Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 13 14:44:38 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 13 14:44:38 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 13 14:44:38 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 13 14:44:38 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 13 14:44:38 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
Chrome Cache Entry: 73
|
ASCII text, with very long lines (945)
|
downloaded
|
||
Chrome Cache Entry: 74
|
ASCII text, with very long lines (37546)
|
dropped
|
||
Chrome Cache Entry: 75
|
JSON data
|
downloaded
|
||
Chrome Cache Entry: 76
|
RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x175, Scaling: [none]x[none], YUV color, decoders should clamp
|
downloaded
|
||
Chrome Cache Entry: 77
|
ASCII text, with very long lines (548)
|
downloaded
|
||
Chrome Cache Entry: 78
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1198x600, components
3
|
downloaded
|
||
Chrome Cache Entry: 79
|
JSON data
|
downloaded
|
||
Chrome Cache Entry: 80
|
ASCII text, with very long lines (65459)
|
dropped
|
||
Chrome Cache Entry: 81
|
ASCII text, with very long lines (65459)
|
downloaded
|
||
Chrome Cache Entry: 82
|
ASCII text, with no line terminators
|
downloaded
|
||
Chrome Cache Entry: 83
|
ASCII text, with very long lines (945)
|
dropped
|
||
Chrome Cache Entry: 84
|
JSON data
|
dropped
|
||
Chrome Cache Entry: 85
|
SVG Scalable Vector Graphics image
|
dropped
|
||
Chrome Cache Entry: 86
|
HTML document, ASCII text, with very long lines (2210)
|
downloaded
|
||
Chrome Cache Entry: 87
|
Unicode text, UTF-8 text, with very long lines (65342)
|
downloaded
|
||
Chrome Cache Entry: 88
|
ASCII text, with very long lines (37546)
|
downloaded
|
||
Chrome Cache Entry: 89
|
SVG Scalable Vector Graphics image
|
downloaded
|
||
Chrome Cache Entry: 90
|
JSON data
|
dropped
|
||
Chrome Cache Entry: 91
|
ASCII text, with very long lines (13517)
|
downloaded
|
||
Chrome Cache Entry: 92
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1198x600, components
3
|
dropped
|
||
Chrome Cache Entry: 93
|
ASCII text, with very long lines (548)
|
dropped
|
||
Chrome Cache Entry: 94
|
RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x175, Scaling: [none]x[none], YUV color, decoders should clamp
|
dropped
|
There are 19 hidden files, click here to show them.
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
|
||
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US
--service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=1984,i,3057150085717661629,2866423948708948193,262144
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
/prefetch:8
|
||
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://businesssupport248.mfb72024.click/"
|
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
https://businesssupport248.mfb72024.click/
|
|||
https://businesssupport248.mfb72024.click/
|
|||
https://businesssupport248.mfb72024.click/assets/index-8e3f9ccb.js
|
172.67.145.157
|
||
https://businesssupport248.mfb72024.click/assets/banner-b1482d4c.webp
|
172.67.145.157
|
||
https://businesssupport248.mfb72024.click/assets/190947209_1002880900116912_4375102209501448340_n-8956b37a.jpg
|
172.67.145.157
|
||
