IOC Report
https://www.dropbox.com/l/scl/AABjowyUccTTBxZBwXPcRbvhv_QSp5IskN8

loading gif

Files

File Path
Type
Category
Malicious
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 10 18:19:17 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 10 18:19:16 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:54:41 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 10 18:19:16 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 10 18:19:17 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 10 18:19:16 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
dropped
Chrome Cache Entry: 296
ASCII text, with very long lines (13358)
downloaded
Chrome Cache Entry: 297
ASCII text, with very long lines (15475)
downloaded
Chrome Cache Entry: 298
ASCII text, with very long lines (11630)
dropped
Chrome Cache Entry: 301
ASCII text, with very long lines (5191)
dropped
Chrome Cache Entry: 302
ASCII text, with very long lines (8531)
downloaded
Chrome Cache Entry: 304
ASCII text, with very long lines (1973)
downloaded
Chrome Cache Entry: 307
ASCII text, with very long lines (21757)
downloaded
Chrome Cache Entry: 311
ASCII text, with very long lines (31230)
downloaded
Chrome Cache Entry: 313
ASCII text, with very long lines (1727)
downloaded
Chrome Cache Entry: 314
ASCII text, with very long lines (1783)
downloaded
Chrome Cache Entry: 315
Web Open Font Format (Version 2), TrueType, length 55214, version 1.0
downloaded
Chrome Cache Entry: 318
ASCII text, with very long lines (3030)
downloaded
Chrome Cache Entry: 320
ASCII text, with very long lines (2095)
dropped
Chrome Cache Entry: 322
ASCII text, with very long lines (6968)
dropped
Chrome Cache Entry: 323
ASCII text, with very long lines (65271)
downloaded
Chrome Cache Entry: 324
ASCII text, with very long lines (48942)
downloaded
Chrome Cache Entry: 326
ASCII text, with very long lines (2376)
downloaded
Chrome Cache Entry: 327
JSON data
dropped
Chrome Cache Entry: 328
ASCII text, with very long lines (65271)
downloaded
Chrome Cache Entry: 330
ASCII text, with very long lines (724)
dropped
Chrome Cache Entry: 332
ASCII text, with very long lines (2215)
dropped
Chrome Cache Entry: 334
ASCII text, with very long lines (362)
downloaded
Chrome Cache Entry: 335
ASCII text
downloaded
Chrome Cache Entry: 337
ASCII text, with very long lines (2671)
downloaded
Chrome Cache Entry: 339
ASCII text, with no line terminators
dropped
Chrome Cache Entry: 340
ASCII text, with very long lines (31934)
downloaded
Chrome Cache Entry: 341
ASCII text, with very long lines (2171)
downloaded
Chrome Cache Entry: 342
C source, ASCII text, with very long lines (1023)
downloaded
Chrome Cache Entry: 343
ASCII text, with very long lines (1539)
dropped
Chrome Cache Entry: 344
ASCII text, with very long lines (654)
downloaded
Chrome Cache Entry: 345
ASCII text, with very long lines (2790)
downloaded
Chrome Cache Entry: 346
Web Open Font Format (Version 2), TrueType, length 43308, version 1.66
downloaded
Chrome Cache Entry: 347
ASCII text, with very long lines (1652)
downloaded
Chrome Cache Entry: 348
ASCII text, with very long lines (733)
dropped
Chrome Cache Entry: 349
ASCII text, with very long lines (1014)
downloaded
Chrome Cache Entry: 353
ASCII text, with very long lines (4741)
dropped
Chrome Cache Entry: 354
C source, ASCII text, with very long lines (1680)
dropped
Chrome Cache Entry: 355
ASCII text, with very long lines (976)
dropped
Chrome Cache Entry: 357
ASCII text, with very long lines (55096)
downloaded
Chrome Cache Entry: 358
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
downloaded
Chrome Cache Entry: 359
ASCII text, with very long lines (52100)
downloaded
Chrome Cache Entry: 360
ASCII text, with very long lines (1616)
dropped
Chrome Cache Entry: 361
ASCII text, with very long lines (2361)
dropped
Chrome Cache Entry: 362
ASCII text, with very long lines (345)
downloaded
Chrome Cache Entry: 363
ASCII text, with very long lines (5083)
dropped
Chrome Cache Entry: 364
ASCII text, with very long lines (12716)
dropped
Chrome Cache Entry: 366
ASCII text, with very long lines (968)
dropped
Chrome Cache Entry: 367
TrueType Font data, 16 tables, 1st "GDEF", 19 names, Microsoft, language 0x409
downloaded
Chrome Cache Entry: 373
ASCII text, with very long lines (1563)
downloaded
Chrome Cache Entry: 374
ASCII text, with very long lines (26699)
dropped
Chrome Cache Entry: 375
ASCII text, with very long lines (830)
