Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 15:59:53 2024, atime=Mon Oct 2 20:46:57
2023, length=1210144, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 15:59:53 2024, atime=Mon Oct 2 20:46:57
2023, length=1210144, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:54:41 2023, atime=Mon Oct 2 20:46:57
2023, length=1210144, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 15:59:53 2024, atime=Mon Oct 2 20:46:57
2023, length=1210144, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 15:59:53 2024, atime=Mon Oct 2 20:46:57
2023, length=1210144, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 15:59:52 2024, atime=Mon Oct 2 20:46:57
2023, length=1210144, window=hide
|
dropped
|
||
Chrome Cache Entry: 63
|
RIFF (little-endian) data, Web/P image
|
dropped
|
||
Chrome Cache Entry: 64
|
HTML document, ASCII text
|
downloaded
|
||
Chrome Cache Entry: 65
|
HTML document, ASCII text, with no line terminators
|
downloaded
|
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
https://www.freelancer.com/users/login-quick.php?token=30b3628412ea618dcc3f414b266ae263302b3e1b43e6d2d885225319dabe8e68&url=https://k-bien.com/0auth&user_id=13769623&expire_at=1569845677&uniqid=13769623-38750-5d42d7ad-e72874f2&linkid=0
|
|||
https://k-bien.com/0auth/
|
Domains
Name
|
IP
|
Malicious
|
|
---|---|---|---|
a.nel.cloudflare.com
|
35.190.80.1
|
||
freelancer.map.fastly.net
|
151.101.2.114
|
||
5xf8tpzrw56.firsttexcel.net
|
104.21.89.26
|
||
www.google.com
|
74.125.137.105
|
||
cdn.iconscout.com
|
104.18.28.243
|
||
k-bien.com
|
209.182.205.251
|
||
docusign-auth.com
|
104.21.79.121
|
||
www.freelancer.com
|
unknown
|
IPs
IP
|
Domain
|
Country
|
Malicious
|
|
---|---|---|---|---|
1.1.1.1
|
unknown
|
Australia
|
||
192.168.2.17
|
unknown
|
unknown
|
||
104.21.89.26
|
5xf8tpzrw56.firsttexcel.net
|
United States
|
||
104.21.79.121
|
docusign-auth.com
|
United States
|
||
142.251.2.84
|
unknown
|
United States
|
||
142.251.2.94
|
unknown
|
United States
|
||
74.125.137.105
|
www.google.com
|
United States
|
||
142.251.2.113
|
unknown
|
United States
|
||
239.255.255.250
|
unknown
|
Reserved
|
||
209.182.205.251
|
k-bien.com
|
United States
|
||
104.18.29.243
|
unknown
|
United States
|
||
151.101.2.114
|
freelancer.map.fastly.net
|
United States
|
||
104.18.28.243
|
cdn.iconscout.com
|
United States
|
||
142.250.101.94
|
unknown
|
United States
|
||
35.190.80.1
|
a.nel.cloudflare.com
|
United States
|
There are 5 hidden IPs, click here to show them.