Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 1 14:18:35 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 1 14:18:35 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 1 14:18:35 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 1 14:18:35 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 1 14:18:35 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
Chrome Cache Entry: 64
|
SVG Scalable Vector Graphics image
|
downloaded
|
||
|
Chrome Cache Entry: 65
|
ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 66
|
SVG Scalable Vector Graphics image
|
dropped
|
||
|
Chrome Cache Entry: 67
|
ASCII text, with very long lines (1879)
|
downloaded
|
||
|
Chrome Cache Entry: 68
|
HTML document, ASCII text, with very long lines (1559)
|
downloaded
|
||
|
Chrome Cache Entry: 69
|
ASCII text, with very long lines (384), with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 70
|
PNG image data, 413 x 594, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 71
|
SVG Scalable Vector Graphics image
|
downloaded
|
||
|
Chrome Cache Entry: 72
|
ASCII text, with very long lines (1879)
|
downloaded
|
||
|
Chrome Cache Entry: 73
|
ASCII text, with very long lines (1879)
|
dropped
|
||
|
Chrome Cache Entry: 74
|
SVG Scalable Vector Graphics image
|
dropped
|
||
|
Chrome Cache Entry: 75
|
MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
|
dropped
|
||
|
Chrome Cache Entry: 76
|
PNG image data, 413 x 594, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 77
|
MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
|
downloaded
|
||
|
Chrome Cache Entry: 78
|
ASCII text, with very long lines (384), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 79
|
ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 80
|
SVG Scalable Vector Graphics image
|
dropped
|
||
|
Chrome Cache Entry: 81
|
SVG Scalable Vector Graphics image
|
downloaded
|
||
|
Chrome Cache Entry: 82
|
HTML document, ASCII text, with very long lines (13755)
|
downloaded
|
||
|
Chrome Cache Entry: 83
|
ASCII text, with very long lines (1879)
|
dropped
|
There are 17 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US
--service-sandbox-type=none --mojo-platform-channel-handle=2240 --field-trial-handle=1940,i,6973925189769928710,6796612593531634411,262144
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
/prefetch:8
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://creationtch.com"
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://creationtch.com
|
|||
|
https://syndicatedsearch.goog/afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=cufb1kveew19&aqid=zhL8Zqy0JrGhxdwPktzPsQ0&psid=3259787283&pbt=bs&adbx=385.203125&adby=413.015625&adbh=571&adbw=493&adbah=212%2C171%2C171&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=678245571&csala=8%7C0%7C1224%7C1232%7C29&lle=0&ifv=1&hpt=0
|
142.250.186.46
|
||
|
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%231967d2
|
172.217.18.1
|
||
|
http://www.creationtch.com/search/tsc.php?ses=ogcSA4H0k2oRlqNjppsa16mMM6tGSicreVZ4J2GgFLbXnWlTQ-bNCtQ8Ma-6Ai86Oj6TRrbkuGpbHKKRoqOrYn76CgMdPyQOeK-9bYtObn0cDJ2x5fmZqo452a1GqZswqaq95CxXMekLC4HBI1v5NiBhw1hVaAFV2haooO-WzxgR7PaCjsUJbW9cwEg8LhsGn996kmo8EGF6oLoUXAIPu1Tvu4jUMcknC7wEOlte1-v4A-998OqE-0H8fAbR75BfU-BpnloE2Gok3cDdWmFO_nKuM9GaEDiB-FofTPeB8Zj14nEn8S7Z39cDHr08vRgPIzRGQq3iaNtJ0-dGGPM5z6AzCfMhcQEnHAvxmDJSUG8FlF0p22RNs3CqkI7&cv=2
|
91.195.240.19
|
||
|
http://www.creationtch.com/
|
|||
|
https://www.google.com/adsense/domains/caf.js?abp=1&YEr3CiF6AuQqLspNobyal3ji0SyqxBLn=true
|
216.58.206.36
|
||
|
https://syndicatedsearch.goog
|
unknown
|
||
|
https://syndicatedsearch.goog/adsense/domains/caf.js?pac=0
|
142.250.186.142
|
||
|
http://creationtch.com/
|
192.64.119.117
|
||
|
http://img.sedoparking.com/templates/bg/arrows-curved.png
|
204.93.142.142
|
||
|
https://syndicatedsearch.goog/afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=xa37wg2xt4y0&aqid=zhL8Zqy0JrGhxdwPktzPsQ0&pbt=bs&adbx=481.5&adby=986.015625&adbh=16&adbw=300&adbn=slave-1-1&eawp=partner-dp-sedo80_3ph&errv=678245571&csala=3%7C0%7C1229%7C1232%7C29&lle=0&ifv=0&hpt=0
|
142.250.186.46
|
||
|
https://img.sedoparking.com/templates/images/hero_nc.svg
|
204.93.142.142
|
||
|
https://syndicatedsearch.goog/afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=vk7amg39g97w&aqid=zhL8Zqy0JrGhxdwPktzPsQ0&psid=3259787283&pbt=bv&adbx=385.203125&adby=413.015625&adbh=571&adbw=493&adbah=212%2C171%2C171&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=678245571&csala=8%7C0%7C1224%7C1232%7C29&lle=0&ifv=1&hpt=0
|
142.250.186.46
|
||
|
http://img.sedoparking.com/templates/logos/sedo_logo.png
|
204.93.142.142
|
||
|
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff
|
172.217.18.1
|
||
|
https://syndicatedsearch.goog/afs/ads/i/iframe.html
|
142.250.186.142
|
||
|
https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5
|
unknown
|
There are 6 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
creationtch.com
|
192.64.119.117
|
||
|
vip1.g5.cachefly.net
|
204.93.142.142
|
||
|
syndicatedsearch.goog
|
142.250.186.46
|
||
|
parkingpage.namecheap.com
|
91.195.240.19
|
||
|
www.google.com
|
216.58.206.36
|
||
|
googlehosted.l.googleusercontent.com
|
172.217.18.1
|
||
|
img.sedoparking.com
|
unknown
|
||
|
afs.googleusercontent.com
|
unknown
|
||
|
www.creationtch.com
|
unknown
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
142.250.186.46
|
syndicatedsearch.goog
|
United States
|
||
|
142.250.186.36
|
unknown
|
United States
|
||
|
172.217.18.4
|
unknown
|
United States
|
||
|
192.168.2.16
|
unknown
|
unknown
|
||
|
91.195.240.19
|
parkingpage.namecheap.com
|
Germany
|
||
|
205.234.175.175
|
unknown
|
United States
|
||
|
216.58.206.36
|
www.google.com
|
United States
|
||
|
172.217.18.1
|
googlehosted.l.googleusercontent.com
|
United States
|
||
|
142.250.185.225
|
unknown
|
United States
|
||
|
204.93.142.142
|
vip1.g5.cachefly.net
|
United States
|
||
|
239.255.255.250
|
unknown
|
Reserved
|
||
|
142.250.186.142
|
unknown
|
United States
|
||
|
192.64.119.117
|
creationtch.com
|
United States
|
||
|
142.250.184.238
|
unknown
|
United States
|
There are 4 hidden IPs, click here to show them.
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
http://www.creationtch.com/
|
||
|
http://www.creationtch.com/
|
||
|
http://www.creationtch.com/
|
||
|
http://www.creationtch.com/
|
||
|
http://www.creationtch.com/
|