downloaded
Chrome Cache Entry: 377
Unicode text, UTF-8 text, with very long lines (65247)
dropped
Chrome Cache Entry: 379
ASCII text, with very long lines (928)
dropped
Chrome Cache Entry: 380
ASCII text, with very long lines (687)
dropped
Chrome Cache Entry: 381
ASCII text, with very long lines (1548)
downloaded
Chrome Cache Entry: 382
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 385
ASCII text, with very long lines (24095)
downloaded
Chrome Cache Entry: 387
ASCII text, with very long lines (3173)
dropped
Chrome Cache Entry: 388
ASCII text, with very long lines (2372)
dropped
Chrome Cache Entry: 389
ASCII text, with very long lines (304)
downloaded
Chrome Cache Entry: 390
ASCII text, with very long lines (65271)
downloaded
Chrome Cache Entry: 391
ASCII text, with very long lines (28861)
downloaded
Chrome Cache Entry: 392
ASCII text, with very long lines (3509)
downloaded
Chrome Cache Entry: 393
ASCII text, with very long lines (3482)
downloaded
Chrome Cache Entry: 394
ASCII text, with very long lines (515)
downloaded
Chrome Cache Entry: 395
ASCII text, with very long lines (729)
downloaded
Chrome Cache Entry: 396
ASCII text
downloaded
Chrome Cache Entry: 398
ASCII text, with very long lines (6958)
dropped
Chrome Cache Entry: 400
ASCII text, with very long lines (2051)
downloaded
Chrome Cache Entry: 401
ASCII text, with very long lines (13514)
dropped
Chrome Cache Entry: 402
ASCII text, with very long lines (1827)
dropped
Chrome Cache Entry: 404
ASCII text
downloaded
Chrome Cache Entry: 406
ASCII text, with very long lines (51564)
dropped
Chrome Cache Entry: 407
ASCII text, with very long lines (2279)
downloaded
Chrome Cache Entry: 409
ASCII text, with very long lines (2601)
downloaded
Chrome Cache Entry: 411
ASCII text, with very long lines (4335)
dropped
Chrome Cache Entry: 414
ASCII text, with very long lines (3173)
downloaded
Chrome Cache Entry: 417
ASCII text, with very long lines (27484)
downloaded
Chrome Cache Entry: 418
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 423
ASCII text
downloaded
Chrome Cache Entry: 424
ASCII text
downloaded
Chrome Cache Entry: 425
ASCII text, with very long lines (21784)
downloaded
Chrome Cache Entry: 426
ASCII text, with very long lines (11665)
downloaded
Chrome Cache Entry: 427
ASCII text, with very long lines (814)
dropped
Chrome Cache Entry: 429
C source, ASCII text, with very long lines (1094)
dropped
Chrome Cache Entry: 432
ASCII text, with very long lines (9586)
downloaded
Chrome Cache Entry: 434
ASCII text, with very long lines (57752)
dropped
Chrome Cache Entry: 436
ASCII text, with very long lines (2017)
downloaded
Chrome Cache Entry: 437
ASCII text, with very long lines (4502)
dropped
Chrome Cache Entry: 439
ASCII text, with very long lines (684)
downloaded
Chrome Cache Entry: 440
ASCII text, with very long lines (1807)
dropped
Chrome Cache Entry: 442
ASCII text, with very long lines (3866)
downloaded
Chrome Cache Entry: 446
ASCII text, with very long lines (44331)
dropped
Chrome Cache Entry: 447
ASCII text, with very long lines (65271)
downloaded
Chrome Cache Entry: 449
Unicode text, UTF-8 text, with very long lines (65075)
dropped
Chrome Cache Entry: 451
Web Open Font Format, TrueType, length 58239, version 0.0
downloaded
Chrome Cache Entry: 453
Unicode text, UTF-8 text, with very long lines (40406)
downloaded
Chrome Cache Entry: 454
ASCII text, with very long lines (2250)
downloaded
Chrome Cache Entry: 458
ASCII text, with very long lines (2228)
dropped
Chrome Cache Entry: 460
ASCII text, with very long lines (3557)
downloaded
Chrome Cache Entry: 461
HTML document, ASCII text
downloaded
Chrome Cache Entry: 462
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 463
ASCII text, with very long lines (2417)
dropped
Chrome Cache Entry: 464
ASCII text, with very long lines (5082)
downloaded
Chrome Cache Entry: 465
ASCII text
downloaded
Chrome Cache Entry: 466
ASCII text, with very long lines (65271)
dropped
Chrome Cache Entry: 467
ASCII text, with very long lines (5497)
dropped
Chrome Cache Entry: 469
ASCII text, with very long lines (2102), with no line terminators
dropped
Chrome Cache Entry: 470
ASCII text, with very long lines (2845)
downloaded
Chrome Cache Entry: 478
ASCII text, with very long lines (65271)
downloaded
Chrome Cache Entry: 482
ASCII text, with very long lines (2760)
downloaded
Chrome Cache Entry: 483
ASCII text, with very long lines (65156)
downloaded
