IOC Report
https://zenlayer.dl.sourceforge.net/project/seb/seb/SEB_3.8.0/SEB_3.8.0.742_SetupBundle.exe?viasf=1

loading gif

Files

File Path
Type
Category
Malicious
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 14 01:11:05 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 14 01:11:05 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 14 01:11:05 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 14 01:11:05 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 14 01:11:04 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\Downloads\b827bf7b-4989-4381-a42b-21053900a218.tmp
PE32 executable (GUI) Intel 80386, for MS Windows
dropped

Domains

Name
IP
Malicious
zenlayer.dl.sourceforge.net
98.98.48.225
plus.l.google.com
216.58.206.46
play.google.com
142.250.185.238
safeexambrowser.org
82.220.34.4
dns-tunnel-check.googlezip.net
216.239.34.159
tunnel.googlezip.net
216.239.34.157
id.google.com
172.217.16.131
www.google.com
142.250.185.196
googlehosted.l.googleusercontent.com
142.250.185.65
lh5.googleusercontent.com
unknown
apis.google.com
unknown
There are 1 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
142.250.186.170
unknown
United States
142.250.74.206
unknown
United States
192.168.2.16
unknown
unknown
142.250.185.227
unknown
United States
142.250.185.142
unknown
United States
142.250.186.131
unknown
United States
142.250.184.206
unknown
United States
142.250.186.99
unknown
United States
66.102.1.84
unknown
United States
142.250.185.65
googlehosted.l.googleusercontent.com
United States
98.98.48.225
zenlayer.dl.sourceforge.net
United States
142.250.184.195
unknown
United States
1.1.1.1
unknown
Australia
108.177.15.84
unknown
United States
142.250.184.194
unknown
United States
142.250.185.138
unknown
United States
142.250.185.238
play.google.com
United States
216.58.206.46
plus.l.google.com
United States
239.255.255.250
unknown
Reserved
142.250.185.196
www.google.com
United States
142.250.181.228
unknown
United States
142.250.185.195
unknown
United States
142.250.184.238
unknown
United States
216.58.212.163
unknown
United States
172.217.16.131
id.google.com
United States
216.239.34.157
tunnel.googlezip.net
United States
82.220.34.4
safeexambrowser.org
Switzerland
There are 17 hidden IPs, click here to show them.