Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Chrome Cache Entry: 58
|
HTML document, Unicode text, UTF-8 text
|
downloaded
|
||
|
Chrome Cache Entry: 59
|
HTML document, Unicode text, UTF-8 text
|
downloaded
|
||
|
Chrome Cache Entry: 60
|
JSON data
|
dropped
|
||
|
Chrome Cache Entry: 61
|
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
|
downloaded
|
||
|
Chrome Cache Entry: 62
|
SVG Scalable Vector Graphics image
|
dropped
|
||
|
Chrome Cache Entry: 63
|
ASCII text, with very long lines (33582)
|
dropped
|
||
|
Chrome Cache Entry: 64
|
SVG Scalable Vector Graphics image
|
downloaded
|
||
|
Chrome Cache Entry: 65
|
SVG Scalable Vector Graphics image
|
dropped
|
||
|
Chrome Cache Entry: 66
|
ASCII text
|
dropped
|
||
|
Chrome Cache Entry: 67
|
Unicode text, UTF-8 text
|
downloaded
|
||
|
Chrome Cache Entry: 68
|
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
|
dropped
|
||
|
Chrome Cache Entry: 69
|
JSON data
|
dropped
|
||
|
Chrome Cache Entry: 70
|
ASCII text, with very long lines (33582)
|
downloaded
|
||
|
Chrome Cache Entry: 71
|
SVG Scalable Vector Graphics image
|
downloaded
|
||
|
Chrome Cache Entry: 72
|
Unicode text, UTF-8 text
|
dropped
|
||
|
Chrome Cache Entry: 73
|
JSON data
|
dropped
|
||
|
Chrome Cache Entry: 74
|
ASCII text
|
downloaded
|
There are 8 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US
--service-sandbox-type=none --mojo-platform-channel-handle=2372 --field-trial-handle=2184,i,2393202216367057900,6619591652826660894,262144
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
/prefetch:8
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://u46572644.ct.sendgrid.net/ss/c/u001.7BTxB98bYe88lmQCKsz4HIUFNbf01nIu4ZcW2aaj0_pd-l6kidrn8FZ1e4mQuSvQbCCTviI-SCCVd1ROqf4SHYEvPXndfDx61afLByHPSZcFQrBthkk5rMcJkTcWcsh2Y-04Q7_JEfWcTBXPxGiRwnM6zn7lKLdtrKqrgIvHZ7-ZHGnbTg0RqOtmbRRIr4nTaTDT-FfA0-iHw8aKci1JA5ozJdj9jMCTsyvfXnsSI2VmtCNQJeZkVL3XN7Fq7YIcd_S1s_bwbouuhRGv2QcHaQ/4d5/eQm1NPMBQRmL486sFVGLLQ/h23/h001.SsZOuACjv5TImktMo-3w6vBgBU7odoj-WlNwWKGNCC0"
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://u46572644.ct.sendgrid.net/ss/c/u001.7BTxB98bYe88lmQCKsz4HIUFNbf01nIu4ZcW2aaj0_pd-l6kidrn8FZ1e4mQuSvQbCCTviI-SCCVd1ROqf4SHYEvPXndfDx61afLByHPSZcFQrBthkk5rMcJkTcWcsh2Y-04Q7_JEfWcTBXPxGiRwnM6zn7lKLdtrKqrgIvHZ7-ZHGnbTg0RqOtmbRRIr4nTaTDT-FfA0-iHw8aKci1JA5ozJdj9jMCTsyvfXnsSI2VmtCNQJeZkVL3XN7Fq7YIcd_S1s_bwbouuhRGv2QcHaQ/4d5/eQm1NPMBQRmL486sFVGLLQ/h23/h001.SsZOuACjv5TImktMo-3w6vBgBU7odoj-WlNwWKGNCC0
|
|||
|
https://us-service.cartsee-from.cartx.cloud
|
unknown
|
||
|
https://app.cartsee.com/cdn-js/axios.min.js
|
163.181.131.216
|
||
|
https://us-service.cartsee-from.cartx.cloud/cartsee/form/unsubscribe
|
47.253.95.248
|
||
|
https://59b517704ce43f0f.cartx.cloud/monitor/request
|
47.106.172.22
|
||
|
