Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Chrome Cache Entry: 100
|
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 101
|
HTML document, ASCII text, with very long lines (13515)
|
downloaded
|
||
|
Chrome Cache Entry: 102
|
MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
|
dropped
|
||
|
Chrome Cache Entry: 103
|
ASCII text, with very long lines (754)
|
downloaded
|
||
|
Chrome Cache Entry: 104
|
ASCII text, with very long lines (1694)
|
dropped
|
||
|
Chrome Cache Entry: 105
|
ASCII text, with very long lines (2287)
|
dropped
|
||
|
Chrome Cache Entry: 106
|
ASCII text, with very long lines (621)
|
downloaded
|
||
|
Chrome Cache Entry: 107
|
ASCII text, with very long lines (1885)
|
downloaded
|
||
|
Chrome Cache Entry: 108
|
ASCII text, with very long lines (2287)
|
downloaded
|
||
|
Chrome Cache Entry: 109
|
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 110
|
ASCII text, with very long lines (5693)
|
downloaded
|
||
|
Chrome Cache Entry: 111
|
PNG image data, 272 x 92, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 112
|
ASCII text, with very long lines (395)
|
downloaded
|
||
|
Chrome Cache Entry: 113
|
ASCII text, with very long lines (766)
|
downloaded
|
||
|
Chrome Cache Entry: 114
|
ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 115
|
ASCII text, with very long lines (557)
|
downloaded
|
||
|
Chrome Cache Entry: 116
|
ASCII text, with very long lines (10093), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 117
|
ASCII text, with very long lines (570)
|
dropped
|
||
|
Chrome Cache Entry: 118
|
ASCII text, with very long lines (395)
|
dropped
|
||
|
Chrome Cache Entry: 119
|
ASCII text, with very long lines (766)
|
dropped
|
||
|
Chrome Cache Entry: 120
|
RIFF (little-endian) data, Web/P image
|
downloaded
|
||
|
Chrome Cache Entry: 121
|
ASCII text, with very long lines (468)
|
downloaded
|
||
|
Chrome Cache Entry: 122
|
HTML document, Unicode text, UTF-8 text, with very long lines (1136)
|
dropped
|
||
|
Chrome Cache Entry: 123
|
ASCII text, with very long lines (1694)
|
downloaded
|
||
|
Chrome Cache Entry: 124
|
HTML document, ASCII text, with very long lines (682)
|
dropped
|
||
|
Chrome Cache Entry: 125
|
ASCII text, with very long lines (570)
|
downloaded
|
||
|
Chrome Cache Entry: 126
|
ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 127
|
RIFF (little-endian) data, Web/P image
|
dropped
|
||
|
Chrome Cache Entry: 128
|
ASCII text, with very long lines (468)
|
dropped
|
||
|
Chrome Cache Entry: 129
|
HTML document, Unicode text, UTF-8 text, with very long lines (1136)
|
dropped
|
||
|
Chrome Cache Entry: 130
|
Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
|
downloaded
|
||
|
Chrome Cache Entry: 131
|
HTML document, ASCII text, with very long lines (32554)
|
downloaded
|
||
|
Chrome Cache Entry: 132
|
HTML document, ASCII text, with very long lines (682)
|
downloaded
|
||
|
Chrome Cache Entry: 133
|
ASCII text, with very long lines (2907)
|
downloaded
|
||
|
Chrome Cache Entry: 134
|
ASCII text, with very long lines (754)
|
dropped
|
||
|
Chrome Cache Entry: 135
|
ASCII text, with very long lines (533)
|
downloaded
|
||
|
Chrome Cache Entry: 136
|
ASCII text, with very long lines (533)
|
dropped
|
||
|
Chrome Cache Entry: 137
|
ASCII text, with very long lines (683)
|
downloaded
|
||
|
Chrome Cache Entry: 81
|
ASCII text, with very long lines (3521)
|
dropped
|
||
|
Chrome Cache Entry: 82
|
ASCII text, with very long lines (683)
