https://u27457241.ct.sendgrid.net/ls/click?upn=gU5vgDjVhsr8xBWi9KbyhCmRGj-2Bhghe49Z0FiLcWjrB3-2BHjpRZrJUn0d0SGBkXrx6oN6ZDJ2BS4RqE-2FwX06Vp6CNzr5fnG8rLhZtVfnefSs-3DAxs4_-2BYPg4XG7CFcrtVeqe-2FEiJSrJo19pXwJ6tXzH5pmmxxnbXO272-2BI29kN-2BvjWAIpglbQXOPOiRaJAAdguTnhglHj-2BjiZuY-2Bl2yPjdcSrK-2F9ezebjhFVSInURAAh0NL7wSvgIxrQfzCizFzhR7FuzvZGAC9IXJiD5MvT-2BM-2Bord7nJExCKq3jFy6KjuvaLIUZjyvy957XsqnMttci2nlXO0KBQ-3D-3D
| Engine | Download Report | Detection | Info |
|---|---|---|---|
|
malicious
Score: 64
|
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
|
| IP | Country | Detection |
|---|---|---|
| 145.40.97.98 | Netherlands |  |
| 104.17.24.14 | United States | |
| 104.18.10.207 | United States | |
| Click to see the 7 hidden entries | ||
| 172.217.16.205 | United States | |
| 167.89.115.54 | United States | |
| 239.255.255.250 | Reserved | |
| 142.250.185.142 | United States | |
| 172.217.23.100 | United States | |
| 13.224.103.120 | United States | |
| 172.217.16.131 | United States | |
| Name | IP | Detection |
|---|---|---|
| u27457241.ct.sendgrid.net | 167.89.115.54 | |
| stackpath.bootstrapcdn.com | 104.18.10.207 | |
| gstaticadssl.l.google.com | 172.217.16.131 | |
| Click to see the 13 hidden entries | ||
| d26p066pn2w0s0.cloudfront.net | 13.224.103.120 | |
| accounts.google.com | 172.217.16.205 | |
| cdnjs.cloudflare.com | 104.17.24.14 | |
| maxcdn.bootstrapcdn.com | 104.18.10.207 | |
| boundary.dfinity.network | 145.40.97.98 | |
| www.google.com | 172.217.23.100 | |
| clients.l.google.com | 142.250.185.142 | |
| clients2.google.com | 0.0.0.0 | |
| ka-f.fontawesome.com | 0.0.0.0 | |
| code.jquery.com | 0.0.0.0 | |
| h6yak-jqaaa-aaaad-qcysq-cai.raw.ic0.app | 0.0.0.0 | |
| kit.fontawesome.com | 0.0.0.0 | |
| logo.clearbit.com | 0.0.0.0 | |
| Name | Detection |
|---|---|
| http://h6yak-jqaaa-aaaad-qcysq-cai.raw.ic0.app/l#jwilson |  |
| https://h6yak-jqaaa-aaaad-qcysq-cai.raw.ic0.app/css/hover.css | |
| http://h6yak-jqaaa-aaaad-qcysq-cai.raw.ic0.app/l | |
| Click to see the 34 hidden entries | |
| https://h6yak-jqaaa-aaaad-qcysq-cai.raw.ic0.app/l | |
| https://h6yak-jqaaa-aaaad-qcysq-cai.raw.ic0.app/login.html?okb=o8MWQ8otfZuw6QsAaLjPPIoQ&rhwh=Pu55NB1yr2jpvYRqSE&plpb=azaaxBfNMnkncPlD1dbKCjabbV&pepwe=NNmUbBHh57IDtuVbpJCTiLbygyk | |
| https://h6yak-jqaaa-aaaad-qcysq-cai.raw.ic0.app/login.html?okb=o8MWQ8otfZuw6QsAaLjPPIoQ&rhwh=Pu55NB1 | |
| https://h6yak-jqaaa-aaaad-qcysq-cai.raw.ic0.app/login.html?okb=o8MWQ8otfZuw6QsAaLjPPIoQ&rhwh=Pu55NB1yr2jpvYRqSE&plpb=azaaxBfNMnkncPlD1dbKCjabbV&pepwe=NNmUbBHh57IDtuVbpJCTiLbygyk#jwilson@glenergy.com | |
| https://h6yak-jqaaa-aaaad-qcysq-cai.raw.ic0.app/l#jwilson | |
| https://www.google.com/images/dot2.gif | |
| https://clients2.google.com/service/update2/crx | |
| https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js | |
| https://www.google.com/s2/favicons?domain=dell.com?v=BUILD_HASH | |
| https://logo.clearbit.com/glenergy.com | |
| https://accounts.google.com | |
| https://clients2.googleusercontent.com | |
| https://apis.google.com | |
| https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js | |
| https://www.google.com/accounts/OAuthLogin?issueuberauth=1 | |
| https://www.google.com/ | |
| https://www-googleapis-staging.sandbox.google.com | |
| https://clients2.google.com | |
| https://www.google.com | |
| https://u27457241.ct.sendgrid.net/ls/click?upn=gU5vgDjVhsr8xBWi9KbyhCmRGj-2Bhghe49Z0FiLcWjrB3-2BHjpR | |
| https://accounts.google.com/MergeSession | |
| https://www.google.com/images/x2.gif | |
| https://sandbox.google.com/payments/v4/js/integrator.js | |
| https://u27457241.ct.sendgrid.net/ls/click?upn=gU5vgDjVhsr8xBWi9KbyhCmRGj-2Bhghe49Z0FiLcWjrB3-2BHjpRZrJUn0d0SGBkXrx6oN6ZDJ2BS4RqE-2FwX06Vp6CNzr5fnG8rLhZtVfnefSs-3DAxs4_-2BYPg4XG7CFcrtVeqe-2FEiJSrJo19pXwJ6tXzH5pmmxxnbXO272-2BI29kN-2BvjWAIpglbQXOPOiRaJAAdguTnhglHj-2BjiZuY-2Bl2yPjdcSrK-2F9ezebjhFVSInURAAh0NL7wSvgIxrQfzCizFzhR7FuzvZGAC9IXJiD5MvT-2BM-2Bord7nJExCKq3jFy6KjuvaLIUZjyvy957XsqnMttci2nlXO0KBQ-3D-3D | |
| https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js | |
| https://payments.google.com/payments/v4/js/integrator.js | |
| https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard | |
| https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=85.0.4183.121&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 | |
| https://play.google.com | |
| https://www.google.com/images/cleardot.gif | |
| https://ogs.google.com | |
| https://www.google.com/intl/en-US/chrome/blank.html | |
| https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p | |
| https://dns.google | |
