IOC Report
https://colunroad.info/?utm_campaign=y0rsMyowMImIDv9DTSX69oig88PrjKrJ9agQ3DpV-9I1&t=back

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 100
Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural
downloaded
Chrome Cache Entry: 101
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 102
PNG image data, 258 x 185, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 103
ASCII text, with very long lines (17374), with no line terminators
downloaded
Chrome Cache Entry: 104
HTML document, Unicode text, UTF-8 text, with very long lines (614), with CRLF line terminators
downloaded
Chrome Cache Entry: 105
ASCII text, with very long lines (65297)
downloaded
Chrome Cache Entry: 106
ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 107
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3
downloaded
Chrome Cache Entry: 108
Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural
dropped
Chrome Cache Entry: 59
PNG image data, 258 x 184, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 60
ASCII text, with very long lines (2564), with no line terminators
downloaded
Chrome Cache Entry: 61
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3
downloaded
Chrome Cache Entry: 62
PNG image data, 15 x 14, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 63
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3
dropped
Chrome Cache Entry: 64
JSON data
dropped
Chrome Cache Entry: 65
PNG image data, 258 x 184, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 66
ASCII text, with very long lines (32813), with no line terminators
downloaded
Chrome Cache Entry: 67
PNG image data, 258 x 185, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 68
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3
dropped
Chrome Cache Entry: 69
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3
dropped
Chrome Cache Entry: 70
PNG image data, 258 x 184, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 71
ASCII text, with very long lines (65451)
downloaded
Chrome Cache Entry: 72
PNG image data, 417 x 515, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 73
PNG image data, 258 x 184, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 74
JSON data
downloaded
Chrome Cache Entry: 75
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3
downloaded
Chrome Cache Entry: 76
ASCII text, with very long lines (24389), with no line terminators
downloaded
Chrome Cache Entry: 77
PNG image data, 768 x 293, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 78
ASCII text, with very long lines (4473), with no line terminators
downloaded
Chrome Cache Entry: 79
ASCII text, with very long lines (3422), with no line terminators
downloaded
Chrome Cache Entry: 80
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3
dropped
Chrome Cache Entry: 81
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3
dropped
Chrome Cache Entry: 82
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3
downloaded
Chrome Cache Entry: 83
PNG image data, 258 x 185, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 84
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3
dropped
Chrome Cache Entry: 85
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 86
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3
downloaded
Chrome Cache Entry: 87
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3
dropped
Chrome Cache Entry: 88
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3
downloaded
Chrome Cache Entry: 89
PNG image data, 258 x 185, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 90
PNG image data, 768 x 293, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 91
assembler source, ASCII text
downloaded
Chrome Cache Entry: 92
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3
downloaded
Chrome Cache Entry: 93
PNG image data, 258 x 184, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 94
PNG image data, 417 x 515, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 95
PNG image data, 258 x 184, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 96
Web Open Font Format (Version 2), TrueType, length 9132, version 1.0
downloaded
Chrome Cache Entry: 97
ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 98
HTML document, ASCII text, with very long lines (47858), with CRLF line terminators
downloaded
Chrome Cache Entry: 99
PNG image data, 15 x 14, 8-bit colormap, non-interlaced
downloaded
There are 41 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=2000,i,4333807079281487125,2519310215126018899,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://colunroad.info/?utm_campaign=y0rsMyowMImIDv9DTSX69oig88PrjKrJ9agQ3DpV-9I1&t=back"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3160 --field-trial-handle=2000,i,4333807079281487125,2519310215126018899,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8

