Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2248_440336501\LICENSE
|
ASCII text
|
dropped
|
||
|
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2248_440336501\_metadata\verified_contents.json
|
JSON data
|
dropped
|
||
|
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2248_440336501\manifest.fingerprint
|
ASCII text, with no line terminators
|
dropped
|
||
|
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2248_440336501\manifest.json
|
JSON data
|
dropped
|
||
|
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2248_440336501\sets.json
|
JSON data
|
dropped
|
||
|
Chrome Cache Entry: 104
|
ASCII text
|
dropped
|
||
|
Chrome Cache Entry: 105
|
exported SGML document, ASCII text, with very long lines (1630)
|
downloaded
|
||
|
Chrome Cache Entry: 106
|
ASCII text
|
dropped
|
||
|
Chrome Cache Entry: 107
|
ASCII text, with very long lines (2220)
|
downloaded
|
||
|
Chrome Cache Entry: 108
|
ASCII text, with very long lines (32147)
|
downloaded
|
||
|
Chrome Cache Entry: 109
|
PNG image data, 16 x 16, 8-bit colormap, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 110
|
ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 111
|
ASCII text, with very long lines (65483)
|
dropped
|
||
|
Chrome Cache Entry: 112
|
GIF image data, version 89a, 1 x 1
|
dropped
|
||
|
Chrome Cache Entry: 113
|
ASCII text, with very long lines (31994)
|
dropped
|
||
|
Chrome Cache Entry: 114
|
ASCII text, with very long lines (3600), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 115
|
ASCII text, with very long lines (20634)
|
dropped
|
||
|
Chrome Cache Entry: 116
|
Web Open Font Format (Version 2), TrueType, length 24320, version 1.0
|
downloaded
|
||
|
Chrome Cache Entry: 117
|
ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 118
|
ASCII text, with very long lines (2512)
|
downloaded
|
||
|
Chrome Cache Entry: 119
|
ASCII text, with very long lines (65536), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 120
|
ASCII text, with very long lines (31994)
|
downloaded
|
||
|
Chrome Cache Entry: 121
|
ASCII text, with very long lines (324), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 122
|
ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 123
|
SVG Scalable Vector Graphics image
|
dropped
|
||
|
Chrome Cache Entry: 124
|
SVG Scalable Vector Graphics image
|
downloaded
|
||
|
Chrome Cache Entry: 125
|
GIF image data, version 89a, 1 x 1
|
dropped
|
||
|
Chrome Cache Entry: 126
|
ASCII text, with very long lines (9362), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 127
|
Unicode text, UTF-8 text, with very long lines (31999), with LF, NEL line terminators
|
dropped
|
||
|
Chrome Cache Entry: 128
|
ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 129
|
ASCII text, with very long lines (21415), with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 130
|
JSON data
|
dropped
|
||
|
Chrome Cache Entry: 131
|
ASCII text, with very long lines (20634)
|
downloaded
|
||
|
Chrome Cache Entry: 132
|
ASCII text, with very long lines (1305)
|
downloaded
|
||
|
Chrome Cache Entry: 133
|
PNG image data, 16 x 16, 8-bit colormap, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 134
|
Web Open Font Format (Version 2), TrueType, length 16372, version 1.0