| Name | File Type | Hashes | Detection |
|---|---|---|---|
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\_locales\nb\messages.json |
UTF-8 Unicode text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\_locales\sv\messages.json |
UTF-8 Unicode text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\_locales\sr\messages.json |
UTF-8 Unicode text, with CRLF line terminators | # | |
| Click to see the 83 hidden entries | |||
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\_locales\sl\messages.json |
UTF-8 Unicode text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\_locales\sk\messages.json |
UTF-8 Unicode text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\_locales\ru\messages.json |
UTF-8 Unicode text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\_locales\ro\messages.json |
UTF-8 Unicode text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\_locales\pt_PT\messages.json |
UTF-8 Unicode text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\_locales\pt_BR\messages.json |
UTF-8 Unicode text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\_locales\pl\messages.json |
UTF-8 Unicode text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\_locales\nl\messages.json |
ASCII text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\_locales\th\messages.json |
UTF-8 Unicode text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\_locales\lv\messages.json |
UTF-8 Unicode text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\_locales\lt\messages.json |
UTF-8 Unicode text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\_locales\ko\messages.json |
UTF-8 Unicode text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\_locales\ja\messages.json |
UTF-8 Unicode text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\_locales\it\messages.json |
UTF-8 Unicode text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\_locales\id\messages.json |
ASCII text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\_locales\hu\messages.json |
UTF-8 Unicode text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\_locales\hr\messages.json |
UTF-8 Unicode text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\_locales\hi\messages.json |
UTF-8 Unicode text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\_locales\fr\messages.json |
UTF-8 Unicode text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\html\craw_window.html |
HTML document, ASCII text | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\a064512f-d671-49c6-95f2-8cc5baade69e.tmp |
Google Chrome extension, version 3 | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\manifest.json |
ASCII text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\images\topbar_floating_button_pressed.png |
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\images\topbar_floating_button_maximize.png |
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\images\topbar_floating_button_hover.png |
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\images\topbar_floating_button_close.png |
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\images\topbar_floating_button.png |
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\images\icon_16.png |
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\images\icon_128.png |
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\images\flapper.gif |
GIF image data, version 89a, 30 x 30 | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\_locales\fil\messages.json |
ASCII text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\css\craw_window.css |
ASCII text | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\craw_window.js |
ASCII text, with very long lines | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\craw_background.js |
ASCII text, with very long lines | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\_metadata\verified_contents.json |
ASCII text, with very long lines, with no line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\_locales\zh_TW\messages.json |
UTF-8 Unicode text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\_locales\zh_CN\messages.json |
UTF-8 Unicode text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\_locales\vi\messages.json |
UTF-8 Unicode text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\_locales\uk\messages.json |
UTF-8 Unicode text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\_locales\tr\messages.json |
UTF-8 Unicode text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG.old (copy) |
ASCII text | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Browser |
data | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\CURRENT (copy) |
