IOC Report
https://www.stellantis-videocheck.com/devis/O1YNFS5ENM

loading gif

Files

File Path
Type
Category
Malicious
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 23 14:45:52 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 23 14:45:52 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 23 14:45:52 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 23 14:45:52 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 23 14:45:52 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
Chrome Cache Entry: 100
ASCII text, with very long lines (65318)
downloaded
Chrome Cache Entry: 102
ASCII text, with very long lines (19063)
dropped
Chrome Cache Entry: 103
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 104
Web Open Font Format, TrueType, length 41920, version 0.0
downloaded
Chrome Cache Entry: 106
ASCII text
downloaded
Chrome Cache Entry: 107
ASCII text
downloaded
Chrome Cache Entry: 108
ASCII text, with very long lines (30837)
downloaded
Chrome Cache Entry: 109
ASCII text, with very long lines (50277)
downloaded
Chrome Cache Entry: 110
ASCII text, with very long lines (1485), with no line terminators
dropped
Chrome Cache Entry: 111
ASCII text, with very long lines (2475)
downloaded
Chrome Cache Entry: 112
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 113
JSON data
dropped
Chrome Cache Entry: 115
HTML document, Unicode text, UTF-8 text, with very long lines (1136)
dropped
Chrome Cache Entry: 118
Web Open Font Format, CFF, length 37100, version 0.0
downloaded
Chrome Cache Entry: 119
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 120
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 121
PNG image data, 138 x 105, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 123
MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
dropped
Chrome Cache Entry: 125
ASCII text, with very long lines (32012)
downloaded
Chrome Cache Entry: 127
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 4608x3456, components 3
dropped
Chrome Cache Entry: 128
ASCII text
downloaded
Chrome Cache Entry: 129
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 131
Web Open Font Format (Version 2), TrueType, length 18536, version 1.0
downloaded
Chrome Cache Entry: 132
Web Open Font Format (Version 2), TrueType, length 18596, version 1.0
downloaded
Chrome Cache Entry: 133
ASCII text, with very long lines (22367), with no line terminators
downloaded
Chrome Cache Entry: 91
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 93
Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
downloaded
Chrome Cache Entry: 95
ASCII text, with very long lines (32058)
downloaded
Chrome Cache Entry: 98
HTML document, ASCII text
downloaded
Chrome Cache Entry: 99
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 4608x3456, components 3
downloaded
There are 27 hidden files, click here to show them.

URLs

Name
IP
Malicious
https://www.stellantis-videocheck.com/devis/O1YNFS5ENM
https://www.stellantis-videocheck.com/devis/O1YNFS5ENM

Domains

Name
IP
Malicious
cust.prod.videocheck.bsn0027990-rrd79f4c.stla-aws.net
52.47.153.142
api.prod.videocheck.bsn0027990-rrd79f4c.stla-aws.net
52.47.153.142
code.jquery.com
151.101.66.137
www3.l.google.com
172.217.19.238
s3-r-w.eu-west-3.amazonaws.com
3.5.224.150
cdnjs.cloudflare.com
104.17.24.14
maxcdn.bootstrapcdn.com
104.18.10.207
www.google.com
142.250.181.68
www.stellantis-videocheck.com
unknown
videos-psa-videocheck.s3.eu-west-3.amazonaws.com
unknown
prod-assets-customer-psa-videocheck.s3.eu-west-3.amazonaws.com
unknown
translate.google.com
unknown
api.psa-videocheck.com
unknown
There are 3 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
3.5.224.150
s3-r-w.eu-west-3.amazonaws.com
United States
172.217.19.206
unknown
United States
104.18.10.207
maxcdn.bootstrapcdn.com
United States
192.168.2.16
unknown
unknown
216.58.208.227
unknown
United States
172.217.19.202
unknown
United States
192.168.2.23
unknown
unknown
172.217.19.170
unknown
United States
151.101.66.137
code.jquery.com
United States
16.12.20.14
unknown
United States
142.250.181.68
www.google.com
United States
172.217.21.35
unknown
United States
172.217.17.42
unknown
United States
52.95.154.48
unknown
United States
104.17.24.14
cdnjs.cloudflare.com
United States
172.217.19.238
www3.l.google.com
United States
1.1.1.1
unknown
Australia
172.217.17.35
unknown
United States
52.47.153.142
cust.prod.videocheck.bsn0027990-rrd79f4c.stla-aws.net
United States
142.250.181.106
unknown
United States
239.255.255.250
unknown
Reserved
64.233.161.84
unknown
United States
172.217.19.10
unknown
United States
142.250.181.99
unknown
United States
104.17.25.14
unknown
United States
There are 15 hidden IPs, click here to show them.