Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 14:35:07 2024, atime=Mon Oct 2 20:46:57
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 14:35:07 2024, atime=Mon Oct 2 20:46:57
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:54:41 2023, atime=Mon Oct 2 20:46:57
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 14:35:07 2024, atime=Mon Oct 2 20:46:57
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 14:35:07 2024, atime=Mon Oct 2 20:46:57
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 14:35:07 2024, atime=Mon Oct 2 20:46:57
2023, length=1210144, window=hide
|
dropped
|
||
|
Chrome Cache Entry: 134
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
|
dropped
|
||
|
Chrome Cache Entry: 135
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
|
dropped
|
||
|
Chrome Cache Entry: 136
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
|
downloaded
|
||
|
Chrome Cache Entry: 137
|
HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 138
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
|
downloaded
|
||
|
Chrome Cache Entry: 139
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 2477
|
dropped
|
||
|
Chrome Cache Entry: 140
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 379
|
dropped
|
||
|
Chrome Cache Entry: 141
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113766
|
dropped
|
||
|
Chrome Cache Entry: 142
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
|
dropped
|
||
|
Chrome Cache Entry: 143
|
ASCII text, with very long lines (46090)
|
downloaded
|
||
|
Chrome Cache Entry: 144
|
JPEG image data, baseline, precision 8, 1920x1080, components 3
|
downloaded
|
||
|
Chrome Cache Entry: 145
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406594
|
downloaded
|
||
|
Chrome Cache Entry: 146
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 119648
|
dropped
|
||
|
Chrome Cache Entry: 147
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
|
downloaded
|
||
|
Chrome Cache Entry: 148
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 449028
|
downloaded
|
||
|
Chrome Cache Entry: 149
|
Unicode text, UTF-8 (with BOM) text, with very long lines (59783), with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 150
|
ASCII text, with very long lines (994), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 151
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 449728
|
downloaded
|
||
|
Chrome Cache Entry: 152
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57443
|
dropped
|
||
|
Chrome Cache Entry: 153
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
|
dropped
|
||
|
Chrome Cache Entry: 154
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 7007
|
downloaded
|
||
|
Chrome Cache Entry: 155
|
Unicode text, UTF-8 (with BOM) text, with very long lines (59783), with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 156
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 362433
|
downloaded
|
||
|
Chrome Cache Entry: 157
|
Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 158
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 513
|
dropped
|
||
|
Chrome Cache Entry: 159
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 119648
|
downloaded
|
||
|
Chrome Cache Entry: 160
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 11970
|
downloaded
|
||
|
Chrome Cache Entry: 161
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 449028
|
dropped
|
||
|
Chrome Cache Entry: 162
|
PNG image data, 342 x 72, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 163
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 270
|
dropped
|
||
|
Chrome Cache Entry: 164
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 90677
|
downloaded
|
||
|
Chrome Cache Entry: 165
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
|
downloaded
|
||
|
Chrome Cache Entry: 166
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 11970
