Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jan 15 16:57:53 2025, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jan 15 16:57:53 2025, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jan 15 16:57:53 2025, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jan 15 16:57:53 2025, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jan 15 16:57:52 2025, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
Chrome Cache Entry: 100
|
ASCII text, with very long lines (39257), with CRLF line terminators
|
dropped
|
||
|
Chrome Cache Entry: 101
|
ASCII text, with very long lines (17444)
|
downloaded
|
||
|
Chrome Cache Entry: 102
|
ASCII text, with CRLF line terminators
|
dropped
|
||
|
Chrome Cache Entry: 103
|
ASCII text, with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 104
|
ASCII text, with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 105
|
PNG image data, 226 x 48, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 106
|
MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
|
dropped
|
||
|
Chrome Cache Entry: 107
|
ASCII text, with very long lines (65329), with CRLF line terminators
|
dropped
|
||
|
Chrome Cache Entry: 108
|
ASCII text, with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 109
|
HTML document, ASCII text, with very long lines (30522), with CRLF, LF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 86
|
ASCII text, with CRLF line terminators
|
dropped
|
||
|
Chrome Cache Entry: 87
|
HTML document, ASCII text, with very long lines (30522), with CRLF, LF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 88
|
ASCII text, with very long lines (44903)
|
downloaded
|
||
|
Chrome Cache Entry: 89
|
MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
|
downloaded
|
||
|
Chrome Cache Entry: 90
|
ASCII text, with very long lines (39257), with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 91
|
ASCII text, with very long lines (44903)
|
dropped
|
||
|
Chrome Cache Entry: 92
|
HTML document, ASCII text, with very long lines (30522), with CRLF, LF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 93
|
ASCII text, with very long lines (65329), with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 94
|
HTML document, ASCII text, with very long lines (30522), with CRLF, LF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 95
|
ASCII text, with very long lines (17444)
|
dropped
|
||
|
Chrome Cache Entry: 96
|
PNG image data, 226 x 48, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 97
|
ASCII text, with CRLF line terminators
|
dropped
|
||
|
Chrome Cache Entry: 98
|
ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 99
|
HTML document, ASCII text, with very long lines (30522), with CRLF, LF line terminators
|
downloaded
|
There are 21 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US
--service-sandbox-type=none --mojo-platform-channel-handle=2304 --field-trial-handle=2020,i,10739807963695843706,9773108110104851494,262144
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
/prefetch:8
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ascmiami.sharepoint.com/:f:/s/ASCMiami/EnZkVOJg1ZlAgu5SBwQGHckBxo1H_z4nHojmvCDnQJFG4A?e=5%3am8TN7j&at=9"
