IOC Report
https://memakers-my.sharepoint.com/:f:/p/saeed/EuiMdoZoPpVNthIaEwKAedkBDFKyUdriWNhHe2RDzQxMdQ?e=5hQMeB&xsdata=MDV8MDJ8cGhlcm1hbkBidXJiYW5rY2EuZ292fDU4NDFjYjVhMjQzNDQ2YjU2ODZmMDhkY2Q3ZjZlNzZlfDY0OGRhZTMxMTgyYjRkYTI5OWVmMjU4MWFiOGU4YmVhfDB8MHw2Mzg2MjI3MDI2NDY5MTMzMDB8VW5rbm93bnxUV0ZwYkdac2IzZDhleUpXSW

loading gif

Files

File Path
Type
Category
Malicious
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 1 21:26:05 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 1 21:26:05 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 1 21:26:05 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 1 21:26:05 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 1 21:26:05 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
Chrome Cache Entry: 57
ASCII text, with CRLF line terminators
dropped
Chrome Cache Entry: 58
ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 60
HTML document, ASCII text, with very long lines (2962), with CRLF line terminators
downloaded
Chrome Cache Entry: 61
PNG image data, 186 x 200, 8-bit/color RGBA, non-interlaced
dropped

URLs

Name
IP
Malicious
https://memakers-my.sharepoint.com/:f:/p/saeed/EuiMdoZoPpVNthIaEwKAedkBDFKyUdriWNhHe2RDzQxMdQ?e=5hQMeB&xsdata=MDV8MDJ8cGhlcm1hbkBidXJiYW5rY2EuZ292fDU4NDFjYjVhMjQzNDQ2YjU2ODZmMDhkY2Q3ZjZlNzZlfDY0OGRhZTMxMTgyYjRkYTI5OWVmMjU4MWFiOGU4YmVhfDB8MHw2Mzg2MjI3MDI2NDY5MTMzMDB8VW5rbm93bnxUV0ZwYkdac2IzZDhleUpXSWpvaU1DNHdMakF3TURBaUxDSlFJam9pVjJsdU16SWlMQ0pCVGlJNklrMWhhV3dpTENKWFZDSTZNbjA9fDQwMDAwfHx8&sdata=STFxSjJFWXZ2WnFoSWJsSml1L3V4emhPdHNVTmE5OWJmbjZsSDRKcjlyND0%3d
malicious
https://gcc02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmemakers-my.sharepoint.com%2F%3Af%3A%2Fp%2Fsaeed%2FEuiMdoZoPpVNthIaEwKAedkBDFKyUdriWNhHe2RDzQxMdQ%3Fe%3D5hQMeB&data=05%7C02%7Cpherman%40burbankca.gov%7C5841cb5a243446b5686f08dcd7f6e76e%7C648dae31182b4da299ef2581ab8e8bea%7C0%7C0%7C638634183669052402%7CBad%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%7C1%7CNTg0MWNiNWEtMjQzNC00NmI1LTY4NmYtMDhkY2Q3ZjZlNzZl%7Cda45f646d0e84d19082f08dce2680af8%7Cdac555a17059600083a03da47bf41c80&sdata=psJKMLAMSoEy97vYgGUj3mfgXtOJqVg2%2FMqjNCruePI%3D&reserved=0

Domains

Name
IP
Malicious
dual-spo-0005.spo-msedge.net
13.107.136.10
gcc02.safelinks.eop-tm2.outlook.com
104.47.64.28
www.google.com
216.58.206.68
241.42.69.40.in-addr.arpa
unknown
memakers-my.sharepoint.com
unknown
gcc02.safelinks.protection.outlook.com
unknown

IPs

IP
Domain
Country
Malicious
142.250.186.67
unknown
United States
142.250.186.78
unknown
United States
13.107.136.10
dual-spo-0005.spo-msedge.net
United States
239.255.255.250
unknown
Reserved
192.168.2.16
unknown
unknown
104.47.64.28
gcc02.safelinks.eop-tm2.outlook.com
United States
192.168.2.4
unknown
unknown
216.58.206.68
www.google.com
United States
66.102.1.84
unknown
United States