|
dropped
|
||
|
Chrome Cache Entry: 167
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 31504
|
downloaded
|
||
|
Chrome Cache Entry: 168
|
ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 169
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
|
downloaded
|
||
|
Chrome Cache Entry: 170
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1378
|
downloaded
|
||
|
Chrome Cache Entry: 171
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 9285
|
downloaded
|
||
|
Chrome Cache Entry: 172
|
PNG image data, 600 x 1, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 173
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57443
|
downloaded
|
||
|
Chrome Cache Entry: 174
|
ASCII text, with very long lines (46090)
|
dropped
|
||
|
Chrome Cache Entry: 175
|
Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 176
|
PNG image data, 600 x 1, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 177
|
ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 178
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 2477
|
downloaded
|
||
|
Chrome Cache Entry: 179
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 513
|
downloaded
|
||
|
Chrome Cache Entry: 180
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 9285
|
dropped
|
||
|
Chrome Cache Entry: 181
|
Unicode text, UTF-8 (with BOM) text, with very long lines (59783), with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 182
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1378
|
dropped
|
||
|
Chrome Cache Entry: 183
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
|
dropped
|
||
|
Chrome Cache Entry: 184
|
Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 185
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113766
|
downloaded
|
||
|
Chrome Cache Entry: 186
|
HTML document, ASCII text, with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 187
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 379
|
downloaded
|
||
|
Chrome Cache Entry: 188
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
|
dropped
|
||
|
Chrome Cache Entry: 189
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 270
|
downloaded
|
||
|
Chrome Cache Entry: 190
|
GIF image data, version 89a, 352 x 3
|
dropped
|
||
|
Chrome Cache Entry: 191
|
PNG image data, 342 x 72, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 192
|
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
|
downloaded
|
||
|
Chrome Cache Entry: 193
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113378
|
downloaded
|
||
|
Chrome Cache Entry: 194
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 4.2.9], baseline, precision
8, 50x28, components 3
|
downloaded
|
||
|
Chrome Cache Entry: 195
|
Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 196
|
Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 197
|
PNG image data, 600 x 1, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 198
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
|
downloaded
|
||
|
Chrome Cache Entry: 199
|
GIF image data, version 89a, 352 x 3
|
dropped
|
||
|
Chrome Cache Entry: 200
|
Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 201
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 26668
|
downloaded
|
||
|
Chrome Cache Entry: 202
|
JSON data
|
dropped
|
||
|
Chrome Cache Entry: 203
|
HTML document, ASCII text, with very long lines (2622), with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 204
|
ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 205
|
Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 206
|
Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 207
|
Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 208
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
|
downloaded
|
||
|
Chrome Cache Entry: 209
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 31504
|
dropped
|
||
|
Chrome Cache Entry: 210
