Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Chrome Cache Entry: 100
|
ASCII text, with very long lines (59765)
|
downloaded
|
||
|
Chrome Cache Entry: 101
|
ASCII text, with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 102
|
Unicode text, UTF-8 text, with very long lines (65464)
|
downloaded
|
||
|
Chrome Cache Entry: 103
|
ASCII text, with CRLF, LF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 104
|
PNG image data, 77 x 72, 8-bit colormap, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 105
|
PNG image data, 33 x 31, 8-bit colormap, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 106
|
PNG image data, 77 x 63, 8-bit colormap, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 107
|
ASCII text, with very long lines (2306), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 108
|
ASCII text, with very long lines (40772), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 109
|
ASCII text, with very long lines (699), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 110
|
ASCII text, with very long lines (13521), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 111
|
PNG image data, 27 x 28, 8-bit colormap, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 112
|
ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 113
|
JSON data
|
downloaded
|
||
|
Chrome Cache Entry: 114
|
ASCII text, with very long lines (906), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 115
|
PNG image data, 42 x 702, 8-bit grayscale, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 116
|
HTML document, ASCII text, with very long lines (321), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 117
|
MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural
|
downloaded
|
||
|
Chrome Cache Entry: 118
|
ASCII text, with very long lines (535), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 119
|
ASCII text, with very long lines (65536), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 120
|
PNG image data, 254 x 71, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 121
|
PNG image data, 1920 x 4123, 8-bit colormap, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 122
|
PNG image data, 63 x 70, 8-bit colormap, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 123
|
ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 124
|
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=39, bps=158, PhotometricIntepretation=RGB,
orientation=upper-left, width=180], baseline, precision 8, 180x39, components 3
|
dropped
|
||
|
Chrome Cache Entry: 125
|
PNG image data, 63 x 70, 8-bit colormap, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 126
|
PNG image data, 77 x 72, 8-bit colormap, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 127
|
ASCII text, with very long lines (65464)
|
downloaded
|
||
|
Chrome Cache Entry: 128
|
MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural
|
dropped
|
||
|
Chrome Cache Entry: 129
|
SVG Scalable Vector Graphics image
|
downloaded
|
||
|
Chrome Cache Entry: 130
|
PNG image data, 27 x 28, 8-bit colormap, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 131
|
Unicode text, UTF-8 text, with very long lines (65458)
|
downloaded
|
||
|
Chrome Cache Entry: 132
|
ASCII text, with very long lines (9929), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 133
|
PNG image data, 254 x 71, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 134
|
PNG image data, 33 x 31, 8-bit colormap, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 135
|
ASCII text, with very long lines (18229), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 136
|
PNG image data, 47 x 46, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 137
|
PNG image data, 77 x 63, 8-bit colormap, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 138
|
JSON data
|
dropped
|
||
|
Chrome Cache Entry: 76
|
PNG image data, 63 x 70, 8-bit colormap, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 77
|
JSON data
|
dropped
|
||
|
Chrome Cache Entry: 78
|
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=39, bps=158, PhotometricIntepretation=RGB,
