8 text, with very long lines (51786)
|
dropped
|
||
|
Chrome Cache Entry: 135
|
ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 136
|
PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 137
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components
3
|
dropped
|
||
|
Chrome Cache Entry: 138
|
PNG image data, 20 x 18, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 86
|
ASCII text, with very long lines (65536), with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 87
|
ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 88
|
Unicode text, UTF-8 text, with very long lines (9887)
|
dropped
|
||
|
Chrome Cache Entry: 89
|
Unicode text, UTF-8 text, with very long lines (51786)
|
downloaded
|
||
|
Chrome Cache Entry: 90
|
PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 91
|
PNG image data, 187 x 18, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 92
|
PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 93
|
MS Windows icon resource - 1 icon, 32x32, 8 bits/pixel
|
downloaded
|
||
|
Chrome Cache Entry: 94
|
PNG image data, 39 x 28, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 95
|
ASCII text, with very long lines (65536), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 96
|
Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
|
downloaded
|
||
|
Chrome Cache Entry: 97
|
SVG Scalable Vector Graphics image
|
downloaded
|
||
|
Chrome Cache Entry: 98
|
PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 99
|
HTML document, ASCII text, with very long lines (654)
|
downloaded
|
There are 50 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US
--service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=1960,i,14440319301728119548,863647687672028231,262144
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
/prefetch:8
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://cpanel05wh.bkk1.cloud.z.com/~cp197720/open/DD/"
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://cpanel05wh.bkk1.cloud.z.com/~cp197720/open/DD/
|
 |
||
|
https://cpanel05wh.bkk1.cloud.z.com/~cp197720/open/DD/h
|
163.44.198.45
|
|
|
|
https://cpanel05wh.bkk1.cloud.z.com/~cp197720/open/DD/Fhome?enc=d8981dd0eb08f408e7902959c0841b91&p=0&dispatch=42a890954c3c2ff58a63b55623e7ea6ca0ad7903
|
163.44.198.45
|
|
|
|
https://cpanel05wh.bkk1.cloud.z.com/~cp197720/open/DD/Fhome/assets/clan.png
|
163.44.198.45
|
|
|
|
https://cpanel05wh.bkk1.cloud.z.com/~cp197720/open/DD/Fhome/?enc=d8981dd0eb08f408e7902959c0841b91&p=0&dispatch=42a890954c3c2ff58a63b55623e7ea6ca0ad7903
|
163.44.198.45
|
|
|
|
https://cpanel05wh.bkk1.cloud.z.com/~cp197720/open/DD/Fhome/assets/logo.png
|
163.44.198.45
|
|
|
|
https://cpanel05wh.bkk1.cloud.z.com/~cp197720/open/DD/Fhome/assets/col.png
|
163.44.198.45
|
|
|
|
https://cpanel05wh.bkk1.cloud.z.com/~cp197720/open/DD/
|
|
||
|
https://cpanel05wh.bkk1.cloud.z.com/~cp197720/open/DD/Fhome/assets/foo.png
|
163.44.198.45
|
|
|
|
https://cpanel05wh.bkk1.cloud.z.com/~cp197720/open/DD/index.php?pp=2300
|
163.44.198.45
|
|
|
|
https://cpanel05wh.bkk1.cloud.z.com/~cp197720/open/DD/log.css
|
163.44.198.45
|
|
|
|
