Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Aug 3 21:55:27 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Aug 3 21:55:27 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Aug 3 21:55:27 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Aug 3 21:55:27 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Aug 3 21:55:27 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
Chrome Cache Entry: 72
|
PNG image data, 30 x 28, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 73
|
PNG image data, 51 x 51, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 74
|
PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 75
|
ASCII text, with very long lines (32030)
|
downloaded
|
||
|
Chrome Cache Entry: 76
|
PNG image data, 51 x 51, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 77
|
ASCII text, with very long lines (19015)
|
downloaded
|
||
|
Chrome Cache Entry: 78
|
Web Open Font Format (Version 2), TrueType, length 7816, version 1.0
|
downloaded
|
||
|
Chrome Cache Entry: 79
|
PNG image data, 30 x 28, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 80
|
ASCII text, with very long lines (32065)
|
dropped
|
||
|
Chrome Cache Entry: 81
|
ASCII text, with very long lines (1100), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 82
|
ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 83
|
ASCII text, with very long lines (502)
|
dropped
|
||
|
Chrome Cache Entry: 84
|
Web Open Font Format (Version 2), TrueType, length 5552, version 1.0
|
downloaded
|
||
|
Chrome Cache Entry: 85
|
PNG image data, 440 x 87, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 86
|
ASCII text, with very long lines (32065)
|
downloaded
|
||
|
Chrome Cache Entry: 87
|
ASCII text
|
dropped
|
||
|
Chrome Cache Entry: 88
|
PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 89
|
PNG image data, 197 x 46, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 90
|
PNG image data, 440 x 87, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 91
|
ASCII text, with very long lines (502)
|
downloaded
|
||
|
Chrome Cache Entry: 92
|
ASCII text, with very long lines (32030)
|
dropped
|
||
|
Chrome Cache Entry: 93
|
PNG image data, 197 x 46, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 94
|
PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 95
|
ASCII text, with very long lines (19015)
|
dropped
|
||
|
Chrome Cache Entry: 96
|
ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 97
|
PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 98
|
Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
|
downloaded
|
||
|
Chrome Cache Entry: 99
|
HTML document, Unicode text, UTF-8 text, with very long lines (2144), with CRLF line terminators
|
downloaded
|
There are 25 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US
--service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1992,i,9219879380406942620,8488647546866891641,262144
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
/prefetch:8
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/index.html"
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/index.html
|
 |
||
|
https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/index.html
|
|
||
|
https://bugs.webkit.org/show_bug.cgi?id=136851
|
unknown
|
||
|
http://jquery.org/license
|
unknown
|
||
|
https://jsperf.com/thor-indexof-vs-for/5
|
unknown
|
||
|
https://bugs.jquery.com/ticket/12359
|
unknown
|
||
|
https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
|
unknown
|
||
|
https://html.spec.whatwg.org/#strip-and-collapse-whitespace
|
unknown
|
||
|
https://promisesaplus.com/#point-75
|
unknown
|
||
|
https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a
|
unknown
|
||
|
https://drafts.csswg.org/cssom/#common-serializing-idioms
|
unknown
|
||
|
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
|
unknown
|
||
|
https://bugs.webkit.org/show_bug.cgi?id=29084
|
unknown
|
||
|
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace
|
unknown
|
||
|
https://github.com/eslint/eslint/issues/6125
|
unknown
|
||
|
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
|
unknown
|
||
|
https://github.com/jquery/jquery/pull/557)
|
unknown
|
||
|
https://bugs.chromium.org/p/chromium/issues/detail?id=378607
|
unknown
|
||
|
https://gtomitsuka.github.io/gibberish-detector.js/gibberish.min.js
|
185.199.109.153
|
||
|
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
|
unknown
|
||
|
https://bestfilltype.netlify.app/full.png
|
35.156.224.161
|
||
|
https://bugzilla.mozilla.org/show_bug.cgi?id=687787
|
unknown
|
||
|
https://kandhsiahfh.publicvm.com/psa.php
|
unknown
|
||
|
https://bugs.chromium.org/p/chromium/issues/detail?id=470258
|
unknown
|
||
|
http://opensource.org/licenses/MIT).
|
unknown
|
||
|
https://bugs.jquery.com/ticket/13378
|
unknown
|
||
|
https://promisesaplus.com/#point-64
|
unknown
|
||
|
https://bestfilltype.netlify.app/confirm.png
|
35.156.224.161
|
||
|
https://promisesaplus.com/#point-61
|
unknown
|
||
|
https://bestfilltype.netlify.app/eye-open.png
|
unknown
|
||
|
https://drafts.csswg.org/cssom/#resolved-values
|
unknown
|
||
|
https://bugs.chromium.org/p/chromium/issues/detail?id=589347
|
unknown
|
||
|
https://code.jquery.com/jquery-3.1.1.min.js
|
151.101.2.137
|
||
|
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
|
unknown
|
||
|
https://metamask.io/
|
unknown
|
||
|
https://promisesaplus.com/#point-59
|
unknown
|
||
|
https://jsperf.com/getall-vs-sizzle/2
|
unknown
|
||
|
https://promisesaplus.com/#point-57
|
unknown
|
||
|
https://github.com/eslint/eslint/issues/3229
|
unknown
|
||
|
https://promisesaplus.com/#point-54
|
unknown
|
||
|
https://code.jquery.com/jquery-3.3.1.js
|
151.101.2.137
|
||
|
https://html.spec.whatwg.org/multipage/forms.html#category-listed
|
unknown
|
||
|
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
|
unknown
|