IOC Report
https://bitly.cx/dSYgj

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 100
Unicode text, UTF-8 text, with very long lines (3857)
downloaded
Chrome Cache Entry: 101
ASCII text, with very long lines (3003)
downloaded
Chrome Cache Entry: 102
Unicode text, UTF-8 text, with CRLF, LF line terminators
downloaded
Chrome Cache Entry: 103
Web Open Font Format (Version 2), TrueType, length 107832, version 1.0
downloaded
Chrome Cache Entry: 104
ASCII text, with very long lines (12513)
downloaded
Chrome Cache Entry: 105
Web Open Font Format, TrueType, length 10380, version 1.0
downloaded
Chrome Cache Entry: 106
JSON data
dropped
Chrome Cache Entry: 107
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 108
RIFF (little-endian) data, Web/P image
dropped
Chrome Cache Entry: 109
ASCII text, with very long lines (10204), with no line terminators
downloaded
Chrome Cache Entry: 110
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 111
MS Windows icon resource - 3 icons, 48x48, 24 bits/pixel, 32x32, 24 bits/pixel
dropped
Chrome Cache Entry: 112
ASCII text, with very long lines (821)
dropped
Chrome Cache Entry: 113
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 114
RIFF (little-endian) data, Web/P image
dropped
Chrome Cache Entry: 115
ASCII text, with very long lines (750)
downloaded
Chrome Cache Entry: 116
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 117
ASCII text, with very long lines (847)
dropped
Chrome Cache Entry: 118
ASCII text, with very long lines (1015)
dropped
Chrome Cache Entry: 119
JSON data
dropped
Chrome Cache Entry: 120
MS Windows icon resource - 3 icons, 48x48, 24 bits/pixel, 32x32, 24 bits/pixel
downloaded
Chrome Cache Entry: 121
ASCII text, with very long lines (9869)
dropped
Chrome Cache Entry: 122
ASCII text, with very long lines (3003)
dropped
Chrome Cache Entry: 123
ASCII text, with very long lines (1283)
downloaded
Chrome Cache Entry: 124
ASCII text, with very long lines (3013)
dropped
Chrome Cache Entry: 125
ASCII text
dropped
Chrome Cache Entry: 126
ASCII text, with very long lines (65005)
downloaded
Chrome Cache Entry: 127
ASCII text, with very long lines (1283)
dropped
Chrome Cache Entry: 128
ASCII text, with very long lines (579)
dropped
Chrome Cache Entry: 129
JSON data
dropped
Chrome Cache Entry: 130
Unicode text, UTF-8 text, with very long lines (3857)
dropped
Chrome Cache Entry: 131
ASCII text, with very long lines (3175)
downloaded
Chrome Cache Entry: 132
JSON data
downloaded
Chrome Cache Entry: 133
ASCII text, with very long lines (2634)
dropped
Chrome Cache Entry: 134
RIFF (little-endian) data, Web/P image
dropped
Chrome Cache Entry: 135
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 136
JSON data
downloaded
Chrome Cache Entry: 137
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 138
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 139
Unicode text, UTF-8 text, with very long lines (54514), with no line terminators
downloaded
Chrome Cache Entry: 140
JSON data
downloaded
Chrome Cache Entry: 141
Unicode text, UTF-8 text, with very long lines (1328)
downloaded
Chrome Cache Entry: 142
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 143
