IOC Report
https://www.shemetiuk.com/

loading gif

Files

File Path
Type
Category
Malicious
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 4 10:44:45 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 4 10:44:45 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 4 10:44:45 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 4 10:44:45 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 4 10:44:45 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
Chrome Cache Entry: 100
ASCII text, with very long lines (15752)
dropped
Chrome Cache Entry: 101
PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 102
Web Open Font Format (Version 2), TrueType, length 14056, version 1.0
downloaded
Chrome Cache Entry: 103
ASCII text, with very long lines (13479)
downloaded
Chrome Cache Entry: 104
ASCII text, with very long lines (1605), with no line terminators
dropped
Chrome Cache Entry: 105
ASCII text
downloaded
Chrome Cache Entry: 106
ASCII text, with very long lines (65447)
downloaded
Chrome Cache Entry: 107
HTML document, ASCII text, with very long lines (1767), with no line terminators
dropped
Chrome Cache Entry: 108
ASCII text, with very long lines (1605), with no line terminators
downloaded
Chrome Cache Entry: 109
ASCII text
downloaded
Chrome Cache Entry: 110
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 111
PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 112
HTML document, ASCII text, with very long lines (13423), with no line terminators
dropped
Chrome Cache Entry: 113
ASCII text, with very long lines (4272)
dropped
Chrome Cache Entry: 114
ASCII text, with very long lines (13479)
dropped
Chrome Cache Entry: 115
ASCII text, with very long lines (2185)
downloaded
Chrome Cache Entry: 116
HTML document, Unicode text, UTF-8 text, with very long lines (24509)
downloaded
Chrome Cache Entry: 117
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 81
data
downloaded
Chrome Cache Entry: 82
ASCII text, with very long lines (65447)
downloaded
Chrome Cache Entry: 83
ASCII text, with very long lines (4272)
downloaded
Chrome Cache Entry: 84
ASCII text, with very long lines (65447)
dropped
Chrome Cache Entry: 85
ASCII text, with very long lines (15516)
downloaded
Chrome Cache Entry: 86
ASCII text, with very long lines (11513), with no line terminators
dropped
Chrome Cache Entry: 87
ASCII text, with very long lines (65447)
dropped
Chrome Cache Entry: 88
HTML document, ASCII text, with very long lines (1767), with no line terminators
downloaded
Chrome Cache Entry: 89
ASCII text, with very long lines (1616)
downloaded
Chrome Cache Entry: 90
ASCII text
dropped
Chrome Cache Entry: 91
ASCII text
downloaded
Chrome Cache Entry: 92
ASCII text, with very long lines (15752)
downloaded
Chrome Cache Entry: 93
HTML document, ASCII text, with very long lines (13423), with no line terminators
downloaded
Chrome Cache Entry: 94
ASCII text, with very long lines (11513), with no line terminators
downloaded
Chrome Cache Entry: 95
ASCII text, with very long lines (1616)
dropped
Chrome Cache Entry: 96
ASCII text
downloaded
Chrome Cache Entry: 97
data
dropped
Chrome Cache Entry: 98
ASCII text
downloaded
Chrome Cache Entry: 99
Web Open Font Format (Version 2), TrueType, length 28456, version 1.0
downloaded
There are 34 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 --field-trial-handle=2044,i,15161964838024449994,15005427107141031533,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.shemetiuk.com/"