ASCII text | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000004.dbtmp |
ASCII text | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Network Persistent State (copy) |
ASCII text, with very long lines, with no line terminators | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1 |
data | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\9d60acc6-fb66-47d1-be28-c795a5970d58.tmp |
ASCII text, with very long lines, with no line terminators | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences (copy) |
UTF-8 Unicode text, with very long lines, with no line terminators | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences (copy) |
ASCII text, with very long lines, with no line terminators | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent State (copy) |
ASCII text, with very long lines, with no line terminators | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache |
data | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Version |
ASCII text, with no line terminators | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG |
ASCII text | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log |
data | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json |
ASCII text, with very long lines, with no line terminators | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\6bbafcc4-c63c-4c9f-bd44-a74afef1074b.tmp |
very short file (no magic) | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\61c5e631-3a9f-4a3a-b1d7-ef931f88b611.tmp |
ASCII text, with very long lines, with no line terminators | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\60e85aac-3225-4c81-a66c-c8d56f9b66e0.tmp |
UTF-8 Unicode text, with very long lines, with no line terminators | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\184b41a6-afc8-484e-a19a-e1cc295332cf.tmp |
UTF-8 Unicode text, with very long lines, with no line terminators | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\08013fc1-37e3-4029-818c-fa3cc5c62fe6.tmp |
ASCII text, with very long lines, with no line terminators | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat |
data | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\35d993f3-3535-46f4-a92b-c21b003497f7.tmp |
ASCII text, with very long lines, with no line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\_locales\ca\messages.json |
UTF-8 Unicode text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\_locales\fi\messages.json |
UTF-8 Unicode text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\_locales\et\messages.json |
UTF-8 Unicode text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\_locales\es_419\messages.json |
UTF-8 Unicode text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\_locales\es\messages.json |
UTF-8 Unicode text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\_locales\en_GB\messages.json |
ASCII text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\_locales\en\messages.json |
ASCII text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\_locales\el\messages.json |
UTF-8 Unicode text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\_locales\de\messages.json |
UTF-8 Unicode text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\_locales\da\messages.json |
UTF-8 Unicode text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\_locales\cs\messages.json |
UTF-8 Unicode text, with CRLF line terminators | # | |
C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic |
data | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir5592_689831108\CRX_INSTALL\_locales\bg\messages.json |
UTF-8 Unicode text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\a064512f-d671-49c6-95f2-8cc5baade69e.tmp |
Google Chrome extension, version 3 | # | |
C:\Users\user\AppData\Local\Temp\192889ef-d1e4-49a1-8185-9b1dd96571fe.tmp |
very short file (no magic) | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\e61f9840-4530-41f4-be7a-5fc992f24c18.tmp |
SysEx File - | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\dc30fb4c-49cf-45ab-853f-a09675d941d1.tmp |
data | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\d315f094-ef97-4a38-9412-dc04e5a72028.tmp |
ASCII text, with very long lines, with no line terminators | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\b870082c-126a-43f3-bb6a-3a9096fbf1cc.tmp |
ASCII text, with very long lines, with no line terminators | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Module Info Cache (copy) |
data | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State (copy) |
ASCII text, with very long lines, with no line terminators | # | |
