Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3652_961314998\LICENSE
|
ASCII text
|
dropped
|
||
|
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3652_961314998\_metadata\verified_contents.json
|
JSON data
|
dropped
|
||
|
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3652_961314998\manifest.fingerprint
|
ASCII text, with no line terminators
|
dropped
|
||
|
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3652_961314998\manifest.json
|
JSON data
|
dropped
|
||
|
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3652_961314998\sets.json
|
JSON data
|
dropped
|
||
|
Chrome Cache Entry: 100
|
JSON data
|
dropped
|
||
|
Chrome Cache Entry: 101
|
ASCII text, with very long lines (46480)
|
downloaded
|
||
|
Chrome Cache Entry: 102
|
JSON data
|
downloaded
|
||
|
Chrome Cache Entry: 103
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57443
|
dropped
|
||
|
Chrome Cache Entry: 104
|
JSON data
|
downloaded
|
||
|
Chrome Cache Entry: 105
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
|
dropped
|
||
|
Chrome Cache Entry: 106
|
ASCII text, with very long lines (33967)
|
downloaded
|
||
|
Chrome Cache Entry: 107
|
ASCII text, with very long lines (65464)
|
dropped
|
||
|
Chrome Cache Entry: 108
|
Unicode text, UTF-8 text, with very long lines (61934), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 109
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
|
downloaded
|
||
|
Chrome Cache Entry: 110
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
|
downloaded
|
||
|
Chrome Cache Entry: 111
|
ASCII text, with very long lines (46480)
|
dropped
|
||
|
Chrome Cache Entry: 112
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57443
|
downloaded
|
||
|
Chrome Cache Entry: 113
|
ASCII text, with very long lines (65446)
|
downloaded
|
||
|
Chrome Cache Entry: 114
|
ASCII text, with very long lines (65465)
|
dropped
|
||
|
Chrome Cache Entry: 115
|
ASCII text, with very long lines (65464)
|
downloaded
|
||
|
Chrome Cache Entry: 116
|
ASCII text, with very long lines (65446)
|
dropped
|
||
|
Chrome Cache Entry: 117
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 141866
|
downloaded
|
||
|
Chrome Cache Entry: 118
|
ASCII text, with very long lines (65460)
|
dropped
|
||
|
Chrome Cache Entry: 119
|
ASCII text, with very long lines (65465)
|
downloaded
|
||
|
Chrome Cache Entry: 120
|
ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 121
|
JSON data
|
downloaded
|
||
|
Chrome Cache Entry: 122
|
JSON data
|
dropped
|
||
|
Chrome Cache Entry: 123
|
JSON data
|
dropped
|
||
|
Chrome Cache Entry: 124
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
|
dropped
|
||
|
Chrome Cache Entry: 125
|
JSON data
|
downloaded
|
||
|
Chrome Cache Entry: 126
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 449703
|
downloaded
|
||
|
Chrome Cache Entry: 127
|
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
|
downloaded
|
||
|
Chrome Cache Entry: 128
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
|
downloaded
|
||
|
Chrome Cache Entry: 129
|
ASCII text, with very long lines (65460)
|
downloaded
|
||
|
Chrome Cache Entry: 130
|
Unicode text, UTF-8 text, with very long lines (61934), with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 131
|
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
|
dropped
|
||
|
Chrome Cache Entry: 132
|
HTML document, ASCII text, with very long lines (956), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 133
|
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
|
downloaded
|
||
|
Chrome Cache Entry: 134
|
JSON data
|
downloaded
|
||
|
Chrome Cache Entry: 135
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
|
dropped
|
||
|
Chrome Cache Entry: 136
|
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
|
dropped
|
||
|
Chrome Cache Entry: 87
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 190152
|
downloaded
|
||
|
Chrome Cache Entry: 88
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
|
dropped
|
||
|
Chrome Cache Entry: 89
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 141866
|
dropped
|
||
|
Chrome Cache Entry: 91
|
HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 92
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 190152
|
dropped
|
||
|
