IOC Report
https://deltack-my.sharepoint.com/:f:/g/personal/mchinchilla_ddelta_us/EraWdZ3RJF5GuC5_d3lUF9UBP4icmwaaFrWAStDUd-THMQ?e=5%3aAREp34&at=9

loading gif

Files

File Path
Type
Category
Malicious
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 15:00:11 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 15:00:11 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:54:41 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 15:00:11 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 15:00:11 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 15:00:10 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
dropped
Chrome Cache Entry: 168
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 102804
downloaded
Chrome Cache Entry: 172
ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 174
ASCII text, with very long lines (456), with no line terminators
downloaded
Chrome Cache Entry: 175
MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
downloaded
Chrome Cache Entry: 177
ASCII text, with very long lines (35238), with no line terminators
downloaded
Chrome Cache Entry: 179
ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 180
ASCII text, with very long lines (65536), with no line terminators
dropped
Chrome Cache Entry: 181
ASCII text, with CRLF line terminators
dropped
Chrome Cache Entry: 182
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 183
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 40329
downloaded
Chrome Cache Entry: 184
HTML document, ASCII text, with very long lines (64257), with CRLF, LF line terminators
downloaded
Chrome Cache Entry: 185
ASCII text, with very long lines (65536), with no line terminators
dropped
Chrome Cache Entry: 187
ASCII text, with very long lines (23437), with CRLF line terminators
dropped
There are 10 hidden files, click here to show them.

URLs

Name
IP
Malicious
https://deltack-my.sharepoint.com/:f:/g/personal/mchinchilla_ddelta_us/EraWdZ3RJF5GuC5_d3lUF9UBP4icmwaaFrWAStDUd-THMQ?e=5%3aAREp34&at=9
https://deltack-my.sharepoint.com/:f:/g/personal/mchinchilla_ddelta_us/EraWdZ3RJF5GuC5_d3lUF9UBP4icmwaaFrWAStDUd-THMQ?e=5%3aAREp34&at=9

Domains

Name
IP
Malicious
dual-spo-0005.spo-msedge.net
13.107.136.10
www.google.com
216.58.206.36
deltack-my.sharepoint.com
unknown

IPs

IP
Domain
Country
Malicious
142.250.185.99
unknown
United States
34.104.35.123
unknown
United States
1.1.1.1
unknown
Australia
13.107.136.10
dual-spo-0005.spo-msedge.net
United States
2.23.209.56
unknown
European Union
192.168.2.17
unknown
unknown
216.58.206.78
unknown
United States
2.23.209.29
unknown
European Union
216.58.206.36
www.google.com
United States
192.168.2.5
unknown
unknown
142.250.181.238
unknown
United States
64.233.167.84
unknown
United States
239.255.255.250
unknown
Reserved
There are 3 hidden IPs, click here to show them.