Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
C:\Users\user\Downloads\b221038d-b84f-4283-93e0-dddf1b702f7a.tmp
|
Zip archive data, at least v2.0 to extract, compression method=deflate
|
dropped
|
 |
|
|
C:\Users\user\Downloads\TiGysceotsetup-m66.zip.crdownload
|
Zip archive data, at least v2.0 to extract, compression method=deflate
|
dropped
|
||
|
Chrome Cache Entry: 100
|
GIF image data, version 89a, 512 x 512
|
downloaded
|
||
|
Chrome Cache Entry: 101
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian,
direntries=1], baseline, precision 8, 442x270, components 3
|
downloaded
|
||
|
Chrome Cache Entry: 102
|
PNG image data, 21 x 120, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 103
|
HTML document, ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 104
|
GIF image data, version 89a, 512 x 512
|
dropped
|
||
|
Chrome Cache Entry: 105
|
PNG image data, 21 x 17, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 106
|
ASCII text, with very long lines (32065), with CRLF line terminators
|
dropped
|
||
|
Chrome Cache Entry: 107
|
GIF image data, version 89a, 512 x 512
|
dropped
|
||
|
Chrome Cache Entry: 108
|
Unicode text, UTF-8 text, with very long lines (12011)
|
downloaded
|
||
|
Chrome Cache Entry: 109
|
GIF image data, version 89a, 512 x 512
|
downloaded
|
||
|
Chrome Cache Entry: 110
|
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 111
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian,
direntries=1], baseline, precision 8, 442x270, components 3
|
dropped
|
||
|
Chrome Cache Entry: 112
|
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 320x156, components
3
|
dropped
|
||
|
Chrome Cache Entry: 113
|
ASCII text, with very long lines (65136)
|
downloaded
|
||
|
Chrome Cache Entry: 114
|
GIF image data, version 89a, 512 x 512
|
downloaded
|
||
|
Chrome Cache Entry: 68
|
GIF image data, version 89a, 512 x 512
|
dropped
|
||
|
Chrome Cache Entry: 69
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using
IJG JPEG v62), quality = 90", baseline, precision 8, 1000x562, components 3
|
dropped
|
||
|
Chrome Cache Entry: 70
|
PNG image data, 300 x 168, 8-bit colormap, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 71
|
ASCII text, with very long lines (65136)
|
dropped
|
||
|
Chrome Cache Entry: 72
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using
IJG JPEG v62), quality = 90", baseline, precision 8, 1000x562, components 3
|
downloaded
|
||
|
Chrome Cache Entry: 73
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using
IJG JPEG v90), quality = 90", baseline, precision 8, 1000x208, components 3
|
dropped
|
||
|
Chrome Cache Entry: 74
|
GIF image data, version 89a, 512 x 512
|
dropped
|
||
|
Chrome Cache Entry: 75
|
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 76
|
PNG image data, 300 x 168, 8-bit colormap, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 77
|
GIF image data, version 89a, 512 x 512
|
downloaded
|
||
|
Chrome Cache Entry: 78
|
GIF image data, version 89a, 512 x 512
|
dropped
|
||
|
Chrome Cache Entry: 79
|
HTML document, ASCII text, with very long lines (6093), with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 80
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2023:05:26 07:24:20], baseline, precision 8, 510x532, components 3
|
dropped
|
||
|
Chrome Cache Entry: 81
|
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 320x156, components
3
|
downloaded
|
||
|
Chrome Cache Entry: 82
|
GIF image data, version 89a, 512 x 512
|
downloaded
|
||
|
Chrome Cache Entry: 83
|
ASCII text, with very long lines (32065), with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 84
|
PNG image data, 21 x 17, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 85
|
PNG image data, 21 x 17, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 86
|
Unicode text, UTF-8 text, with very long lines (44903), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 87
|
Unicode text, UTF-8 text, with very long lines (1523)
|
dropped
|
||
|
Chrome Cache Entry: 88
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop
7.0, datetime=2023:05:26 07:24:20], baseline, precision 8, 510x532, components 3
|
downloaded
|
||
|
Chrome Cache Entry: 89
|
GIF image data, version 89a, 512 x 512
|
downloaded
|
||
|
Chrome Cache Entry: 90
|
HTML document, Unicode text, UTF-8 text
|
downloaded
|
||
|
Chrome Cache Entry: 91
|
Unicode text, UTF-8 text, with very long lines (12011)
|
dropped
|
||
|
Chrome Cache Entry: 92
|
Unicode text, UTF-8 text, with very long lines (1523)
|
downloaded
|
||
|
Chrome Cache Entry: 93
|
ASCII text, with very long lines (2432), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 94
|
HTML document, ASCII text, with very long lines (6093), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 95
|
PNG image data, 21 x 120, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 96
|
PNG image data, 21 x 17, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 97
|
GIF image data, version 89a, 512 x 512
|
