Edit tour

Windows Analysis Report
http://aptbusinessservices.com.au/

Overview

General Information

Sample URL:	http://aptbusinessservices.com.au/
Analysis ID:	1623296
Infos:

Detection

Score:	56
Range:	0 - 100
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Detected non-DNS traffic on DNS port

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5644 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6480 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1976,i,10148314318684945854,7829767398855389392,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7124 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://aptbusinessservices.com.au/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Suricata Signatures

ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-02-25T05:21:02.522624+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.5	50068	216.239.36.181	443	TCP

HTTP traffic detected: POST /cdn-cgi/rum? HTTP/1.1Host: aptbusinessservices.com.auConnection: keep-aliveContent-Length: 1776sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonAccept: */*Origin: https://aptbusinessservices.com.auSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://aptbusinessservices.com.au/apt_quote/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://aptbusinessservices.com.au/wp-json/wp/v2/pages/149	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/uploads/2023/10/apt.png	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/xmlrpc.php?rsd	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/css/widget-social-icons.min.c	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/your-industry/property/	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/plugins/honeypot/includes/css/wpa.css?ver=2.2.06	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.mi	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/about-us/life-at-apt/	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/uploads/2023/11/apt-arrow-pale-bg.png	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-includes/js/jquery/jquery.min.js?ver=3.7.1	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/plugins/elementskit-lite/widgets/init/assets/js/elementor.js?ver=3.3.8	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/plugins/elementskit-lite/modules/elementskit-icon-pack	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/plugins/elementskit-lite/widgets/init/assets/css/responsive.css?ver=3.3.8	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/plugins/elementor-pro/assets/js/preloaded-elements-handlers.min.js?ver=3.7.3	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/css/widget-spacer.min.css?ver=3.27.6	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/plugins/elementskit-lite/widgets/init/assets/css/widget-styles.css?ver=3.3.8	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-includes/js/wp-emoji-release.min.js?ver=6.7.2	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/css/widget-heading.min.css?ve	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/cdn-cgi/rum?	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/apt_quote/	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/about-us/our-team/	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-json/oembed/1.0/embed?url=https%3A%2F%2Faptbusinessservices.co	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.3	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/css/widget-social-icons.min.css?ver=3.27.6	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/uploads/2023/10/apt-business-services-1-300x300.png	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-json/	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/uploads/2023/11/apt-Ellipse-1.png	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/plugins/elementskit-lite/widgets/init/assets/js/widget-scripts.js?ver=3.3.8	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/about-us/	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.27.6	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.27.6	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/careers/	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/plugins/elementskit-lite/modules/elementskit-icon-pack/assets/css/ekiticons.css?ver=3.3.8	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/contact-us/	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/uploads/2024/01/banner-2.jpg	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.7.3	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/plugins/honeypot/includes/js/wpa.js?ver=2.2.06	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/plugins/elementor-pro/assets/js/preloaded-elements-han	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/themes/astra/assets/css/minified/main.min.css?ver=4.8.0	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icon	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/plugins/wp-job-openings/assets/css/style.min.css?ver=3	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.35.0	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/your-industry/finance/	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/plugins/wp-job-openings/assets/css/general.min.css?ver	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/uploads/elementor/css/custom-frontend.min.css?ver=1737	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/uploads/elementor/css/custom-pro-frontend.min.css?ver=1737669917	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/themes/astra/assets/js/minified/flexibility.min.js?ver	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/css/widget-menu-anchor.min.cs	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/uploads/2023/11/local-business-services-1-150x150.png	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/plugins/wp-job-openings/assets/js/script.min.js?ver=3.	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/your-industry/health/	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/uploads/2023/11/apt-arrow-white-bg.png	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/plugins/elementskit-lite/modules/elementskit-icon-pack/assets/fonts/elementskit.woff?y24e1e	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/uploads/elementor/css/custom-apple-webkit.min.css?ver=1737669917	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-json/elementskit/v1/	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/plugins/elementskit-lite/widgets/init/assets/js/animate-circle.min.js?ver=3.3.8	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/uploads/elementor/css/custom-apple-webkit.min.css?ver=	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/your-industry/	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/uploads/2023/10/apt-business-services-1-150x150.png	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.27.6	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/css/widget-text-editor.min.cs	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/plugins/wp-job-openings/assets/js/script.min.js?ver=3.5.0	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/plugins/elementskit-lite/widgets/init/assets/css/widge	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/uploads/2023/11/apt-arrow-1.png	Avira URL Cloud: Label: malware
Source: https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.mi	Avira URL Cloud: Label: malware

