IOC Report
http://157.245.105.88

loading gif

Files

File Path
Type
Category
Malicious
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 3 18:11:24 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 3 18:11:24 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 3 18:11:24 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 3 18:11:24 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 3 18:11:24 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
Chrome Cache Entry: 119
ASCII text, with very long lines (4269)
dropped
Chrome Cache Entry: 121
ASCII text, with very long lines (736)
downloaded
Chrome Cache Entry: 122
ASCII text, with very long lines (10093), with no line terminators
downloaded
Chrome Cache Entry: 123
PNG image data, 997 x 653, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 125
PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 126
Web Open Font Format, TrueType, length 12756, version 0.0
downloaded
Chrome Cache Entry: 127
ASCII text
downloaded
Chrome Cache Entry: 128
PNG image data, 106 x 5326, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 129
Web Open Font Format (Version 2), TrueType, length 63376, version 1.0
downloaded
Chrome Cache Entry: 130
ASCII text, with very long lines (50992)
downloaded
Chrome Cache Entry: 131
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 132
gzip compressed data, from Unix, original size modulo 2^32 564
downloaded
Chrome Cache Entry: 135
ASCII text
downloaded
Chrome Cache Entry: 136
HTML document, ASCII text, with very long lines (20800)
downloaded
Chrome Cache Entry: 140
ASCII text, with very long lines (593)
dropped
Chrome Cache Entry: 144
Web Open Font Format (Version 2), TrueType, length 59572, version 1.0
downloaded
Chrome Cache Entry: 145
ASCII text
downloaded
Chrome Cache Entry: 147
ASCII text, with very long lines (5162), with no line terminators
downloaded
Chrome Cache Entry: 148
ASCII text
downloaded
Chrome Cache Entry: 151
ASCII text, with very long lines (1279)
downloaded
Chrome Cache Entry: 152
ASCII text, with very long lines (1657)
downloaded
Chrome Cache Entry: 153
Web Open Font Format (Version 2), TrueType, length 52280, version 1.0
downloaded
Chrome Cache Entry: 155
ASCII text, with very long lines (2287)
downloaded
Chrome Cache Entry: 157
ASCII text, with very long lines (7408)
dropped
Chrome Cache Entry: 158
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 159
HTML document, ASCII text, with very long lines (13513)
downloaded
Chrome Cache Entry: 160
ASCII text, with very long lines (5047)
dropped
Chrome Cache Entry: 161
MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
dropped
Chrome Cache Entry: 164
Web Open Font Format (Version 2), TrueType, length 15596, version 1.0
downloaded
Chrome Cache Entry: 165
Unicode text, UTF-8 text, with very long lines (791)
downloaded
Chrome Cache Entry: 166
PNG image data, 300 x 91, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 167
ASCII text
dropped
Chrome Cache Entry: 170
ASCII text
downloaded
Chrome Cache Entry: 171
ASCII text, with very long lines (65531)
downloaded
Chrome Cache Entry: 173
ASCII text, with very long lines (4232), with no line terminators
downloaded
Chrome Cache Entry: 174
PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 175
ASCII text, with very long lines (1689), with no line terminators
dropped
Chrome Cache Entry: 176
gzip compressed data, from Unix, original size modulo 2^32 4109
downloaded
Chrome Cache Entry: 177
ASCII text, with very long lines (2287)
downloaded
Chrome Cache Entry: 178
Web Open Font Format (Version 2), TrueType, length 50424, version 1.0
downloaded
Chrome Cache Entry: 181
HTML document, ASCII text, with very long lines (5051)
dropped
Chrome Cache Entry: 182
Web Open Font Format (Version 2), TrueType, length 23580, version 1.0
downloaded
Chrome Cache Entry: 183
ASCII text, with very long lines (1885)
dropped
Chrome Cache Entry: 185
PNG image data, 1300 x 700, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 186
ASCII text, with very long lines (524)
downloaded
Chrome Cache Entry: 187
PNG image data, 348 x 100, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 188
Web Open Font Format (Version 2), TrueType, length 23040, version 1.0
downloaded
Chrome Cache Entry: 190
PNG image data, 272 x 92, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 191
Web Open Font Format (Version 2), TrueType, length 23236, version 1.0
downloaded
Chrome Cache Entry: 192
ASCII text, with very long lines (5552)
dropped
Chrome Cache Entry: 194
Web Open Font Format (Version 2), TrueType, length 48336, version 1.0
downloaded
Chrome Cache Entry: 195
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 196
ASCII text, with very long lines (621)
downloaded
Chrome Cache Entry: 197
gzip compressed data, from Unix, original size modulo 2^32 6697
dropped
Chrome Cache Entry: 199
ASCII text
dropped
Chrome Cache Entry: 204
ASCII text
downloaded
Chrome Cache Entry: 205
ASCII text
downloaded
Chrome Cache Entry: 206
ASCII text
downloaded
Chrome Cache Entry: 207
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 208
JSON data
downloaded
Chrome Cache Entry: 209
PNG image data, 348 x 100, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 211
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 212
RIFF (little-endian) data, Web/P image
dropped
Chrome Cache Entry: 214
ASCII text, with very long lines (1518)
dropped
Chrome Cache Entry: 215
HTML document, Unicode text, UTF-8 text, with very long lines (1136)
dropped
Chrome Cache Entry: 217
ASCII text, with very long lines (558)
downloaded
Chrome Cache Entry: 219
Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
downloaded
Chrome Cache Entry: 220
HTML document, ASCII text, with very long lines (32553)
downloaded
Chrome Cache Entry: 222
ASCII text, with very long lines (4269)
downloaded
Chrome Cache Entry: 225
ASCII text, with very long lines (9217)
dropped
Chrome Cache Entry: 227
HTML document, ASCII text, with very long lines (590)
downloaded
Chrome Cache Entry: 228
ASCII text, with very long lines (550)
downloaded
Chrome Cache Entry: 229
ASCII text, with very long lines (768)
dropped
Chrome Cache Entry: 230
ASCII text, with very long lines (562)
downloaded
Chrome Cache Entry: 232
ASCII text, with very long lines (3521)
dropped
Chrome Cache Entry: 233
ASCII text
downloaded
Chrome Cache Entry: 237
Web Open Font Format, CFF, length 56108, version 1.0
downloaded
There are 74 hidden files, click here to show them.