https://cpanel05wh.bkk1.cloud.z.com/~cp197720/open/DD/Fhome/assets/app.css
|
163.44.198.45
|
|
|
|
https://cpanel05wh.bkk1.cloud.z.com/~cp197720/open/DD/Fhome/assets/pak.png
|
163.44.198.45
|
|
|
|
https://cpanel05wh.bkk1.cloud.z.com/~cp197720/open/DD/Fhome/assets/alert.png
|
163.44.198.45
|
|
|
|
https://cpanel05wh.bkk1.cloud.z.com/~cp197720/open/DD/dh.svg
|
163.44.198.45
|
|
|
|
https://cpanel05wh.bkk1.cloud.z.com/~cp197720/open/DD/Fhome/dd.php?enc=e2abe2ef032bc709e717993c81e294e8&p=0&dispatch=01f7ed273f0b8344cda8f2f39d9786ae01f4d4ce
|
|
||
|
https://stackoverflow.com/a/14384091/217866
|
unknown
|
||
|
https://www.google.com/js/bg/FsaNIYyPN76i0sL7d3myIoFfjMDAw8eHc9AJuLUrm7A.js
|
142.250.181.132
|
||
|
https://www.google.com/recaptcha/api2/payload?p=06AFcWeA7FDZR4xzTkbDkeNb5BPyXx4LCV3Mu5ZS44ZBy88JAUDPUzSEoJ6IV5h3cMgj_wuT_oS0-d8q2NSES_BvkiXe8i-BFvKyEGjx9U08m9Szcucx6OUoSh4-nj0HkZS61IM1ovPXy9JtFRCGjKAhRbFjysogh-rPoS0j7XxU2SfXRWt0hlbdkgOYam4Hr5ONf_KxXEY50y&k=6Ld_o50qAAAAAAbkPYUM_PZ2jHZ_gM56pUjO_aaB
|
142.250.181.132
|
||
|
http://jquery.org/license
|
unknown
|
||
|
https://developers.google.com/recaptcha/docs/faq#localhost_support
|
unknown
|
||
|
https://support.google.com/recaptcha#6262736
|
unknown
|
||
|
https://cpanel05wh.bkk1.cloud.z.com/fonts/vendor/@fortawesome/fontawesome-free/webfa-solid-900.woff?eeccf4f66002c6f2ba24d3d22f2434c2
|
163.44.198.45
|
||
|
https://cdn.lr-in.com/logger-1.min.js
|
104.21.234.144
|
||
|
https://cpanel05wh.bkk1.cloud.z.com/assets/loading.gif
|
163.44.198.45
|
||
|
https://dispatching-centre.lasamericascargo.com/images/favicon.gif
|
135.181.58.223
|
||
|
https://cpanel05wh.bkk1.cloud.z.com/fonts/vendor/@fortawesome/fontawesome-free/webfa-solid-900.ttf?be9ee23c0c6390141475d519c2c5fb8f
|
163.44.198.45
|
||
|
https://support.google.com/recaptcha/?hl=en#6223828
|
unknown
|
||
|
https://cloud.google.com/contact
|
unknown
|
||
|
https://fontawesome.com/license/free
|
unknown
|
||
|
https://fontawesome.com
|
unknown
|
||
|
https://www.gstatic.c..?/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__.
|
unknown
|
||
|
https://cpanel05wh.bkk1.cloud.z.com/fonts/vendor/@fontsource/roboto/files/roboto-latin-400-normal.woff2?4673b4537a84c7f7a130799aa6af329b
|
163.44.198.45
|
||
|
https://www.google.com/recaptcha/api.js
|
172.217.19.228
|
||
|
https://support.google.com/recaptcha/#6175971
|
unknown
|
||
|
https://cpanel05wh.bkk1.cloud.z.com/js/app.js
|
163.44.198.45
|
||
|
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF
|
142.250.181.132
|
||
|
https://cpanel05wh.bkk1.cloud.z.com/fonts/vendor/@fontsource/roboto/files/roboto-all-400-normal.woff?376ea5d93f71583052f65de4e0c6a92c
|
163.44.198.45
|
||
|
https://www.google.com/recaptcha/api2/
|
unknown
|
||
|
https://github.com/behdad/region-flags/tree/gh-pages/png
|
unknown
|
||
|
https://support.google.com/recaptcha
|
unknown
|
||
|
https://dispatching-centre.lasamericascargo.com/js/intlTelInput.js
|
135.181.58.223
|
||
|
https://stackoverflow.com/a/8935649/217866)
|
unknown
|
||
|
https://www.google.com/recaptcha/api2/bframe?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&k=6Ld_o50qAAAAAAbkPYUM_PZ2jHZ_gM56pUjO_aaB
