Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 06:15:12 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 06:15:12 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 06:15:12 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 06:15:12 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 06:15:12 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
Chrome Cache Entry: 74
|
JSON data
|
dropped
|
||
|
Chrome Cache Entry: 75
|
JSON data
|
dropped
|
||
|
Chrome Cache Entry: 76
|
ASCII text, with very long lines (65536), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 77
|
ASCII text, with very long lines (2543), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 78
|
PNG image data, 100 x 24, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 79
|
HTML document, ASCII text, with very long lines (521)
|
downloaded
|
||
|
Chrome Cache Entry: 80
|
JSON data
|
dropped
|
||
|
Chrome Cache Entry: 81
|
ASCII text, with very long lines (65324)
|
downloaded
|
||
|
Chrome Cache Entry: 82
|
PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 83
|
ASCII text, with very long lines (8287), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 84
|
HTML document, ASCII text, with very long lines (521)
|
downloaded
|
||
|
Chrome Cache Entry: 85
|
Unicode text, UTF-8 text, with very long lines (65528), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 86
|
HTML document, ASCII text, with CRLF, LF line terminators
|
dropped
|
||
|
Chrome Cache Entry: 87
|
JSON data
|
downloaded
|
||
|
Chrome Cache Entry: 88
|
JSON data
|
dropped
|
||
|
Chrome Cache Entry: 89
|
JSON data
|
downloaded
|
||
|
Chrome Cache Entry: 90
|
JSON data
|
downloaded
|
||
|
Chrome Cache Entry: 91
|
JSON data
|
dropped
|
||
|
Chrome Cache Entry: 92
|
JSON data
|
downloaded
|
||
|
Chrome Cache Entry: 93
|
JSON data
|
dropped
|
||
|
Chrome Cache Entry: 94
|
JSON data
|
downloaded
|
||
|
Chrome Cache Entry: 95
|
Unicode text, UTF-8 text, with very long lines (65042), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 96
|
PNG image data, 100 x 24, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 97
|
PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 98
|
JSON data
|
downloaded
|
||
|
Chrome Cache Entry: 99
|
Unicode text, UTF-8 text, with very long lines (49311), with NEL line terminators
|
downloaded
|
There are 23 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US
--service-sandbox-type=none --mojo-platform-channel-handle=2208 --field-trial-handle=2012,i,1117776739266743208,18070137005398195352,262144
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
/prefetch:8
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://app.universign.com/sig/#/?id=823a2493-9cca-40dc-8d2e-949d1e685c83"
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://app.universign.com/sig/#/?id=823a2493-9cca-40dc-8d2e-949d1e685c83
|
|||
|
https://app.universign.com/sig/0.b3cd1e8fb4b58cdecf69.chunk.js
|
217.69.29.50
|
||
|
https://app.universign.com/sig/assets/local/lang-en_US.json?v=1.78.0
|
217.69.29.50
|
||
|
https://app.universign.com/sig/assets/links/lang-en_US.json?v=1.78.0
|
217.69.29.50
|
||
|
https://app.universign.com/sig
|
unknown
|
||
|
https://app.universign.com/sig/5.b3cd1e8fb4b58cdecf69.chunk.js
|
217.69.29.50
|
||
|
https://app.universign.com/sig/assets/locales/lang-fr_FR.json?v=1.78.0
|
217.69.29.50
|
||
|
https://ws.universign.eu
|
unknown
|
||
|
https://login.universign.com/api/auth/v1/oauth
|
unknown
|
||
|
https://getbootstrap.com/)
|
unknown
|
||
|
https://app.universign.com/sig/assets/locales/lang-en_US.json?v=1.78.0
|
217.69.29.50
|
||
|
https://app.universign.com/sig/assets/images/universign-footer.png
|
217.69.29.50
|
||
|
https://app.universign.com/sig/success/823a2493-9cca-40dc-8d2e-949d1e685c83
|
|||
|
https://ws.universign.eu/json/sign/rpc/sid/823a2493-9cca-40dc-8d2e-949d1e685c83
|
217.69.29.10
|
||
|
https://app.universign.com/sig/?id=823a2493-9cca-40dc-8d2e-949d1e685c83
|
|||
|
https://app.universign.com/sig/assets/links/lang-fr_FR.json?v=1.78.0
|
217.69.29.50
|
||
|
https://goo.gl/X2J8zc.
|
unknown
|
||
|
https://app.universign.com/sig/main.c1c345f52956677443cb.css?1007100523
|
217.69.29.50
|
||
|
https://app.universign.com/sig/
|
217.69.29.50
|
||
|
http://g.co/ng/security#xss)
|
unknown
|
||
|
https://app.universign.com/sig/main.b3cd1e8fb4b58cdecf69.bundle.js
|
217.69.29.50
|
||
|
https://app.universign.com/sig/assets/config-pds.json?v=1.78.0
|
217.69.29.50
|
||
|
https://github.com/twbs/bootstrap/blob/master/LICENSE)
|
unknown
|
||
|
https://app.universign.com/sig/5.4bfdc922c9a261dde4f0.css?1007100523
|
217.69.29.50
|
||
|
https://login.universign.com/authn
|
unknown
|
||
|
https://app.universign.com/sig/vendor.b3cd1e8fb4b58cdecf69.bundle.js
|
217.69.29.50
|
||
|
https://app.universign.com/sig/assets/favicon.ico
|
217.69.29.50
|
||
|
https://app.universign.com/sig/3.b3cd1e8fb4b58cdecf69.chunk.js
|
217.69.29.50
|
||
|
https://goo.gl/wIDDiL
|
unknown
|
There are 18 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
bg.microsoft.map.fastly.net
|
199.232.214.172
|
||
|
app.universign.com
|
217.69.29.50
|
||
|
www.google.com
|
142.250.141.104
|
||
|
ws.universign.eu
|
217.69.29.10
|
||
|
fp2e7a.wpc.phicdn.net
|
192.229.211.108
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
239.255.255.250
|
unknown
|
Reserved
|
||
|
217.69.29.50
|
app.universign.com
|
France
|
||
|
217.69.29.10
|
ws.universign.eu
|
France
|
||
|
142.250.141.104
|
www.google.com
|
United States
|
||
|
192.168.2.5
|
unknown
|
unknown
|
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://app.universign.com/sig/?id=823a2493-9cca-40dc-8d2e-949d1e685c83
|
||
|
https://app.universign.com/sig/success/823a2493-9cca-40dc-8d2e-949d1e685c83
|