https://user.cartseefashion.com/status/js/cartxLog.js
|
47.253.95.248
|
||
|
https://user.cartseefashion.com/status/favicon.ico
|
47.253.95.248
|
||
|
https://us-service.cartsee-from.cartx.cloud/cartsee/form/monitor/request
|
47.253.95.248
|
||
|
https://us-service.cartsee-from.cartx.cloud/cartsee/form/getCompanyInfo
|
47.253.95.248
|
||
|
https://us-service.cartsee-from.cartx.cloud/cartsee/form/subscribe
|
47.253.95.248
|
||
|
https://user.cartseefashion.com/status/unsubscribe?content=uiuEJg1qDt2MOIH%2B5bdD2u%2FoZY%2Bk6kLrDtzR9KS%2Fc9G%2FvWQo%2B3ddTYo3wluy6gpY%2FR%2BUqCzqnrlFhwDGDemRrg%3D%3D&cartseeHrefTrace=10001
|
|||
|
https://test-service.cartsee-form-us.cartx.cloud
|
unknown
|
||
|
https://user.cartseefashion.com/status/img/logo.svg
|
47.253.95.248
|
||
|
https://user.cartseefashion.com/status/resubscribe?content=uiuEJg1qDt2MOIH%2B5bdD2u%2FoZY%2Bk6kLrDtzR9KS%2Fc9G%2FvWQo%2B3ddTYo3wluy6gpY%2FR%2BUqCzqnrlFhwDGDemRrg%3D%3D&lange=US
|
|||
|
https://user.cartseefashion.com/status/img/tuidingqueren.svg
|
47.253.95.248
|
||
|
https://user.cartseefashion.com/status/js/request.js
|
47.253.95.248
|
There are 5 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
59b517704ce43f0f.cartx.cloud
|
47.106.172.22
|
||
|
user.cartseefashion.com
|
47.253.95.248
|
||
|
www.google.com
|
142.250.186.100
|
||
|
app.cartsee.com.w.cdngslb.com
|
163.181.131.216
|
||
|
us-service.cartsee-from.cartx.cloud
|
47.253.95.248
|
||
|
u46572644.ct.sendgrid.net
|
167.89.115.147
|
||
|
app.cartsee.com
|
unknown
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
163.181.131.216
|
app.cartsee.com.w.cdngslb.com
|
United States
|
||
|
163.181.131.208
|
unknown
|
United States
|
||
|
167.89.115.147
|
u46572644.ct.sendgrid.net
|
United States
|
||
|
192.168.2.6
|
unknown
|
unknown
|
||
|
47.253.95.248
|
user.cartseefashion.com
|
United States
|
||
|
239.255.255.250
|
unknown
|
Reserved
|
||
|
47.106.172.22
|
59b517704ce43f0f.cartx.cloud
|
China
|
||
|
142.250.186.100
|
www.google.com
|
United States
|
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://user.cartseefashion.com/status/unsubscribe?content=uiuEJg1qDt2MOIH%2B5bdD2u%2FoZY%2Bk6kLrDtzR9KS%2Fc9G%2FvWQo%2B3ddTYo3wluy6gpY%2FR%2BUqCzqnrlFhwDGDemRrg%3D%3D&cartseeHrefTrace=10001
|
||
|
https://user.cartseefashion.com/status/unsubscribe?content=uiuEJg1qDt2MOIH%2B5bdD2u%2FoZY%2Bk6kLrDtzR9KS%2Fc9G%2FvWQo%2B3ddTYo3wluy6gpY%2FR%2BUqCzqnrlFhwDGDemRrg%3D%3D&cartseeHrefTrace=10001
|
||
|
https://user.cartseefashion.com/status/resubscribe?content=uiuEJg1qDt2MOIH%2B5bdD2u%2FoZY%2Bk6kLrDtzR9KS%2Fc9G%2FvWQo%2B3ddTYo3wluy6gpY%2FR%2BUqCzqnrlFhwDGDemRrg%3D%3D&lange=US
|
||
|
https://user.cartseefashion.com/status/resubscribe?content=uiuEJg1qDt2MOIH%2B5bdD2u%2FoZY%2Bk6kLrDtzR9KS%2Fc9G%2FvWQo%2B3ddTYo3wluy6gpY%2FR%2BUqCzqnrlFhwDGDemRrg%3D%3D&lange=US
|