Source: https://aptbusinessservices.com.au/	HTTP Parser: Iframe src: https://aptbusinessservices.com.au/apt_quote/
Source: https://aptbusinessservices.com.au/	HTTP Parser: Iframe src: https://aptbusinessservices.com.au/apt_quote/
Source: https://aptbusinessservices.com.au/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-RZ6SSKQLN4&gacid=1861709359.1740457253&gtm=45je52o0v9117549853za200&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101732279~101732281~102067808~102482433~102539968~102558064~102587591~102605417~102640600~102658453~102696396&z=1087408439
Source: https://aptbusinessservices.com.au/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/718823576?random=1740457253147&cv=11&fst=1740457253147&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je52o0v9117549853za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101732279~101732281~102067808~102482433~102539968~102558064~102587591~102605417~102640600~102658453~102696396&u_w=1280&u_h=1024&url=https%3A%2F%2Faptbusinessservices.com.au%2F&hn=www.googleadservices.com&frm=0&tiba=HOME%20-%20APT%20Business%20Services&npa=0&pscdl=noapi&auid=433692935.1740457253&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://aptbusinessservices.com.au/	HTTP Parser: Iframe src: https://aptbusinessservices.com.au/apt_quote/
Source: https://aptbusinessservices.com.au/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-RZ6SSKQLN4&gacid=1861709359.1740457253&gtm=45je52o0v9117549853za200&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101732279~101732281~102067808~102482433~102539968~102558064~102587591~102605417~102640600~102658453~102696396&z=1087408439
Source: https://aptbusinessservices.com.au/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/718823576?random=1740457253147&cv=11&fst=1740457253147&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je52o0v9117549853za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101732279~101732281~102067808~102482433~102539968~102558064~102587591~102605417~102640600~102658453~102696396&u_w=1280&u_h=1024&url=https%3A%2F%2Faptbusinessservices.com.au%2F&hn=www.googleadservices.com&frm=0&tiba=HOME%20-%20APT%20Business%20Services&npa=0&pscdl=noapi&auid=433692935.1740457253&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://aptbusinessservices.com.au/	HTTP Parser: Iframe src: https://aptbusinessservices.com.au/apt_quote/
Source: https://aptbusinessservices.com.au/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-RZ6SSKQLN4&gacid=1861709359.1740457253&gtm=45je52o0v9117549853za200&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101732279~101732281~102067808~102482433~102539968~102558064~102587591~102605417~102640600~102658453~102696396&z=1087408439
Source: https://aptbusinessservices.com.au/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/718823576?random=1740457253147&cv=11&fst=1740457253147&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je52o0v9117549853za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101732279~101732281~102067808~102482433~102539968~102558064~102587591~102605417~102640600~102658453~102696396&u_w=1280&u_h=1024&url=https%3A%2F%2Faptbusinessservices.com.au%2F&hn=www.googleadservices.com&frm=0&tiba=HOME%20-%20APT%20Business%20Services&npa=0&pscdl=noapi&auid=433692935.1740457253&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://aptbusinessservices.com.au/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/718823576?random=1740457258412&cv=11&fst=1740457258412&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je52o0v9117549853za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101732279~101732281~102067808~102482433~102539968~102558064~102587591~102605417~102640600~102658453~102696396&u_w=1280&u_h=1024&url=https%3A%2F%2Faptbusinessservices.com.au%2F&hn=www.googleadservices.com&frm=0&tiba=HOME%20-%20APT%20Business%20Services&npa=0&pscdl=noapi&auid=433692935.1740457253&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dform_start
Source: https://aptbusinessservices.com.au/#get-started	HTTP Parser: Iframe src: https://aptbusinessservices.com.au/apt_quote/
Source: https://aptbusinessservices.com.au/#get-started	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-RZ6SSKQLN4&gacid=1861709359.1740457253&gtm=45je52o0v9117549853za200&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101732279~101732281~102067808~102482433~102539968~102558064~102587591~102605417~102640600~102658453~102696396&z=1087408439
Source: https://aptbusinessservices.com.au/#get-started	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/718823576?random=1740457253147&cv=11&fst=1740457253147&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je52o0v9117549853za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101732279~101732281~102067808~102482433~102539968~102558064~102587591~102605417~102640600~102658453~102696396&u_w=1280&u_h=1024&url=https%3A%2F%2Faptbusinessservices.com.au%2F&hn=www.googleadservices.com&frm=0&tiba=HOME%20-%20APT%20Business%20Services&npa=0&pscdl=noapi&auid=433692935.1740457253&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://aptbusinessservices.com.au/#get-started	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/718823576?random=1740457258412&cv=11&fst=1740457258412&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je52o0v9117549853za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101732279~101732281~102067808~102482433~102539968~102558064~102587591~102605417~102640600~102658453~102696396&u_w=1280&u_h=1024&url=https%3A%2F%2Faptbusinessservices.com.au%2F&hn=www.googleadservices.com&frm=0&tiba=HOME%20-%20APT%20Business%20Services&npa=0&pscdl=noapi&auid=433692935.1740457253&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dform_start

