Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Feb 21 19:24:12 2024, atime=Mon Oct 2 20:46:57
2023, length=1210144, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Feb 21 19:24:12 2024, atime=Mon Oct 2 20:46:57
2023, length=1210144, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:54:41 2023, atime=Mon Oct 2 20:46:57
2023, length=1210144, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Feb 21 19:24:12 2024, atime=Mon Oct 2 20:46:57
2023, length=1210144, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Feb 21 19:24:12 2024, atime=Mon Oct 2 20:46:57
2023, length=1210144, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Feb 21 19:24:12 2024, atime=Mon Oct 2 20:46:57
2023, length=1210144, window=hide
|
dropped
|
||
Chrome Cache Entry: 78
|
PNG image data, 17 x 4, 8-bit/color RGB, non-interlaced
|
downloaded
|
||
Chrome Cache Entry: 79
|
ASCII text, with very long lines (39034)
|
downloaded
|
||
Chrome Cache Entry: 80
|
HTML document, ASCII text
|
downloaded
|
||
Chrome Cache Entry: 81
|
ASCII text, with very long lines (50758)
|
downloaded
|
||
Chrome Cache Entry: 82
|
SVG Scalable Vector Graphics image
|
dropped
|
||
Chrome Cache Entry: 83
|
ASCII text, with very long lines (40958)
|
downloaded
|
||
Chrome Cache Entry: 84
|
HTML document, ASCII text, with very long lines (18945), with CRLF line terminators
|
downloaded
|
||
Chrome Cache Entry: 87
|
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
Chrome Cache Entry: 89
|
PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
|
dropped
|
||
Chrome Cache Entry: 90
|
PNG image data, 108 x 24, 8-bit colormap, non-interlaced
|
downloaded
|
||
Chrome Cache Entry: 91
|
ASCII text, with very long lines (65536), with no line terminators
|
downloaded
|
||
Chrome Cache Entry: 92
|
ASCII text, with no line terminators
|
downloaded
|
||
Chrome Cache Entry: 93
|
SVG Scalable Vector Graphics image
|
dropped
|
||
Chrome Cache Entry: 94
|
ASCII text, with very long lines (6357), with no line terminators
|
downloaded
|
||
Chrome Cache Entry: 95
|
ASCII text, with very long lines (32065)
|
downloaded
|
There are 12 hidden files, click here to show them.
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
https://pocloudcentral.crm.powerobjects.net/PowerEmailWebsite//GetUrl2013.aspx?t=TEka9Gzp+UWz6rVgaDAhSUMAUgBNAA==&eId=03e02621-4ddf-eb11-8150-00155d010e03&pval=//klavoclick%E3%80%82com/#qXbgcnNub3dAZGV3YmVycnkuY29t??kypxg44fhlrkaixdobr=cnNub3dAZGV3YmVycnkuY29t/..=Zz68WtI&u=276b8dda4ef94158348d5b6b8&id=6b7205781d
|
|||
https://qblogsdocs.info/d41d8cd98f00b204e9800998ecf8427e65d65bf928e7fPASd41d8cd98f00b204e9800998ecf8427e65d65bf928e80
|
|||
https://qblogsdocs.info/McnNub3dAZGV3YmVycnkuY29t
|
|||
https://klavoclick.com/#qXbgcnNub3dAZGV3YmVycnkuY29t??kypxg44fhlrkaixdobr=cnNub3dAZGV3YmVycnkuY29t/..=Zz68WtI&u=276b8dda4ef94158348d5b6b8&id=6b7205781d
|
|||
https://qblogsdocs.info/McnNub3dAZGV3YmVycnkuY29t?__cf_chl_tk=2Jb8.M0KElknli1E6TQbluSlPJ4V3x6tIvBfNva_qEI-1708547052-0.0-3986
|
|||
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/l3frn/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
|
Domains
Name
|
IP
|
Malicious
|
|
---|---|---|---|
a.nel.cloudflare.com
|
35.190.80.1
|
||
accounts.google.com
|
172.253.115.84
|
||
challenges.cloudflare.com
|
104.17.3.184
|
||
klavoclick.com
|
104.251.111.203
|
||
www.google.com
|
142.250.80.68
|
||
pocloudcentral.crm.powerobjects.net
|
23.99.128.52
|
||
clients.l.google.com
|
142.251.40.174
|
||
qblogsdocs.info
|
104.21.38.233
|
||
unpkg.com
|
104.16.125.175
|
||
clients1.google.com
|
unknown
|
||
clients2.google.com
|
unknown
|
There are 1 hidden domains, click here to show them.
IPs
IP
|
Domain
|
Country
|
Malicious
|
|
---|---|---|---|---|
142.250.80.68
|
www.google.com
|
United States
|
||
1.1.1.1
|
unknown
|
Australia
|
||
192.168.2.17
|
unknown
|
unknown
|
||
104.21.38.233
|
qblogsdocs.info
|
United States
|
||
104.17.3.184
|
challenges.cloudflare.com
|
United States
|
||
104.16.125.175
|
unpkg.com
|
United States
|
||
142.250.64.67
|
unknown
|
United States
|
||
172.67.140.197
|
unknown
|
United States
|
||
239.255.255.250
|
unknown
|
Reserved
|
||
142.251.41.10
|
unknown
|
United States
|
||
142.251.40.174
|
clients.l.google.com
|
United States
|
||
142.250.72.99
|
unknown
|
United States
|
||
35.190.80.1
|
a.nel.cloudflare.com
|
United States
|
||
104.251.111.203
|
klavoclick.com
|
Canada
|
||
104.17.2.184
|
unknown
|
United States
|
||
23.99.128.52
|
pocloudcentral.crm.powerobjects.net
|
United States
|
||
172.253.115.84
|
accounts.google.com
|
United States
|
There are 7 hidden IPs, click here to show them.