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 951232
|
downloaded
|
||
|
Chrome Cache Entry: 211
|
JPEG image data, baseline, precision 8, 1920x1080, components 3
|
dropped
|
||
|
Chrome Cache Entry: 212
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406594
|
dropped
|
||
|
Chrome Cache Entry: 213
|
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
|
downloaded
|
||
|
Chrome Cache Entry: 214
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 951232
|
dropped
|
||
|
Chrome Cache Entry: 215
|
GIF image data, version 89a, 352 x 3
|
downloaded
|
||
|
Chrome Cache Entry: 216
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 449728
|
dropped
|
||
|
Chrome Cache Entry: 217
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 362433
|
dropped
|
||
|
Chrome Cache Entry: 218
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 90677
|
dropped
|
||
|
Chrome Cache Entry: 219
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data,
big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 4.2.9], baseline, precision
8, 50x28, components 3
|
dropped
|
||
|
Chrome Cache Entry: 220
|
ASCII text, with very long lines (65536), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 221
|
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
|
dropped
|
||
|
Chrome Cache Entry: 222
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
|
dropped
|
||
|
Chrome Cache Entry: 223
|
GIF image data, version 89a, 352 x 3
|
downloaded
|
||
|
Chrome Cache Entry: 224
|
ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 225
|
ASCII text, with very long lines (64616)
|
dropped
|
||
|
Chrome Cache Entry: 226
|
ASCII text, with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 227
|
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
|
dropped
|
||
|
Chrome Cache Entry: 228
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 7007
|
dropped
|
||
|
Chrome Cache Entry: 229
|
ASCII text, with very long lines (994), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 230
|
ASCII text, with very long lines (64616)
|
downloaded
|
||
|
Chrome Cache Entry: 231
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 26668
|
dropped
|
There are 95 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US
--service-sandbox-type=none --mojo-platform-channel-handle=2252 --field-trial-handle=2040,i,5767944486962329334,844409809218667319,262144
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
/prefetch:8
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://3a2828d86d86bc5d064a6136459935d8.fp.measure.office.com"
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://3a2828d86d86bc5d064a6136459935d8.fp.measure.office.com
|
|||
|
https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2f3a2828d86d86bc5d064a6136459935d8.fp.measure.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=a1a47682-1133-ba4d-4b62-508a3f1846fc&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638653809127282838.86c4e817-7883-4839-b07e-a46c47bae493&state=DYtBEoAgDMSKjM-pQFvp8hxwOHv0-_aQXDJJRJSDI0g1RN4V_VbU0cQFAsWF_thGc3ZA2aCDV_XN0yL4mtuGpnjP8n6z_A&sso_reload=true
|
|||
|
http://github.com/jquery/globalize
|
unknown
|
||
|
https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2f3a2828d86d86bc5d064a6136459935d8.fp.measure.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=a1a47682-1133-ba4d-4b62-508a3f1846fc&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638653809127282838.86c4e817-7883-4839-b07e-a46c47bae493&state=DYtBEoAgDMSKjM-pQFvp8hxwOHv0-_aQXDJJRJSDI0g1RN4V_VbU0cQFAsWF_thGc3ZA2aCDV_XN0yL4mtuGpnjP8n6z_A
|
|||
|
http://knockoutjs.com/
|
unknown
|
||
|
https://login.microsoftonline.com
|
unknown
|
||
|
http://www.opensource.org/licenses/mit-license.php)
|
unknown
|
||
|
https://login.microsoftonline.com/common/login
|
|||
|
https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js
|
152.199.21.175
|
||
|
