IOCReport

loading gif

Files

File Path
Type
Category
Malicious
http://www._20_2021_05_43_05.shamanno.com/#aHR0cHM6Ly9saXR0bGUtc3BhcmtseS1idWZmYWxvLmdsaXRjaC5tZS8jbG9nYW5Ac2t5bGluZS1ldmVudHMuY29t
URL
initial url
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\TBQBXY9R.htm
HTML document, UTF-8 Unicode text, with very long lines
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{10B311BF-7E86-11EB-90EB-ECF4BBEA1588}.dat
Microsoft Word Document
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{10B311C1-7E86-11EB-90EB-ECF4BBEA1588}.dat
Microsoft Word Document
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{16C7913C-7E86-11EB-90EB-ECF4BBEA1588}.dat
Microsoft Word Document
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\gee00pr\imagestore.dat
data
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\17-f90ef1[1].js
ASCII text, with very long lines
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\2_vD0yppaJX3jBnfbHF1hqXQ2[1].svg
SVG Scalable Vector Graphics image
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\I2F7XS6K.htm
HTML document, ASCII text
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\Microsoft_Logotype_Gray_X-qkgtg8KmnQEvm_9mDTcw2[1].svg
SVG Scalable Vector Graphics image
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\Print[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\ellipsis_grey_2b5d393db04a5e6e1f739cb266e65b4c[1].svg
SVG Scalable Vector Graphics image
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\ellipsis_white_5ac590ee72bfe06a7cecfd75b588ad73[1].svg
SVG Scalable Vector Graphics image
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\favicon[1].ico
MS Windows icon resource - 6 icons, 128x128, 16 colors, 72x72, 16 colors
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\favicon[2].ico
MS Windows icon resource - 6 icons, 128x128, 16 colors, 72x72, 16 colors
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\jquerypackage_1.10_5V7LAuc3bNAQx2QQfr1RPw2[1].js
UTF-8 Unicode text, with very long lines
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\lightweightsignuppackage_OwHbS0yAbvGpBlUF0ZS3iA2[1].js
UTF-8 Unicode text, with very long lines
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\script[1].js
UTF-8 Unicode text, with very long lines, with no line terminators
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\script[2].js
ASCII text, with very long lines, with no line terminators
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\style[1].css
ASCII text, with very long lines, with no line terminators
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\wcp-consent[1].js
UTF-8 Unicode text, with very long lines, with no line terminators
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\2_vD0yppaJX3jBnfbHF1hqXQ2[1].svg
SVG Scalable Vector Graphics image
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\2_vD0yppaJX3jBnfbHF1hqXQ2[2].svg
SVG Scalable Vector Graphics image
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\Microsoft_Logotype_White_4MYDQRab31HKDWWN-1HafA2[1].svg
SVG Scalable Vector Graphics image
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\app[1].css
ASCII text, with very long lines, with CRLF, LF line terminators
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\bg2[1].jpg
JPEG image data, baseline, precision 8, 1920x1080, frames 3
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\converged.v2.login.min_xu7km3oxm4bwp2b-mqyozg2[1].css
ASCII text, with very long lines
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\favicon[1].htm
HTML document, ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\favicon[1].ico
MS Windows icon resource - 6 icons, 128x128, 16 colors, 72x72, 16 colors
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\favicon[2].ico
MS Windows icon resource - 6 icons, 128x128, 16 colors, 72x72, 16 colors
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2[1].svg
SVG Scalable Vector Graphics image
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd[1].svg
SVG Scalable Vector Graphics image
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\oneds_Xr2D7Nex80v7A-8bxF8jgQ2[1].js
ASCII text, with very long lines, with CRLF, LF line terminators
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\override[1].css
ASCII text, with very long lines, with CRLF line terminators
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\script[1].js
ASCII text, with very long lines, with no line terminators
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\shell.min[1].css
UTF-8 Unicode text, with very long lines, with no line terminators
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\style[1].css
UTF-8 Unicode text, with very long lines, with no line terminators
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\53_8b36337037cff88c3df203bb73d58e41[1].png