Chrome Cache Entry: 485
ASCII text, with very long lines (2319)
dropped
Chrome Cache Entry: 486
ASCII text, with very long lines (400)
downloaded
Chrome Cache Entry: 487
ASCII text, with very long lines (3340)
dropped
Chrome Cache Entry: 488
Unicode text, UTF-8 text, with very long lines (65263)
downloaded
Chrome Cache Entry: 492
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 493
ASCII text, with very long lines (4355)
downloaded
Chrome Cache Entry: 496
ASCII text, with very long lines (4421)
downloaded
Chrome Cache Entry: 497
ASCII text, with very long lines (1709)
dropped
Chrome Cache Entry: 498
ASCII text
downloaded
Chrome Cache Entry: 499
ASCII text, with very long lines (513)
downloaded
Chrome Cache Entry: 500
ASCII text, with very long lines (14877)
dropped
Chrome Cache Entry: 502
ASCII text, with very long lines (65271)
downloaded
Chrome Cache Entry: 504
ASCII text, with very long lines (25748)
downloaded
Chrome Cache Entry: 506
ASCII text, with very long lines (623)
downloaded
Chrome Cache Entry: 508
ASCII text, with very long lines (13424)
dropped
Chrome Cache Entry: 510
ASCII text, with very long lines (1025)
downloaded
Chrome Cache Entry: 511
ASCII text, with very long lines (24648)
downloaded
Chrome Cache Entry: 513
ASCII text, with very long lines (1281)
downloaded
Chrome Cache Entry: 514
ASCII text, with very long lines (65271)
dropped
Chrome Cache Entry: 515
ASCII text, with very long lines (2207)
downloaded
Chrome Cache Entry: 516
ASCII text, with very long lines (900)
downloaded
Chrome Cache Entry: 518
ASCII text, with very long lines (7763)
downloaded
Chrome Cache Entry: 519
ASCII text, with very long lines (2299)
dropped
Chrome Cache Entry: 523
ASCII text, with very long lines (42398)
downloaded
Chrome Cache Entry: 524
ASCII text, with very long lines (1969)
dropped
Chrome Cache Entry: 526
ASCII text, with very long lines (2527)
dropped
Chrome Cache Entry: 527
ASCII text, with very long lines (3174)
downloaded
Chrome Cache Entry: 531
ASCII text
downloaded
Chrome Cache Entry: 532
ASCII text, with very long lines (1174)
downloaded
Chrome Cache Entry: 533
HTML document, Unicode text, UTF-8 text, with very long lines (1136)
dropped
Chrome Cache Entry: 535
ASCII text, with very long lines (1069)
downloaded
Chrome Cache Entry: 536
ASCII text, with very long lines (6586)
downloaded
Chrome Cache Entry: 539
ASCII text, with very long lines (2267)
dropped
Chrome Cache Entry: 540
Web Open Font Format (Version 2), TrueType, length 46188, version 1.66
downloaded
Chrome Cache Entry: 541
ASCII text, with very long lines (14039)
downloaded
Chrome Cache Entry: 543
ASCII text, with very long lines (533), with no line terminators
downloaded
Chrome Cache Entry: 544
ASCII text, with very long lines (3427)
downloaded
Chrome Cache Entry: 545
ASCII text, with very long lines (744)
downloaded
Chrome Cache Entry: 546
ASCII text, with very long lines (21020)
downloaded
Chrome Cache Entry: 547
ASCII text, with very long lines (1744)
downloaded
Chrome Cache Entry: 548
ASCII text, with very long lines (665)
downloaded
Chrome Cache Entry: 549
ASCII text, with very long lines (29055)
dropped
Chrome Cache Entry: 552
ASCII text, with very long lines (1134)
downloaded
Chrome Cache Entry: 553
ASCII text, with very long lines (2431)
dropped
Chrome Cache Entry: 555
ASCII text, with very long lines (1665)
dropped
Chrome Cache Entry: 557
ASCII text, with very long lines (4786)
dropped
Chrome Cache Entry: 559
ASCII text, with very long lines (52632)
downloaded
Chrome Cache Entry: 561
ASCII text, with very long lines (727)
downloaded
Chrome Cache Entry: 563
ASCII text, with very long lines (49053)
downloaded
Chrome Cache Entry: 566
ASCII text, with very long lines (55096)
downloaded
Chrome Cache Entry: 567
ASCII text, with very long lines (29095)
downloaded
Chrome Cache Entry: 570
ASCII text, with very long lines (565)
downloaded
Chrome Cache Entry: 571
ASCII text, with very long lines (1814)
downloaded
Chrome Cache Entry: 572
ASCII text, with very long lines (1241)
dropped
Chrome Cache Entry: 573
Unicode text, UTF-8 text, with very long lines (65264)
dropped
Chrome Cache Entry: 575
ASCII text, with very long lines (1502), with no line terminators
dropped
Chrome Cache Entry: 576
Web Open Font Format (Version 2), TrueType, length 54666, version 1.0
downloaded
Chrome Cache Entry: 577
ASCII text
downloaded
There are 167 hidden files, click here to show them.

