Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
Chrome Cache Entry: 44
|
PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
|
downloaded
|
||
Chrome Cache Entry: 45
|
HTML document, ASCII text, with CRLF line terminators
|
downloaded
|
||
Chrome Cache Entry: 46
|
PNG image data, 74 x 57, 8-bit/color RGB, non-interlaced
|
dropped
|
||
Chrome Cache Entry: 47
|
HTML document, ASCII text
|
downloaded
|
||
Chrome Cache Entry: 48
|
HTML document, Unicode text, UTF-8 text, with very long lines (4070)
|
downloaded
|
||
Chrome Cache Entry: 49
|
PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
|
dropped
|
||
Chrome Cache Entry: 50
|
ASCII text, with very long lines (42414)
|
downloaded
|
||
Chrome Cache Entry: 51
|
PNG image data, 74 x 57, 8-bit/color RGB, non-interlaced
|
downloaded
|
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
|
||
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US
--service-sandbox-type=none --mojo-platform-channel-handle=2140 --field-trial-handle=2108,i,7554542974835896400,9077463232988124329,262144
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
/prefetch:8
|
||
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://powerpointmicrosoftoffice.top/"
|
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
https://powerpointmicrosoftoffice.top/
|
|||
https://powerpointmicrosoftoffice.top/
|
|||
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1721554763:1714116510:yTTxxrngMeOCJeFMgcnRaP2l5Kvr3H_piPho_x5pxqs/87a52cc25aba6dd7/e98c200cbd6b9fe
|
104.17.3.184
|
||
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=87a52cc25aba6dd7
|
104.17.3.184
|
||
http://cpanel.com/?utm_source=cpanelwhm&utm_medium=cplogo&utm_content=logolink&utm_campaign=404refer
|
unknown
|
||
https://powerpointmicrosoftoffice.top/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=87a52cb369b63dd2
|
104.21.20.11
|
||
https://powerpointmicrosoftoffice.top/cdn-cgi/challenge-platform/h/b/flow/ov1/1319396107:1714116260:8BfuK6QUCyx98ggz-fiJ2RHdMfU_2s3vx8NljAWljmU/87a52cb369b63dd2/617af4b047a0f4c
|
104.21.20.11
|
||
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
|
104.17.3.184
|
||
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/87a52cc25aba6dd7/1714119852413/42a838146d108a774b8e6538b6dc2c44ec74c72b559a953a5f8c58f99070f17e/DGZu2JwndkxSggZ
|
104.17.3.184
|
||
https://powerpointmicrosoftoffice.top/cgi-sys/defaultwebpage.cgi
|
|||
https://powerpointmicrosoftoffice.top/favicon.ico
|
104.21.20.11
|
||
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/87a52cc25aba6dd7/1714119852412/FMYRlqu1nRJ2FIV
|
104.17.3.184
|
||
https://a.nel.cloudflare.com/report/v4?s=bPdMmP2mHq4n8nYMaQ5HzolkL4jP%2BySb8H8mQ5J2klIyL2J4viQ8jNHBPgwCWfW1PM2Bhvvid%2FK4mEPuw2Ufu9X%2FhGGG8PqBXKBquVB9VNKJNRDPYpmCtnDUjSEhQ3FrAf0f6%2BiAsWl2xGq5eIEYTQ%3D%3D
|
35.190.80.1
|
||
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/m0mz0/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
|
|||
https://a.nel.cloudflare.com/report/v4?s=2EfBR4eTwnrOkFJFygtv24zb6%2FStOfeCLlwPSnLodEvPG58Ibx74YsjX8P%2FJ4Va0xUA7kP1z2GAfXiKwF%2FyGnO2Yvk6vdEE%2Bc6t5fUEvwR8KROAYpj1UqoMmSeVHzBxR2OuX%2Fa4HdMnnncDABuHOrQ%3D%3D
|
35.190.80.1
|
There are 4 hidden URLs, click here to show them.
Domains
Name
|
IP
|
Malicious
|
|
---|---|---|---|
bg.microsoft.map.fastly.net
|
199.232.214.172
|
||
a.nel.cloudflare.com
|
35.190.80.1
|
||
challenges.cloudflare.com
|
104.17.3.184
|
||
www.google.com
|
142.250.217.228
|
||
fp2e7a.wpc.phicdn.net
|
192.229.211.108
|
||
powerpointmicrosoftoffice.top
|
104.21.20.11
|
IPs
IP
|
Domain
|
Country
|
Malicious
|
|
---|---|---|---|---|
104.21.20.11
|
powerpointmicrosoftoffice.top
|
United States
|
||
239.255.255.250
|
unknown
|
Reserved
|
||
172.67.190.196
|
unknown
|
United States
|
||
142.250.217.228
|
www.google.com
|
United States
|
||
35.190.80.1
|
a.nel.cloudflare.com
|
United States
|
||
192.168.2.4
|
unknown
|
unknown
|
||
104.17.3.184
|
challenges.cloudflare.com
|
United States
|
DOM / HTML
URL
|
Malicious
|
|
---|---|---|
https://powerpointmicrosoftoffice.top/
|
||
https://powerpointmicrosoftoffice.top/
|
||
https://powerpointmicrosoftoffice.top/
|
||
https://powerpointmicrosoftoffice.top/
|
||
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/m0mz0/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
|
||
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/m0mz0/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
|
||
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/m0mz0/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
|
||
https://powerpointmicrosoftoffice.top/cgi-sys/defaultwebpage.cgi
|