PNG image data, 342 x 72, 8-bit/color RGBA, non-interlaced
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\64-460736[1].css
UTF-8 Unicode text, with very long lines
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\AppCentipede_Microsoft_HFeToeM4u6fzMQF_f_rQ5Q2[1].svg
SVG Scalable Vector Graphics image
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\AppCentipede_Microsoft_white_ufRYlllWOw4YyDRiKcBvxQ2[1].svg
SVG Scalable Vector Graphics image
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\RE1Mu3b[1].png
PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\arrow_px_up[1].gif
GIF image data, version 89a, 7 x 9
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\converged_ux_v2_RfnRCrmapm3W_OFn994CMA2[1].css
ASCII text, with very long lines
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\favicon[1].ico
MS Windows icon resource - 6 icons, 128x128, 16 colors, 72x72, 16 colors
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\icons[1].eot
Embedded OpenType (EOT), icons family
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\jquery-1.11.2.min[1].js
ASCII text, with very long lines
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\jquery-1.7.2.min[1].js
HTML document, UTF-8 Unicode text, with very long lines
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\knockout_3.3.0_X1BYS2jZMbi7hfUj8VuqFA2[1].js
ASCII text, with very long lines, with CRLF, LF line terminators
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\lwsignupstringscountrybirthdate_en-us_VxjLzmQAiLRyhA2ROX72uQ2[1].js
HTML document, UTF-8 Unicode text, with very long lines
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2[1].svg
SVG Scalable Vector Graphics image
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\privacystatement[1].htm
HTML document, UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\servicesagreement[1].htm
HTML document, UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\signup[1].htm
HTML document, ASCII text, with very long lines, with CRLF, LF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\ResetPassword[1].htm
HTML document, ASCII text, with very long lines, with CRLF, LF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\accountcorepackage_3Jeup4aMFjR_22jqClMyIw2[1].js
ASCII text, with very long lines
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\bootstrap_3.3.0_B68S-_daR6nLiLVZsh4XiA2[1].js
ASCII text, with very long lines
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\converged_ux_v2_MdTi0w7tc4Fe6X-h3SAs2Q2[1].css
ASCII text, with very long lines
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\datarequestpackage_h-_7C7UzwdefXJT9njDBTQ2[1].js
ASCII text, with very long lines
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\dropdown_caret_KXSZjGsyILZaoTf0sI9X-A2[1].svg
SVG Scalable Vector Graphics image
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\favicon_a_eupayfgghqiai7k9sol6lg2[1].ico
MS Windows icon resource - 6 icons, 128x128, 16 colors, 72x72, 16 colors
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\jquery-3.3.1.min[1].js
ASCII text, with very long lines
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\jquery-3.5.1[1].js
ASCII text
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\knockout_old_GJ62c6D9R5HuKFdkoO8XYw2[1].js
ASCII text, with very long lines, with CRLF, LF line terminators
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\latest[1].eot
Embedded OpenType (EOT), Segoe UI Light family
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\latest[2].eot
Embedded OpenType (EOT), Segoe UI family
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\latest[3].eot
Embedded OpenType (EOT), Segoe UI Semibold family
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2[1].svg
SVG Scalable Vector Graphics image
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\mwfmdl2-v3.54[1].woff
Web Open Font Format, TrueType, length 26288, version 0.0
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\print-icon[1].png
PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\resetpasswordpackage_Yxk3RsMhdgGDcR5k7YswQg2[1].js
UTF-8 Unicode text, with very long lines
downloaded
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\wlivepackagefull_BWVcpM3ZvobDGQWPo5hgew2[1].js
ASCII text, with very long lines
downloaded
 clean
C:\Users\user\AppData\Local\Temp\~DF382C1E115E35CF79.TMP
data
dropped
 clean
C:\Users\user\AppData\Local\Temp\~DF39CFFE74883A58EA.TMP
data
dropped
 clean
C:\Users\user\AppData\Local\Temp\~DFFEF24830583AD9DB.TMP
data
dropped
 clean
There are 65 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\internet explorer\iexplore.exe
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
 clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5488 CREDAT:17410 /prefetch:2
 clean