ASCII text, with very long lines (1566)
downloaded
Chrome Cache Entry: 144
Web Open Font Format (Version 2), TrueType, length 108468, version 1.0
downloaded
Chrome Cache Entry: 145
Unicode text, UTF-8 text, with very long lines (1328)
dropped
Chrome Cache Entry: 146
Unicode text, UTF-8 text, with very long lines (664)
downloaded
Chrome Cache Entry: 147
HTML document, Unicode text, UTF-8 text, with very long lines (18908)
downloaded
Chrome Cache Entry: 148
ASCII text, with very long lines (847)
downloaded
Chrome Cache Entry: 149
Web Open Font Format (Version 2), TrueType, length 109728, version 1.0
downloaded
Chrome Cache Entry: 150
ASCII text, with very long lines (1566)
dropped
Chrome Cache Entry: 151
RIFF (little-endian) data, Web/P image
downloaded
Chrome Cache Entry: 152
Unicode text, UTF-8 text, with very long lines (664)
dropped
Chrome Cache Entry: 153
ASCII text, with very long lines (10204), with no line terminators
dropped
Chrome Cache Entry: 154
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 155
Web Open Font Format (Version 2), TrueType, length 109628, version 1.0
downloaded
Chrome Cache Entry: 156
ASCII text, with very long lines (65005)
dropped
Chrome Cache Entry: 157
RIFF (little-endian) data, Web/P image
downloaded
Chrome Cache Entry: 158
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 159
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 160
ASCII text, with very long lines (12513)
dropped
Chrome Cache Entry: 161
ASCII text, with very long lines (3013)
downloaded
Chrome Cache Entry: 162
JSON data
dropped
Chrome Cache Entry: 163
ASCII text
downloaded
Chrome Cache Entry: 164
ASCII text, with very long lines (2634)
downloaded
Chrome Cache Entry: 165
RIFF (little-endian) data, Web/P image
downloaded
Chrome Cache Entry: 166
RIFF (little-endian) data, Web/P image
dropped
Chrome Cache Entry: 167
Web Open Font Format (Version 2), TrueType, length 97812, version 1.0
downloaded
Chrome Cache Entry: 168
ASCII text, with very long lines (3175)
dropped
Chrome Cache Entry: 169
RIFF (little-endian) data, Web/P image
downloaded
Chrome Cache Entry: 89
ASCII text, with very long lines (821)
downloaded
Chrome Cache Entry: 90
ASCII text, with very long lines (878)
dropped
Chrome Cache Entry: 91
ASCII text, with very long lines (1015)
downloaded
Chrome Cache Entry: 92
Unicode text, UTF-8 text, with very long lines (64931), with no line terminators
downloaded
Chrome Cache Entry: 93
Web Open Font Format (Version 2), TrueType, length 99196, version 1.0
downloaded
Chrome Cache Entry: 94
ASCII text, with very long lines (878)
downloaded
Chrome Cache Entry: 95
ASCII text, with very long lines (750)
dropped
Chrome Cache Entry: 96
ASCII text, with very long lines (579)
downloaded
Chrome Cache Entry: 97
ASCII text, with very long lines (9869)
downloaded
Chrome Cache Entry: 98
ASCII text, with very long lines (65536), with no line terminators
dropped
Chrome Cache Entry: 99
SVG Scalable Vector Graphics image
dropped
There are 72 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=2080,i,2384577360132129653,8949747588936403645,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://bitly.cx/dSYgj"

