Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Saint Charles Borromeo Seminary-Wprckny.pdf
|
PDF document, version 1.7, 1 pages
|
initial sample
|
 |
|
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\3e8038ac-f0ad-448b-964f-7e66cb507353.tmp
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State~RF4152b7.TMP (copy)
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\c72df0f3-6e6d-41d4-8081-bd4bb0d1027f.tmp
|
JSON data
|
modified
|
||
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-240508181200Z-160.bmp
|
PC bitmap, Windows 3.x format, 117 x -152 x 32, cbSize 71190, bits offset 54
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages
|
SQLite 3.x database, last written using SQLite version 3040000, file counter 2, database pages 14, cookie 0x5, schema 4, UTF-8,
version-valid-for 2
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal
|
SQLite Rollback Journal
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.4360
|
PostScript document text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst (copy)
|
PostScript document text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Sign_LHP_Banner
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Upsell_Cards
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\Edit_InApp_Aug2020
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents
|
SQLite 3.x database, last written using SQLite version 3040000, file counter 19, database pages 3, cookie 0x2, schema 4, UTF-8,
version-valid-for 19
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal
|
SQLite Rollback Journal
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\MSI9aa2.LOG
|
Unicode text, UTF-16, little-endian text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-05-08 20-11-58-565.log
|
ASCII text, with very long lines (393)
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log
|
ASCII text, with very long lines (393), with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\acrocef_low\35514245-7d4e-4cc8-8f04-0cf46e74c8a1.tmp
|
gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 33081
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\acrocef_low\545b749a-00c1-44a1-a62e-10d2e7dd0b8f.tmp
|
gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\acrocef_low\eb0e372f-203c-4cb3-9027-315403f2a249.tmp
|
gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\acrocef_low\ecb2d0be-4a06-4b32-86e0-73f1038d4c0c.tmp
|
gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed May 8 17:12:30 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed May 8 17:12:30 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed May 8 17:12:30 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed May 8 17:12:30 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed May 8 17:12:30 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
Chrome Cache Entry: 177
|
SVG Scalable Vector Graphics image
|
dropped
|
||
|
Chrome Cache Entry: 178
|
PNG image data, 90 x 33, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 179
|
JSON data
|
dropped
|
||
|
Chrome Cache Entry: 180
|
PNG image data, 108 x 24, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 181
|
PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 182
|
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 183
|
HTML document, ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 184
|
Web Open Font Format (Version 2), TrueType, length 93276, version 1.0
|
downloaded
|
||
|
Chrome Cache Entry: 185
|
SVG Scalable Vector Graphics image
|
downloaded
|
||
|
Chrome Cache Entry: 186
|
Web Open Font Format, TrueType, length 35970, version 1.0
|
downloaded
|
||
|
Chrome Cache Entry: 187
|
JSON data
|
downloaded
|
||
|
Chrome Cache Entry: 188
|
Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 189
|
SVG Scalable Vector Graphics image
|
dropped
|
||
|
Chrome Cache Entry: 190
|
Web Open Font Format, TrueType, length 36696, version 1.0
|
downloaded
|
||
|
Chrome Cache Entry: 191
|
ASCII text, with very long lines (23398), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 192
|
SVG Scalable Vector Graphics image
|
dropped
|
||
|
Chrome Cache Entry: 193
|
ASCII text, with very long lines (45667)
|
downloaded
|
||
|
Chrome Cache Entry: 194
|
SVG Scalable Vector Graphics image
|
dropped
|
||
|
Chrome Cache Entry: 195
|
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 196
|
SVG Scalable Vector Graphics image
|
downloaded
|
||
|
Chrome Cache Entry: 197
|
ASCII text, with very long lines (1222), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 198
|
PNG image data, 90 x 33, 8-bit/color RGB, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 199
|
SVG Scalable Vector Graphics image
|
downloaded
|
||
|
Chrome Cache Entry: 200
|
Web Open Font Format (Version 2), TrueType, length 43596, version 1.0
|
downloaded
|
||
|
Chrome Cache Entry: 201
|
PNG image data, 2446 x 899, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 202
|
