IOC Report
http://zwgaleriamlodych.pl

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 41
ASCII text, with no line terminators
downloaded

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2384 --field-trial-handle=2308,i,2546780249924042766,14441408258148433188,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe" "http://zwgaleriamlodych.pl

URLs

Name
IP
Malicious
http://zwgaleriamlodych.pl
malicious
https://zwgaleriamlodych.pl/
104.21.9.178
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1
142.250.65.174
https://dilutegulpedshirt.com/favicon.ico
192.243.61.227
https://dilutegulpedshirt.com/t9hiwrkd?key=d928d7c4e235fa6eb6c04ecc0f7abe92&cid=23n0u3tmsl3
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard
172.253.122.84
http://highperformancedformats.com/anonymous/
172.240.108.76

Domains

Name
IP
Malicious
dilutegulpedshirt.com
192.243.61.227
accounts.google.com
172.253.122.84
highperformancedformats.com
172.240.108.76
www.google.com
142.251.35.164
clients.l.google.com
142.250.65.174
zwgaleriamlodych.pl
172.67.160.242
fp2e7a.wpc.phicdn.net
192.229.211.108
clients2.google.com
unknown

IPs

IP
Domain
Country
Malicious
172.240.108.76
highperformancedformats.com
United States
239.255.255.250
unknown
Reserved
142.250.65.174
clients.l.google.com
United States
192.243.61.227
dilutegulpedshirt.com
Dominica
172.240.108.84
unknown
United States
104.21.9.178
unknown
United States
192.168.2.4
unknown
unknown
142.251.35.164
www.google.com
United States
172.253.122.84
accounts.google.com
United States

DOM / HTML

URL
Malicious
https://dilutegulpedshirt.com/t9hiwrkd?key=d928d7c4e235fa6eb6c04ecc0f7abe92&cid=23n0u3tmsl3