Source: https://aptbusinessservices.com.au/	HTTP Parser: No favicon
Source: https://aptbusinessservices.com.au/	HTTP Parser: No favicon

Source: https://aptbusinessservices.com.au/	HTTP Parser: No <meta name="author".. found
Source: https://aptbusinessservices.com.au/	HTTP Parser: No <meta name="author".. found
Source: https://aptbusinessservices.com.au/	HTTP Parser: No <meta name="author".. found
Source: https://aptbusinessservices.com.au/	HTTP Parser: No <meta name="author".. found
Source: https://aptbusinessservices.com.au/#get-started	HTTP Parser: No <meta name="author".. found

Source: https://aptbusinessservices.com.au/	HTTP Parser: No <meta name="copyright".. found
Source: https://aptbusinessservices.com.au/	HTTP Parser: No <meta name="copyright".. found
Source: https://aptbusinessservices.com.au/	HTTP Parser: No <meta name="copyright".. found
Source: https://aptbusinessservices.com.au/	HTTP Parser: No <meta name="copyright".. found
Source: https://aptbusinessservices.com.au/#get-started	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.131.245
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.131.245
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_184.2.dr	String found in binary or memory: <div class="elementor-element elementor-element-1ffbf6e elementor-widget elementor-widget-video" data-id="1ffbf6e" data-element_type="widget" data-settings="{"youtube_url":"https:\/\/www.youtube.com\/watch?v=1i8RaAZcVMY&ab_channel=APTBusinessServices","video_type":"youtube","controls":"yes"}" data-widget_type="video.default"> equals www.youtube.com (Youtube)
Source: chromecache_184.2.dr	String found in binary or memory: <div class="elementor-element elementor-element-2ab833b elementor-widget elementor-widget-video" data-id="2ab833b" data-element_type="widget" data-settings="{"youtube_url":"https:\/\/www.youtube.com\/watch?v=QDWnomPGiCI&ab_channel=APTBusinessServices","video_type":"youtube","controls":"yes"}" data-widget_type="video.default"> equals www.youtube.com (Youtube)
Source: chromecache_184.2.dr	String found in binary or memory: <div class="elementor-element elementor-element-5c1f98d elementor-widget elementor-widget-video" data-id="5c1f98d" data-element_type="widget" data-settings="{"youtube_url":"https:\/\/www.youtube.com\/watch?v=yguPDRI1op0&ab_channel=APTBusinessServices","video_type":"youtube","controls":"yes"}" data-widget_type="video.default"> equals www.youtube.com (Youtube)
Source: chromecache_184.2.dr	String found in binary or memory: <a class="elementor-icon elementor-social-icon elementor-social-icon-facebook elementor-repeater-item-659afc1" href="https://www.facebook.com/APTBusinessServices" target="_blank"> equals www.facebook.com (Facebook)
Source: chromecache_184.2.dr	String found in binary or memory: <a class="elementor-icon elementor-social-icon elementor-social-icon-linkedin elementor-repeater-item-732c965" href="https://www.linkedin.com/company/aptbs/" target="_blank"> equals www.linkedin.com (Linkedin)
Source: chromecache_184.2.dr	String found in binary or memory: <a class="elementor-icon elementor-social-icon elementor-social-icon-youtube elementor-repeater-item-24e0e80" href="https://www.youtube.com/@aptbusinessservices" target="_blank"> equals www.youtube.com (Youtube)
Source: chromecache_211.2.dr, chromecache_254.2.dr	String found in binary or memory: Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},Fk:function(){e=qb()},Jd:function(){d()}}};var $b=xa(["data-gtm-yt-inspected-"]),EG=["www.youtube.com","www.youtube-nocookie.com"],FG,GG=!1; equals www.youtube.com (Youtube)
