IOC Report
http://www.vyvod-iz-zapoya-rostov16.ru/

loading gif

Files

File Path
Type
Category
Malicious
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 17:35:55 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 17:35:55 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 17:35:55 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 17:35:55 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 17:35:55 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
Chrome Cache Entry: 72
HTML document, Unicode text, UTF-8 text, with very long lines (8936), with CRLF, LF line terminators
downloaded
Chrome Cache Entry: 73
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x800, components 3
downloaded
Chrome Cache Entry: 74
Web Open Font Format (Version 2), TrueType, length 21288, version 1.0
downloaded
Chrome Cache Entry: 75
ASCII text, with very long lines (13479)
dropped
Chrome Cache Entry: 76
HTML document, Unicode text, UTF-8 text, with very long lines (54740), with no line terminators
dropped
Chrome Cache Entry: 77
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 78
HTML document, Unicode text, UTF-8 text, with very long lines (54740), with no line terminators
downloaded
Chrome Cache Entry: 79
ASCII text, with very long lines (6141)
downloaded
Chrome Cache Entry: 80
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 81
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x800, components 3
dropped
Chrome Cache Entry: 82
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1536x1024, components 3
dropped
Chrome Cache Entry: 83
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x800, components 3
dropped
Chrome Cache Entry: 84
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x800, components 3
downloaded
Chrome Cache Entry: 85
PNG image data, 74 x 66, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 86
ASCII text, with very long lines (13479)
downloaded
Chrome Cache Entry: 87
Web Open Font Format (Version 2), TrueType, length 15396, version 1.0
downloaded
Chrome Cache Entry: 88
ASCII text, with very long lines (65447)
downloaded
Chrome Cache Entry: 89
Web Open Font Format (Version 2), TrueType, length 8844, version 1.0
downloaded
Chrome Cache Entry: 90
ASCII text, with very long lines (65447)
dropped
Chrome Cache Entry: 91
PNG image data, 74 x 66, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 92
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 93
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1536x1024, components 3
downloaded
Chrome Cache Entry: 94
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
downloaded
Chrome Cache Entry: 95
Unicode text, UTF-8 text, with very long lines (65107)
downloaded
Chrome Cache Entry: 96
TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, wpshop-core
downloaded
Chrome Cache Entry: 97
ASCII text
downloaded
Chrome Cache Entry: 98
Web Open Font Format (Version 2), TrueType, length 33092, version 1.0
downloaded
There are 24 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=1820,i,6259477792528122285,15158003816407987356,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.vyvod-iz-zapoya-rostov16.ru/"

URLs

Name
IP
Malicious
http://www.vyvod-iz-zapoya-rostov16.ru/
https://vyvod-iz-zapoya-rostov16.ru/wp-content/themes/reboot/assets/css/style.min.css
87.236.16.19
https://vyvod-iz-zapoya-rostov16.ru/#primaryimage
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-18-1024x682.jpg
unknown
https://yoast.com/wordpress/plugins/seo/
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-21-1024x683.jpg
unknown
https://www.vyvod-iz-zapoya-rostov16.ru/
87.236.16.19
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-14.jpg
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-17-300x199.jpg
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-20-300x225.jpg
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-15.jpg
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-17-1024x679.jpg
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-16-1536x1024.jpg
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-13-600x400.jpg
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-20-1024x768.jpg
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-12-600x400.jpg
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-14-1024x683.jpg
unknown
https://vyvod-iz-zapoya-rostov16.ru/#breadcrumb
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-16-1024x683.jpg
unknown
http://www.vyvod-iz-zapoya-rostov16.ru/
87.236.16.19
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-21-300x200.jpg
unknown
http://schema.org/Article
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-14-300x200.jpg
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-13-300x200.jpg
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-15-300x200.jpg
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-21-768x512.jpg
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-12-300x200.jpg
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-16-300x200.jpg
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-13-768x512.jpg
unknown
https://schema.org/ImageObject
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-14-1536x1024.jpg
87.236.16.19
https://a#vyvod-iz-zapoya-rostov15.ru
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-17-603x400.jpg
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-20.jpg
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-14-768x512.jpg
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-16.jpg
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-15-768x512.jpg
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/plugins/tablepress/css/build/default.css
87.236.16.19
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-17-768x510.jpg
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-21.jpg
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/themes/reboot/assets/fonts/wpshop-core.ttf
87.236.16.19
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/08/cropped-favicon-32x32-1-192x192.png
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-18-300x200.jpg
unknown
https://vyvod-iz-zapoya-rostov16.ru/
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-12-768x512.jpg
unknown
http://schema.org/SiteNavigationElement
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-17.jpg
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-20-533x400.jpg
unknown
https://web.whatsapp.com/send/?phone=79286161265
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-19-300x169.jpg
unknown
https://schema.org/WebPage
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-18-1536x1024.jpg
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-19-1024x576.jpg
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-18.jpg
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-15-1024x682.jpg
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/08/logo-Vector.png
87.236.16.19
http://schema.org/WPHeader
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-16-768x512.jpg
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-18-768x512.jpg
unknown
https://schema.org
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-19-711x400.jpg
unknown
https://vyvod-iz-zapoya-rostov16.ru/#website
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-21-1536x1025.jpg
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/08/cropped-favicon-32x32-1-180x180.png
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-19-768x432.jpg
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-19.jpg
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-21-600x400.jpg
unknown
https://vyvod-iz-zapoya-rostov16.ru/?s=
unknown
http://schema.org/WPSideBar
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-13-1024x683.jpg
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-16-600x400.jpg
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-15-600x400.jpg
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-includes/js/jquery/jquery.min.js
87.236.16.19
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-12.jpg
87.236.16.19
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-12-1024x683.jpg
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-20-768x576.jpg
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-14-600x400.jpg
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/08/cropped-favicon-32x32-1-32x32.png
87.236.16.19
https://vyvod-iz-zapoya-rostov16.ru
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/08/cropped-favicon-32x32-1-270x270.png
unknown
https://schema.org/Organization
unknown
https://support.wpshop.ru/docs/general/child-themes/
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/themes/reboot/assets/js/scripts.min.js
87.236.16.19
http://wpshop.biz/
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/themes/reboot_child/style.css
87.236.16.19
https://vyvod-iz-zapoya-rostov16.ru/wp-includes/js/jquery/jquery-migrate.min.js
87.236.16.19
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-13.jpg
87.236.16.19
https://wpshop.ru/themes/reboot
unknown
https://vyvod-iz-zapoya-rostov16.ru/wp-content/uploads/2024/09/image-18-600x400.jpg
unknown
There are 78 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
www.vyvod-iz-zapoya-rostov16.ru
87.236.16.19
www.google.com
216.58.206.68
vyvod-iz-zapoya-rostov16.ru
87.236.16.19

IPs

IP
Domain
Country
Malicious
192.168.2.16
unknown
unknown
87.236.16.19
www.vyvod-iz-zapoya-rostov16.ru
Russian Federation
216.58.206.68
www.google.com
United States
239.255.255.250
unknown
Reserved

DOM / HTML

URL
Malicious
https://vyvod-iz-zapoya-rostov16.ru/
https://vyvod-iz-zapoya-rostov16.ru/