Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
INVOICE DUE..xlsx
|
Microsoft Excel 2007+
|
initial sample
|
 |
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\~DFBE030617134DF151.TMP
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Sep 30 10:25:26 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Sep 30 10:25:26 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Sep 30 10:25:26 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Sep 30 10:25:26 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Sep 30 10:25:26 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
Chrome Cache Entry: 102
|
HTML document, Unicode text, UTF-8 text, with very long lines (3389), with CRLF, LF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 104
|
ASCII text, with very long lines (47261)
|
downloaded
|
||
|
Chrome Cache Entry: 106
|
ASCII text, with very long lines (47992), with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 107
|
PNG image data, 38 x 73, 8-bit/color RGB, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 108
|
HTML document, ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 109
|
HTML document, ASCII text, with very long lines (503), with CRLF line terminators
|
dropped
|
||
|
Chrome Cache Entry: 110
|
PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 99
|
ASCII text, with very long lines (65447)
|
dropped
|
There are 7 hidden files, click here to show them.
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://office.microsoftviewer.com/?__cf_chl_tk=Yue3mkwHj7jK_QW1sgu_IsIN8EhPVsPZnnqD8d7weNk-1727695526-0.0.1.1-5332
|
|
||
|
https://office.microsoftviewer.com/
|
|
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
office.microsoftviewer.com
|
172.67.139.200
|
|
|
|
s-part-0014.t-0009.t-msedge.net
|
13.107.246.42
|
||
|
bg.microsoft.map.fastly.net
|
199.232.214.172
|
||
|
a.nel.cloudflare.com
|
35.190.80.1
|
||
|
code.jquery.com
|
151.101.66.137
|
||
|
cdnjs.cloudflare.com
|
104.17.25.14
|
||
|
challenges.cloudflare.com
|
104.18.95.41
|
||
|
s-part-0017.t-0009.t-msedge.net
|
13.107.246.45
|
||
|
www.google.com
|
142.250.185.132
|
||
|
pulseperpetuawe.ru
|
188.114.96.3
|
||
|
s-part-0032.t-0009.t-msedge.net
|
13.107.246.60
|
There are 1 hidden domains, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
172.67.139.200
|
office.microsoftviewer.com
|
United States
|
|
|
|
52.113.194.132
|
unknown
|
United States
|
||
|
142.250.110.84
|
unknown
|
United States
|
||
|
13.107.246.42
|
s-part-0014.t-0009.t-msedge.net
|
United States
|
||
|
142.250.185.206
|
unknown
|
United States
|
||
|
52.182.143.209
|
unknown
|
United States
|
||
|
142.250.74.206
|
unknown
|
United States
|
||
|
142.250.186.163
|
unknown
|
United States
|
||
|
104.18.94.41
|
unknown
|
United States
|
||
|
192.168.2.16
|
unknown
|
unknown
|
||
|
142.250.185.132
|
www.google.com
|
United States
|
||
|
104.18.95.41
|
challenges.cloudflare.com
|
United States
|
||
|
216.58.206.35
|
unknown
|
United States
|
||
|
239.255.255.250
|
unknown
|
Reserved
|
||
|
188.114.97.3
|
unknown
|
European Union
|
||
|
52.109.32.97
|
unknown
|
United States
|
||
|
188.114.96.3
|
pulseperpetuawe.ru
|
European Union
|
||
|
52.109.89.19
|
unknown
|
United States
|
||
|
199.232.214.172
|
bg.microsoft.map.fastly.net
|
United States
|
||
|
151.101.66.137
|
code.jquery.com
|
United States
|
||
|
23.43.61.160
|
unknown
|
United States
|
||
|
35.190.80.1
|
a.nel.cloudflare.com
|
United States
|
||
|
104.17.25.14
|
cdnjs.cloudflare.com
|
United States
|
There are 13 hidden IPs, click here to show them.