Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 23 15:01:01 2024, atime=Mon Oct 2 20:46:57
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 23 15:01:01 2024, atime=Mon Oct 2 20:46:57
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:54:41 2023, atime=Mon Oct 2 20:46:57
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 23 15:01:01 2024, atime=Mon Oct 2 20:46:57
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 23 15:01:01 2024, atime=Mon Oct 2 20:46:57
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 23 15:01:01 2024, atime=Mon Oct 2 20:46:57
2023, length=1210144, window=hide
|
dropped
|
||
|
Chrome Cache Entry: 76
|
Unicode text, UTF-8 (with BOM) text, with very long lines (19066)
|
downloaded
|
||
|
Chrome Cache Entry: 77
|
PNG image data, 689 x 247, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 78
|
Unicode text, UTF-8 text, with very long lines (50972)
|
downloaded
|
||
|
Chrome Cache Entry: 79
|
ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 80
|
PNG image data, 951 x 342, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 81
|
ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 82
|
GIF image data, version 89a, 1 x 1
|
downloaded
|
||
|
Chrome Cache Entry: 83
|
ASCII text, with very long lines (32029)
|
downloaded
|
||
|
Chrome Cache Entry: 84
|
ASCII text, with very long lines (5965)
|
downloaded
|
There are 6 hidden files, click here to show them.
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://s-9c5dc3-i.sgizmo.com/s3/i-Ll1VY7CAKZGxF8BWZ8-6991741/?sguid=Ll1VY7CAKZGxF8BWZ8
|
|||
|
https://s-9c5dc3-i.sgizmo.com/s3/i-Ll1VY7CAKZGxF8BWZ8-6991741/?sguid=Ll1VY7CAKZGxF8BWZ8
|
|||
|
https://s-9c5dc3-i.sgizmo.com/s3/
|
|||
|
https://s-9c5dc3-i.sgizmo.com/s3
|
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
s3-w.us-east-1.amazonaws.com
|
3.5.25.158
|
||
|
produsa-hap-webs-pub-tf-1971702783.us-east-1.elb.amazonaws.com
|
34.234.146.15
|
||
|
d3gvv5iecquak.cloudfront.net
|
13.32.230.107
|
||
|
www.google.com
|
64.233.185.106
|
||
|
www.surveygizmo.com
|
unknown
|
||
|
s-9c5dc3-i.sgizmo.com
|
unknown
|
||
|
surveygizmolibrary.s3.amazonaws.com
|
unknown
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
3.5.25.158
|
s3-w.us-east-1.amazonaws.com
|
United States
|
||
|
1.1.1.1
|
unknown
|
Australia
|
||
|
74.125.136.95
|
unknown
|
United States
|
||
|
142.250.105.94
|
unknown
|
United States
|
||
|
142.250.105.84
|
unknown
|
United States
|
||
|
64.233.176.95
|
unknown
|
United States
|
||
|
52.85.151.30
|
unknown
|
United States
|
||
|
13.32.230.107
|
d3gvv5iecquak.cloudfront.net
|
United States
|
||
|
192.168.2.17
|
unknown
|
unknown
|
||
|
142.250.105.101
|
unknown
|
United States
|
||
|
173.194.219.94
|
unknown
|
United States
|
||
|
239.255.255.250
|
unknown
|
Reserved
|
||
|
34.234.146.15
|
produsa-hap-webs-pub-tf-1971702783.us-east-1.elb.amazonaws.com
|
United States
|
||
|
64.233.185.94
|
unknown
|
United States
|
||
|
173.194.219.139
|
unknown
|
United States
|
||
|
13.32.230.88
|
unknown
|
United States
|
||
|
16.182.71.217
|
unknown
|
United States
|
||
|
108.177.122.95
|
unknown
|
United States
|
||
|
64.233.185.106
|
www.google.com
|
United States
|
||
|
74.125.138.94
|
unknown
|
United States
|
There are 10 hidden IPs, click here to show them.