Source: chromecache_211.2.dr, chromecache_254.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=qD(a,c,e);R(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return R(122),!0;if(d&&f){for(var m=Bb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},tD=function(){var a=[],b=function(c){return eb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_211.2.dr, chromecache_254.2.dr	String found in binary or memory: if(!(f\|\|g\|\|k\|\|m.length\|\|n.length))return;var q={Ih:f,Gh:g,Hh:k,oi:m,ri:n,jf:p,Mb:e},r=z.YT;if(r)return r.ready&&r.ready(d),e;var t=z.onYouTubeIframeAPIReady;z.onYouTubeIframeAPIReady=function(){t&&t();d()};F(function(){for(var v=B.getElementsByTagName("script"),u=v.length,w=0;w<u;w++){var x=v[w].getAttribute("src");if(PG(x,"iframe_api")\|\|PG(x,"player_api"))return e}for(var y=B.getElementsByTagName("iframe"),A=y.length,C=0;C<A;C++)if(!GG&&NG(y[C],q.jf))return pc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_166.2.dr, chromecache_173.2.dr	String found in binary or memory: return f}CG.F="internal.enableAutoEventOnTimer";var $b=xa(["data-gtm-yt-inspected-"]),EG=["www.youtube.com","www.youtube-nocookie.com"],FG,GG=!1; equals www.youtube.com (Youtube)
Source: chromecache_211.2.dr, chromecache_254.2.dr	String found in binary or memory: var RF=function(a,b,c,d,e){var f=OC("fsl",c?"nv.mwt":"mwt",0),g;g=c?OC("fsl","nv.ids",[]):OC("fsl","ids",[]);if(!g.length)return!0;var k=TC(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);R(121);if(m==="https://www.facebook.com/tr/")return R(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!zB(k,BB(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: aptbusinessservices.com.au
Source: global traffic	DNS traffic detected: DNS query: stats.wp.com
Source: global traffic	DNS traffic detected: DNS query: static.cloudflareinsights.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: pixel.wp.com
Source: global traffic	DNS traffic detected: DNS query: c.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: assets.apollo.io
Source: global traffic	DNS traffic detected: DNS query: analytics.ahrefs.com
Source: global traffic	DNS traffic detected: DNS query: z.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: aplo-evnt.com
Source: global traffic	DNS traffic detected: DNS query: google.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 25 Feb 2025 04:20:46 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closevary: Accept-Encodingcf-cache-status: DYNAMICServer-Timing: cfCacheStatus;desc="DYNAMIC"Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Sx34kPx8BIKAvvdEe%2BybFCxHzY%2By3rVB4crBtKy%2FGfe%2FvuZ9bpEfH9innJ6IgV7WlztPrT0aWEF3EAN2R8ELZPhOgOaEC1IvQKyTXZI2dmfwwqqOWHli3CneMzL%2FM%2BeKARDRJjo0Pydh6AQwRA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 9174e79bae4d0c80-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1580&min_rtt=1542&rtt_var=605&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2871&recv_bytes=1288&delivery_rate=1893644&cwnd=235&unsent_bytes=0&cid=ec666a7b084e3060&ts=816&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 25 Feb 2025 04:20:57 GMTContent-Length: 9Connection: closeCF-Ray: 9174e7e0cf6d43fa-EWRCF-Cache-Status: DYNAMICcf-apo-via: origin,hosttraceparent: 00--1a207108dac84a2f-03x-request-id: db4f000c-ddfa-485d-8153-5039d9294299Report-To: {"endpoints":[{"url":"https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=jEQHaRI3gknolXgfJ74pa2xoymdgADbECcIuZlMciWY-1740457257-1.0.1.1-dyWLxcouPNuPKKbEWz4AWxo.RRu3us97aOWZKBrwPl8KrUv.CgYAaV4d2x5HAvyiF5moefPx5I6wOa8d1d6yTFL78Q4AcKZhZ8UAnHL7kTzilUKHBxP_9PpTFQhbocNcK6rbtEl0Fw_4shEjk8fwhXSy9eHUIpEqlxsdFVXvqAM"}],"group":"cf-csp-endpoint","max_age":86400}Content-Security-Policy-Report-Only: script-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=jEQHaRI3gknolXgfJ74pa2xoymdgADbECcIuZlMciWY-1740457257-1.0.1.1-dyWLxcouPNuPKKbEWz4AWxo.RRu3us97aOWZKBrwPl8KrUv.CgYAaV4d2x5HAvyiF5moefPx5I6wOa8d1d6yTFL78Q4AcKZhZ8UAnHL7kTzilUKHBxP_9PpTFQhbocNcK6rbtEl0Fw_4shEjk8fwhXSy9eHUIpEqlxsdFVXvqAM; report-to cf-csp-endpointServer: cloudflarealt-svc: h3=":443"; ma=86400