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 203
|
PNG image data, 2160 x 443, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 204
|
ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 205
|
Web Open Font Format (Version 2), TrueType, length 28000, version 1.66
|
downloaded
|
||
|
Chrome Cache Entry: 206
|
Web Open Font Format (Version 2), TrueType, length 28584, version 1.66
|
downloaded
|
||
|
Chrome Cache Entry: 207
|
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 208
|
PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 209
|
PNG image data, 2446 x 899, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 210
|
SVG Scalable Vector Graphics image
|
downloaded
|
||
|
Chrome Cache Entry: 211
|
ASCII text, with very long lines (631)
|
downloaded
|
||
|
Chrome Cache Entry: 212
|
SVG Scalable Vector Graphics image
|
downloaded
|
||
|
Chrome Cache Entry: 213
|
HTML document, ASCII text, with very long lines (1445), with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 214
|
JSON data
|
dropped
|
||
|
Chrome Cache Entry: 215
|
PNG image data, 506 x 303, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 216
|
JSON data
|
downloaded
|
||
|
Chrome Cache Entry: 217
|
PNG image data, 506 x 303, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 218
|
ASCII text, with very long lines (42565)
|
downloaded
|
||
|
Chrome Cache Entry: 219
|
ASCII text, with very long lines (1437), with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 220
|
SVG Scalable Vector Graphics image
|
dropped
|
||
|
Chrome Cache Entry: 221
|
PNG image data, 108 x 24, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 222
|
ASCII text, with very long lines (65447)
|
downloaded
|
||
|
Chrome Cache Entry: 223
|
HTML document, ASCII text, with very long lines (65209), with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 224
|
PNG image data, 2160 x 443, 8-bit/color RGBA, non-interlaced
|
downloaded
|
There are 89 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
|
"C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Saint Charles Borromeo Seminary-Wprckny.pdf"
|
||
|
C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
|
"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
|
||
|
C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
|
"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService
--lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0"
--lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2160
--field-trial-handle=1628,i,15175157218959621648,12133064567235996358,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker
/prefetch:8
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://ad.doubleclick.net/clk;265186560;90846275;t;pc=%5BTPAS_ID%5D?//telefornication.com/css/admin/file/hthehdkshjjsn/ojkcisnckbdshciudcbjdss/8929/mmclaughlin@scs.edu##
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US
--service-sandbox-type=none --mojo-platform-channel-handle=2204 --field-trial-handle=1940,i,3111557400391393984,2327874427274712486,262144
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
/prefetch:8
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://0n18pyx-clickadservices-rebooot0fa.foeclec.com/bpjiozdwnoemutrqztovpdwymxcWJZMCHPDMTJRGPSQWUVAXVQYTCRCEYHUKZATIKRJJLFXXXIMUHIRXS?2781104361947147400jsZikTMFTKAPXDFGAXBPRMSOCJOCGFLNDVJPVQ
|
|
||
|
https://code.jquery.com/jquery-3.6.0.min.js
|
151.101.66.137
|
||
|
https://developers.google.com/recaptcha/docs/faq#localhost_support
|
unknown
|
||
|
https://ad.doubleclick.net/clk;265186560;90846275;t;pc=%5BTPAS_ID%5D?//telefornication.com/css/admin/file/hthehdkshjjsn/ojkcisnckbdshciudcbjdss/8929/mmclaughlin@scs.edu
|
142.251.33.70
|
||
|
https://0n18pyx-clickadservices-rebooot0fa.foeclec.com/efe0FwcSrW02P356lNUUbLQa82mn100
|
104.21.15.140
|
||
|
https://0n18pyx-clickadservices-rebooot0fa.foeclec.com/xynV5WTpq6pef30
|
104.21.15.140
|
||
|
https://0n18pyx-clickadservices-rebooot0fa.foeclec.com/23FMnyUutKWXvsdabgp1irvw70
|
104.21.15.140
|
||
|
https://support.google.com/recaptcha#6262736
|
unknown
|
||
|
https://support.google.com/recaptcha/?hl=en#6223828
|
unknown
|
||
|
https://cloud.google.com/contact
|
unknown
|
||
|
https://0n18pyx-clickadservices-rebooot0fa.foeclec.com/7FF88B1/?jHmmclaughlin@scs.edu
|
104.21.15.140
|
||
|
https://0n18pyx-clickadservices-rebooot0fa.foeclec.com/klD379FF2GM6zPm33HgL5klVO4I4SQpHwx80Z7Yl1r1coRtBxGS3beU878163
|
104.21.15.140
|
||
|
https://0n18pyx-clickadservices-rebooot0fa.foeclec.com/89hjocAARSebIS27gFLCdefRWidDS8kUab76
|
104.21.15.140
|
||
|
https://www.google.com/recaptcha/api.js
|
142.250.69.196
|
||
|
https://support.google.com/recaptcha/#6175971
|
unknown
|
||
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/l704j/0x4AAAAAAAXFrE9g55weHUfb/auto/normal
|
|||
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
|
104.17.3.184
|
||
|
https://www.gstatic.c..?/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__.