|
downloaded
|
||
|
Chrome Cache Entry: 135
|
ASCII text, with very long lines (50046), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 136
|
Web Open Font Format (Version 2), TrueType, length 16740, version 1.0
|
downloaded
|
||
|
Chrome Cache Entry: 137
|
ASCII text, with very long lines (9362), with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 138
|
GIF image data, version 89a, 1 x 1
|
dropped
|
||
|
Chrome Cache Entry: 139
|
exported SGML document, ASCII text, with very long lines (1630)
|
dropped
|
||
|
Chrome Cache Entry: 140
|
Web Open Font Format (Version 2), TrueType, length 24232, version 1.0
|
downloaded
|
||
|
Chrome Cache Entry: 141
|
Unicode text, UTF-8 text, with very long lines (31999), with LF, NEL line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 142
|
JSON data
|
dropped
|
||
|
Chrome Cache Entry: 143
|
ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 144
|
ASCII text, with very long lines (632)
|
downloaded
|
||
|
Chrome Cache Entry: 145
|
HTML document, Unicode text, UTF-8 text, with very long lines (1421), with CRLF, LF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 146
|
GIF image data, version 89a, 1 x 1
|
dropped
|
||
|
Chrome Cache Entry: 147
|
ASCII text
|
dropped
|
||
|
Chrome Cache Entry: 148
|
ASCII text, with very long lines (32011)
|
dropped
|
||
|
Chrome Cache Entry: 149
|
Web Open Font Format (Version 2), TrueType, length 35952, version 1.0
|
downloaded
|
||
|
Chrome Cache Entry: 150
|
ASCII text, with very long lines (39843), with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 151
|
GIF image data, version 89a, 1 x 1
|
dropped
|
||
|
Chrome Cache Entry: 152
|
ASCII text, with very long lines (2632)
|
downloaded
|
||
|
Chrome Cache Entry: 153
|
ASCII text, with very long lines (3600), with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 154
|
Web Open Font Format (Version 2), TrueType, length 18536, version 1.0
|
downloaded
|
||
|
Chrome Cache Entry: 155
|
ASCII text, with very long lines (470)
|
downloaded
|
||
|
Chrome Cache Entry: 156
|
ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 157
|
ASCII text, with very long lines (3910)
|
downloaded
|
||
|
Chrome Cache Entry: 158
|
ASCII text, with very long lines (1305)
|
dropped
|
||
|
Chrome Cache Entry: 159
|
ASCII text, with very long lines (2220)
|
dropped
|
||
|
Chrome Cache Entry: 160
|
ASCII text, with very long lines (11346), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 161
|
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
|
downloaded
|
||
|
Chrome Cache Entry: 162
|
ASCII text, with very long lines (32029)
|
dropped
|
||
|
Chrome Cache Entry: 163
|
ASCII text, with very long lines (13080)
|
downloaded
|
||
|
Chrome Cache Entry: 164
|
PNG image data, 199 x 97, 8-bit colormap, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 165
|
ASCII text, with very long lines (2512)
|
dropped
|
||
|
Chrome Cache Entry: 166
|
ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 167
|
ASCII text, with very long lines (21415), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 168
|
ASCII text, with very long lines (65459)
|
dropped
|
||
|
Chrome Cache Entry: 169
|