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1976,i,10148314318684945854,7829767398855389392,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://aptbusinessservices.com.au/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1976,i,10148314318684945854,7829767398855389392,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Name	IP	Active	Malicious	Reputation
stats.wp.com	192.0.76.3	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
google.com	142.250.185.78	true	false	high
static.cloudflareinsights.com	104.16.79.73	true	false	high
c-msn-pme.trafficmanager.net	13.74.129.1	true	false	high
ax-0001.ax-msedge.net	150.171.27.10	true	false	high
stats.g.doubleclick.net	142.250.110.156	true	false	high
clarity-ingest-eus2-f-sc.eastus2.cloudapp.azure.com	20.10.16.51	true	false	high
aptbusinessservices.com.au	188.114.97.3	true	false	unknown
analytics-alv.google.com	216.239.36.181	true	false	high
googleads.g.doubleclick.net	142.250.186.34	true	false	high
pixel.wp.com	192.0.76.3	true	false	high
analytics.ahrefs.com	104.18.39.141	true	false	high
assets.apollo.io	172.67.2.155	true	false	high
www.google.com	142.250.184.196	true	false	high
td.doubleclick.net	172.217.18.2	true	false	high
aplo-evnt.com	34.107.133.146	true	false	high
s-part-0048.t-0009.t-msedge.net	13.107.246.76	true	false	high
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	high
www.clarity.ms	unknown	unknown	false	high
z.clarity.ms	unknown	unknown	false	high
analytics.google.com	unknown	unknown	false	high
c.clarity.ms	unknown	unknown	false	high

IP	Domain	Country	ASN	ASN Name	Malicious
104.16.80.73	unknown	United States	13335	CLOUDFLARENETUS	false
13.74.129.1	c-msn-pme.trafficmanager.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.18.39.141	analytics.ahrefs.com	United States	13335	CLOUDFLARENETUS	false
172.67.2.155	assets.apollo.io	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.16.79.73	static.cloudflareinsights.com	United States	13335	CLOUDFLARENETUS	false
13.107.246.76	s-part-0048.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
142.250.186.34	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
216.239.36.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
142.250.186.162	unknown	United States	15169	GOOGLEUS	false
192.0.76.3	stats.wp.com	United States	2635	AUTOMATTICUS	false
142.250.185.132	unknown	United States	15169	GOOGLEUS	false
20.10.16.51	clarity-ingest-eus2-f-sc.eastus2.cloudapp.azure.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
172.217.18.2	td.doubleclick.net	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	aptbusinessservices.com.au	European Union	13335	CLOUDFLARENETUS	false
142.250.110.156	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
188.114.96.3	unknown	European Union	13335	CLOUDFLARENETUS	false
34.107.133.146	aplo-evnt.com	United States	15169	GOOGLEUS	false
172.64.148.115	unknown	United States	13335	CLOUDFLARENETUS	false
172.217.16.196	unknown	United States	15169	GOOGLEUS	false

