Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 07:55:03 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 07:55:02 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 07:55:02 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 07:55:02 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 07:55:02 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
Chrome Cache Entry: 65
|
ASCII text, with very long lines (42414)
|
downloaded
|
||
|
Chrome Cache Entry: 66
|
PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 67
|
HTML document, Unicode text, UTF-8 text, with very long lines (4070)
|
downloaded
|
||
|
Chrome Cache Entry: 68
|
HTML document, ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 69
|
PNG image data, 34 x 93, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 70
|
PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 71
|
HTML document, ASCII text, with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 72
|
PNG image data, 34 x 93, 8-bit/color RGB, non-interlaced
|
downloaded
|
There are 5 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US
--service-sandbox-type=none --mojo-platform-channel-handle=2028 --field-trial-handle=1996,i,14632231132547642991,12750155532316925665,262144
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
/prefetch:8
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://deebmpapst.ordineproposal.top/"
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://deebmpapst.ordineproposal.top/
|
 |
||
|
https://deebmpapst.ordineproposal.top/
|
|
||
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=87a55a19c9d6a66b
|
104.17.3.184
|
||
|
https://deebmpapst.ordineproposal.top/cdn-cgi/challenge-platform/h/b/flow/ov1/1403700281:1714119858:yqI63kZBtAcyomlATUdxZBk-LRPe3ncvy2aZ4Foa9nk/87a55a0a2e8cdacd/3fb542a5d372857
|
104.21.94.153
|
||
|
https://a.nel.cloudflare.com/report/v4?s=B3PAHhMEaNw6GNPkR7PIFMH6zbHBXSSvIOTzZQOgPwBBW8MW%2BQanTiRnwNCfwbgSmfM9ZiMhO%2BdOmpLYtNhcfw19PiAbReNDHAtNDrc%2BFzdXvzQRoTCdVLq3PnVrpRGkCoVn8oeIWDf8APd52mBfSA%3D%3D
|
35.190.80.1
|
||
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/da6vv/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
|
|||
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1708621942:1714120166:LyikXyg9OrKVuTgbQkMC108s381h6XChHrSKL8eiK7c/87a55a19c9d6a66b/981f9f2dc173676
|
104.17.3.184
|
||
|
https://a.nel.cloudflare.com/report/v4?s=Vhqt4vhslNQaR9EMin9LfCEra8moCuolsfp7yn2KtDPjGLvhopb5tiG2qEpk5N9f%2FsPqyZ1AYnlEzV5YNfubhsjMjBc34k8s2fh7MBejs3sXK5u3ChjcVTnjU7i0UMMqlS1w4tDTic2AQkzj6cq6ZA%3D%3D
|
35.190.80.1
|
||
|
https://deebmpapst.ordineproposal.top/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=87a55a0a2e8cdacd
|
104.21.94.153
|
||
|
http://cpanel.com/?utm_source=cpanelwhm&utm_medium=cplogo&utm_content=logolink&utm_campaign=404refer
|
unknown
|
||
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
|
104.17.3.184
|
||
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/87a55a19c9d6a66b/1714121711989/N7F04tgjJMXsIfP
|
104.17.3.184
|
||
|
https://deebmpapst.ordineproposal.top/cgi-sys/defaultwebpage.cgi
|
|||
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/87a55a19c9d6a66b/1714121711987/04a037b46efdb765b574f73461618fe5a1bc46ff0ee646943f5e81a568c81118/m67LzLUYO3OIT6G
|
104.17.3.184
|
||
|
https://deebmpapst.ordineproposal.top/favicon.ico
|
104.21.94.153
|
||
|
https://a.nel.cloudflare.com/report/v4?s=gB2Xa%2FM7XIkh7n%2FUjYpcUq0CvTkW9lhhTiA%2BjLsKDu5MkhE3lxciB6fyjTNkIdKII1lhgxgl6WVq06qomWghXtpIBm6J4HjsD6ZwxXWxEkjzYc0exdff7YP4YRIjPgeslPkw9S2RZ7j3MiifDlTTlA%3D%3D
|
35.190.80.1
|
There are 5 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
a.nel.cloudflare.com
|
35.190.80.1
|
||
|
deebmpapst.ordineproposal.top
|
104.21.94.153
|
||
|
challenges.cloudflare.com
|
104.17.2.184
|
||
|
www.google.com
|
192.178.50.68
|
||
|
fp2e7a.wpc.phicdn.net
|
192.229.211.108
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
192.178.50.68
|
www.google.com
|
United States
|
||
|
104.21.94.153
|
deebmpapst.ordineproposal.top
|
United States
|
||
|
192.168.2.5
|
unknown
|
unknown
|
||
|
104.17.3.184
|
unknown
|
United States
|
||
|
172.67.137.200
|
unknown
|
United States
|
||
|
239.255.255.250
|
unknown
|
Reserved
|
||
|
35.190.80.1
|
a.nel.cloudflare.com
|
United States
|
||
|
104.17.2.184
|
challenges.cloudflare.com
|
United States
|
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://deebmpapst.ordineproposal.top/
|
||
|
https://deebmpapst.ordineproposal.top/
|
||
|
https://deebmpapst.ordineproposal.top/
|
||
|
https://deebmpapst.ordineproposal.top/
|
||
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/da6vv/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
|
||
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/da6vv/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
|
||
|
https://deebmpapst.ordineproposal.top/cgi-sys/defaultwebpage.cgi
|