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_QLF_8apNRJD3OCol8jwtxw2.js
|
152.199.21.175
|
||
|
https://github.com/douglascrockford/JSON-js
|
unknown
|
||
|
https://login.windows-ppe.net
|
unknown
|
||
|
https://outlook.office365.com/owa/prefetch.aspx
|
52.98.152.194
|
There are 2 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
passwordreset.microsoftonline.com
|
unknown
|
 |
|
|
identity.nel.measure.office.net
|
unknown
|
|
|
|
r4.res.office365.com
|
unknown
|
|
|
|
aadcdn.msftauth.net
|
unknown
|
|
|
|
logincdn.msftauth.net
|
unknown
|
|
|
|
login.microsoftonline.com
|
unknown
|
|
|
|
fpt.live.com
|
unknown
|
|
|
|
account.live.com
|
unknown
|
|
|
|
3a2828d86d86bc5d064a6136459935d8.fp.measure.office.com
|
unknown
|
|
|
|
acctcdn.msftauth.net
|
unknown
|
|
|
|
outlook.office365.com
|
unknown
|
|
|
|
s-part-0044.t-0009.fb-t-msedge.net
|
13.107.253.72
|
||
|
sni1gl.wpc.alphacdn.net
|
152.199.21.175
|
||
|
sni1gl.wpc.omegacdn.net
|
152.199.21.175
|
||
|
s-part-0017.t-0009.t-msedge.net
|
13.107.246.45
|
||
|
s-part-0017.t-0009.fb-t-msedge.net
|
13.107.253.45
|
||
|
www.google.com
|
142.250.185.132
|
||
|
HHN-efz.ms-acdc.office.com
|
52.98.152.194
|
||
|
s-part-0039.t-0009.fb-t-msedge.net
|
13.107.253.67
|
There are 9 hidden domains, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
52.98.152.194
|
HHN-efz.ms-acdc.office.com
|
United States
|
||
|
13.107.246.45
|
s-part-0017.t-0009.t-msedge.net
|
United States
|
||
|
192.168.2.17
|
unknown
|
unknown
|
||
|
13.107.253.45
|
s-part-0017.t-0009.fb-t-msedge.net
|
United States
|
||
|
13.107.253.67
|
s-part-0039.t-0009.fb-t-msedge.net
|
United States
|
||
|
142.250.185.132
|
www.google.com
|
United States
|
||
|
239.255.255.250
|
unknown
|
Reserved
|
||
|
152.199.21.175
|
sni1gl.wpc.alphacdn.net
|
United States
|
||
|
52.98.152.242
|
unknown
|
United States
|
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2f3a2828d86d86bc5d064a6136459935d8.fp.measure.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=a1a47682-1133-ba4d-4b62-508a3f1846fc&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638653809127282838.86c4e817-7883-4839-b07e-a46c47bae493&state=DYtBEoAgDMSKjM-pQFvp8hxwOHv0-_aQXDJJRJSDI0g1RN4V_VbU0cQFAsWF_thGc3ZA2aCDV_XN0yL4mtuGpnjP8n6z_A
|
||
|
https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2f3a2828d86d86bc5d064a6136459935d8.fp.measure.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=a1a47682-1133-ba4d-4b62-508a3f1846fc&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638653809127282838.86c4e817-7883-4839-b07e-a46c47bae493&state=DYtBEoAgDMSKjM-pQFvp8hxwOHv0-_aQXDJJRJSDI0g1RN4V_VbU0cQFAsWF_thGc3ZA2aCDV_XN0yL4mtuGpnjP8n6z_A&sso_reload=true
|
||
|
https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2f3a2828d86d86bc5d064a6136459935d8.fp.measure.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=a1a47682-1133-ba4d-4b62-508a3f1846fc&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638653809127282838.86c4e817-7883-4839-b07e-a46c47bae493&state=DYtBEoAgDMSKjM-pQFvp8hxwOHv0-_aQXDJJRJSDI0g1RN4V_VbU0cQFAsWF_thGc3ZA2aCDV_XN0yL4mtuGpnjP8n6z_A&sso_reload=true
|
||
|
https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2f3a2828d86d86bc5d064a6136459935d8.fp.measure.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=a1a47682-1133-ba4d-4b62-508a3f1846fc&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638653809127282838.86c4e817-7883-4839-b07e-a46c47bae493&state=DYtBEoAgDMSKjM-pQFvp8hxwOHv0-_aQXDJJRJSDI0g1RN4V_VbU0cQFAsWF_thGc3ZA2aCDV_XN0yL4mtuGpnjP8n6z_A&sso_reload=true
|
||
|
https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2f3a2828d86d86bc5d064a6136459935d8.fp.measure.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=a1a47682-1133-ba4d-4b62-508a3f1846fc&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638653809127282838.86c4e817-7883-4839-b07e-a46c47bae493&state=DYtBEoAgDMSKjM-pQFvp8hxwOHv0-_aQXDJJRJSDI0g1RN4V_VbU0cQFAsWF_thGc3ZA2aCDV_XN0yL4mtuGpnjP8n6z_A&sso_reload=true