https://businesssupport248.mfb72024.click/assets/index-5b6c678b.css
|
172.67.145.157
|
||
https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css
|
151.101.193.229
|
||
https://cdn.jsdelivr.net/npm/bootstrap
|
unknown
|
||
https://cdn.jsdelivr.net/npm/react-bootstrap@next/dist/react-bootstrap.min.js
|
151.101.193.229
|
||
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1f8.svg
|
104.17.25.14
|
||
https://github.com/twbs/bootstrap/blob/main/LICENSE)
|
unknown
|
||
https://reactjs.org/docs/error-decoder.html?invariant=
|
unknown
|
||
https://api.ipify.org/?format=json
|
104.26.13.205
|
||
https://cdn.jsdelivr.net/npm/react-dom/umd/react-dom.production.min.js
|
151.101.193.229
|
||
https://freeipapi.com/api/json/8.46.123.33
|
188.114.97.3
|
||
https://getbootstrap.com/)
|
unknown
|
||
https://a.nel.cloudflare.com/report/v4?s=DsPTZniui3ho0e3GRbI808hps7mDkLTsMMvpCtya3m6N1B3eKkGBh0TcENI7x8hW9wo%2F1RGMMmqqwaeGLksgt0l%2BTxOoCDAgUd8znJknoct83XOHlAbqF5t5yTwIt9%2FHTx6haRNR%2F6v6Hq68YbCet2sK0G4%3D
|
35.190.80.1
|
||
https://cdn.jsdelivr.net/npm/react/umd/react.production.min.js
|
151.101.193.229
|
||
https://static.xx.fbcdn.net/rsrc.php/v3/y4/r/lCgIhoPdDwe.png?_nc_eui2=AeEHhRnoC5WMGsis9w3OX_xmipu6QNTZOaaKm7pA1Nk5pm0Io5KHk3e2v5hMgnZRXyR3jgQllPVtTyYbHbAwAVOK
|
157.240.253.1
|
||
https://static.xx.fbcdn.net/rsrc.php/v3/y5/r/juHXA8pRbU4.png?_nc_eui2=AeGYPh0Yw0hm06jC3mdd5o4pqL-BzkD0hYqov4HOQPSFiuhqifH663RsjfKIYI5RkcrWYAJhnyRtt5m9gJlVNKSW
|
157.240.253.1
|
||
http://jedwatson.github.io/classnames
|
unknown
|
||
https://cdn.jsdelivr.net/npm/react-bootstrap
|
unknown
|
There are 11 hidden URLs, click here to show them.
Domains
Name
|
IP
|
Malicious
|
|
---|---|---|---|
businesssupport248.mfb72024.click
|
172.67.145.157
|
||
cdn.jsdelivr.net
|
unknown
|
||
static.xx.fbcdn.net
|
unknown
|
||
jsdelivr.map.fastly.net
|
151.101.193.229
|
||
a.nel.cloudflare.com
|
35.190.80.1
|
||
s-part-0044.t-0009.fb-t-msedge.net
|
13.107.253.72
|
||
freeipapi.com
|
188.114.97.3
|
||
s-part-0017.t-0009.fb-t-msedge.net
|
13.107.253.45
|
||
fp2e7a.wpc.phicdn.net
|
192.229.221.95
|
||
bg.microsoft.map.fastly.net
|
199.232.214.172
|
||
scontent.xx.fbcdn.net
|
157.240.253.1
|
||
cdnjs.cloudflare.com
|
104.17.25.14
|
||
www.google.com
|
172.217.16.196
|
||
api.ipify.org
|
104.26.13.205
|
||
s-part-0032.t-0009.t-msedge.net
|
13.107.246.60
|
There are 5 hidden domains, click here to show them.
IPs
IP
|
Domain
|
Country
|
Malicious
|
|
---|---|---|---|---|
172.67.145.157
|
businesssupport248.mfb72024.click
|
United States
|
||
104.17.24.14
|
unknown
|
United States
|
||
151.101.193.229
|
jsdelivr.map.fastly.net
|
United States
|
||
192.168.2.6
|
unknown
|
unknown
|
||
192.168.2.5
|
unknown
|
unknown
|
||
239.255.255.250
|
unknown
|
Reserved
|
||
188.114.97.3
|
freeipapi.com
|
European Union
|
||
157.240.253.1
|
scontent.xx.fbcdn.net
|
United States
|
||
35.190.80.1
|
a.nel.cloudflare.com
|
United States
|
||
104.26.13.205
|
api.ipify.org
|
United States
|
||
172.217.16.196
|
www.google.com
|
United States
|
||
104.17.25.14
|
cdnjs.cloudflare.com
|
United States
|
There are 2 hidden IPs, click here to show them.
DOM / HTML
URL
|
Malicious
|
|
---|---|---|
https://businesssupport248.mfb72024.click/
|
||
https://businesssupport248.mfb72024.click/
|