orientation=upper-left, width=180], baseline, precision 8, 180x39, components 3
|
downloaded
|
||
|
Chrome Cache Entry: 79
|
assembler source, ASCII text, with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 80
|
ASCII text, with very long lines (65472)
|
downloaded
|
||
|
Chrome Cache Entry: 81
|
ASCII text, with very long lines (32180)
|
downloaded
|
||
|
Chrome Cache Entry: 82
|
SVG Scalable Vector Graphics image
|
dropped
|
||
|
Chrome Cache Entry: 83
|
ASCII text, with very long lines (27303)
|
downloaded
|
||
|
Chrome Cache Entry: 84
|
ASCII text, with very long lines (65446), with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 85
|
PNG image data, 42 x 702, 8-bit grayscale, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 86
|
PNG image data, 63 x 70, 8-bit colormap, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 87
|
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 88
|
Audio file with ID3 version 2.3.0, contains:\012- MPEG ADTS, layer III, v2, 64 kbps, 22.05 kHz, Monaural
|
downloaded
|
||
|
Chrome Cache Entry: 89
|
ASCII text, with very long lines (11139), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 90
|
ASCII text, with very long lines (32014)
|
downloaded
|
||
|
Chrome Cache Entry: 91
|
ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 92
|
PNG image data, 1920 x 4123, 8-bit colormap, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 93
|
PNG image data, 2080 x 2080, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 94
|
ASCII text, with very long lines (18963), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 95
|
PNG image data, 47 x 46, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 96
|
PNG image data, 2080 x 2080, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 97
|
ASCII text, with very long lines (24751), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 98
|
ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 99
|
Unicode text, UTF-8 text, with very long lines (65335)
|
downloaded
|
There are 54 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US
--service-sandbox-type=none --mojo-platform-channel-handle=2648 --field-trial-handle=2464,i,15746757803805593119,7801268113315025082,262144
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
/prefetch:8
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://18apmac7.z13.web.core.windows.net/"
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US
--service-sandbox-type=audio --mojo-platform-channel-handle=6040 --field-trial-handle=2464,i,15746757803805593119,7801268113315025082,262144
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
/prefetch:8
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://18apmac7.z13.web.core.windows.net/
|
|||
|
https://embed.tawk.to/_s/v4/app/660e2260004/js/twk-chunk-2c776523.js
|
172.67.38.66
|
||
|
https://embed.tawk.to/_s/v4/app/660e2260004/js/twk-app.js
|
172.67.38.66
|
||
|
https://embed.tawk.to/_s/v4/app/660e2260004/languages/en.js
|
172.67.38.66
|
||
|
https://embed.tawk.to/_s/v4/app/660e2260004/js/twk-chunk-24d8db78.js
|
172.67.38.66
|
||
|
http://fontawesome.io
|
unknown
|
||
|
https://cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js
|
104.17.24.14
|
||
|
https://maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css
|
104.18.11.207
|
||
|
https://cdn.jsdelivr.net/npm/bootstrap
|
unknown
|
||
|
https://embed.tawk.to/_s/v4/app/660e2260004/js/twk-event-polyfill.js
|
unknown
|
||
|
https://embed.tawk.to/_s/v4/app/660e2260004/js/twk-runtime.js
|
172.67.38.66
|
||
|
https://embed.tawk.to/_s/v4/app/660e2260004/js/twk-chunk-common.js
|
172.67.38.66
|
||
|
https://embed.tawk.to/_s/v4/app/660e2260004/js/twk-chunk-9294da6c.js
|
172.67.38.66
|
||
|
https://embed.tawk.to/_s/v4/app/660e2260004/js/twk-entries-polyfill.js
|
unknown
|
||
|
https://embed.tawk.to/_s/v4/app/660e2260004/js/twk-chunk-2d0b383d.js
|
172.67.38.66
|
||
|
https://github.com/twbs/bootstrap/blob/main/LICENSE)
|
unknown
|
||
|
https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js
