IOC Report
http://pl22074121.profitablegatecpm.com

loading gif

Files

File Path
Type
Category
Malicious
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 13:42:53 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 13:42:52 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 09:23:19 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 13:42:52 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 13:42:52 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 13:42:52 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
dropped
Chrome Cache Entry: 100
ASCII text, with very long lines (2114)
downloaded
Chrome Cache Entry: 102
ASCII text, with very long lines (769)
downloaded
Chrome Cache Entry: 104
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 106
ASCII text, with very long lines (2200)
downloaded
Chrome Cache Entry: 107
ASCII text, with very long lines (736)
downloaded
Chrome Cache Entry: 108
PNG image data, 272 x 92, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 109
ASCII text, with very long lines (5196)
dropped
Chrome Cache Entry: 110
ASCII text, with very long lines (1658)
downloaded
Chrome Cache Entry: 111
ASCII text, with very long lines (549)
downloaded
Chrome Cache Entry: 112
ASCII text, with very long lines (2200)
downloaded
Chrome Cache Entry: 113
ASCII text, with very long lines (3594), with no line terminators
downloaded
Chrome Cache Entry: 115
ASCII text, with very long lines (1684), with no line terminators
downloaded
Chrome Cache Entry: 116
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 118
PNG image data, 106 x 5210, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 119
ASCII text
dropped
Chrome Cache Entry: 120
ASCII text, with very long lines (596)
downloaded
Chrome Cache Entry: 121
RIFF (little-endian) data, Web/P image
dropped
Chrome Cache Entry: 122
HTML document, Unicode text, UTF-8 text, with very long lines (1136)
dropped
Chrome Cache Entry: 123
Web Open Font Format (Version 2), TrueType, length 22308, version 1.0
downloaded
Chrome Cache Entry: 124
ASCII text, with very long lines (521)
downloaded
Chrome Cache Entry: 125
Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
downloaded
Chrome Cache Entry: 126
ASCII text, with very long lines (2124)
downloaded
Chrome Cache Entry: 127
ASCII text, with very long lines (519)
downloaded
Chrome Cache Entry: 128
ASCII text, with very long lines (12759)
downloaded
Chrome Cache Entry: 129
HTML document, ASCII text, with very long lines (20704)
downloaded
Chrome Cache Entry: 87
HTML document, ASCII text, with very long lines (17208)
downloaded
Chrome Cache Entry: 88
ASCII text, with very long lines (2956)
downloaded
Chrome Cache Entry: 90
ASCII text, with very long lines (833), with no line terminators
dropped
Chrome Cache Entry: 93
ASCII text, with very long lines (1519)
downloaded
Chrome Cache Entry: 95
JSON data
downloaded
Chrome Cache Entry: 96
ASCII text
downloaded
Chrome Cache Entry: 98
HTML document, ASCII text, with very long lines (14167)
downloaded
Chrome Cache Entry: 99
MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
dropped
There are 30 hidden files, click here to show them.

URLs

Name
IP
Malicious
http://pl22074121.profitablegatecpm.com
https://www.google.com/
https://ogs.google.com/widget/callout?prid=19037050&pgid=19037049&puid=9ceb59a7585b55bd&cce=1&dc=1&origin=https%3A%2F%2Fwww.google.com&cn=callout&pid=1&spid=538&hl=en
http://pl22074121.profitablegatecpm.com/
192.243.61.225
https://ogs.google.com/widget/app/so?awwd=1&gm3=1&origin=https%3A%2F%2Fwww.google.com&cn=app&pid=1&spid=538&hl=en

Domains

Name
IP
Malicious
google.com
142.250.105.139
www3.l.google.com
142.251.15.113
plus.l.google.com
64.233.176.101
play.google.com
108.177.122.113
www.google.com
142.251.15.104
pl22074121.profitablegatecpm.com
192.243.61.225
ogs.google.com
unknown
apis.google.com
unknown

IPs

IP
Domain
Country
Malicious
1.1.1.1
unknown
Australia
142.250.105.94
unknown
United States
64.233.176.94
unknown
United States
142.250.9.139
unknown
United States
192.168.2.18
unknown
unknown
142.250.105.139
google.com
United States
173.194.219.94
unknown
United States
172.253.124.95
unknown
United States
192.243.61.225
pl22074121.profitablegatecpm.com
Dominica
239.255.255.250
unknown
Reserved
64.233.177.113
unknown
United States
173.194.219.139
unknown
United States
64.233.176.101
plus.l.google.com
United States
142.251.15.84
unknown
United States
142.250.9.94
unknown
United States
108.177.122.94
unknown
United States
74.125.136.113
unknown
United States
142.251.15.113
www3.l.google.com
United States
142.251.15.104
www.google.com
United States
64.233.185.103
unknown
United States
108.177.122.113
play.google.com
United States
74.125.138.100
unknown
United States
There are 12 hidden IPs, click here to show them.