URLs

Name
IP
Malicious
https://www.shemetiuk.com/
https://www.shemetiuk.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
161.35.26.166
https://www.shemetiuk.com/wp-content/plugins/wp-maintenance-mode/assets/js/jquery.fitvids.min.js
161.35.26.166
https://www.shemetiuk.com/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6
161.35.26.166
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/dancing_script/DancingScript-Variabl
unknown
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/syne/Syne-VariableFont_wght.ttf
unknown
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/js/fotawp-scripts.js?ver=2.0.0
161.35.26.166
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/open-sans/OpenSans-Italic-VariableFo
unknown
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/raleway/Raleway-VariableFont_wght.tt
unknown
https://www.shemetiuk.com/comments/feed/
unknown
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/plus-jakarta-sans/PlusJakartaSans-It
unknown
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/plus-jakarta-sans/PlusJakartaSans-Va
unknown
https://cozythemes.com/fotawp/
unknown
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/hanken-grotesk/HankenGrotesk-Italic-
unknown
https://www.shemetiuk.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.9.8
161.35.26.166
https://www.shemetiuk.com/wp-content/plugins/wp-maintenance-mode/assets/js/scripts.min.js?ver=2.6.11
161.35.26.166
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/poppins/Poppins-Light.woff2
unknown
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/pacifico/Pacifico-Regular.woff2
unknown
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/js/aos.js?ver=2.0.0
161.35.26.166
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/allura/Allura-Regular.woff2
unknown
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/oswald/Oswald-VariableFont_wght.ttf
unknown
https://www.shemetiuk.com/wp-includes/images/w-logo-blue-white-bg.png
161.35.26.166
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/poppins/Poppins-Regular.woff2
unknown
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/ibm_plex_serif/IBMPlexSerif-Regular.
unknown
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/nunito/Nunito-Italic-VariableFont_wg
unknown
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/public_sans/PublicSans-VariableFont_
unknown
https://www.shemetiuk.com/xmlrpc.php?rsd
unknown
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/space_grotesk/SpaceGrotesk-VariableF
unknown
https://www.shemetiuk.com/wp-content/plugins/otter-blocks/build/blocks/advanced-columns/style.css?ver=afc4f7d26e5b10895f97
161.35.26.166
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/outfit/Outfit-VariableFont_wght.ttf
unknown
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/playfair-display/PlayfairDisplay-Var
unknown
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/albert-sans/AlbertSans-Italic-Variab
unknown
https://www.shemetiuk.com/feed/
unknown
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/ibm_plex_serif/IBMPlexSerif-SemiBold
unknown
https://www.shemetiuk.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.shemetiuk.com%2F&forma
unknown
https://www.shemetiuk.com/favicon.ico
161.35.26.166
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/nunito/Nunito-VariableFont_wght.ttf
unknown
http://www.gnu.org/licenses/gpl-2.0.html
unknown
https://www.shemetiuk.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.9.8
161.35.26.166
https://www.shemetiuk.com/wp-json/
unknown
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/poppins/Poppins-Medium.woff2
unknown
https://www.shemetiuk.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.9.8
161.35.26.166
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/montserrat/Montserrat-Italic-Variabl
unknown
https://www.shemetiuk.com/wp-content/plugins/otter-blocks/build/blocks/advanced-columns/style.css?ve
unknown
https://www.shemetiuk.com/wp-content/themes/fotawp/style.css?ver=2.0.0
161.35.26.166
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/jost/Jost-VariableFont_wght.ttf
unknown
https://www.shemetiuk.com/wp-content/plugins/wp-maintenance-mode/assets/images/chatbot.png
unknown
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/merriweather/Merriweather-Light.woff
unknown
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/albert-sans/AlbertSans-VariableFont_
unknown
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/css/aos.css?ver=6.6.2
161.35.26.166
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/jost/Jost-Italic-VariableFont_wght.t
unknown
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/hanken-grotesk/HankenGrotesk-Variabl
unknown
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/dm-sans/DMSans-VariableFont_wght.ttf
unknown
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/merriweather/Merriweather-Regular.wo
unknown
https://api.w.org/
unknown
https://cozythemes.com/
unknown
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/public_sans/PublicSans-Italic-Variab
unknown
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/css/blocks.css?ver=6.6.2
161.35.26.166
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/playfair-display/PlayfairDisplay-Ita
unknown
https://www.cozythemes.com/fotawp/.
unknown
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/montserrat/Montserrat-VariableFont_w
unknown
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/poppins/Poppins-Bold.woff2
unknown
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/ibm_plex_serif/IBMPlexSerif-Medium.w
unknown
https://www.shemetiuk.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
161.35.26.166
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/lato/Lato-Regular.woff2
161.35.26.166
https://www.shemetiuk.com
https://www.shemetiuk.com/wp-admin/admin-ajax.php
unknown
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/ibm_plex_serif/IBMPlexSerif-Bold.wof
unknown
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/inter/Inter-VariableFont_wght.ttf
unknown
http://gmpg.org/xfn/11
unknown
https://demosites.io/otter/wp-content/uploads/sites/664/2022/08/coming_soon_img.svg
162.159.137.54
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/lato/Lato-Bold.woff2
unknown
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/poppins/Poppins-SemiBold.woff2
unknown
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/quicksand/Quicksand-VariableFont_wgh
unknown
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/raleway/Raleway-Italic-VariableFont_
unknown
https://www.shemetiuk.com/wp-includes/js/wp-emoji-release.min.js?ver=6.6.2
161.35.26.166
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/dm-sans/DMSans-Italic-VariableFont_w
unknown
https://www.shemetiuk.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.shemetiuk.com%2F
unknown
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/roboto_condensed/RobotoCondensed-Ita
unknown
https://www.shemetiuk.com/
161.35.26.166
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/merriweather/Merriweather-Bold.woff2
unknown
https://www.shemetiuk.com/wp-json/wp/v2/pages/10
unknown
https://www.shemetiuk.com/wp-includes/js/dist/hooks.min.js?ver=2810c76e705dd1a53b18
161.35.26.166
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/lato/Lato-Light.woff2
unknown
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/league_spartan/LeagueSpartan-Variabl
unknown
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/open-sans/OpenSans-VariableFont_wght
unknown
https://www.shemetiuk.com/wp-includes/js/jquery/jquery.min.js
161.35.26.166
https://www.shemetiuk.com/wp-content/themes/fotawp/assets/fonts/roboto_condensed/RobotoCondensed-Var
unknown
There are 77 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
bg.microsoft.map.fastly.net
199.232.210.172
s-part-0044.t-0009.fb-t-msedge.net
13.107.253.72
www.shemetiuk.com
161.35.26.166
demosites.io
162.159.137.54
s-part-0017.t-0009.t-msedge.net
13.107.246.45
www.google.com
142.250.185.132
fp2e7a.wpc.phicdn.net
192.229.221.95
s-part-0032.t-0009.t-msedge.net
13.107.246.60

IPs

IP
Domain
Country
Malicious
142.250.185.132
www.google.com
United States
192.168.2.4
unknown
unknown
192.168.2.5
unknown
unknown
162.159.137.54
demosites.io
United States
162.159.136.54
unknown
United States
239.255.255.250
unknown
Reserved
161.35.26.166
www.shemetiuk.com
United States

DOM / HTML

URL
Malicious
https://www.shemetiuk.com