Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 13 17:27:21 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 13 17:27:21 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 13 17:27:21 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 13 17:27:21 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 13 17:27:21 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
Chrome Cache Entry: 100
|
HTML document, ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 101
|
JSON data
|
downloaded
|
||
|
Chrome Cache Entry: 102
|
ASCII text
|
dropped
|
||
|
Chrome Cache Entry: 103
|
ASCII text, with very long lines (65451)
|
dropped
|
||
|
Chrome Cache Entry: 104
|
JSON data
|
dropped
|
||
|
Chrome Cache Entry: 105
|
ASCII text, with very long lines (2343)
|
downloaded
|
||
|
Chrome Cache Entry: 106
|
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, manufacturer=BeFunky, orientation=upper-left,
xresolution=94, yresolution=102, resolutionunit=2, software=BeFunky Photo Editor], baseline, precision 8, 2000x1000, components
3
|
dropped
|
||
|
Chrome Cache Entry: 107
|
HTML document, ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 108
|
HTML document, ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 109
|
ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 110
|
ASCII text, with very long lines (23843), with escape sequences
|
downloaded
|
||
|
Chrome Cache Entry: 111
|
ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 112
|
HTML document, ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 113
|
HTML document, ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 114
|
ASCII text, with very long lines (65451)
|
downloaded
|
||
|
Chrome Cache Entry: 115
|
HTML document, ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 116
|
ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 117
|
ASCII text, with very long lines (3744)
|
downloaded
|
||
|
Chrome Cache Entry: 76
|
HTML document, Unicode text, UTF-8 text, with very long lines (419)
|
downloaded
|
||
|
Chrome Cache Entry: 77
|
JSON data
|
downloaded
|
||
|
Chrome Cache Entry: 78
|
HTML document, ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 79
|
HTML document, ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 80
|
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, manufacturer=BeFunky, orientation=upper-left,
xresolution=94, yresolution=102, resolutionunit=2, software=BeFunky Photo Editor], baseline, precision 8, 2000x1000, components
3
|
downloaded
|
||
|
Chrome Cache Entry: 81
|
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 2000x1000, components
3
|
dropped
|
||
|
Chrome Cache Entry: 82
|
HTML document, ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 83
|
ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 84
|
HTML document, ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 85
|
HTML document, ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 86
|
ASCII text, with very long lines (2345)
|
downloaded
|
||
|
Chrome Cache Entry: 87
|
HTML document, Unicode text, UTF-8 text, with very long lines (11047)
|
dropped
|
||
|
Chrome Cache Entry: 88
|
ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 89
|
ASCII text, with very long lines (2343)
|
dropped
|
||
|
Chrome Cache Entry: 90
|
assembler source, ASCII text, with very long lines (540)