URLs

Name
IP
Malicious
https://bitly.cx/dSYgj
https://git.io/fjule
unknown
https://www.academymusicgroup.com/
unknown
https://is1-ssl.mzstatic.com/image/thumb/Purple116/v4/f2/6c/2a/f26c2a2d-b99e-8635-36fe-5898aa8b043e/
unknown
https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/52/76/bc/5276bce2-67cc-bd03-ef17-4186b7e29940/
unknown
https://is2-ssl.mzstatic.com
unknown
https://www.crowdcomms.com/privacy-policy
unknown
https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/09/e6/f9/09e6f9e7-0ba4-869e-0e8a-f14c98e30b40/
unknown
https://is1-ssl.mzstatic.com/image/thumb/PurpleSource122/v4/7c/e4/40/7ce440ff-db26-9d19-c062-b3362d4
unknown
https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/4e/5d/aa/4e5daa06-dea8-9196-b79f-f5081f0aa21e/
unknown
https://www.vodafone.co.uk/privacy
unknown
https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/2f/8a/6d/2f8a6d1f-c8d6-fef9-aa8f-e706c32846fc/
unknown
https://is1-ssl.mzstatic.com/image/thumb/Purple116/v4/22/e0/12/22e01280-6f15-2854-1ff7-984bd0d15931/
unknown
https://www.crowdcomms.com/
unknown
https://is1-ssl.mzstatic.com
unknown
https://schema.org
unknown
http://schema.org/ItemListOrderAscending
unknown
https://deprecations.emberjs.com/v1.x/#toc_binding-style-attributes.
unknown
https://is1-ssl.mzstatic.com/image/thumb/PurpleSource122/v4/c6/97/ce/c697cefb-2fd2-3e80-9931-c4441e4
unknown
https://raw.github.com/emberjs/ember.js/master/LICENSE
unknown
https://www.scottishrugby.org/
unknown
https://is5-ssl.mzstatic.com
unknown
https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/0b/01/98/0b0198e8-485c-eb56-7dbe-495cf1a03830/
unknown
https://is1-ssl.mzstatic.com/image/thumb/PurpleSource122/v4/a3/aa/80/a3aa80e8-3a9e-ec50-8b2c-1a9fd17
unknown
http://www.eventim.co.uk
unknown
https://www.wikidata.org/wiki/Q368215
unknown
https://bitly.cx/dSYgj
188.114.96.3
http://schema.org
unknown
https://is1-ssl.mzstatic.com/image/thumb/Purple116/v4/75/c8/c4/75c8c414-bb56-2239-3188-61cf561746c8/
unknown
http://git.io/yBU2rg
unknown
https://is1-ssl.mzstatic.com/image/thumb/Purple126/v4/6e/c3/b2/6ec3b20c-6d55-1955-e97a-4612d23db1bc/
unknown
https://www.everymancinema.com/
unknown
https://is1-ssl.mzstatic.com/image/thumb/Purple116/v4/46/fc/95/46fc955c-e052-68e5-4568-4854a8b08cc0/
unknown
https://is4-ssl.mzstatic.com
unknown
https://is1-ssl.mzstatic.com/image/thumb/PurpleSource112/v4/48/d1/2e/48d12ef0-a78b-2571-5df4-8d16e3f
unknown
https://is1-ssl.mzstatic.com/image/thumb/PurpleSource112/v4/c0/7e/21/c07e2137-8baf-8b67-83f6-155f464
unknown
https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/c1/8d/e8/c18de818-9ed4-1d00-735a-eaf0b770d44a/
unknown
https://play.google.com/store/apps/details?id=com.apple.android.music&referrer=utm_source=$
unknown
https://preactjs.com
unknown
https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/ab/ee/f2/abeef223-b3a9-6ca8-fa46-009cee161831/
unknown
https://is1-ssl.mzstatic.com/image/thumb/PurpleSource122/v4/3f/bc/e4/3fbce4f4-0695-9cf1-105d-f372143
unknown
https://is1-ssl.mzstatic.com/image/thumb/Features126/v4/fb/1d/8d/fb1d8d13-8d9b-4667-4632-979fcce1406
unknown
https://is3-ssl.mzstatic.com
unknown
https://twitter.com/AppStore
unknown
https://is1-ssl.mzstatic.com/image/thumb/Features116/v4/28/59/ee/2859eebe-20ac-7814-ec46-0fce7ce3d56
unknown
http://jedwatson.github.io/classnames
unknown
https://git.io/fxCyr
unknown
https://is1-ssl.mzstatic.com/image/thumb/Features116/v4/b9/df/22/b9df22e4-d410-273a-f990-87ef45dc326
unknown
There are 37 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
bg.microsoft.map.fastly.net
199.232.214.172
bitly.cx
188.114.96.3
www.google.com
172.217.16.196
h3.apis.apple.map.fastly.net
151.101.3.6
fp2e7a.wpc.phicdn.net
192.229.221.95
windowsupdatebg.s.llnwi.net
87.248.202.1
is2-ssl.mzstatic.com
unknown
is3-ssl.mzstatic.com
unknown
is1-ssl.mzstatic.com
unknown
is5-ssl.mzstatic.com
unknown
is4-ssl.mzstatic.com
unknown
There are 1 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
192.168.2.6
unknown
unknown
151.101.3.6
h3.apis.apple.map.fastly.net
United States
239.255.255.250
unknown
Reserved
188.114.96.3
bitly.cx
European Union
172.217.16.196
www.google.com
United States

DOM / HTML

URL
Malicious
https://apps.apple.com/gb/app/crowdcomms/id1580960211
https://apps.apple.com/gb/app/crowdcomms/id1580960211
https://apps.apple.com/gb/app/crowdcomms/id1580960211