|
142.250.181.132
|
||
|
https://github.com/twbs/bootstrap/blob/main/LICENSE)
|
unknown
|
||
|
https://cloud.google.com/recaptcha-enterprise/billing-information
|
unknown
|
||
|
https://cpanel05wh.bkk1.cloud.z.com/js/session-recorder.js
|
163.44.198.45
|
||
|
https://cpanel05wh.bkk1.cloud.z.com/fonts/vendor/@fortawesome/fontawesome-free/webfa-solid-900.woff2?1551f4f60c37af51121f106501f69b80
|
163.44.198.45
|
||
|
https://www.google.com/recaptcha/api2/reload?k=6Ld_o50qAAAAAAbkPYUM_PZ2jHZ_gM56pUjO_aaB
|
142.250.181.132
|
||
|
https://getbootstrap.com/)
|
unknown
|
||
|
https://dispatching-centre.lasamericascargo.com/js/card.js
|
135.181.58.223
|
||
|
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
|
unknown
|
||
|
https://github.com/googlei18n/libphonenumber/blob/master/resources/ShortNumberMetadata.xml
|
unknown
|
||
|
https://www.google.com/recaptcha/api2/userverify?k=6Ld_o50qAAAAAAbkPYUM_PZ2jHZ_gM56pUjO_aaB
|
142.250.181.132
|
||
|
https://play.google.com/log?format=json&hasfast=true
|
unknown
|
||
|
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
|
unknown
|
||
|
https://github.com/jackocnr/intl-tel-input.git
|
unknown
|
||
|
https://github.com/js-cookie/js-cookie
|
unknown
|
||
|
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Ld_o50qAAAAAAbkPYUM_PZ2jHZ_gM56pUjO_aaB&co=aHR0cHM6Ly9jcGFuZWwwNXdoLmJrazEuY2xvdWQuei5jb206NDQz&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=normal&cb=txndood6r10t
|
142.250.181.132
|
There are 48 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
cpanel05wh.bkk1.cloud.z.com
|
163.44.198.45
|
||
|
www.google.com
|
172.217.19.228
|
||
|
cdn.lr-in.com
|
104.21.234.144
|
||
|
dispatching-centre.lasamericascargo.com
|
135.181.58.223
|
||
|
api.livechatinc.com
|
unknown
|
||
|
cdn.livechatinc.com
|
unknown
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
163.44.198.45
|
cpanel05wh.bkk1.cloud.z.com
|
Singapore
|
||
|
172.217.19.228
|
www.google.com
|
United States
|
||
|
192.168.2.16
|
unknown
|
unknown
|
||
|
104.21.234.144
|
cdn.lr-in.com
|
United States
|
||
|
142.250.181.132
|
unknown
|
United States
|
||
|
135.181.58.223
|
dispatching-centre.lasamericascargo.com
|
Germany
|
||
|
239.255.255.250
|
unknown
|
Reserved
|
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://cpanel05wh.bkk1.cloud.z.com/~cp197720/open/DD/
|
|
|
|
https://cpanel05wh.bkk1.cloud.z.com/~cp197720/open/DD/
|
|
|
|
https://cpanel05wh.bkk1.cloud.z.com/~cp197720/open/DD/
|
|
|
|
https://cpanel05wh.bkk1.cloud.z.com/~cp197720/open/DD/
|
|
|
|
https://cpanel05wh.bkk1.cloud.z.com/~cp197720/open/DD/
|
|
|
|
https://cpanel05wh.bkk1.cloud.z.com/~cp197720/open/DD/Fhome/dd.php?enc=e2abe2ef032bc709e717993c81e294e8&p=0&dispatch=01f7ed273f0b8344cda8f2f39d9786ae01f4d4ce
|
|
|
|
https://cpanel05wh.bkk1.cloud.z.com/~cp197720/open/DD/
|
||
|
https://cpanel05wh.bkk1.cloud.z.com/~cp197720/open/DD/
|
||
|
https://cpanel05wh.bkk1.cloud.z.com/~cp197720/open/DD/
|
||
|
https://cpanel05wh.bkk1.cloud.z.com/~cp197720/open/DD/
|
||
|
https://cpanel05wh.bkk1.cloud.z.com/~cp197720/open/DD/
|
There are 1 hidden doms, click here to show them.