URLs

Name
IP
Malicious
http://157.245.105.88
http://157.245.105.88/favicon.ico
157.245.105.88
http://142.250.80.33/
142.250.80.33
http://157.245.105.88/
https://zeslecp.com/
https://www.google.com/

Domains

Name
IP
Malicious
star-mini.c10r.facebook.com
157.240.0.35
scontent.xx.fbcdn.net
157.240.0.6
plus.l.google.com
172.217.16.206
play.google.com
142.250.186.174
www3.l.google.com
142.250.185.142
zesle.com
66.29.135.155
widget.intercom.io
13.224.189.49
zeslecp.com
44.229.44.133
www.google.com
172.217.18.4
www.facebook.com
unknown
ogs.google.com
unknown
connect.facebook.net
unknown
apis.google.com
unknown
There are 3 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
142.250.185.206
unknown
United States
142.250.186.174
play.google.com
United States
173.194.76.84
unknown
United States
192.168.2.16
unknown
unknown
142.250.185.227
unknown
United States
216.58.206.36
unknown
United States
157.240.0.6
scontent.xx.fbcdn.net
United States
192.168.2.23
unknown
unknown
142.250.185.142
www3.l.google.com
United States
44.229.44.133
zeslecp.com
United States
142.250.186.131
unknown
United States
172.217.18.110
unknown
United States
142.250.186.74
unknown
United States
142.250.186.99
unknown
United States
142.250.184.202
unknown
United States
157.245.105.88
unknown
United States
142.250.185.68
unknown
United States
1.1.1.1
unknown
Australia
216.58.212.131
unknown
United States
172.217.18.8
unknown
United States
66.29.135.155
zesle.com
United States
172.217.16.206
plus.l.google.com
United States
172.217.18.4
www.google.com
United States
157.240.0.35
star-mini.c10r.facebook.com
United States
13.224.189.49
widget.intercom.io
United States
172.217.18.3
unknown
United States
142.250.185.110
unknown
United States
142.250.185.232
unknown
United States
216.58.206.42
unknown
United States
142.250.185.138
unknown
United States
142.250.185.238
unknown
United States
142.250.80.33
unknown
United States
157.240.251.9
unknown
United States
142.250.181.227
unknown
United States
239.255.255.250
unknown
Reserved
142.250.185.174
unknown
United States
172.217.18.106
unknown
United States
157.240.253.35
unknown
United States
142.250.184.238
unknown
United States
172.217.16.195
unknown
United States
There are 30 hidden IPs, click here to show them.