ASCII text, with very long lines (32147)
|
dropped
|
||
|
Chrome Cache Entry: 170
|
HTML document, Unicode text, UTF-8 text, with very long lines (51147)
|
downloaded
|
||
|
Chrome Cache Entry: 171
|
ASCII text, with very long lines (65483)
|
downloaded
|
||
|
Chrome Cache Entry: 172
|
ASCII text, with very long lines (39843), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 173
|
ASCII text, with very long lines (32029)
|
downloaded
|
||
|
Chrome Cache Entry: 174
|
ASCII text, with very long lines (65459)
|
downloaded
|
||
|
Chrome Cache Entry: 175
|
GIF image data, version 89a, 1 x 1
|
dropped
|
||
|
Chrome Cache Entry: 176
|
ASCII text, with very long lines (32011)
|
downloaded
|
||
|
Chrome Cache Entry: 177
|
ASCII text, with very long lines (50046), with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 178
|
Unicode text, UTF-8 text, with very long lines (64436)
|
downloaded
|
||
|
Chrome Cache Entry: 179
|
GIF image data, version 89a, 1 x 1
|
dropped
|
||
|
Chrome Cache Entry: 180
|
PNG image data, 199 x 97, 8-bit colormap, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 181
|
ASCII text, with very long lines (11346), with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 182
|
Unicode text, UTF-8 text, with very long lines (64436)
|
dropped
|
||
|
Chrome Cache Entry: 183
|
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
|
dropped
|
||
|
Chrome Cache Entry: 184
|
Web Open Font Format (Version 2), TrueType, length 30768, version 1.393
|
downloaded
|
There are 77 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US
--service-sandbox-type=none --mojo-platform-channel-handle=2204 --field-trial-handle=2036,i,11265705339467945166,16828181454838817214,262144
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
/prefetch:8
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://lacavernedufle.weebly.com"
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://lacavernedufle.weebly.com
|
|||
|
https://lacavernedufle.weebly.com/files/templateArtifacts.js?1685974766
|
74.115.51.8
|
||
|
https://wieistmeineip.de
|
unknown
|
||
|
https://mercadoshops.com.co
|
unknown
|
||
|
https://gliadomain.com
|
unknown
|
||
|
https://poalim.xyz
|
unknown
|
||
|
https://github.com/zloirock/core-js
|
unknown
|
||
|
https://mercadolivre.com
|
unknown
|
||
|
https://widgetic.com/api/v2/widgets/53f6253e09c7e204038b4567/embed.html?bp=bottom-right&resize=fill&autoscale=off&lo=https%3A%2F%2Flacavernedufle.weebly.com
|
104.21.5.49
|
||
|
https://reshim.org
|
unknown
|
||
|
https://nourishingpursuits.com
|
unknown
|
||
|
https://medonet.pl
|
unknown
|
||
|
https://unotv.com
|
unknown
|
||
|
https://mercadoshops.com.br
|
unknown
|
||
|
https://cdn2.editmysite.com/fonts/Quattrocento/bold.woff2
|
151.101.129.46
|
||
|
https://joyreactor.cc
|
unknown
|
||
|
https://zdrowietvn.pl
|
unknown
|
||
|
https://johndeere.com
|
unknown
|
||
|
https://www.internalfb.com/intern/invariant/
|
unknown
|
||
|
https://songstats.com
|
unknown
|
||
|
https://baomoi.com
|
unknown
|
||
|
https://supereva.it
|
unknown
|
||
|
https://elfinancierocr.com
|
unknown
|
||
|
https://bolasport.com
|
unknown
|
||
|
https://rws1nvtvt.com
|
unknown
|
||
|
