IOC Report
http://toungeassociates-sharepoint.com

loading gif

Files

File Path
Type
Category
Malicious
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 22:57:46 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 22:57:46 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 22:57:46 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 22:57:46 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 22:57:46 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
Chrome Cache Entry: 144
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x316, components 3
dropped
Chrome Cache Entry: 145
HTML document, ASCII text, with CRLF, LF line terminators
downloaded
Chrome Cache Entry: 146
data
downloaded
Chrome Cache Entry: 147
ASCII text, with very long lines (47992), with no line terminators
downloaded
Chrome Cache Entry: 148
DOS executable (COM, 0x8C-variant)
downloaded
Chrome Cache Entry: 149
ASCII text, with very long lines (32942), with no line terminators
downloaded
Chrome Cache Entry: 150
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3
dropped
Chrome Cache Entry: 151
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3
dropped
Chrome Cache Entry: 154
ASCII text, with very long lines (905)
dropped
Chrome Cache Entry: 155
Web Open Font Format (Version 2), TrueType, length 33092, version 1.0
downloaded
Chrome Cache Entry: 156
ASCII text, with very long lines (1352)
dropped
Chrome Cache Entry: 157
data
downloaded
Chrome Cache Entry: 158
ASCII text, with very long lines (47671)
downloaded
Chrome Cache Entry: 159
data
downloaded
Chrome Cache Entry: 160
ASCII text, with very long lines (1824)
downloaded
Chrome Cache Entry: 162
data
downloaded
Chrome Cache Entry: 163
PNG image data, 166 x 75, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 164
ASCII text, with very long lines (966)
downloaded
Chrome Cache Entry: 166
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3
dropped
Chrome Cache Entry: 167
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x296, components 3
downloaded
Chrome Cache Entry: 168
data
downloaded
Chrome Cache Entry: 169
ISO Media, MP4 v2 [ISO 14496-14]
downloaded
Chrome Cache Entry: 170
ASCII text
dropped
Chrome Cache Entry: 172
data
downloaded
Chrome Cache Entry: 173
data
downloaded
Chrome Cache Entry: 174
data
downloaded
Chrome Cache Entry: 175
data
downloaded
Chrome Cache Entry: 176
data
downloaded
Chrome Cache Entry: 177
ASCII text, with very long lines (3043)
downloaded
Chrome Cache Entry: 178
ASCII text, with very long lines (1211)
dropped
Chrome Cache Entry: 179
data
downloaded
Chrome Cache Entry: 180
data
downloaded
Chrome Cache Entry: 181
data
downloaded
Chrome Cache Entry: 183
PNG image data, 53 x 4, 8-bit/color RGB, non-interlaced
dropped
Chrome Cache Entry: 184
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3
dropped
Chrome Cache Entry: 185
PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
downloaded
Chrome Cache Entry: 187
ASCII text, with very long lines (13834)
dropped
Chrome Cache Entry: 188
data
downloaded
Chrome Cache Entry: 189
data
downloaded
Chrome Cache Entry: 190
HTML document, Unicode text, UTF-8 text, with very long lines (16679)
downloaded
Chrome Cache Entry: 191
ASCII text, with very long lines (771)
downloaded
Chrome Cache Entry: 192
ASCII text, with very long lines (65299)
dropped
Chrome Cache Entry: 194
data
downloaded
Chrome Cache Entry: 195
ASCII text, with very long lines (8016)
downloaded
Chrome Cache Entry: 196
JSON data
downloaded
Chrome Cache Entry: 197
HTML document, ASCII text, with very long lines (1238)
downloaded
Chrome Cache Entry: 198
ASCII text, with very long lines (56356)
dropped
Chrome Cache Entry: 199
data
downloaded
Chrome Cache Entry: 201
data
downloaded
Chrome Cache Entry: 203
ASCII text
dropped
Chrome Cache Entry: 204
HTML document, ASCII text, with very long lines (535), with CRLF line terminators
downloaded
Chrome Cache Entry: 205
data
downloaded
Chrome Cache Entry: 206
ASCII text, with very long lines (52276)
downloaded
Chrome Cache Entry: 207
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 209
data
downloaded
Chrome Cache Entry: 210
data
downloaded
Chrome Cache Entry: 212
HTML document, ASCII text, with very long lines (3372), with CRLF, LF line terminators
downloaded
Chrome Cache Entry: 213
data
downloaded
Chrome Cache Entry: 214
ASCII text, with very long lines (4451)
downloaded
Chrome Cache Entry: 215
Unicode text, UTF-8 text, with very long lines (65342)
downloaded
There are 57 hidden files, click here to show them.

URLs

Name
IP
Malicious
http://toungeassociates-sharepoint.com
malicious
https://toungeassociates.pages.dev/
malicious
https://toungeassociates-sharepoint.com/
malicious
http://toungeassociates-sharepoint.com/
76.223.105.230
https://trendlifetechdo.ru//#
https://trendlifetechdo.ru//#services

Domains

Name
IP
Malicious
jsdelivr.map.fastly.net
151.101.1.229
toungeassociates-sharepoint.com
76.223.105.230
a.nel.cloudflare.com
35.190.80.1
toungeassociates.pages.dev
188.114.97.3
cdnjs.cloudflare.com
104.17.25.14
challenges.cloudflare.com
104.18.95.41
trendlifetechdo.ru
188.114.96.3
www.google.com
142.250.185.68
isteam.wsimg.com
35.157.250.3
img1.wsimg.com
unknown
cdn.jsdelivr.net
unknown
websites.godaddy.com
unknown
There are 2 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
2.23.209.149
unknown
European Union
142.250.74.206
unknown
United States
76.223.105.230
toungeassociates-sharepoint.com
United States
104.18.94.41
unknown
United States
192.168.2.16
unknown
unknown
2.18.64.20
unknown
European Union
142.250.185.227
unknown
United States
74.125.206.84
unknown
United States
2.23.209.182
unknown
European Union
192.168.2.23
unknown
unknown
142.250.186.131
unknown
United States
142.250.186.110
unknown
United States
35.190.80.1
a.nel.cloudflare.com
United States
35.157.250.3
isteam.wsimg.com
United States
216.58.212.170
unknown
United States
142.250.185.67
unknown
United States
104.17.24.14
unknown
United States
151.101.1.229
jsdelivr.map.fastly.net
United States
142.250.185.68
www.google.com
United States
1.1.1.1
unknown
Australia
142.250.186.36
unknown
United States
23.38.98.114
unknown
United States
104.18.186.31
unknown
United States
104.18.95.41
challenges.cloudflare.com
United States
239.255.255.250
unknown
Reserved
188.114.97.3
toungeassociates.pages.dev
European Union
188.114.96.3
trendlifetechdo.ru
European Union
104.17.25.14
cdnjs.cloudflare.com
United States
There are 18 hidden IPs, click here to show them.