|
dropped
|
||
|
Chrome Cache Entry: 83
|
ASCII text, with very long lines (960)
|
dropped
|
||
|
Chrome Cache Entry: 84
|
ASCII text, with very long lines (1281)
|
dropped
|
||
|
Chrome Cache Entry: 85
|
ASCII text, with very long lines (4232), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 86
|
ASCII text, with very long lines (2907)
|
dropped
|
||
|
Chrome Cache Entry: 87
|
PNG image data, 272 x 92, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 88
|
MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
|
downloaded
|
||
|
Chrome Cache Entry: 89
|
ASCII text, with very long lines (1521)
|
dropped
|
||
|
Chrome Cache Entry: 90
|
ASCII text, with very long lines (1281)
|
downloaded
|
||
|
Chrome Cache Entry: 91
|
ASCII text, with very long lines (1521)
|
downloaded
|
||
|
Chrome Cache Entry: 92
|
ASCII text, with very long lines (557)
|
dropped
|
||
|
Chrome Cache Entry: 93
|
ASCII text, with very long lines (522)
|
downloaded
|
||
|
Chrome Cache Entry: 94
|
ASCII text, with very long lines (5693)
|
dropped
|
||
|
Chrome Cache Entry: 95
|
ASCII text, with very long lines (3521)
|
downloaded
|
||
|
Chrome Cache Entry: 96
|
Web Open Font Format (Version 2), TrueType, length 52280, version 1.0
|
downloaded
|
||
|
Chrome Cache Entry: 97
|
ASCII text, with very long lines (960)
|
downloaded
|
||
|
Chrome Cache Entry: 98
|
ASCII text, with very long lines (1885)
|
dropped
|
||
|
Chrome Cache Entry: 99
|
ASCII text, with very long lines (522)
|
dropped
|
There are 48 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US
--service-sandbox-type=none --mojo-platform-channel-handle=2312 --field-trial-handle=2212,i,7980023820554787132,9320563070971086971,262144
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
/prefetch:8
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://bit.ly/4dGStPp?UVXwD=f9lyR2g"
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US
--service-sandbox-type=audio --mojo-platform-channel-handle=4160 --field-trial-handle=2212,i,7980023820554787132,9320563070971086971,262144
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
/prefetch:8
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService
--lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3296 --field-trial-handle=2212,i,7980023820554787132,9320563070971086971,262144
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
/prefetch:8
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://bit.ly/4dGStPp?UVXwD=f9lyR2g
|
|||
|
https://ogs.google.com/
|
unknown
|
||
|
https://play.google/intl/
|
unknown
|
||
|
https://families.google.com/intl/
|
unknown
|
||
|
http://www.broofa.com
|
unknown
|
||
|
https://policies.google.com/technologies/location-data
|
unknown
|
||
|
https://www.google.com/xjs/_/ss/k=xjs.hd.dhNZMHIlXTs.L.B1.O/am=JFUAAAAAAAAAAAwAAAAAAAAAAAAAAAAAAAAAgAAAABAAAAAAAAAAQAGwkwAAACMAgA0ACAAAAAAAAQDAAAAAAAAAQAIAAAACABUAAAAAAEAAAIhAAACgCAAAAICAECAAAAEUQAhQgAQEiiAehQAAAMAAAAAhAAxgGICgAoBRgAAAAAAAAQAEIAQAAABGAAIEAOgRCAADQE4AAIRADwABAAAAAAEACAABADATwAAZgAAAAAAAAAAyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUAAQAEAAAAAAAAAAAAAAAAAAAAI/d=1/ed=1/br=1/rs=ACT90oG3GmSMpCDM4bzsi1eeB_HNZkLOoA/m=cdos,hsm,jsa,mb4ZUb,d,csi,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl
|
142.250.186.100
|
||
|
https://www.google.com/intl/en/about/products
|
unknown
|
||
|
https://www.google.com/images/branding/googlelogo/1x/googlelogo_color_272x92dp.png
|
142.250.186.100
|
||
|
