IOC Report
https://mail.dealermate.solutions/

loading gif

Files

File Path
Type
Category
Malicious
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6112_1140757171\LICENSE
ASCII text
dropped
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6112_1140757171\_metadata\verified_contents.json
JSON data
dropped
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6112_1140757171\manifest.fingerprint
ASCII text, with no line terminators
dropped
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6112_1140757171\manifest.json
JSON data
dropped
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6112_1140757171\sets.json
JSON data
dropped
Chrome Cache Entry: 134
Unicode text, UTF-8 text, with very long lines (8189)
dropped
Chrome Cache Entry: 135
ASCII text
downloaded
Chrome Cache Entry: 136
ASCII text, with very long lines (560)
downloaded
Chrome Cache Entry: 137
ASCII text, with very long lines (15752)
dropped
Chrome Cache Entry: 138
ASCII text, with very long lines (65447)
downloaded
Chrome Cache Entry: 139
ASCII text, with very long lines (41132)
dropped
Chrome Cache Entry: 140
ASCII text, with very long lines (60868), with no line terminators
downloaded
Chrome Cache Entry: 141
Web Open Font Format (Version 2), TrueType, length 19948, version 1.0
downloaded
Chrome Cache Entry: 142
HTML document, ASCII text, with very long lines (8856)
downloaded
Chrome Cache Entry: 143
ASCII text, with very long lines (13479)
downloaded
Chrome Cache Entry: 144
ASCII text, with very long lines (1311), with no line terminators
downloaded
Chrome Cache Entry: 145
ASCII text, with very long lines (11513), with no line terminators
dropped
Chrome Cache Entry: 146
data
dropped
Chrome Cache Entry: 147
ASCII text, with very long lines (65496)
dropped
Chrome Cache Entry: 148
Unicode text, UTF-8 text, with very long lines (7210), with no line terminators
downloaded
Chrome Cache Entry: 149
ASCII text, with very long lines (15752)
downloaded
Chrome Cache Entry: 150
ASCII text
downloaded
Chrome Cache Entry: 151
Unicode text, UTF-8 text, with very long lines (5142), with no line terminators
downloaded
Chrome Cache Entry: 152
Web Open Font Format (Version 2), TrueType, length 18596, version 1.0
downloaded
Chrome Cache Entry: 153
HTML document, ASCII text, with very long lines (13423), with no line terminators
downloaded
Chrome Cache Entry: 154
ASCII text, with very long lines (16214)
downloaded
Chrome Cache Entry: 155
ASCII text, with very long lines (5501), with no line terminators
downloaded
Chrome Cache Entry: 156
Unicode text, UTF-8 text, with very long lines (8189)
downloaded
Chrome Cache Entry: 157
ASCII text, with very long lines (4957)
downloaded
Chrome Cache Entry: 158
ASCII text, with very long lines (7623)
downloaded
Chrome Cache Entry: 159
ASCII text
downloaded
Chrome Cache Entry: 160
ASCII text, with very long lines (10260), with no line terminators
downloaded
Chrome Cache Entry: 161
HTML document, ASCII text, with very long lines (8856)
dropped
Chrome Cache Entry: 162
ASCII text, with very long lines (13479)
dropped
Chrome Cache Entry: 163
ASCII text, with very long lines (4272)
downloaded
Chrome Cache Entry: 164
ASCII text, with very long lines (65447)
dropped
Chrome Cache Entry: 165
HTML document, ASCII text, with very long lines (13423), with no line terminators
dropped
Chrome Cache Entry: 166
C++ source, ASCII text
downloaded
Chrome Cache Entry: 167
HTML document, ASCII text, with very long lines (8856)
downloaded
Chrome Cache Entry: 168
ASCII text, with very long lines (1410), with no line terminators
downloaded
Chrome Cache Entry: 169
C++ source, ASCII text
dropped
Chrome Cache Entry: 170
ASCII text, with very long lines (41132)
downloaded
Chrome Cache Entry: 171
data
downloaded
Chrome Cache Entry: 172
ASCII text, with very long lines (4272)
dropped
Chrome Cache Entry: 173
ASCII text, with very long lines (11513), with no line terminators
downloaded
Chrome Cache Entry: 174
ASCII text, with very long lines (65496)
downloaded
Chrome Cache Entry: 175
ASCII text, with very long lines (4957)
dropped
There are 38 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2392 --field-trial-handle=2284,i,13183594720360602663,13326792570751848463,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mail.dealermate.solutions/"