|
||
|
https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2f3a2828d86d86bc5d064a6136459935d8.fp.measure.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=a1a47682-1133-ba4d-4b62-508a3f1846fc&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638653809127282838.86c4e817-7883-4839-b07e-a46c47bae493&state=DYtBEoAgDMSKjM-pQFvp8hxwOHv0-_aQXDJJRJSDI0g1RN4V_VbU0cQFAsWF_thGc3ZA2aCDV_XN0yL4mtuGpnjP8n6z_A&sso_reload=true
|
||
|
https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2f3a2828d86d86bc5d064a6136459935d8.fp.measure.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=a1a47682-1133-ba4d-4b62-508a3f1846fc&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638653809127282838.86c4e817-7883-4839-b07e-a46c47bae493&state=DYtBEoAgDMSKjM-pQFvp8hxwOHv0-_aQXDJJRJSDI0g1RN4V_VbU0cQFAsWF_thGc3ZA2aCDV_XN0yL4mtuGpnjP8n6z_A&sso_reload=true
|
||
|
https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2f3a2828d86d86bc5d064a6136459935d8.fp.measure.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=a1a47682-1133-ba4d-4b62-508a3f1846fc&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638653809127282838.86c4e817-7883-4839-b07e-a46c47bae493&state=DYtBEoAgDMSKjM-pQFvp8hxwOHv0-_aQXDJJRJSDI0g1RN4V_VbU0cQFAsWF_thGc3ZA2aCDV_XN0yL4mtuGpnjP8n6z_A&sso_reload=true
|
||
|
https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2f3a2828d86d86bc5d064a6136459935d8.fp.measure.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=a1a47682-1133-ba4d-4b62-508a3f1846fc&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638653809127282838.86c4e817-7883-4839-b07e-a46c47bae493&state=DYtBEoAgDMSKjM-pQFvp8hxwOHv0-_aQXDJJRJSDI0g1RN4V_VbU0cQFAsWF_thGc3ZA2aCDV_XN0yL4mtuGpnjP8n6z_A&sso_reload=true
|
||
|
https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2f3a2828d86d86bc5d064a6136459935d8.fp.measure.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=a1a47682-1133-ba4d-4b62-508a3f1846fc&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638653809127282838.86c4e817-7883-4839-b07e-a46c47bae493&state=DYtBEoAgDMSKjM-pQFvp8hxwOHv0-_aQXDJJRJSDI0g1RN4V_VbU0cQFAsWF_thGc3ZA2aCDV_XN0yL4mtuGpnjP8n6z_A&sso_reload=true
|
||
|
https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2f3a2828d86d86bc5d064a6136459935d8.fp.measure.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=a1a47682-1133-ba4d-4b62-508a3f1846fc&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638653809127282838.86c4e817-7883-4839-b07e-a46c47bae493&state=DYtBEoAgDMSKjM-pQFvp8hxwOHv0-_aQXDJJRJSDI0g1RN4V_VbU0cQFAsWF_thGc3ZA2aCDV_XN0yL4mtuGpnjP8n6z_A&sso_reload=true
|
||
|
https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2f3a2828d86d86bc5d064a6136459935d8.fp.measure.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=a1a47682-1133-ba4d-4b62-508a3f1846fc&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638653809127282838.86c4e817-7883-4839-b07e-a46c47bae493&state=DYtBEoAgDMSKjM-pQFvp8hxwOHv0-_aQXDJJRJSDI0g1RN4V_VbU0cQFAsWF_thGc3ZA2aCDV_XN0yL4mtuGpnjP8n6z_A&sso_reload=true
|
||
|
https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2f3a2828d86d86bc5d064a6136459935d8.fp.measure.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=a1a47682-1133-ba4d-4b62-508a3f1846fc&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638653809127282838.86c4e817-7883-4839-b07e-a46c47bae493&state=DYtBEoAgDMSKjM-pQFvp8hxwOHv0-_aQXDJJRJSDI0g1RN4V_VbU0cQFAsWF_thGc3ZA2aCDV_XN0yL4mtuGpnjP8n6z_A&sso_reload=true
|
||
|