URLs

Name
IP
Malicious
https://colunroad.info/?utm_campaign=y0rsMyowMImIDv9DTSX69oig88PrjKrJ9agQ3DpV-9I1&t=back
malicious
https://search.faykitturn.live/media/mainstream/all/ab/fr1.jpg
185.155.186.25
https://cdn.jsdelivr.net/npm/bootstrap@4.3.1/dist/js/bootstrap.bundle.min.js
151.101.65.229
https://colunroad.info/?utm_campaign=y0rsMyowMImIDv9DTSX69oig88PrjKrJ9agQ3DpV-9I1&t=back
https://search.faykitturn.live/media/mainstream/icon.js
185.155.186.25
https://search.faykitturn.live/media/mainstream/all/ab/2.js
185.155.186.25
https://cdn.jsdelivr.net/npm/bootstrap
unknown
https://faykitturn.live/lniqjebu/
unknown
http://www.gimp.org/xmp/
unknown
https://search.faykitturn.live/lniqjebu/?utm_campaign=y0rsMyowMImIDv9DTSX69oig88PrjKrJ9agQ3DpV-9I1&t=back&f=1&sid=t3~44pcofiplxiueqkcwhk3adqc&fp=I5XVNRUUfmQisyel0yiMFA%3D%3D
https://search.faykitturn.live/media/mainstream/alert.mp3
185.155.186.25
https://search.faykitturn.live/media/mainstream/u.js
185.155.186.25
https://search.faykitturn.live/media/mainstream/all/ab/top_red.png
185.155.186.25
https://search.faykitturn.live/media/mainstream/all/ab/fr6.jpg
185.155.186.25
https://search.faykitturn.live/media/mainstream/sound.js
185.155.186.25
https://search.faykitturn.live/media/mainstream/all/ab/fr2.jpg
185.155.186.25
https://search.faykitturn.live/media/mainstream/all/ab/1102.css
185.155.186.25
https://search.faykitturn.live/media/mainstream/flag-icon/flags/1x1/us.svg
185.155.186.25
https://search.faykitturn.live/media/mainstream/all/ab/iphone15pro.png
185.155.186.25
https://getbootstrap.com/)
unknown
https://search.faykitturn.live/media/mainstream/all/ab/fr3.jpg
185.155.186.25
https://search.faykitturn.live/media/mainstream/all/ab/fr11.jpg
185.155.186.25
https://github.com/twbs/bootstrap/graphs/contributors)
unknown
https://search.faykitturn.live/media/mainstream/all/ab/x1.png
185.155.186.25
https://jsontdsexit2.com/ExtService.svc/getextparams
136.243.216.235
https://search.faykitturn.live/media/mainstream/all/ab/1102_2.css
185.155.186.25
https://search.faykitturn.live/media/mainstream/all/ab/fr4.jpg
185.155.186.25
https://search.faykitturn.live/media/mainstream/all/ab/box_open.png
185.155.186.25
https://search.faykitturn.live/media/mainstream/flag-icon/css/flag-icon.css
185.155.186.25
https://github.com/twbs/bootstrap/blob/master/LICENSE)
unknown
https://search.faykitturn.live/media/mainstream/all/ab/like.png
185.155.186.25
https://search.faykitturn.live/media/mainstream/all/ab/1102_1.js
185.155.186.25
https://search.faykitturn.live/media/mainstream/all/ab/1102_3.js
185.155.186.25
https://search.faykitturn.live/media/mainstream/all/ab/box-iphone15pro.png
185.155.186.25
https://search.faykitturn.live/media/mainstream/all/ab/fr5.jpg
185.155.186.25
https://colunroad.info/favicon.ico
185.155.186.24
https://search.faykitturn.live/media/mainstream/all/ab/l.png
185.155.186.25
https://search.faykitturn.live/media/mainstream/all/ab/box_closed.png
185.155.186.25
There are 27 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
jsdelivr.map.fastly.net
151.101.65.229
colunroad.info
185.155.186.24
search.faykitturn.live
185.155.186.25
jsontdsexit2.com
136.243.216.235
www.google.com
142.250.9.104
fp2e7a.wpc.phicdn.net
192.229.211.108
cdn.jsdelivr.net
unknown

IPs

IP
Domain
Country
Malicious
185.155.186.24
colunroad.info
Switzerland
185.155.186.25
search.faykitturn.live
Switzerland
185.155.184.55
unknown
Switzerland
142.250.9.104
www.google.com
United States
192.168.2.17
unknown
unknown
192.168.2.16
unknown
unknown
151.101.65.229
jsdelivr.map.fastly.net
United States
136.243.216.235
jsontdsexit2.com
Germany
192.168.2.4
unknown
unknown
239.255.255.250
unknown
Reserved

DOM / HTML

URL
Malicious
https://search.faykitturn.live/lniqjebu/?utm_campaign=y0rsMyowMImIDv9DTSX69oig88PrjKrJ9agQ3DpV-9I1&t=back&f=1&sid=t3~44pcofiplxiueqkcwhk3adqc&fp=I5XVNRUUfmQisyel0yiMFA%3D%3D
 malicious
https://search.faykitturn.live/lniqjebu/?utm_campaign=y0rsMyowMImIDv9DTSX69oig88PrjKrJ9agQ3DpV-9I1&t=back&f=1&sid=t3~44pcofiplxiueqkcwhk3adqc&fp=I5XVNRUUfmQisyel0yiMFA%3D%3D
 malicious
https://colunroad.info/?utm_campaign=y0rsMyowMImIDv9DTSX69oig88PrjKrJ9agQ3DpV-9I1&t=back