URLs

Name
IP
Malicious
https://mail.dealermate.solutions/
https://dealermate.solutions/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.24.3
23.111.142.170
https://wieistmeineip.de
unknown
https://mercadoshops.com.co
unknown
https://dealermate.solutions/hello-world/feed/
unknown
https://dealermate.solutions/wp-content/themes/hello-elementor/header-footer.min.css?ver=3.1.1
23.111.142.170
https://gliadomain.com
unknown
https://poalim.xyz
unknown
https://mercadolivre.com
unknown
https://reshim.org
unknown
https://dealermate.solutions/?s=
unknown
https://nourishingpursuits.com
unknown
https://medonet.pl
unknown
https://unotv.com
unknown
https://mercadoshops.com.br
unknown
https://swiperjs.com
unknown
https://joyreactor.cc
unknown
https://zdrowietvn.pl
unknown
https://johndeere.com
unknown
https://songstats.com
unknown
https://baomoi.com
unknown
https://supereva.it
unknown
https://dealermate.solutions/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
23.111.142.170
https://elfinancierocr.com
unknown
https://bolasport.com
unknown
https://rws1nvtvt.com
unknown
https://desimartini.com
unknown
https://hearty.app
unknown
https://dealermate.solutions/wp-content/themes/hello-elementor/theme.min.css?ver=3.1.1
23.111.142.170
https://hearty.gift
unknown
https://mercadoshops.com
unknown
https://heartymail.com
unknown
https://nlc.hu
unknown
https://p106.net
unknown
https://radio2.be
unknown
https://finn.no
unknown
https://hc1.com
unknown
https://dealermate.solutions/#website
unknown
https://kompas.tv
unknown
https://mystudentdashboard.com
unknown
https://songshare.com
unknown
https://smaker.pl
unknown
https://mercadopago.com.mx
unknown
https://p24.hu
unknown
https://talkdeskqaid.com
unknown
https://dealermate.solutions/wp-includes/js/dist/hooks.min.js?ver=2810c76e705dd1a53b18
23.111.142.170
https://24.hu
unknown
https://mercadopago.com.pe
unknown
https://cardsayings.net
unknown
https://text.com
unknown
https://mightytext.net
unknown
https://pudelek.pl
unknown
https://hazipatika.com
unknown
https://joyreactor.com
unknown
https://cookreactor.com
unknown
https://wildixin.com
unknown
https://eworkbookcloud.com
unknown
https://cognitiveai.ru
unknown
https://nacion.com
unknown
https://schema.org
unknown
https://chennien.com
unknown
https://drimer.travel
unknown
https://dealermate.solutions/wp-content/uploads/elementor/css/custom-frontend.min.css?ver=1726750087
23.111.142.170
https://deccoria.pl
unknown
https://mercadopago.cl
unknown
https://talkdeskstgid.com
unknown
https://naukri.com
unknown
https://interia.pl
unknown
https://bonvivir.com
unknown
https://carcostadvisor.be
unknown
https://salemovetravel.com
unknown
https://sapo.io
unknown
https://wpext.pl
unknown
https://welt.de
unknown
https://poalim.site
unknown
https://drimer.io
unknown
https://infoedgeindia.com
unknown
https://blackrockadvisorelite.it
unknown
https://dealermate.solutions/wp-content/plugins/elementor/assets/css/conditionals/e-swiper.min.css?v
unknown
https://dealermate.solutions/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6
23.111.142.170
https://cognitive-ai.ru
unknown
https://cafemedia.com
unknown
https://graziadaily.co.uk
unknown
https://thirdspace.org.au
unknown
https://mercadoshops.com.ar
unknown
https://smpn106jkt.sch.id
unknown
https://elpais.uy
unknown
https://landyrev.com
unknown
https://the42.ie
unknown
https://jqueryui.com
unknown
https://mail.dealermate.solutions/
https://commentcamarche.com
unknown
https://tucarro.com.ve
unknown
https://rws3nvtvt.com
unknown
https://yoast.com/wordpress/plugins/seo/
unknown
https://eleconomista.net
unknown
https://helpdesk.com
unknown
https://mercadolivre.com.br
unknown
https://dealermate.solutions/?p=8
unknown
https://dealermate.solutions/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
23.111.142.170
https://clmbtech.com
unknown
There are 90 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
bg.microsoft.map.fastly.net
199.232.214.172
dealermate.solutions
23.111.142.170
www.google.com
142.250.185.132
fp2e7a.wpc.phicdn.net
192.229.221.95
mail.dealermate.solutions
unknown

IPs

IP
Domain
Country
Malicious
142.250.185.132
www.google.com
United States
192.168.2.4
unknown
unknown
192.168.2.6
unknown
unknown
192.168.2.5
unknown
unknown
239.255.255.250
unknown
Reserved
23.111.142.170
dealermate.solutions
United States
172.217.18.100
unknown
United States

DOM / HTML

URL
Malicious
https://mail.dealermate.solutions/