|
downloaded
|
||
|
Chrome Cache Entry: 91
|
ASCII text, with very long lines (23843), with escape sequences
|
dropped
|
||
|
Chrome Cache Entry: 92
|
HTML document, ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 93
|
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 2000x1000, components
3
|
downloaded
|
||
|
Chrome Cache Entry: 94
|
ASCII text, with very long lines (2345)
|
dropped
|
||
|
Chrome Cache Entry: 95
|
HTML document, ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 96
|
HTML document, ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 97
|
ASCII text
|
dropped
|
||
|
Chrome Cache Entry: 98
|
HTML document, Unicode text, UTF-8 text, with very long lines (548)
|
downloaded
|
||
|
Chrome Cache Entry: 99
|
HTML document, ASCII text
|
downloaded
|
There are 39 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US
--service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=2000,i,11809856670304523479,12009931532329856223,262144
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
/prefetch:8
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://bancolombia-seguridad-co.glitch.me/"
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://bancolombia-seguridad-co.glitch.me/
|
 |
||
|
http://bancolombia-seguridad-co.glitch.me/twoj.js
|
52.70.49.225
|
|
|
|
http://bancolombia-seguridad-co.glitch.me/css/font/OpenSans-Regular.ttf
|
52.70.49.225
|
|
|
|
http://bancolombia-seguridad-co.glitch.me/hhhhhh_files/slidemenu.css
|
52.70.49.225
|
|
|
|
http://bancolombia-seguridad-co.glitch.me/archivos/style.css
|
52.70.49.225
|
|
|
|
http://bancolombia-seguridad-co.glitch.me/css/font/CIBFontSans-Light.ttf
|
52.70.49.225
|
|
|
|
http://bancolombia-seguridad-co.glitch.me/
|
|
||
|
http://bancolombia-seguridad-co.glitch.me/archivos/logo-personas.svg
|
52.70.49.225
|
|
|
|
http://bancolombia-seguridad-co.glitch.me/archivos/showLoading.css
|
52.70.49.225
|
|
|
|
http://bancolombia-seguridad-co.glitch.me/hhhhhh_files/bactouch.css
|
52.70.49.225
|
|
|
|
http://bancolombia-seguridad-co.glitch.me/hhhhhh_files/ap.js.descarga
|
52.70.49.225
|
|
|
|
http://bancolombia-seguridad-co.glitch.me/archivos/bootstrap.css
|
52.70.49.225
|
|
|
|
http://bancolombia-seguridad-co.glitch.me/hhhhhh_files/toolbar.css
|
52.70.49.225
|
|
|
|
http://bancolombia-seguridad-co.glitch.me/archivos/ui.css
|
52.70.49.225
|
|
|
|
http://bancolombia-seguridad-co.glitch.me/hhhhhh_files/bact_listview.css
|
52.70.49.225
|
|
|
|
http://bancolombia-seguridad-co.glitch.me/favicon.ico
|
52.70.49.225
|
|
|
|
http://bancolombia-seguridad-co.glitch.me/archivos/tlf1.html
|
52.70.49.225
|
|
|
|
http://bancolombia-seguridad-co.glitch.me/Casa.css
|
52.70.49.225
|
|
|
|
http://bancolombia-seguridad-co.glitch.me/archivos/jquery-ui.css
|
52.70.49.225
|
|
|
|
http://bancolombia-seguridad-co.glitch.me/archivos/ingre.png
|
52.70.49.225
|
|
|
|
http://bancolombia-seguridad-co.glitch.me/hhhhhh_files/authhub-helper.js.descarga
|
52.70.49.225
|
|
|
|
http://bancolombia-seguridad-co.glitch.me/nicepage.css
|
52.70.49.225
|
|
|
|
http://bancolombia-seguridad-co.glitch.me/archivos/icon-user.png
|
52.70.49.225
|
|
|
|
http://bancolombia-seguridad-co.glitch.me/hhhhhh_files/footer.css
|
52.70.49.225
|
|
|
|
https://website-cdn.ipinfo.io/_next/static/media/snowflake.7608b7c5.svg