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source	Detection	Scanner	Label
https://aptbusinessservices.com.au/wp-json/wp/v2/pages/149	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/uploads/2023/10/apt.png	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/xmlrpc.php?rsd	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/css/widget-social-icons.min.c	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/your-industry/property/	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/plugins/honeypot/includes/css/wpa.css?ver=2.2.06	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.mi	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/about-us/life-at-apt/	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/uploads/2023/11/apt-arrow-pale-bg.png	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-includes/js/jquery/jquery.min.js?ver=3.7.1	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/plugins/elementskit-lite/widgets/init/assets/js/elementor.js?ver=3.3.8	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/plugins/elementskit-lite/modules/elementskit-icon-pack	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/plugins/elementskit-lite/widgets/init/assets/css/responsive.css?ver=3.3.8	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/plugins/elementor-pro/assets/js/preloaded-elements-handlers.min.js?ver=3.7.3	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/css/widget-spacer.min.css?ver=3.27.6	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/plugins/elementskit-lite/widgets/init/assets/css/widget-styles.css?ver=3.3.8	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-includes/js/wp-emoji-release.min.js?ver=6.7.2	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/css/widget-heading.min.css?ve	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/cdn-cgi/rum?	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/apt_quote/	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/about-us/our-team/	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-json/oembed/1.0/embed?url=https%3A%2F%2Faptbusinessservices.co	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.3	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/css/widget-social-icons.min.css?ver=3.27.6	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/uploads/2023/10/apt-business-services-1-300x300.png	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-json/	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/uploads/2023/11/apt-Ellipse-1.png	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/plugins/elementskit-lite/widgets/init/assets/js/widget-scripts.js?ver=3.3.8	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/about-us/	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.27.6	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.27.6	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/careers/	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/plugins/elementskit-lite/modules/elementskit-icon-pack/assets/css/ekiticons.css?ver=3.3.8	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/contact-us/	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/uploads/2024/01/banner-2.jpg	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.7.3	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/plugins/honeypot/includes/js/wpa.js?ver=2.2.06	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/plugins/elementor-pro/assets/js/preloaded-elements-han	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/themes/astra/assets/css/minified/main.min.css?ver=4.8.0	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icon	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/plugins/wp-job-openings/assets/css/style.min.css?ver=3	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.35.0	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/your-industry/finance/	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/plugins/wp-job-openings/assets/css/general.min.css?ver	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/uploads/elementor/css/custom-frontend.min.css?ver=1737	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/uploads/elementor/css/custom-pro-frontend.min.css?ver=1737669917	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/themes/astra/assets/js/minified/flexibility.min.js?ver	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/css/widget-menu-anchor.min.cs	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/uploads/2023/11/local-business-services-1-150x150.png	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/plugins/wp-job-openings/assets/js/script.min.js?ver=3.	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/your-industry/health/	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/uploads/2023/11/apt-arrow-white-bg.png	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/plugins/elementskit-lite/modules/elementskit-icon-pack/assets/fonts/elementskit.woff?y24e1e	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/uploads/elementor/css/custom-apple-webkit.min.css?ver=1737669917	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-json/elementskit/v1/	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/plugins/elementskit-lite/widgets/init/assets/js/animate-circle.min.js?ver=3.3.8	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/uploads/elementor/css/custom-apple-webkit.min.css?ver=	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/your-industry/	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/uploads/2023/10/apt-business-services-1-150x150.png	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.27.6	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/css/widget-text-editor.min.cs	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/plugins/wp-job-openings/assets/js/script.min.js?ver=3.5.0	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/plugins/elementskit-lite/widgets/init/assets/css/widge	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/uploads/2023/11/apt-arrow-1.png	100%	Avira URL Cloud	malware
https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.mi	100%	Avira URL Cloud	malware