|
unknown
|
||
|
https://telefornication.com/css/admin/file/hthehdkshjjsn/ojkcisnckbdshciudcbjdss/8929/mmclaughlin@scs.edu##
|
|||
|
https://0n18pyx-clickadservices-rebooot0fa.foeclec.com/web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket
|
104.21.15.140
|
||
|
https://0n18pyx-clickadservices-rebooot0fa.foeclec.com/7FF88B1/#Hmmclaughlin@scs.edu
|
|||
|
https://www.google.com/recaptcha/api2/
|
unknown
|
||
|
https://support.google.com/recaptcha
|
unknown
|
||
|
https://0n18pyx-clickadservices-rebooot0fa.foeclec.com/7FF88B1/
|
104.21.15.140
|
||
|
https://0n18pyx-clickadservices-rebooot0fa.foeclec.com/12WoOwl2EBsyE56UvkVt2kJop49
|
104.21.15.140
|
||
|
https://telefornication.com/css/admin/file/hthehdkshjjsn/ojkcisnckbdshciudcbjdss/8929/mmclaughlin@scs.edu
|
66.29.134.201
|
||
|
https://chrome.cloudflare-dns.com
|
unknown
|
||
|
https://0n18pyx-clickadservices-rebooot0fa.foeclec.com/favicon.ico
|
104.21.15.140
|
||
|
https://telefornication.com/favicon.ico
|
66.29.134.201
|
||
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=880b6b356a282766
|
104.17.3.184
|
||
|
https://0n18pyx-clickadservices-rebooot0fa.foeclec.com/zu1fyxZK9POg2bBgIN1dk26NB5O25su
|
104.21.15.140
|
||
|
https://0n18pyx-clickadservices-rebooot0fa.foeclec.com/34XulaQandSR5aTPghBsor84ndx89103
|
104.21.15.140
|
||
|
https://0n18pyx-clickadservices-rebooot0fa.foeclec.com/opbVIbbiIjSZq4kw2Hc7sTSmbHWJiruv16eLwu5PtXm7oiXGRy20hh485cd240
|
104.21.15.140
|
||
|
https://0n18pyx-clickadservices-rebooot0fa.foeclec.com/qzgXe6GTtpy9MQNktQ1m82zcabjeVXbE6XxvQzPom7
|
104.21.15.140
|
||
|
https://cloud.google.com/recaptcha-enterprise/billing-information
|
unknown
|
||
|
https://recaptcha.net
|
unknown
|
||
|
https://www.apache.org/licenses/
|
unknown
|
||
|
https://0n18pyx-clickadservices-rebooot0fa.foeclec.com/wxFxGKaXJ1Sdy5frlO0QjLSY7SGnzx9ErsCrLXZu7niTdftqH1J4qdvt0jG90180
|
104.21.15.140
|
||
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/830379481:1715189460:4WJq2FlgaBnGPk-EL3xJ9pAJ6u5-Y1Cc3OADuoMfqYo/880b6b356a282766/84d6ba6304ae385
|
104.17.3.184
|
||
|
https://0n18pyx-clickadservices-rebooot0fa.foeclec.com/stJHdx5abCDRUWhdXjmVIv3zo2ry8Mmnl7DqPy6KQiYHAxqLL9JOrSrQVeGnjcq8gh252
|
104.21.15.140
|
||
|
https://0n18pyx-clickadservices-rebooot0fa.foeclec.com/56GlYvF8v8vmR1Rn676aHEust55
|
104.21.15.140
|
||
|
https://httpbin.org/ip
|
54.160.164.209
|
||
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/880b6b356a282766/1715191956873/EUH-Q4aQROypa1l
|
104.17.3.184
|
||
|
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
|
unknown
|
||
|
https://ipapi.co/81.181.60.92/json/
|
172.67.69.226
|
||
|
https://play.google.com/log?format=json&hasfast=true
|
unknown
|
||
|
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