|
unknown
|
||
|
https://ipinfo.io/missingauth
|
unknown
|
||
|
https://api.telegram.org/bot
|
unknown
|
||
|
https://website-cdn.ipinfo.io/_next/static/media/ipinfo-main-illustration.9e5f5329.svg
|
unknown
|
||
|
https://website-cdn.ipinfo.io/_next/static/media/logo-plesk-white.5276a2d7.svg
|
unknown
|
||
|
https://mtmarketing.co/wp-content/uploads/2021/07/entrevista-adriana-arismendi.jpeg
|
162.214.111.33
|
||
|
https://website-cdn.ipinfo.io/_next/static/media/photo-plesk-jan.c2acc0e6.jpeg
|
unknown
|
||
|
https://ampcid.google.com/v1/publisher:getClientId
|
unknown
|
||
|
https://www.froala.com/wysiwyg-editor)
|
unknown
|
||
|
https://www.google.com
|
unknown
|
||
|
https://website-cdn.ipinfo.io/_next/static/media/asn-small.77f95094.svg
|
unknown
|
||
|
https://cloud.webtype.com/css/3a8e55c6-b1f3-4659-99eb-125ae72bd084.css
|
unknown
|
||
|
https://website-cdn.ipinfo.io/_next/static/media/domains-small.249bd466.svg
|
unknown
|
||
|
https://api.ipify.org/?format=json
|
104.26.12.205
|
||
|
https://website-cdn.ipinfo.io/_next/static/media/google-cloud.17488aed.svg
|
unknown
|
||
|
https://website-cdn.ipinfo.io/_next/static/media/logo-npm-white.37bc2bf6.svg
|
unknown
|
||
|
https://stats.g.doubleclick.net/j/collect
|
unknown
|
||
|
https://website-cdn.ipinfo.io/_next/static/media/photo-clearbit-alex.70fcf481.jpeg
|
unknown
|
||
|
https://website-cdn.ipinfo.io/_next/static/media/privacy-small.854788a7.svg
|
unknown
|
||
|
https://website-cdn.ipinfo.io/_next/static/media/mobile.b3d06ccc.svg
|
unknown
|
||
|
https://website-cdn.ipinfo.io/_next/static/media/splunk.a71e22c9.svg
|
unknown
|
||
|
https://website-cdn.ipinfo.io/_next/static/media/datadog.01d809ee.svg
|
unknown
|
||
|
https://website-cdn.ipinfo.io/_next/static/media/logo-clearbit-white.dedf4224.svg
|
unknown
|
||
|
https://website-cdn.ipinfo.io/_next/static/media/company-small.e5cfbec7.svg
|
unknown
|
||
|
https://website-cdn.ipinfo.io/_next/static/media/database-download-small.053da0c0.svg
|
unknown
|
||
|
https://newsinamerica.com/pdcc/wp-content/uploads/2024/05/Outlook.jpg
|
173.231.197.227
|
||
|
https://website-cdn.ipinfo.io/_next/static/media/photo-npm-laurie.30cd3e0e.jpeg
|
unknown
|
||
|
https://website-cdn.ipinfo.io/_next/static/media/paloalto.0919c3d7.svg
|
unknown
|
||
|
https://api.ipify.org?format=json
|
unknown
|
||
|
https://glitch.com
|
unknown
|
||
|
https://help.glitch.com/
|
unknown
|
||
|
https://tagassistant.google.com/
|
unknown
|
||
|
https://website-cdn.ipinfo.io/_next/static/media/carrier-small.6d72c73d.svg
|
unknown
|
||
|
https://secure.quantserve.com/quant.js
|
91.228.74.166
|
||
|
https://website-cdn.ipinfo.io/_next/static/media/abuse-small.ef56e2d8.svg
|
unknown
|
||
|
https://cct.google/taggy/agent.js
|
unknown
|
||
|
https://ipinfo.io
|
unknown
|
||
|
https://website-cdn.ipinfo.io/_next/static/media/geolocation-small.0037d36c.svg
|
unknown
|
||
|
https://website-cdn.ipinfo.io/_next/static/media/zapier.a1a375f4.svg
|
unknown
|
||
|
https://website-cdn.ipinfo.io/_next/static/media/whois-small.7868d282.svg
|
unknown
|
||
|
https://website-cdn.ipinfo.io/_next/static/media/icon-menu.1b6dca09.svg
|
unknown
|
||
|
