IOC Report
https://glidepromo.vercel.app/?web=org.hel-kr-10000103@hdel.co.kr

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 42
HTML document, ASCII text
downloaded
Chrome Cache Entry: 43
HTML document, ASCII text, with very long lines (3008)
downloaded
Chrome Cache Entry: 44
ASCII text, with no line terminators
downloaded

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2232 --field-trial-handle=2144,i,11466582671800459223,11533410433076010016,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://glidepromo.vercel.app/?web=org.hel-kr-10000103@hdel.co.kr"

URLs

Name
IP
Malicious
https://glidepromo.vercel.app/?web=org.hel-kr-10000103@hdel.co.kr
https://glidepromo.vercel.app/?web=org.hel-kr-10000103@hdel.co.kr
https://glidepromo.vercel.app/favicon.ico
64.29.17.129

Domains

Name
IP
Malicious
glidepromo.vercel.app
64.29.17.129
www.google.com
216.58.212.164

IPs

IP
Domain
Country
Malicious
239.255.255.250
unknown
Reserved
216.58.212.164
www.google.com
United States
192.168.2.23
unknown
unknown
192.168.2.4
unknown
unknown
64.29.17.129
glidepromo.vercel.app
Canada

DOM / HTML

URL
Malicious
https://glidepromo.vercel.app/?web=org.hel-kr-10000103@hdel.co.kr