|
unknown
|
||
|
https://0n18pyx-clickadservices-rebooot0fa.foeclec.com/ijFTkgLR5Efre1T29FYi4mZsJ0xy5FLOyx1t1pBM6XxEeSqEaWM6gGZRb12210
|
104.21.15.140
|
||
|
https://cdn.socket.io/4.6.0/socket.io.min.js
|
99.86.38.103
|
||
|
https://0n18pyx-clickadservices-rebooot0fa.foeclec.com/rsU9Eqel6oXFg542R0Y7uK4Ff2sJKZkM88HuvPqoKUfUqAEELfv1t5GmNJ6cfSy4J0cd200
|
104.21.15.140
|
||
|
https://a.nel.cloudflare.com/report/v4?s=xyBwLunhQ%2ByYlfUN34F22uFBH7Cd2HYf63gShBn2iZoqpSmykB7uA4XxYIwHAjOw7i2oAIT4%2BlHi8bSlPYjMFbcAk5PCyRFj%2FUEvwhhQjuBYmicNsxfv6HuIV%2BJeQQ%3D%3D
|
35.190.80.1
|
||
|
https://ad.doubleclick.net/clk;265186560;90846275;t;pc=%5BTPAS_ID%5D?//telefornication.com/css/admin
|
unknown
|
||
|
https://challenges.cloudflare.com/turnstile/v0/b/ce7818f50e39/api.js
|
104.17.2.184
|
||
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/880b6b356a282766/1715191956877/5f91988cb904a772a0d7013b0eebdf49616ba81fc4a186eda4e2c4c46e2c8d0b/vUcqapM6Nl_iDO3
|
104.17.3.184
|
||
|
https://0n18pyx-clickadservices-rebooot0fa.foeclec.com/rsDaFFHlAZCVklAUguHuyzvbqKJluv31
|
104.21.15.140
|
||
|
https://0n18pyx-clickadservices-rebooot0fa.foeclec.com/56AdOYKMMLgoJxyRlCwu18915
|
104.21.15.140
|
||
|
https://a.nel.cloudflare.com/report/v4?s=%2FzQrYwphdkQ9cRlxtCzeadwr8bJsrSW5JVzzaf%2Fj2CvBEQvx%2BPRky%2FVJ42nvfO54nnICGL9l21TisUaXQLbX%2Bv7EK%2FAnmEFTxrJcF2Cm4kSNFS%2FH5hHbHpaXQBDfvQ%3D%3D
|
35.190.80.1
|
||
|
https://0n18pyx-clickadservices-rebooot0fa.foeclec.com/mnd5uDf70EKBz5cwqXlyQ3qijWRFcxrrFTVjS278142
|
104.21.15.140
|
||
|
https://0n18pyx-clickadservices-rebooot0fa.foeclec.com/klU9KZQ56usLE89rVZhW6EvSGnlmL6U9fLwsF2zEvKwopEY9bQKaO7rWoafPGfbDjab230
|
104.21.15.140
|
||
|
https://0n18pyx-clickadservices-rebooot0fa.foeclec.com/qrYOIGH4BKN8SNOJLeflWipzJBhyIs3HEHEROTD45140
|
104.21.15.140
|
There are 50 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
0n18pyx-clickadservices-rebooot0fa.foeclec.com
|
104.21.15.140
|
|
|
|
ipapi.co
|
172.67.69.226
|
||
|
a.nel.cloudflare.com
|
35.190.80.1
|
||
|
code.jquery.com
|
151.101.66.137
|
||
|
d2vgu95hoyrpkh.cloudfront.net
|
99.86.38.103
|
||
|
challenges.cloudflare.com
|
104.17.2.184
|
||
|
www.google.com
|
172.217.14.228
|
||
|
telefornication.com
|
66.29.134.201
|
||
|
httpbin.org
|
54.160.164.209
|
||
|
cdn.socket.io
|
unknown
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
104.21.15.140
|
0n18pyx-clickadservices-rebooot0fa.foeclec.com
|
United States
|
|
|
|
172.217.14.228
|
www.google.com
|
United States
|
||
|
54.160.164.209
|
httpbin.org
|
United States
|
||
|
192.168.2.16
|
unknown
|
unknown
|
||
|
104.17.3.184
|
unknown
|
United States
|
||
|
66.29.134.201
|
telefornication.com
|
United States
|
||
|
173.222.196.143
|
unknown
|