https://pixel.quantserve.com/pixel;r=1324509985;source=gtm;rf=0;a=p-d5x2uDVHd7ALE;url=http%3A%2F%2Fbancolombia-seguridad-co.glitch.me%2F;ns=0;ce=1;qjs=1;qv=fd657345-20240925114642;ref=;d=bancolombia-seguridad-co.glitch.me;dst=1;et=1728844047211;tzo=240;ogl=;ses=aa82d800-82a7-4796-8ac7-d8048d046c01;uht=2;fpan=1;fpa=P0-1346217907-1728844045626;pbc=;cm=undefined;gdpr=0;mdl=
|
91.228.74.159
|
||
|
https://ipinfo.io/
|
34.117.59.81
|
||
|
https://www.google.com/ads/ga-audiences
|
unknown
|
||
|
https://website-cdn.ipinfo.io/_next/static/media/heroku.7b181a55.svg
|
unknown
|
||
|
https://www.google.%/ads/ga-audiences
|
unknown
|
||
|
https://td.doubleclick.net
|
unknown
|
||
|
https://website-cdn.ipinfo.io/_next/static/media/blue_check.d118dbca.svg
|
unknown
|
||
|
https://www.quantcast.com/legal/license
|
unknown
|
||
|
https://website-cdn.ipinfo.io/_next/static/media/ranges-small.fd2dafde.svg
|
unknown
|
||
|
https://website-cdn.ipinfo.io/_next/static/media/api-access.d4d3b4b8.svg
|
unknown
|
||
|
https://website-cdn.ipinfo.io/_next/static/media/logo-positive.0a4ba892.svg
|
unknown
|
||
|
https://cdn.glitch.com/d7f4f279-e13b-4330-8422-00b2d9211424%2FGlitch-Error-Rainbow-Mug-hires.png?v=1
|
unknown
|
||
|
https://froala.com/wysiwyg-editor/terms/
|
unknown
|
||
|
https://website-cdn.ipinfo.io
|
unknown
|
||
|
https://rules.quantcount.com/rules-p-d5x2uDVHd7ALE.js
|
18.66.102.121
|
||
|
https://website-cdn.ipinfo.io/_next/static/media/wordpress.dd4ede2f.svg
|
unknown
|
There are 70 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
bancolombia-seguridad-co.glitch.me
|
52.70.49.225
|
|
|
|
mtmarketing.co
|
162.214.111.33
|
||
|
d2fashanjl7d9f.cloudfront.net
|
18.66.102.121
|
||
|
s-part-0023.t-0009.t-msedge.net
|
13.107.246.51
|
||
|
global.px.quantserve.com
|
91.228.74.166
|
||
|
s-part-0017.t-0009.t-msedge.net
|
13.107.246.45
|
||
|
fp2e7a.wpc.phicdn.net
|
192.229.221.95
|
||
|
bg.microsoft.map.fastly.net
|
199.232.214.172
|
||
|
newsinamerica.com
|
173.231.197.227
|
||
|
ipinfo.io
|
34.117.59.81
|
||
|
api.ipify.org
|
104.26.12.205
|
||
|
www.google.com
|
142.250.186.36
|
||
|
s-part-0032.t-0009.t-msedge.net
|
13.107.246.60
|
||
|
secure.quantserve.com
|
unknown
|
||
|
pixel.quantserve.com
|
unknown
|
||
|
rules.quantcount.com
|
unknown
|
There are 6 hidden domains, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
52.70.49.225
|
bancolombia-seguridad-co.glitch.me
|
United States
|
|
|
|
91.228.74.166
|
global.px.quantserve.com
|
United Kingdom
|
||
|
192.168.2.6
|
unknown
|
unknown
|
||
|
192.168.2.5
|
unknown
|
unknown
|
||
|
18.66.102.121
|
d2fashanjl7d9f.cloudfront.net
|
United States
|
||
|
192.168.2.23
|
unknown
|
unknown
|
||
|
52.200.97.208
|
unknown
|
United States
|
||
|
173.231.197.227
|
newsinamerica.com
|
United States
|
||
|
104.26.12.205
|
api.ipify.org
|
United States
|
||
|
162.214.111.33
|
mtmarketing.co
|
United States
|
||
|
142.250.186.36
|
www.google.com
|
United States
|
||
|
34.117.59.81
|
ipinfo.io
|
United States
|
||
|
239.255.255.250
|
unknown
|
Reserved
|
||
|
192.168.2.15
|
unknown
|
unknown
|
||
|
192.168.2.14
|
unknown
|
unknown
|
||
|
91.228.74.159
|
unknown
|
United Kingdom
|
There are 6 hidden IPs, click here to show them.
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
http://bancolombia-seguridad-co.glitch.me/
|
|
|
|
http://bancolombia-seguridad-co.glitch.me/
|
||
|
http://bancolombia-seguridad-co.glitch.me/
|