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://ascmiami.sharepoint.com/:f:/s/ASCMiami/EnZkVOJg1ZlAgu5SBwQGHckBxo1H_z4nHojmvCDnQJFG4A?e=5%3am8TN7j&at=9
|
|||
|
https://ascmiami.sharepoint.com/_layouts/15/images/microsoft-logo.png
|
13.107.136.10
|
||
|
https://ascmiami.sharepoint.com/:f:/s/ASCMiami/EnZkVOJg1ZlAgu5SBwQGHckBxo1H_z4nHojmvCDnQJFG4A?e=5%3am8TN7j&at=9
|
|||
|
http://github.com/jrburke/requirejs
|
unknown
|
||
|
https://ascmiami.sharepoint.com/sites/ASCMiami/_layouts/15/guestaccess.aspx?e=5%3am8TN7j&at=9&share=EnZkVOJg1ZlAgu5SBwQGHckBxo1H_z4nHojmvCDnQJFG4A
|
|||
|
https://ascmiami.sharepoint.com/ScriptResource.axd?d=qDbDDKE8Yly1QKthG9B6uKc-lDvrpw27M5EBmHQH90OgEba57kDr_Q2pnzUx89g_FZQiodEvb5nAtX44qcA0sUoZTmrPa4C8TAqVdsB6v-gaQC-4ZdOKOWfnI96ZsV8AwWSV5uH-PCquhsH4RfjLIIKkKhEAkFKB7fzHGImkuuBOGR0Fb-uBaCWk_4YBw0c00&t=ffffffffb201fd3f
|
13.107.136.10
|
||
|
https://ascmiami.sharepoint.com/WebResource.axd?d=ygT7WCEJLlXS2jOwrxKF84Ec5Y1_hEjtzNO1fgSALYr0v9nh79ausiQA3ulooOJNOpVoHBcXcN0GZkY2R00Zkoi73rZz5_cLQDd7b9jM9qU1&t=638661570537377670
|
13.107.136.10
|
||
|
https://spoprod-a.akamaihd.net/files/odsp-common-library-prod_2019-02-15_20190219.002/require.js
|
unknown
|
||
|
https://ascmiami.sharepoint.com/WebResource.axd?d=ygT7WCEJLlXS2jOwrxKF84Ec5Y1_hEjtzNO1fgSALYr0v9nh79ausiQA3ulooOJNOpVoHBcXcN0GZkY2R00Zkoi73rZz5_cLQDd7b9jM9qU1&t=638689305853757238
|
13.107.136.10
|
||
|
https://ascmiami.sharepoint.com/sites/ASCMiami/_layouts/15/images/folder.png
|
unknown
|
||
|
https://reactjs.org/docs/error-decoder.html?invariant=
|
unknown
|
||
|
https://ascmiami.sharepoint.com/_layouts/15/images/favicon.ico?rev=47
|
13.107.136.10
|
||
|
https://ascmiami.sharepoint.com/ScriptResource.axd?d=d1JlPwJpN1OS1dEUHYAfcp2Nwvc6kd-pEx9V7_Mx3wQWdjOXn-Wy2arwgs4gpuFBhTPFC6d1tAOWicajngzIzzj7SyBT62B29JNp6jHEpnOm5TPjfIAPaHe9nOWqUgzJF4P82kXD5BtayRMXCEUOE4TFzmqGTm4TEWSOerb4AkY1&t=64bd211b
|
13.107.136.10
|
There are 2 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
dual-spo-0005.spo-msedge.net
|
13.107.136.10
|
||
|
www.google.com
|
216.58.206.36
|
||
|
ascmiami.sharepoint.com
|
unknown
|
||
|
m365cdn.nel.measure.office.net
|
unknown
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
13.107.136.10
|
dual-spo-0005.spo-msedge.net
|
United States
|
||
|
216.58.206.36
|
www.google.com
|
United States
|
||
|
192.168.2.5
|
unknown
|
unknown
|
||
|
239.255.255.250
|
unknown
|
Reserved
|
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://ascmiami.sharepoint.com/:f:/s/ASCMiami/EnZkVOJg1ZlAgu5SBwQGHckBxo1H_z4nHojmvCDnQJFG4A?e=5%3am8TN7j&at=9
|
||
|
https://ascmiami.sharepoint.com/sites/ASCMiami/_layouts/15/guestaccess.aspx?e=5%3am8TN7j&at=9&share=EnZkVOJg1ZlAgu5SBwQGHckBxo1H_z4nHojmvCDnQJFG4A
|
||
|
https://ascmiami.sharepoint.com/sites/ASCMiami/_layouts/15/guestaccess.aspx?e=5%3am8TN7j&at=9&share=EnZkVOJg1ZlAgu5SBwQGHckBxo1H_z4nHojmvCDnQJFG4A
|
||
|
https://ascmiami.sharepoint.com/sites/ASCMiami/_layouts/15/guestaccess.aspx?e=5%3am8TN7j&at=9&share=EnZkVOJg1ZlAgu5SBwQGHckBxo1H_z4nHojmvCDnQJFG4A
|
||
|
https://ascmiami.sharepoint.com/sites/ASCMiami/_layouts/15/guestaccess.aspx?e=5%3am8TN7j&at=9&share=EnZkVOJg1ZlAgu5SBwQGHckBxo1H_z4nHojmvCDnQJFG4A
|