Name	Malicious	Antivirus Detection	Reputation
https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015	false		high
https://aptbusinessservices.com.au/wp-content/plugins/honeypot/includes/css/wpa.css?ver=2.2.06	true	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6	true	Avira URL Cloud: malware	unknown
https://stats.wp.com/e-202509.js	false		high
https://aptbusinessservices.com.au/wp-content/uploads/2023/11/apt-arrow-pale-bg.png	true	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-includes/js/jquery/jquery.min.js?ver=3.7.1	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/	false		unknown
https://c.clarity.ms/c.gif?ctsa=mr&CtsSyncId=67E8CA32DB8D476D84F77BAD9D7E5745&MUID=3DF49A0BF77A6A7511168F95F6636B77	false		high
https://www.clarity.ms/s/0.7.69/clarity.js	false		high
https://aptbusinessservices.com.au/wp-content/plugins/elementskit-lite/widgets/init/assets/js/elementor.js?ver=3.3.8	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-content/plugins/elementor-pro/assets/js/preloaded-elements-handlers.min.js?ver=3.7.3	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-content/plugins/elementskit-lite/widgets/init/assets/css/responsive.css?ver=3.3.8	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-content/plugins/elementskit-lite/widgets/init/assets/css/widget-styles.css?ver=3.3.8	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/css/widget-spacer.min.css?ver=3.27.6	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-includes/js/wp-emoji-release.min.js?ver=6.7.2	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/cdn-cgi/rum?	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/apt_quote/	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.3	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/css/widget-social-icons.min.css?ver=3.27.6	true	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.27.6	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-content/plugins/elementskit-lite/widgets/init/assets/js/widget-scripts.js?ver=3.3.8	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-content/uploads/2023/11/apt-Ellipse-1.png	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.27.6	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-content/plugins/elementskit-lite/modules/elementskit-icon-pack/assets/css/ekiticons.css?ver=3.3.8	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-content/themes/astra/assets/css/minified/main.min.css?ver=4.8.0	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.7.3	true	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-content/uploads/2024/01/banner-2.jpg	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-content/plugins/honeypot/includes/js/wpa.js?ver=2.2.06	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1	false	Avira URL Cloud: malware	unknown
https://a.nel.cloudflare.com/report/v4?s=Sx34kPx8BIKAvvdEe%2BybFCxHzY%2By3rVB4crBtKy%2FGfe%2FvuZ9bpEfH9innJ6IgV7WlztPrT0aWEF3EAN2R8ELZPhOgOaEC1IvQKyTXZI2dmfwwqqOWHli3CneMzL%2FM%2BeKARDRJjo0Pydh6AQwRA%3D%3D	false		high
https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.35.0	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-content/uploads/elementor/css/custom-pro-frontend.min.css?ver=1737669917	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-content/uploads/2023/11/apt-arrow-white-bg.png	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-content/plugins/elementskit-lite/modules/elementskit-icon-pack/assets/fonts/elementskit.woff?y24e1e	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-content/uploads/elementor/css/custom-apple-webkit.min.css?ver=1737669917	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-content/plugins/elementskit-lite/widgets/init/assets/js/animate-circle.min.js?ver=3.3.8	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-content/uploads/2023/10/apt-business-services-1-150x150.png	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.27.6	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-content/plugins/wp-job-openings/assets/js/script.min.js?ver=3.5.0	false	Avira URL Cloud: malware	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
http://robert-fleischmann.de)	chromecache_191.2.dr, chromecache_208.2.dr	false		high
https://stats.g.doubleclick.net/g/collect	chromecache_211.2.dr, chromecache_254.2.dr	false		high
https://ogp.me/ns#	chromecache_184.2.dr	false		high
https://aptbusinessservices.com.au/about-us/life-at-apt/	chromecache_184.2.dr	true	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-json/wp/v2/pages/149	chromecache_184.2.dr	true	Avira URL Cloud: malware	unknown
http://masonry.desandro.com	chromecache_191.2.dr, chromecache_208.2.dr	false		high
https://aptbusinessservices.com.au/xmlrpc.php?rsd	chromecache_184.2.dr	true	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-content/uploads/2023/10/apt.png	chromecache_184.2.dr	true	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.mi	chromecache_184.2.dr	true	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/css/widget-social-icons.min.c	chromecache_184.2.dr	true	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/your-industry/property/	chromecache_184.2.dr	true	Avira URL Cloud: malware	unknown
https://github.com/zloirock/core-js	chromecache_238.2.dr, chromecache_237.2.dr	false		high
http://www.smartmenus.org/	chromecache_217.2.dr, chromecache_203.2.dr	false		high
https://aptbusinessservices.com.au/wp-content/plugins/elementskit-lite/modules/elementskit-icon-pack	chromecache_184.2.dr	false	Avira URL Cloud: malware	unknown
http://hilios.github.io/jQuery.countdown/)	chromecache_191.2.dr, chromecache_208.2.dr	false		high
https://fontawesome.com	chromecache_207.2.dr, chromecache_205.2.dr, chromecache_228.2.dr, chromecache_155.2.dr	false		high
https://www.google.com	chromecache_173.2.dr	false		high
https://www.youtube.com/iframe_api	chromecache_211.2.dr, chromecache_254.2.dr	false		high