https://bam.nr-data.net/1/c31f92a57d?a=20304440&v=1.267.0&to=MlwHMUdRW0FXBURQWwsWJAZBWVpcGQdAUGsTCzoCUERqRV8CV1xAOlwIB1BU&rst=10547&ck=0&s=11cb43e99f168546&ref=https://widgetic.com/api/v2/widgets/53f6253e09c7e204038b4567/embed.html&ptid=da30f53fde42d76c&af=err,xhr,stn,ins&ap=29&be=2333&fe=7386&dc=3526&at=HhsERw9LSE8%3D&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1728563257795,%22n%22:0,%22r%22:2,%22re%22:1122,%22f%22:1122,%22dn%22:1630,%22dne%22:1630,%22c%22:1630,%22s%22:1630,%22ce%22:2172,%22rq%22:2172,%22rp%22:2333,%22rpe%22:2549,%22di%22:5858,%22ds%22:5858,%22de%22:5859,%22dc%22:9717,%22l%22:9717,%22le%22:9719%7D,%22navigation%22:%7B%22rc%22:1%7D%7D
|
162.247.243.29
|
||
|
https://desimartini.com
|
unknown
|
||
|
https://hearty.app
|
unknown
|
||
|
https://hearty.gift
|
unknown
|
||
|
https://mercadoshops.com
|
unknown
|
||
|
https://heartymail.com
|
unknown
|
||
|
https://nlc.hu
|
unknown
|
||
|
https://p106.net
|
unknown
|
||
|
https://radio2.be
|
unknown
|
||
|
https://finn.no
|
unknown
|
||
|
https://hc1.com
|
unknown
|
||
|
https://lacavernedufle.weebly.com/favicon.ico
|
74.115.51.8
|
||
|
https://kompas.tv
|
unknown
|
||
|
https://mystudentdashboard.com
|
unknown
|
||
|
https://songshare.com
|
unknown
|
||
|
https://smaker.pl
|
unknown
|
||
|
https://mercadopago.com.mx
|
unknown
|
||
|
https://lacavernedufle.weebly.com/ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails]
|
74.115.51.8
|
||
|
https://p24.hu
|
unknown
|
||
|
https://talkdeskqaid.com
|
unknown
|
||
|
https://widgetic.com/bundles/blogvioapp/js/spine.js
|
104.21.5.49
|
||
|
https://cdn.jsdelivr.net/npm/@widgetic/sdk/lib/sdk.js
|
151.101.193.229
|
||
|
https://24.hu
|
unknown
|
||
|
https://mercadopago.com.pe
|
unknown
|
||
|
https://www.weebly.com/signup?utm_source=internal&utm_medium=footer
|
unknown
|
||
|
https://cardsayings.net
|
unknown
|
||
|
https://bam.nr-data.net/jserrors/1/c31f92a57d?a=20304440&v=1.267.0&to=MlwHMUdRW0FXBURQWwsWJAZBWVpcGQdAUGsTCzoCUERqRV8CV1xAOlwIB1BU&rst=21245&ck=0&s=11cb43e99f168546&ref=https://widgetic.com/api/v2/widgets/53f6253e09c7e204038b4567/embed.html&ptid=da30f53fde42d76c
|
162.247.243.29
|
||
|
https://text.com
|
unknown
|
||
|
https://mightytext.net
|
unknown
|
||
|
https://pudelek.pl
|
unknown
|
||
|
https://hazipatika.com
|
unknown
|
||
|
https://joyreactor.com
|
unknown
|
||
|
https://cookreactor.com
|
unknown
|
||
|
https://wildixin.com
|
unknown
|
||
|
https://cdn2.editmysite.com/js/jquery-1.8.3.min.js
|
151.101.129.46
|
||
|
https://eworkbookcloud.com
|
unknown
|
||
|
https://cognitiveai.ru
|
unknown
|
||
|
https://nacion.com
|
unknown
|
||
|
https://chennien.com
|
unknown
|
||
|
https://drimer.travel
|
unknown
|
||
|
https://bam.nr-data.net/jserrors/1/c31f92a57d?a=20304440&v=1.267.0&to=MlwHMUdRW0FXBURQWwsWJAZBWVpcGQdAUGsTCzoCUERqRV8CV1xAOlwIB1BU&rst=31257&ck=0&s=11cb43e99f168546&ref=https://widgetic.com/api/v2/widgets/53f6253e09c7e204038b4567/embed.html&ptid=da30f53fde42d76c
|
162.247.243.29
|
||
|
https://deccoria.pl
|
unknown
|
||
|
https://mercadopago.cl
|
unknown
|
||
|
https://lacavernedufle.weebly.com/
|
|||
|
https://talkdeskstgid.com
|
unknown
|
||
|
https://naukri.com
|
unknown
|
||
|
https://interia.pl
|
unknown
|
||
|
https://stats.g.doubleclick.net/j/collect?