|
104.18.11.207
|
||
|
https://embed.tawk.to/_s/v4/app/660e2260004/js/twk-chunk-4fe9d5dd.js
|
172.67.38.66
|
||
|
https://embed.tawk.to/_s/v4/app/660e2260004/js/twk-object-values-polyfill.js
|
unknown
|
||
|
https://embed.tawk.to/_s/v4/app/660e2260004/css/message-preview.css
|
172.67.38.66
|
||
|
https://embed.tawk.to/_s/v4/app/660e2260004/css/min-widget.css
|
172.67.38.66
|
||
|
https://embed.tawk.to/_s/v4/app/660e2260004/
|
unknown
|
||
|
https://embed.tawk.to/_s/v4/app/660e2260004/js/twk-promise-polyfill.js
|
unknown
|
||
|
https://getbootstrap.com/)
|
unknown
|
||
|
about:blank
|
|||
|
https://embed.tawk.to/_s/v4/app/660e2260004/js/twk-arr-find-polyfill.js
|
unknown
|
||
|
https://embed.tawk.to/_s/v4/app/660e2260004/js/twk-chunk-2d0b9454.js
|
172.67.38.66
|
||
|
http://fontawesome.io/license
|
unknown
|
||
|
https://va.tawk.to/v1/widget-settings?propertyId=6613e667a0c6737bd1297e7c&widgetId=1hquro1rp&sv=null
|
104.22.25.131
|
||
|
https://embed.tawk.to/_s/v4/assets/audio/chat_sound.mp3
|
172.67.38.66
|
||
|
https://cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js
|
151.101.1.229
|
||
|
https://embed.tawk.to/_s/v4/app/660e2260004/css/max-widget.css
|
172.67.38.66
|
||
|
https://github.com/twbs/bootstrap/graphs/contributors)
|
unknown
|
||
|
https://cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha1/dist/css/bootstrap.min.css
|
151.101.1.229
|
||
|
https://embed.tawk.to/_s/v4/app/660e2260004/js/twk-vendor.js
|
172.67.38.66
|
||
|
https://embed.tawk.to/6613e667a0c6737bd1297e7c/1hquro1rp
|
172.67.38.66
|
||
|
https://embed.tawk.to/_s/v4/app/660e2260004/js/twk-chunk-48f3b594.js
|
172.67.38.66
|
||
|
https://va.tawk.to/v1/session/start
|
104.22.25.131
|
||
|
https://embed.tawk.to/_s/v4/app/660e2260004/js/twk-chunk-vendors.js
|
172.67.38.66
|
||
|
https://embed.tawk.to/_s/v4/app/660e2260004/js/twk-iterator-polyfill.js
|
unknown
|
||
|
https://embed.tawk.to/_s/v4/assets/images/attention-grabbers/168-r-br.svg
|
172.67.38.66
|
||
|
https://www.tawk.to/?utm_source=tawk-messenger&utm_medium=link&utm_campaign=referral&utm_term=6613e6
|
unknown
|
||
|
https://embed.tawk.to/_s/v4/app/660e2260004/js/twk-chunk-f1565420.js
|
172.67.38.66
|
||
|
https://embed.tawk.to/_s/v4/app/660e2260004/css/bubble-widget.css
|
172.67.38.66
|
||
|
https://embed.tawk.to/_s/v4/app/660e2260004/js/twk-main.js
|
172.67.38.66
|
There are 34 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
jsdelivr.map.fastly.net
|
151.101.1.229
|
||
|
stackpath.bootstrapcdn.com
|
104.18.11.207
|
||
|
embed.tawk.to
|
172.67.38.66
|
||
|
va.tawk.to
|
104.22.25.131
|
||
|
vsa101.tawk.to
|
104.22.24.131
|
||
|
vsa9.tawk.to
|
104.22.24.131
|
||
|
cdnjs.cloudflare.com
|
104.17.24.14
|
||
|
vsa95.tawk.to
|
172.67.38.66
|
||
|
maxcdn.bootstrapcdn.com
|
104.18.11.207
|
||
|
vsa3.tawk.to
|
172.67.38.66
|
||
|
www.google.com
|
64.233.185.103
|
||
|
fp2e7a.wpc.phicdn.net
|
192.229.211.108
|
||
|
cdn.jsdelivr.net
|
unknown
|
There are 3 hidden domains, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
151.101.1.229
|
jsdelivr.map.fastly.net
|
United States
|
||
|
104.17.24.14
|
cdnjs.cloudflare.com
|
United States
|
||
|
104.22.25.131
|
va.tawk.to
|
United States
|
||
|
192.168.2.4
|
unknown
|
unknown
|
||
|
104.18.11.207
|
stackpath.bootstrapcdn.com
|
United States
|
||
|
239.255.255.250
|
unknown
|
Reserved
|
||
|
172.67.38.66
|
embed.tawk.to
|
United States
|
||
|
104.22.24.131
|
vsa101.tawk.to
|
United States
|
||
|
64.233.185.103
|
www.google.com
|
United States
|
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://18apmac7.z13.web.core.windows.net/
|
||
|
https://18apmac7.z13.web.core.windows.net/
|
||
|
https://18apmac7.z13.web.core.windows.net/
|
||
|
https://18apmac7.z13.web.core.windows.net/
|
||
|
https://18apmac7.z13.web.core.windows.net/
|
||
|
https://18apmac7.z13.web.core.windows.net/
|
||
|
about:blank
|
||
|
about:blank
|
||
|
about:blank
|
||
|
about:blank
|
||
|
about:blank
|
||
|
about:blank
|
||
|
about:blank
|
||
|
about:blank
|
There are 4 hidden doms, click here to show them.