https://www.google.com/log?format=json&hasfast=true
|
unknown
|
||
|
https://www.google.com/images/hpp/ic_wahlberg_product_core_48.png8.png
|
142.250.186.100
|
||
|
https://play.google.com/work/enroll?identifier=
|
unknown
|
||
|
https://policies.google.com/terms/service-specific
|
unknown
|
||
|
https://g.co/recover
|
unknown
|
||
|
https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072
|
unknown
|
||
|
https://ogs.google.com/widget/callout
|
unknown
|
||
|
https://bit.ly/4dGStPp?UVXwD=f9lyR2g
|
67.199.248.11
|
||
|
https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
|
unknown
|
||
|
http://schema.org/WebPage
|
unknown
|
||
|
https://policies.google.com/technologies/cookies
|
unknown
|
||
|
https://policies.google.com/terms
|
unknown
|
||
|
https://ukgoovl.top/fine
|
188.114.97.3
|
||
|
https://www.google.com
|
unknown
|
||
|
https://www.google.com/url?q
|
unknown
|
||
|
https://www.google.com/gen_204?s=webhp&t=cap&atyp=csi&ei=tyYIZ5j7I4KTxc8PvsWOsA0&rt=wsrt.3836,cbt.140,hst.61&opi=89978449&dt=&ts=300
|
142.250.186.100
|
||
|
https://csp.withgoogle.com/csp/lcreport/
|
unknown
|
||
|
https://www.youtube.com/t/terms?chromeless=1&hl=
|
unknown
|
||
|
https://www.google.com/gen_204?s=webhp&t=aft&atyp=csi&ei=tyYIZ5j7I4KTxc8PvsWOsA0&rt=wsrt.3836,aft.1541,afti.1541,cbt.140,hst.61,prt.1518&imn=11&ima=1&imad=0&imac=1&wh=907&aftie=NF&aft=1&aftp=907&opi=89978449&dt=&ts=201761
|
142.250.186.100
|
||
|
https://ogs.google.com/widget/callout?eom=1
|
unknown
|
||
|
https://policies.google.com/terms/location
|
unknown
|
||
|
https://apis.google.com
|
unknown
|
||
|
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.7LPvRDgzcqA.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo9wdgl3D0Cd5pn6O1gZXHwWDc_oTg/cb=gapi.loaded_0
|
142.250.186.78
|
||
|
https://domains.google.com/suggest/flow
|
unknown
|
||
|
https://support.google.com/accounts?p=new-si-ui
|
unknown
|
||
|
https://apis.google.com/js/rpc:shindig_random.js?onload=credentialservice.postMessage
|
unknown
|
||
|
https://ogs.google.com/widget/callout?prid=19037050&pgid=19037049&puid=9ceb59a7585b55bd&eom=1&cce=1&dc=1&origin=https%3A%2F%2Fwww.google.com&cn=callout&pid=1&spid=538&hl=en
|
172.217.23.110
|
||
|
https://ogs.google.com/widget/app/so?eom=1
|
unknown
|
||
|
https://youtube.com/t/terms?gl=
|
unknown
|
||
|
https://www.google.com/intl/
|
unknown
|
||
|
https://apis.google.com/js/api.js
|
unknown
|
||
|
https://www.google.com/_/og/promos/
|
unknown
|
||
|
https://policies.google.com/privacy/google-partners
|
unknown
|
||
|
https://policies.google.com/privacy/additional
|
unknown
|
||
|
https://play.google.com/log?format=json&hasfast=true&authuser=0
|
142.250.185.142
|
||
|
https://www.google.com/favicon.ico
|
142.250.186.100
|
||
|
https://plus.google.com
|
unknown
|
||
|
https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
|
unknown
|
||
|
https://play.google.com/log?hasfast=true&authuser=0&format=json
|
142.250.185.142
|
||
|
https://play.google.com/log?format=json&hasfast=true
|
142.250.185.142
|
||
|
https://ogs.google.com/widget/callout?prid=19037050
|
unknown
|
||
|
https://www.google.com"
|
unknown
|
||
|
https://support.google.com/accounts?hl=
|
unknown
|
||
|
https://www.google.com/images/searchbox/desktop_searchbox_sprites318_hr.webp
|
142.250.186.100
|
||
|
https://policies.google.com/privacy
|
unknown
|
||
|
https://www.google.com/
|
|||
|
https://clients6.google.com
|
unknown
|
There are 45 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