downloaded
|
||
|
Chrome Cache Entry: 98
|
GIF image data, version 89a, 512 x 512
|
downloaded
|
||
|
Chrome Cache Entry: 99
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using
IJG JPEG v90), quality = 90", baseline, precision 8, 1000x208, components 3
|
downloaded
|
There are 40 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US
--service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=2024,i,2749223173464164389,11508472724089143373,262144
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
/prefetch:8
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.telegramrm.com/"
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://www.telegramrm.com/
|
|
||
|
https://sdk.51.la/js-sdk-pro.min.js
|
90.84.164.17
|
||
|
https://www.telegramrm.com/static/images/session2right.jpg
|
47.242.228.6
|
||
|
https://core.telegram.org/api
|
unknown
|
||
|
https://www.telegramrm.com/static/images/window.jpg
|
47.242.228.6
|
||
|
https://twitter.com/telegram
|
unknown
|
||
|
https://www.telegramrm.com/static/images/section4i8.gif
|
47.242.228.6
|
||
|
https://web.dcobxs.com/matomo.js
|
104.21.72.253
|
||
|
https://www.telegramrm.com/static/images/section4i2.gif
|
47.242.228.6
|
||
|
https://www.telegramrm.com/static/images/session3.jpg
|
47.242.228.6
|
||
|
https://www.telegramrm.com/static/upload/image/20231216/1702728345765756.png
|
47.242.228.6
|
||
|
https://piwik.org/free-software/bsd/
|
unknown
|
||
|
https://www.telegramrm.com/static/images/session2left.jpg
|
47.242.228.6
|
||
|
https://www.telegramrm.com/static/images/section4i4.gif
|
47.242.228.6
|
||
|
https://www.telegramrm.com/static/images/section4i1.gif
|
47.242.228.6
|
||
|
https://www.telegramrm.com/Spider/?url=/
|
47.242.228.6
|
||
|
https://www.telegramrm.com/skin/css/skin.css
|
47.242.228.6
|
||
|
https://www.telegramrm.com/static/images/session2i.png
|
47.242.228.6
|
||
|
https://piwik.org
|
unknown
|
||
|
https://core.telegram.org/mtproto
|
unknown
|
||
|
https://www.telegramrm.com/static/images/section4i9.gif
|
47.242.228.6
|
||
|
https://collect-v6.51.la/v6/collect?dt=4
|
90.84.161.25
|
||
|
https://www.telegramrm.com/skin/js/hc-sticky.js
|
47.242.228.6
|
||
|
https://www.telegramrm.com/static/images/section4i5.gif
|
47.242.228.6
|
||
|
http://www.SuperSlide2.com/
|
unknown
|
||
|
https://core.telegram.org/
|
unknown
|
||
|
https://www.telegramrm.com/skin/css/style.css
|
47.242.228.6
|
||
|
https://www.telegramrm.com/TiGysceotsetup-m66.zip
|
47.242.228.6
|
||
|
https://www.telegramrm.com/static/images/logo.png
|
47.242.228.6
|
||
|
https://www.telegramrm.com/skin/js/custom.js
|
47.242.228.6
|
||
|
https://www.telegramrm.com/skin/js/side.js
|
47.242.228.6
|
||
|
https://www.telegramrm.com/skin/js/jquery-2.2.4.min.js
|
47.242.228.6
|
||
|
https://github.com/matomo-org/matomo/blob/master/js/piwik.js
|
unknown
|
||
|
https://www.telegramrm.com/
|
|||
|
https://www.telegramrm.com/static/upload/image/20231217/1702817607573664.jpg
|
47.242.228.6
|
||
|
https://www.telegramrm.com/static/images/navright1.png
|
47.242.228.6
|
||
|
https://www.telegramrm.com/static/images/section4i6.gif
|
47.242.228.6
|
||
|
https://web.dcobxs.com/matomo.php?action_name=Telegram%E5%AE%98%E7%BD%91-Telegram%E4%B8%AD%E6%96%87%E6%B1%89%E5%8C%96%E7%89%88-Telegram%E4%B8%8B%E8%BD%BD-%E7%BA%B8%E9%A3%9E%E6%9C%BA%E4%B8%AD%E6%96%87%E7%89%88-%E7%BA%B8%E9%A3%9E%E6%9C%BA%E4%B8%8B%E8%BD%BD&idsite=19&rec=1&r=124021&h=18&m=15&s=28&url=https%3A%2F%2Fwww.telegramrm.com%2F&_id=6eab26ea7524a273&_idn=1&send_image=0&_refts=0&pv_id=gmB1pt&pf_net=1488&pf_srv=596&pf_tfr=278&pf_dm1=16395&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.134%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.134%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024
|
104.21.72.253
|
||
|
https://www.telegramrm.com/static/images/section4i3.gif
|
47.242.228.6
|
||
|
https://www.telegramrm.com/static/images/navright.png
|
47.242.228.6
|
||
|
https://www.telegramrm.com/static/images/section4i7.gif
|
47.242.228.6
|
||
|
http://www.telegramrm.com/
|
47.242.228.6
|
||
|
https://web.dcobxs.com/
|
unknown
|
There are 32 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
hcdnwsa120.v5.cdnhwczoy106.cn
|
90.84.164.17
|
||
|
www.google.com
|
216.58.206.36
|
||
|
www.telegramrm.com
|
47.242.228.6
|
||
|
web.dcobxs.com
|
104.21.72.253
|
||
|
fp2e7a.wpc.phicdn.net
|
192.229.221.95
|
||
|
collect-v6.51.la
|
unknown
|
||
|
sdk.51.la
|
unknown
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
90.84.161.25
|
unknown
|
France
|
||
|
104.21.72.253
|
web.dcobxs.com
|
United States
|
||
|
47.242.228.6
|
www.telegramrm.com
|
United States
|
||
|
90.84.164.17
|
hcdnwsa120.v5.cdnhwczoy106.cn
|
France
|
||
|
148.153.240.75
|
unknown
|
United States
|
||
|
192.168.2.4
|
unknown
|
unknown
|
||
|
192.168.2.6
|
unknown
|
unknown
|
||
|
216.58.206.36
|
www.google.com
|
United States
|
||
|
239.255.255.250
|
unknown
|
Reserved
|
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://www.telegramrm.com/
|