Chrome Cache Entry: 93
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 449703
|
dropped
|
||
|
Chrome Cache Entry: 94
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
|
downloaded
|
||
|
Chrome Cache Entry: 95
|
JSON data
|
dropped
|
||
|
Chrome Cache Entry: 96
|
JSON data
|
dropped
|
||
|
Chrome Cache Entry: 97
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
|
dropped
|
||
|
Chrome Cache Entry: 98
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113401
|
downloaded
|
||
|
Chrome Cache Entry: 99
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
|
downloaded
|
There are 45 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US
--service-sandbox-type=none --mojo-platform-channel-handle=1972 --field-trial-handle=2248,i,618462383061727548,14457692398767864436,262144
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
/prefetch:8
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://login.microsoftonline.com/redeem?rd=https%3a%2f%2finvitations.microsoft.com%2fredeem%2f%3ftenant%3df4a12867-922d-4b9d-bb85-9ee7898512a0%26user%3d0351806c-96eb-4cc1-87c1-6d9b19965a3a%26ticket%3dfzOvu7%25252b3x%25252bn7jW3wffZVq3DANcr4XbiLw1VboSs23%25252b0%25253d%26ver%3d2.0"
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://login.microsoftonline.com/redeem?rd=https%3a%2f%2finvitations.microsoft.com%2fredeem%2f%3ftenant%3df4a12867-922d-4b9d-bb85-9ee7898512a0%26user%3d0351806c-96eb-4cc1-87c1-6d9b19965a3a%26ticket%3dfzOvu7%25252b3x%25252bn7jW3wffZVq3DANcr4XbiLw1VboSs23%25252b0%25253d%26ver%3d2.0
|
|||
|
https://wieistmeineip.de
|
unknown
|
||
|
https://mercadoshops.com.co
|
unknown
|
||
|
https://gliadomain.com
|
unknown
|
||
|
https://poalim.xyz
|
unknown
|
||
|
https://github.com/zloirock/core-js
|
unknown
|
||
|
https://login.microsoftonline.com/f4a12867-922d-4b9d-bb85-9ee7898512a0/discovery/v2.0/keys
|
unknown
|
||
|
https://mercadolivre.com
|
unknown
|
||
|
https://reshim.org
|
unknown
|
||
|
https://nourishingpursuits.com
|
unknown
|
||
|
https://medonet.pl
|
unknown
|
||
|
https://unotv.com
|
unknown
|
||
|
https://mercadoshops.com.br
|
unknown
|
||
|
https://joyreactor.cc
|
unknown
|
||
|
https://zdrowietvn.pl
|
unknown
|
||
|
https://johndeere.com
|
unknown
|
||
|
https://songstats.com
|
unknown
|
||
|
https://baomoi.com
|
unknown
|
||
|
https://supereva.it
|
unknown
|
||
|
https://elfinancierocr.com
|
unknown
|
||
|
https://bolasport.com
|
unknown
|
||
|
https://rws1nvtvt.com
|
unknown
|
||
|
https://desimartini.com
|
unknown
|
||
|
https://hearty.app
|
unknown
|
||
|
https://hearty.gift
|
unknown
|
||
|
https://mercadoshops.com
|
unknown
|
||
|
https://heartymail.com
|
unknown
|
||
|
https://nlc.hu
|
unknown
|
||
|
https://p106.net
|
unknown
|
||
|
https://radio2.be
|
unknown
|
||
|
https://finn.no
|
unknown
|
||
|
https://hc1.com
|
unknown
|
||
|
https://kompas.tv
|
unknown
|
||
|
https://mystudentdashboard.com
|
unknown
|
||
|
https://songshare.com
|
unknown
|
||
|
https://smaker.pl
|
unknown
|
||
|
https://mercadopago.com.mx
|
unknown
|
||
|
https://p24.hu
|
unknown
|
||
|
https://talkdeskqaid.com
|
unknown
|
||
|
https://24.hu
|
unknown
|
||
|
https://mercadopago.com.pe
|
unknown
|
||
|
https://cardsayings.net
|
unknown
|
||
|
https://text.com
|
unknown
|
||
|
https://mightytext.net
|
unknown
|
||
|
https://pudelek.pl
|
unknown
|
||
|
https://hazipatika.com
|
unknown
|
||
|
https://joyreactor.com
|
unknown
|
||
|
https://cookreactor.com
|
unknown
|
||
|
https://wildixin.com
|
unknown
|
||
|
https://eworkbookcloud.com
|
unknown
|
||
|
https://cognitiveai.ru
|
unknown
|
||
|
https://nacion.com
|
unknown
|
||
|
https://chennien.com
|
unknown
|
||
|
https://drimer.travel
|
unknown
|
||
|
https://login.microsoftonline.com/f4a12867-922d-4b9d-bb85-9ee7898512a0/oauth2/v2.0/token
|
unknown
|
||
|
https://deccoria.pl
|
unknown
|
||
|
https://mercadopago.cl
|
unknown
|
||
|
https://talkdeskstgid.com
|
unknown
|
||
|
https://naukri.com
|
unknown
|
||
|
https://interia.pl
|
unknown
|
||
|
https://bonvivir.com
|
unknown
|
||
|
https://carcostadvisor.be
|
unknown
|
||
|
https://salemovetravel.com
|
unknown
|
||
|
https://sapo.io
|
unknown
|
||
|
https://wpext.pl
|
unknown
|
||
|
https://welt.de
|
unknown
|
||
|
https://poalim.site
|
unknown
|
||
|
https://drimer.io
|