https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/css/widget-heading.min.css?ve	chromecache_184.2.dr	false	Avira URL Cloud: malware	unknown
https://isotope.metafizzy.co	chromecache_191.2.dr, chromecache_208.2.dr	false		high
https://aptbusinessservices.com.au/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.	chromecache_184.2.dr	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/about-us/our-team/	chromecache_184.2.dr	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-json/oembed/1.0/embed?url=https%3A%2F%2Faptbusinessservices.co	chromecache_184.2.dr	false	Avira URL Cloud: malware	unknown
https://github.com/krux/postscribe/blob/master/LICENSE.	chromecache_166.2.dr, chromecache_173.2.dr	false		high
https://aptbusinessservices.com.au/wp-content/uploads/2023/10/apt-business-services-1-300x300.png	chromecache_184.2.dr	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.	chromecache_184.2.dr	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-json/	chromecache_184.2.dr	false	Avira URL Cloud: malware	unknown
https://github.com/microsoft/clarity	chromecache_171.2.dr, chromecache_148.2.dr	false		high
https://aptbusinessservices.com.au/about-us/	chromecache_184.2.dr	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/careers/	chromecache_184.2.dr	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/contact-us/	chromecache_184.2.dr	false	Avira URL Cloud: malware	unknown
https://api.jqueryui.com/position/	chromecache_140.2.dr, chromecache_152.2.dr	false		high
https://aptbusinessservices.com.au/wp-content/plugins/elementor-pro/assets/js/preloaded-elements-han	chromecache_184.2.dr	false	Avira URL Cloud: malware	unknown
https://www.instagram.com/apt.business.services/	chromecache_184.2.dr	false		high
https://aptbusinessservices.com.au/wp-content/plugins/wp-job-openings/assets/css/style.min.css?ver=3	chromecache_184.2.dr	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icon	chromecache_184.2.dr	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/your-industry/finance/	chromecache_184.2.dr	false	Avira URL Cloud: malware	unknown
https://www.youtube.com/	chromecache_184.2.dr	false		high
https://cct.google/taggy/agent.js	chromecache_166.2.dr, chromecache_211.2.dr, chromecache_254.2.dr, chromecache_173.2.dr	false		high
https://aptbusinessservices.com.au/wp-content/uploads/elementor/css/custom-frontend.min.css?ver=1737	chromecache_184.2.dr	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-content/plugins/wp-job-openings/assets/css/general.min.css?ver	chromecache_184.2.dr	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-content/themes/astra/assets/js/minified/flexibility.min.js?ver	chromecache_184.2.dr	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/css/widget-menu-anchor.min.cs	chromecache_184.2.dr	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-content/uploads/2023/11/local-business-services-1-150x150.png	chromecache_184.2.dr	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/your-industry/health/	chromecache_184.2.dr	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-content/plugins/wp-job-openings/assets/js/script.min.js?ver=3.	chromecache_184.2.dr	false	Avira URL Cloud: malware	unknown
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_211.2.dr, chromecache_254.2.dr	false		high
https://www.google.com/pagead/1p-user-list/718823576/?random	chromecache_225.2.dr, chromecache_187.2.dr, chromecache_167.2.dr, chromecache_168.2.dr	false		high
https://aptbusinessservices.com.au/wp-json/elementskit/v1/	chromecache_184.2.dr	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/your-industry/	chromecache_184.2.dr	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-content/uploads/elementor/css/custom-apple-webkit.min.css?ver=	chromecache_184.2.dr	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/css/widget-text-editor.min.cs	chromecache_184.2.dr	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.	chromecache_184.2.dr	false	Avira URL Cloud: malware	unknown
https://jqueryui.com	chromecache_152.2.dr	false		high
https://aptbusinessservices.com.au/wp-content/plugins/elementskit-lite/widgets/init/assets/css/widge	chromecache_184.2.dr	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-content/uploads/2023/11/apt-arrow-1.png	chromecache_184.2.dr	false	Avira URL Cloud: malware	unknown
https://aptbusinessservices.com.au/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.mi	chromecache_184.2.dr	false	Avira URL Cloud: malware	unknown

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1623296
Start date and time:	2025-02-25 05:19:37 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 47s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://aptbusinessservices.com.au/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.win@19/211@60/23
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Feb 25 03:20:33 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9862492620101038
Encrypted:	false
SSDEEP:	48:8/dtjTNFNfHOidAKZdA19ehwiZUklqehGfy+3:83j/N8hfy
MD5:	E73FEDBE236A32BAC6C0DC67FF8901F4
SHA1:	556B0D6536D79DFDEEA9CCB8C34C0692BEFCCA85
SHA-256:	B47E475A1DE21D19E23B6944916852CA732DD70CD70F9F2EB27E78484329E4A6
SHA-512:	CB791E4EC331CD925ECEE60998D247CBF026D7DED477EDAFC0BA29221F0589209508ACF6809BD35515A673BAAC3328F79EB45013B2A873DF99048B300667DFF0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......<...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IYZ."....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VYZ."....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VYZ."....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VYZ."..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VYZ."...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............F.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://aptbusinessservices.com.au/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Windows Analysis Report
http://aptbusinessservices.com.au/