Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
Play_VMNow-GlobalpCOINC.html
|
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
initial sample
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Aug 28 19:23:23 2024, atime=Mon Oct 2 20:46:57
2023, length=1210144, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Aug 28 19:23:23 2024, atime=Mon Oct 2 20:46:57
2023, length=1210144, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 09:23:19 2023, atime=Mon Oct 2 20:46:57
2023, length=1210144, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Aug 28 19:23:23 2024, atime=Mon Oct 2 20:46:57
2023, length=1210144, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Aug 28 19:23:23 2024, atime=Mon Oct 2 20:46:57
2023, length=1210144, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Aug 28 19:23:23 2024, atime=Mon Oct 2 20:46:57
2023, length=1210144, window=hide
|
dropped
|
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
file:///C:/Users/user/Desktop/Play_VMNow-GlobalpCOINC.html
|
|||
https://50ou-vasil-levski.com/tvavx.php
|
|||
https://pulseliftoi.pl/4d2cZ/#0ZXNsaWZrYUBnbG9iYWxwLmNvbQ==
|
Domains
Name
|
IP
|
Malicious
|
|
---|---|---|---|
cdnjs.cloudflare.com
|
104.17.25.14
|
||
pulseliftoi.pl
|
172.67.186.231
|
||
gstfreeks.ru
|
172.67.206.58
|
||
50ou-vasil-levski.com
|
78.142.63.8
|
||
a.nel.cloudflare.com
|
35.190.80.1
|
||
code.jquery.com
|
151.101.194.137
|
||
challenges.cloudflare.com
|
104.18.95.41
|
||
www.google.com
|
142.250.184.228
|
IPs
IP
|
Domain
|
Country
|
Malicious
|
|
---|---|---|---|---|
172.67.186.231
|
pulseliftoi.pl
|
United States
|
||
104.17.25.14
|
cdnjs.cloudflare.com
|
United States
|
||
172.67.206.58
|
gstfreeks.ru
|
United States
|
||
104.17.24.14
|
unknown
|
United States
|
||
142.250.186.67
|
unknown
|
United States
|
||
142.250.186.78
|
unknown
|
United States
|
||
1.1.1.1
|
unknown
|
Australia
|
||
78.142.63.8
|
50ou-vasil-levski.com
|
Bulgaria
|
||
192.168.2.18
|
unknown
|
unknown
|
||
104.18.95.41
|
challenges.cloudflare.com
|
United States
|
||
151.101.130.137
|
unknown
|
United States
|
||
74.125.206.84
|
unknown
|
United States
|
||
239.255.255.250
|
unknown
|
Reserved
|
||
142.250.185.195
|
unknown
|
United States
|
||
35.190.80.1
|
a.nel.cloudflare.com
|
United States
|
||
151.101.194.137
|
code.jquery.com
|
United States
|
||
142.250.184.228
|
www.google.com
|
United States
|
||
142.250.184.206
|
unknown
|
United States
|
There are 8 hidden IPs, click here to show them.