|
unknown
|
||
|
https://www.facebook.com/plugins/like.php?href=https://www.facebook.com/widgetic&width&layout=standard&action=like&show_faces=true&share=true&height=80
|
157.240.252.35
|
||
|
https://bonvivir.com
|
unknown
|
||
|
https://carcostadvisor.be
|
unknown
|
||
|
https://salemovetravel.com
|
unknown
|
||
|
https://sapo.io
|
unknown
|
||
|
http://rock.mit-license.org
|
unknown
|
||
|
https://wpext.pl
|
unknown
|
||
|
https://welt.de
|
unknown
|
||
|
https://poalim.site
|
unknown
|
||
|
https://drimer.io
|
unknown
|
||
|
https://infoedgeindia.com
|
unknown
|
||
|
https://blackrockadvisorelite.it
|
unknown
|
||
|
https://cognitive-ai.ru
|
unknown
|
||
|
https://cafemedia.com
|
unknown
|
||
|
https://graziadaily.co.uk
|
unknown
|
||
|
https://thirdspace.org.au
|
unknown
|
||
|
https://widgetic.com/widget/facebook-like
|
unknown
|
||
|
https://mercadoshops.com.ar
|
unknown
|
||
|
https://smpn106jkt.sch.id
|
unknown
|
||
|
https://cdn2.editmysite.com/fonts/Open_Sans/bold.woff2
|
151.101.129.46
|
||
|
https://bam.nr-data.net/jserrors/1/c31f92a57d?a=20304440&v=1.267.0&to=MlwHMUdRW0FXBURQWwsWJAZBWVpcGQdAUGsTCzoCUERqRV8CV1xAOlwIB1BU&rst=61288&ck=0&s=11cb43e99f168546&ref=https://widgetic.com/api/v2/widgets/53f6253e09c7e204038b4567/embed.html&ptid=da30f53fde42d76c
|
162.247.243.29
|
||
|
https://elpais.uy
|
unknown
|
||
|
https://landyrev.com
|
unknown
|
||
|
https://the42.ie
|
unknown
|
||
|
https://widgetic.com/bundles/blogvioapp/js/editor/core.vendor.js
|
104.21.5.49
|
||
|
https://twitter.com/jacobrossi/status/480596438489890816
|
unknown
|
||
|
https://use.typekit.net
|
unknown
|
||
|
https://files.widgetic.com/file/widgetic-uploads/assets/js/core-js.shim.min.js
|
104.21.5.49
|
There are 90 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
jsdelivr.map.fastly.net
|
151.101.193.229
|
||
|
star-mini.c10r.facebook.com
|
157.240.252.35
|
||
|
bg.microsoft.map.fastly.net
|
199.232.214.172
|
||
|
fastly-tls12-bam.nr-data.net
|
162.247.243.29
|
||
|
scontent.xx.fbcdn.net
|
157.240.251.9
|
||
|
sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com
|
44.236.126.52
|
||
|
files.widgetic.com
|
104.21.5.49
|
||
|
js-agent.newrelic.com
|
162.247.243.39
|
||
|
weebly.map.fastly.net
|
151.101.129.46
|
||
|
widgetic.com
|
104.21.5.49
|
||
|
www.google.com
|
142.250.185.228
|
||
|
lacavernedufle.weebly.com
|
74.115.51.9
|
||
|
www.facebook.com
|
unknown
|
||
|
ec.editmysite.com
|
unknown
|
||
|
cdn.jsdelivr.net
|
unknown
|
||
|
cdn2.editmysite.com
|
unknown
|
||
|
bam.nr-data.net
|
unknown
|
||
|
static.xx.fbcdn.net
|
unknown
|
There are 8 hidden domains, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
142.250.185.228
|
www.google.com
|
United States
|
||
|
74.115.51.8
|
unknown
|
United States
|
||
|
74.115.51.9
|
lacavernedufle.weebly.com
|
United States
|
||
|
44.236.126.52
|
sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com
|
United States
|
||
|
151.101.193.229
|
jsdelivr.map.fastly.net
|
United States
|
||
|
192.168.2.6
|
unknown
|
unknown
|
||
|
157.240.0.6
|
unknown
|
United States
|
||
|
162.247.243.39
|
js-agent.newrelic.com
|
United States
|
||
|
157.240.252.35
|
star-mini.c10r.facebook.com
|
United States
|
||
|
172.67.132.250
|
unknown
|
United States
|
||
|
104.21.5.49
|
files.widgetic.com
|
United States
|
||
|
157.240.251.9
|
scontent.xx.fbcdn.net
|
United States
|
||
|
239.255.255.250
|
unknown
|
Reserved
|
||
|
151.101.129.46
|
weebly.map.fastly.net
|
United States
|
||
|
162.247.243.29
|
fastly-tls12-bam.nr-data.net
|
United States
|
There are 5 hidden IPs, click here to show them.
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://lacavernedufle.weebly.com/
|
||
|
https://lacavernedufle.weebly.com/
|
||
|
https://lacavernedufle.weebly.com/
|
||
|
https://lacavernedufle.weebly.com/
|
||
|
https://lacavernedufle.weebly.com/
|