United States
|
||
|
142.250.69.196
|
unknown
|
United States
|
||
|
151.101.66.137
|
code.jquery.com
|
United States
|
||
|
35.190.80.1
|
a.nel.cloudflare.com
|
United States
|
||
|
172.67.69.226
|
ipapi.co
|
United States
|
||
|
3.231.248.100
|
unknown
|
United States
|
||
|
104.26.9.44
|
unknown
|
United States
|
||
|
142.251.33.70
|
unknown
|
United States
|
||
|
239.255.255.250
|
unknown
|
Reserved
|
||
|
192.168.2.15
|
unknown
|
unknown
|
||
|
99.86.38.103
|
d2vgu95hoyrpkh.cloudfront.net
|
United States
|
||
|
104.17.2.184
|
challenges.cloudflare.com
|
United States
|
There are 8 hidden IPs, click here to show them.
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
|
aFS
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
|
tDIText
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
|
tFileName
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
|
tFileSource
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
|
sFileAncestors
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
|
sDI
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
|
sDate
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
|
uFileSize
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
|
uPageCount
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
|
sAssetId
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
|
bisSharedFile
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c2
|
aFS
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c2
|
tDIText
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c2
|
tFileName
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c2
|
sDI
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c2
|
sDate
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c2
|
uFileSize
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c2
|
uPageCount
|
There are 8 hidden registries, click here to show them.
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://0n18pyx-clickadservices-rebooot0fa.foeclec.com/bpjiozdwnoemutrqztovpdwymxcWJZMCHPDMTJRGPSQWUVAXVQYTCRCEYHUKZATIKRJJLFXXXIMUHIRXS?2781104361947147400jsZikTMFTKAPXDFGAXBPRMSOCJOCGFLNDVJPVQ
|
|
|
|
https://0n18pyx-clickadservices-rebooot0fa.foeclec.com/bpjiozdwnoemutrqztovpdwymxcWJZMCHPDMTJRGPSQWUVAXVQYTCRCEYHUKZATIKRJJLFXXXIMUHIRXS?2781104361947147400jsZikTMFTKAPXDFGAXBPRMSOCJOCGFLNDVJPVQ
|
|
|
|
https://telefornication.com/css/admin/file/hthehdkshjjsn/ojkcisnckbdshciudcbjdss/8929/mmclaughlin@scs.edu##
|
||
|
https://0n18pyx-clickadservices-rebooot0fa.foeclec.com/7FF88B1/#Hmmclaughlin@scs.edu
|
||
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/l704j/0x4AAAAAAAXFrE9g55weHUfb/auto/normal
|
||
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/l704j/0x4AAAAAAAXFrE9g55weHUfb/auto/normal
|