https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAAjZFPTNNgGMb7raNuOGVyIvFiGk_Ebm2_rv26BE3dGDg29g8HaKTpvrasuK5l7cYc4WJCQjyReDCBk4YTJ-LBmBkTEz3hhTMnjoSDGk8cPLjpxaNP3jx5kvfyvr9nkuRiXPI2-1c8M3SGNU2OwcYw_aPW-Gj0eefgNbyR78_Vii_uTWR-7YGw2rA6Rgw79nsATgA4B-AwIIkQiQmIWJnjJR7xCKIYErFgIE5iJIQgIyAoMzVWMhhNGCykmmYIMjwNjBWUtl_nh-a0rJ7xMxA2nZatuo7n75Er6WX__rSjrKbzlbm1POOWMh0X1bsbhdkOy6haaSmdzZazlfQDdpUrzwtVtVp7yOJSRvEWM6pfn8HwkcJrqXRVXZpnn-UE22_PuM21ImqKPVU5JP8LxFuSGrxrO81jknJco2npJ0FwFgQXwQhLJkOh0SgxQdwiLoPgzciA2e7Xu1--r-zPvFTlg_3tm8TxSBxne_W0hvPlRS-fW89uVFqLPTallIqKmKik4pKfg9MLprIMbTwlJbldCuxSVJ8Kh8goQZOpIndOgR8U2LlC9MOpuu-7XjIeh9qQtI7EwdRwQmdFQRM5KAoJWYYJHcVMN2YbmtduGTHHNC38p7W4s6HFT66Cowg4jQijFG5olu2NT27Slq76zlOjSSc36a7tqRgPU0drtA2PTj6mB2fQT7a2tj5dIy6vf_i8_e7Vzsdvsxdjd1rVgmtl-DW97In2AuTlRsa0utW2WO
|
||
|
https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAAjZFPTNNgGMb7raNuOGVyIvFiGk_Ebm2_rv26BE3dGDg29g8HaKTpvrasuK5l7cYc4WJCQjyReDCBk4YTJ-LBmBkTEz3hhTMnjoSDGk8cPLjpxaNP3jx5kvfyvr9nkuRiXPI2-1c8M3SGNU2OwcYw_aPW-Gj0eefgNbyR78_Vii_uTWR-7YGw2rA6Rgw79nsATgA4B-AwIIkQiQmIWJnjJR7xCKIYErFgIE5iJIQgIyAoMzVWMhhNGCykmmYIMjwNjBWUtl_nh-a0rJ7xMxA2nZatuo7n75Er6WX__rSjrKbzlbm1POOWMh0X1bsbhdkOy6haaSmdzZazlfQDdpUrzwtVtVp7yOJSRvEWM6pfn8HwkcJrqXRVXZpnn-UE22_PuM21ImqKPVU5JP8LxFuSGrxrO81jknJco2npJ0FwFgQXwQhLJkOh0SgxQdwiLoPgzciA2e7Xu1--r-zPvFTlg_3tm8TxSBxne_W0hvPlRS-fW89uVFqLPTallIqKmKik4pKfg9MLprIMbTwlJbldCuxSVJ8Kh8goQZOpIndOgR8U2LlC9MOpuu-7XjIeh9qQtI7EwdRwQmdFQRM5KAoJWYYJHcVMN2YbmtduGTHHNC38p7W4s6HFT66Cowg4jQijFG5olu2NT27Slq76zlOjSSc36a7tqRgPU0drtA2PTj6mB2fQT7a2tj5dIy6vf_i8_e7Vzsdvsxdjd1rVgmtl-DW97In2AuTlRsa0utW2WO
|
||
|
https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAAjZFPTNNgGMb7raNuOGVyIvFiGk_Ebm2_rv26BE3dGDg29g8HaKTpvrasuK5l7cYc4WJCQjyReDCBk4YTJ-LBmBkTEz3hhTMnjoSDGk8cPLjpxaNP3jx5kvfyvr9nkuRiXPI2-1c8M3SGNU2OwcYw_aPW-Gj0eefgNbyR78_Vii_uTWR-7YGw2rA6Rgw79nsATgA4B-AwIIkQiQmIWJnjJR7xCKIYErFgIE5iJIQgIyAoMzVWMhhNGCykmmYIMjwNjBWUtl_nh-a0rJ7xMxA2nZatuo7n75Er6WX__rSjrKbzlbm1POOWMh0X1bsbhdkOy6haaSmdzZazlfQDdpUrzwtVtVp7yOJSRvEWM6pfn8HwkcJrqXRVXZpnn-UE22_PuM21ImqKPVU5JP8LxFuSGrxrO81jknJco2npJ0FwFgQXwQhLJkOh0SgxQdwiLoPgzciA2e7Xu1--r-zPvFTlg_3tm8TxSBxne_W0hvPlRS-fW89uVFqLPTallIqKmKik4pKfg9MLprIMbTwlJbldCuxSVJ8Kh8goQZOpIndOgR8U2LlC9MOpuu-7XjIeh9qQtI7EwdRwQmdFQRM5KAoJWYYJHcVMN2YbmtduGTHHNC38p7W4s6HFT66Cowg4jQijFG5olu2NT27Slq76zlOjSSc36a7tqRgPU0drtA2PTj6mB2fQT7a2tj5dIy6vf_i8_e7Vzsdvsxdjd1rVgmtl-DW97In2AuTlRsa0utW2WO
|
||
|
https://login.live.com/ppsecure/post.srf?username=test%40test.com&client_id=51483342-085c-4d86-bf88-cf50c7252078&cobrandid=deb3f74a-ed5b-4ef1-8d3c-92b85dd47352&contextid=BCFFA89199F39A66&opid=011F4B69C481BA5B&bk=1729784148&uaid=a1a476821133ba4d4b62508a3f1846fc&pid=15216
|
||
|
https://login.live.com/ppsecure/post.srf?username=test%40test.com&client_id=51483342-085c-4d86-bf88-cf50c7252078&cobrandid=deb3f74a-ed5b-4ef1-8d3c-92b85dd47352&contextid=BCFFA89199F39A66&opid=011F4B69C481BA5B&bk=1729784148&uaid=a1a476821133ba4d4b62508a3f1846fc&pid=15216
|
||
|
https://login.live.com/ppsecure/post.srf?username=test%40test.com&client_id=51483342-085c-4d86-bf88-cf50c7252078&cobrandid=deb3f74a-ed5b-4ef1-8d3c-92b85dd47352&contextid=BCFFA89199F39A66&opid=011F4B69C481BA5B&bk=1729784148&uaid=a1a476821133ba4d4b62508a3f1846fc&pid=15216
|
||
|
https://login.microsoftonline.com/common/login
|
||
|
https://login.microsoftonline.com/common/login
|
||
|
https://login.microsoftonline.com/common/login
|
||
|
https://login.microsoftonline.com/common/login
|
||
|
https://login.microsoftonline.com/common/login
|
||
|
https://login.microsoftonline.com/common/login
|
||
|
https://login.microsoftonline.com/common/login
|
||
|
https://login.microsoftonline.com/common/login
|
||
|
https://login.microsoftonline.com/common/login
|
||
|
https://login.microsoftonline.com/common/login
|
||
|
https://login.microsoftonline.com/common/login
|
||
|
https://login.microsoftonline.com/common/login
|
||
|
https://login.microsoftonline.com/common/login
|
||
|
https://login.microsoftonline.com/common/login
|
||
|
https://login.microsoftonline.com/common/login
|
||
|
https://login.microsoftonline.com/common/login
|
There are 25 hidden doms, click here to show them.