unknown
|
||
|
https://infoedgeindia.com
|
unknown
|
||
|
https://blackrockadvisorelite.it
|
unknown
|
||
|
https://cognitive-ai.ru
|
unknown
|
||
|
https://cafemedia.com
|
unknown
|
||
|
https://graziadaily.co.uk
|
unknown
|
||
|
https://thirdspace.org.au
|
unknown
|
||
|
https://mercadoshops.com.ar
|
unknown
|
||
|
https://smpn106jkt.sch.id
|
unknown
|
||
|
https://elpais.uy
|
unknown
|
||
|
https://landyrev.com
|
unknown
|
||
|
https://the42.ie
|
unknown
|
||
|
https://commentcamarche.com
|
unknown
|
||
|
https://tucarro.com.ve
|
unknown
|
||
|
https://rws3nvtvt.com
|
unknown
|
||
|
https://eleconomista.net
|
unknown
|
||
|
https://helpdesk.com
|
unknown
|
||
|
https://mercadolivre.com.br
|
unknown
|
||
|
https://clmbtech.com
|
unknown
|
||
|
https://standardsandpraiserepurpose.com
|
unknown
|
||
|
https://07c225f3.online
|
unknown
|
||
|
https://login.windows-ppe.net
|
unknown
|
||
|
https://salemovefinancial.com
|
unknown
|
||
|
https://mercadopago.com.br
|
unknown
|
||
|
https://commentcamarche.net
|
unknown
|
||
|
https://etfacademy.it
|
unknown
|
||
|
https://mighty-app.appspot.com
|
unknown
|
||
|
https://hj.rs
|
unknown
|
||
|
https://hearty.me
|
unknown
|
||
|
https://login.microsoftonline.com
|
unknown
|
||
|
https://mercadolibre.com.gt
|
unknown
|
||
|
https://timesinternet.in
|
unknown
|
||
|
https://indiatodayne.in
|
unknown
|
||
|
https://idbs-staging.com
|
unknown
|
There are 90 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
bg.microsoft.map.fastly.net
|
199.232.210.172
|
||
|
s-part-0017.t-0009.t-msedge.net
|
13.107.246.45
|
||
|
sni1gl.wpc.omegacdn.net
|
152.199.21.175
|
||
|
www.google.com
|
142.250.184.196
|
||
|
s-part-0039.t-0009.t-msedge.net
|
13.107.246.67
|
||
|
fp2e7a.wpc.phicdn.net
|
192.229.221.95
|
||
|
identity.nel.measure.office.net
|
unknown
|
||
|
aadcdn.msftauth.net
|
unknown
|
||
|
login.microsoftonline.com
|
unknown
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
142.250.184.196
|
www.google.com
|
United States
|
||
|
13.107.246.45
|
s-part-0017.t-0009.t-msedge.net
|
United States
|
||
|
192.168.2.4
|
unknown
|
unknown
|
||
|
239.255.255.250
|
unknown
|
Reserved
|
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://myapplications.microsoft.com/
|
||
|
https://login.microsoftonline.com/f4a12867-922d-4b9d-bb85-9ee7898512a0/oauth2/v2.0/authorize?client_id=2793995e-0a7d-40d7-bd35-6968ba142197&scope=openid%20profile%20offline_access%20email&redirect_uri=https%3A%2F%2Fmyapplications.microsoft.com%2F&client-request-id=f8b68b3a-f897-4fff-9616-f0ad0fd5f3a1&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=2.37.1&client_info=1&code_challenge=Y2htBQ72ly0UYYD4zGminv9Wx1wS-qNRePtRw57JKw8&code_challenge_method=S256&nonce=f45cf66f-0b61-4989-a631-dd94a0581d13&state=eyJpZCI6ImJmODJhZTc4LWZjYTctNGY2ZC1iOGQ2LTVmMzViYjdkZTYxNiIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoicmVkaXJlY3QifX0%3D&sso_reload=true
|
||
|
https://login.microsoftonline.com/f4a12867-922d-4b9d-bb85-9ee7898512a0/oauth2/v2.0/authorize?client_id=2793995e-0a7d-40d7-bd35-6968ba142197&scope=openid%20profile%20offline_access%20email&redirect_uri=https%3A%2F%2Fmyapplications.microsoft.com%2F&client-request-id=f8b68b3a-f897-4fff-9616-f0ad0fd5f3a1&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=2.37.1&client_info=1&code_challenge=Y2htBQ72ly0UYYD4zGminv9Wx1wS-qNRePtRw57JKw8&code_challenge_method=S256&nonce=f45cf66f-0b61-4989-a631-dd94a0581d13&state=eyJpZCI6ImJmODJhZTc4LWZjYTctNGY2ZC1iOGQ2LTVmMzViYjdkZTYxNiIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoicmVkaXJlY3QifX0%3D&sso_reload=true
|
||
|
https://login.microsoftonline.com/f4a12867-922d-4b9d-bb85-9ee7898512a0/oauth2/v2.0/authorize?client_id=2793995e-0a7d-40d7-bd35-6968ba142197&scope=openid%20profile%20offline_access%20email&redirect_uri=https%3A%2F%2Fmyapplications.microsoft.com%2F&client-request-id=f8b68b3a-f897-4fff-9616-f0ad0fd5f3a1&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=2.37.1&client_info=1&code_challenge=Y2htBQ72ly0UYYD4zGminv9Wx1wS-qNRePtRw57JKw8&code_challenge_method=S256&nonce=f45cf66f-0b61-4989-a631-dd94a0581d13&state=eyJpZCI6ImJmODJhZTc4LWZjYTctNGY2ZC1iOGQ2LTVmMzViYjdkZTYxNiIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoicmVkaXJlY3QifX0%3D&sso_reload=true
|