URLs

Name
IP
Malicious
https://www.dropbox.com/l/scl/AABjowyUccTTBxZBwXPcRbvhv_QSp5IskN8
https://www.dropbox.com/scl/fi/ndq418gg0cji857ic084a/McElveen-Buick.pdf?oref=e&r=ACR3082gT0E5SujOKoR0mw36kcT51fagMuCLg0RI6Or7ksEyzfxWxIJwbaTVAnjjg-MRuUuh49Mh0YYvezLvVW9Dm6OAMOb3JyQm1It0GGxbqtyR7i_ruoTr07_huTDMdm-JY-a4-GI47GCFjs14eDUmGP-XUVSbAwnsK4dtoI9x7vbbpY1iCJ5d1RqTwJ2H6Ca8RirGjXJAYJMrHI-dqIukbgulLw5bftTYSTD5-1t9MQ&sm=1&dl=0
https://www.dropbox.com/scl/fi/ndq418gg0cji857ic084a/McElveen-Buick.pdf?dl=0&oref=e&r=ACR3082gT0E5SujOKoR0mw36kcT51fagMuCLg0RI6Or7ksEyzfxWxIJwbaTVAnjjg-MRuUuh49Mh0YYvezLvVW9Dm6OAMOb3JyQm1It0GGxbqtyR7i_ruoTr07_huTDMdm-JY-a4-GI47GCFjs14eDUmGP-XUVSbAwnsK4dtoI9x7vbbpY1iCJ5d1RqTwJ2H6Ca8RirGjXJAYJMrHI-dqIukbgulLw5bftTYSTD5-1t9MQ&sm=1

Domains

Name
IP
Malicious
use1-turn.fpjs.io
35.157.212.223
play.google.com
142.250.186.142
dropboxcaptcha.com
143.204.95.12
www-env.dropbox-dns.com
162.125.66.18
www.google.com
172.217.16.196
fp.dropbox.com
3.160.150.129
www.dropbox.com
unknown
cfl.dropboxstatic.com
unknown

IPs

IP
Domain
Country
Malicious
142.250.186.67
unknown
United States
142.250.74.206
unknown
United States
192.168.2.17
unknown
unknown
173.194.76.84
unknown
United States
172.217.23.106
unknown
United States
3.160.150.129
fp.dropbox.com
United States
104.16.100.29
unknown
United States
3.160.150.96
unknown
United States
74.125.206.84
unknown
United States
104.16.99.29
unknown
United States
142.250.184.227
unknown
United States
142.250.184.195
unknown
United States
1.1.1.1
unknown
Australia
34.104.35.123
unknown
United States
162.125.66.18
www-env.dropbox-dns.com
United States
74.125.133.84
unknown
United States
172.217.16.206
unknown
United States
142.250.186.163
unknown
United States
239.255.255.250
unknown
Reserved
142.250.185.174
unknown
United States
142.250.185.131
unknown
United States
142.250.181.228
unknown
United States
142.250.186.142
play.google.com
United States
64.233.184.84
unknown
United States
142.250.186.100
unknown
United States
35.157.212.223
use1-turn.fpjs.io
United States
172.217.16.196
www.google.com
United States
143.204.95.12
dropboxcaptcha.com
United States
There are 18 hidden IPs, click here to show them.