IOC Report
https://cdp1.tracking.e360.salesforce.com/click?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ0ZW5hbnRfaWQiOiJhMzYwL3Byb2QvNTBhMGYyODg2ZTg4NDA3Y2I1ODUwYmRjOWQwZGIxZTUiLCJjcmVhdGlvbl90aW1lIjoxNzE0MTQxMDYyLCJtZXNzYWdlX2lkIjoiMGd5MHB6amd2a3hmeTlnN24wNzkzdzQ3IzIzYWUwMmFhLWVjMDQtNGYwMy1iODk3LWM4NjMyYzU3ZDI

loading gif

Files

File Path
Type
Category
Malicious
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 17:56:37 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 17:56:37 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 17:56:37 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 17:56:37 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 17:56:37 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
Chrome Cache Entry: 72
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 73
ASCII text, with very long lines (631)
downloaded
Chrome Cache Entry: 74
HTML document, ASCII text
dropped
Chrome Cache Entry: 75
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 77
ASCII text, with very long lines (1256), with no line terminators
downloaded
Chrome Cache Entry: 78
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 79
Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
downloaded
Chrome Cache Entry: 80
ASCII text, with very long lines (65447)
downloaded
Chrome Cache Entry: 82
gzip compressed data, from Unix, original size modulo 2^32 4747
downloaded
Chrome Cache Entry: 84
Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
downloaded
Chrome Cache Entry: 86
Unicode text, UTF-8 text
downloaded
Chrome Cache Entry: 87
ASCII text, with very long lines (17673)
downloaded
Chrome Cache Entry: 88
HTML document, ASCII text
downloaded
Chrome Cache Entry: 89
ASCII text
downloaded
Chrome Cache Entry: 90
HTML document, ASCII text
downloaded
Chrome Cache Entry: 91
ASCII text, with very long lines (56412), with no line terminators
downloaded
Chrome Cache Entry: 92
HTML document, ASCII text
downloaded
Chrome Cache Entry: 93
MS Windows icon resource - 3 icons, 16x16, 8 bits/pixel, 32x32, 8 bits/pixel
downloaded
There are 15 hidden files, click here to show them.

URLs

Name
IP
Malicious
https://cdp1.tracking.e360.salesforce.com/click?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.HuxvS7w7UGVjl7M8LBH9yLcIGAIbx_lymrlb7oZbnQ4
malicious
https://sean-fuellhart.bradentoncc.store/index0.php
http://www.iana.org/help/example-domains
about:blank
https://example.com/
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf&co=aHR0cHM6Ly9zZWFuLWZ1ZWxsaGFydC5icmFkZW50b25jYy5zdG9yZTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=wcsj7tyow2kk

Domains

Name
IP
Malicious
pti.vip.icann.org
192.0.33.10
sean-fuellhart.bradentoncc.store
188.116.24.148
migconsultings.com
82.180.161.153
vmmessanger.rdocmglobal.com
38.180.91.41
www.google.com
192.178.50.36
global-cdp1.sfdc-yfeipo.svc.sfdcfc.net
3.94.175.225
example.com
93.184.215.14
ianawww.vip.icann.org
192.0.33.8
href.li
192.0.78.26
www.vip.icann.org
192.0.32.7
cdp1.tracking.e360.salesforce.com
unknown
www.iana.org
unknown
pti.icann.org
unknown
www.icann.org
unknown
There are 4 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
192.178.50.36
www.google.com
United States
3.94.175.225
global-cdp1.sfdc-yfeipo.svc.sfdcfc.net
United States
192.0.33.8
ianawww.vip.icann.org
United States
188.116.24.148
sean-fuellhart.bradentoncc.store
Poland
192.178.50.78
unknown
United States
1.1.1.1
unknown
Australia
192.178.50.68
unknown
United States
142.250.64.228
unknown
United States
172.217.15.195
unknown
United States
192.168.2.16
unknown
unknown
142.250.217.227
unknown
United States
173.194.215.84
unknown
United States
142.250.64.195
unknown
United States
192.0.78.26
href.li
United States
239.255.255.250
unknown
Reserved
142.251.35.238
unknown
United States
172.217.165.195
unknown
United States
172.217.3.68
unknown
United States
93.184.215.14
example.com
European Union
38.180.91.41
vmmessanger.rdocmglobal.com
United States
82.180.161.153
migconsultings.com
Denmark
172.217.3.74
unknown
United States
There are 12 hidden IPs, click here to show them.