www3.l.google.com
|
172.217.23.110
|
||
|
plus.l.google.com
|
142.250.186.78
|
||
|
play.google.com
|
142.250.185.142
|
||
|
ukgoovl.top
|
188.114.97.3
|
||
|
bit.ly
|
67.199.248.11
|
||
|
s-part-0036.t-0009.t-msedge.net
|
13.107.246.64
|
||
|
s-part-0017.t-0009.t-msedge.net
|
13.107.246.45
|
||
|
www.google.com
|
142.250.186.100
|
||
|
fp2e7a.wpc.phicdn.net
|
192.229.221.95
|
||
|
accounts.youtube.com
|
unknown
|
||
|
ogs.google.com
|
unknown
|
||
|
apis.google.com
|
unknown
|
There are 2 hidden domains, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
142.250.186.78
|
plus.l.google.com
|
United States
|
||
|
172.217.16.206
|
unknown
|
United States
|
||
|
172.217.18.4
|
unknown
|
United States
|
||
|
192.168.2.4
|
unknown
|
unknown
|
||
|
172.217.23.110
|
www3.l.google.com
|
United States
|
||
|
239.255.255.250
|
unknown
|
Reserved
|
||
|
188.114.97.3
|
ukgoovl.top
|
European Union
|
||
|
142.250.185.142
|
play.google.com
|
United States
|
||
|
142.250.186.100
|
www.google.com
|
United States
|
||
|
67.199.248.11
|
bit.ly
|
United States
|
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://www.google.com/
|
||
|
https://www.google.com/
|
||
|
https://www.google.com/
|
||
|
https://www.google.com/
|
||
|
https://www.google.com/
|
||
|
https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2F%3Fptid%3D19027681%26ptt%3D8%26fpts%3D0&ec=futura_hpp_co_si_001_p&ifkv=ARpgrqcEFxkYLyCa9hJvDnkqKhdAIYqMNQgJQ60jPPLNShcioBvE70AzrLD4_SMutDUoP8nLHMJF9A&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-501047264%3A1728587467284331&ddm=1
|
||
|
https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2F%3Fptid%3D19027681%26ptt%3D8%26fpts%3D0&ec=futura_hpp_co_si_001_p&ifkv=ARpgrqcEFxkYLyCa9hJvDnkqKhdAIYqMNQgJQ60jPPLNShcioBvE70AzrLD4_SMutDUoP8nLHMJF9A&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-501047264%3A1728587467284331&ddm=1
|
||
|
https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2F%3Fptid%3D19027681%26ptt%3D8%26fpts%3D0&ec=futura_hpp_co_si_001_p&ifkv=ARpgrqcEFxkYLyCa9hJvDnkqKhdAIYqMNQgJQ60jPPLNShcioBvE70AzrLD4_SMutDUoP8nLHMJF9A&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-501047264%3A1728587467284331&ddm=1
|
||
|
https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2F%3Fptid%3D19027681%26ptt%3D8%26fpts%3D0&ec=futura_hpp_co_si_001_p&ifkv=ARpgrqcEFxkYLyCa9hJvDnkqKhdAIYqMNQgJQ60jPPLNShcioBvE70AzrLD4_SMutDUoP8nLHMJF9A&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-501047264%3A1728587467284331&ddm=1
|
||
|
https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2F%3Fptid%3D19027681%26ptt%3D8%26fpts%3D0&ec=futura_hpp_co_si_001_p&ifkv=ARpgrqcEFxkYLyCa9hJvDnkqKhdAIYqMNQgJQ60jPPLNShcioBvE70AzrLD4_SMutDUoP8nLHMJF9A&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-501047264%3A1728587467284331&ddm=1
|
||
|
https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2F%3Fptid%3D19027681%26ptt%3D8%26fpts%3D0&ec=futura_hpp_co_si_001_p&ifkv=ARpgrqcEFxkYLyCa9hJvDnkqKhdAIYqMNQgJQ60jPPLNShcioBvE70AzrLD4_SMutDUoP8nLHMJF9A&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-501047264%3A1728587467284331&ddm=1
|
||
|
https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2F%3Fptid%3D19027681%26ptt%3D8%26fpts%3D0&ec=futura_hpp_co_si_001_p&ifkv=ARpgrqcEFxkYLyCa9hJvDnkqKhdAIYqMNQgJQ60jPPLNShcioBvE70AzrLD4_SMutDUoP8nLHMJF9A&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-501047264%3A1728587467284331&ddm=1
|
There are 2 hidden doms, click here to show them.