URLs

Name
IP
Malicious
https://aka.ms/useterms
unknown
 clean
https://little-sparkly-buffalo.glitch.me/#logan
unknown
 clean
https://www.acuityads.com/opt-out/
unknown
 clean
https://little-sparkly-buffalo.glitch.me/#
clean
https://www.youradchoices.ca/fr
unknown
 clean
https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
unknown
 clean
https://www.adr.org
unknown
 clean
https://www.xbox.com/en-US/Legal/CodeOfConduct)
unknown
 clean
http://www.asp.net/ajaxlibrary/CDN.ashx.
unknown
 clean
https://promisesaplus.com/#point-75
unknown
 clean
https://www.xbox.com/en-US/Legal/CodeOfConduct
unknown
 clean
http://opensource.org/licenses/mit-license.php)
unknown
 clean
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
unknown
 clean
http://www.json.org/json2.js
unknown
 clean
https://bugs.webkit.org/show_bug.cgi?id=29084
unknown
 clean
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace
unknown
 clean
https://secure.aadcdn.microsoftonline-p.com/ests/2.1.8576.13/content/images/ellipsis_grey_2b5d393db0
unknown
 clean
https://aka.ms/taxservice
unknown
 clean
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
unknown
 clean
https://skype.com/go/myaccount
unknown
 clean
https://www.skype.com
unknown
 clean
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
unknown
 clean
https://www.appnexus.com/
unknown
 clean
https://acctcdn.msauth.net/knockout_3.3.0_X1BYS2jZMbi7hfUj8VuqFA2.js?v=1
unknown
 clean
http://www._20_2021_05_43_05.shamanno.com/wild/api.php
162.213.251.166
 clean
https://privacy.microsoeement/
unknown
 clean
https://bugzilla.mozilla.org/show_bug.cgi?id=687787
unknown
 clean
https://secure.aadcdn.microsoftonline-p.com/ests/2.1.8576.13/content/images/ellipsis_grey_5bc252567e
unknown
 clean
https://www.oddstips.co.uk/wp-content/themes/focusblog/bg2.jpg");
unknown
 clean
https://bugs.chromium.org/p/chromium/issues/detail?id=470258
unknown
 clean
https://bugs.jquery.com/ticket/13378
unknown
 clean
https://acctcdn.msauth.net/accountcorepackage_3Jeup4aMFjR_22jqClMyIw2.js?v=1
unknown
 clean
https://priv-policy.imrworldwide.com/priv/browser/us/en/optout.html
unknown
 clean
https://promisesaplus.com/#point-64
unknown
 clean
https://www.youronlinechoices.com/
unknown
 clean
https://little-sparkly-buffalo.glitch.me/#tatement?v2
unknown
 clean
https://promisesaplus.com/#point-61
unknown
 clean
https://mixer.com/contact
unknown
 clean
https://www.adjust.com/opt-out/
unknown
 clean
https://www.xbox.com/managedatacollection
unknown
 clean
https://www.xbox.com/legal/codeofconduct
unknown
 clean
https://acctcdn.msauth.net/images/Microsoft_Logotype_Gray_X-qkgtg8KmnQEvm_9mDTcw2.svg
unknown
 clean
https://acctcdn.msauth.net/images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg
unknown
 clean
https://acctcdn.msauth.net/resetpasswordpackage_Yxk3RsMhdgGDcR5k7YswQg2.js?v=1
unknown
 clean
https://html.spec.whatwg.org/#nonce-attributes
unknown
 clean
https://acctcdn.msauth.net/wlivepackagefull_BWVcpM3ZvobDGQWPo5hgew2.js?v=1
unknown
 clean
http://www.mpegla.com).
unknown
 clean
https://aka.ms/kinectprivacy/
unknown
 clean
https://acctcdn.msauth.net/jquerypackage_1.10_5V7LAuc3bNAQx2QQfr1RPw2.js?v=1
unknown
 clean
https://www.skype.com).
unknown
 clean
https://www.xbox.com
unknown
 clean
https://acctcdn.msauth.net/bootstrap_3.3.0_B68S-_daR6nLiLVZsh4XiA2.js?v=1
unknown
 clean
https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/adequacy-protectio
unknown
 clean
https://jsperf.com/getall-vs-sizzle/2
unknown
 clean
https://secure.aadcdn.microsoftonline-p.com/ests/2.1.8576.13/content/cdnbundles/converged.v2.login.m
unknown
 clean
https://github.com/douglascrockford/JSON-js
unknown
 clean
https://acctcdn.msauth.net/images/favicon.ico?v=2~(
unknown
 clean
https://secure.aadcdn.microsoftonline-p.com/ests/2.1.8576.13/content/images/ellipsis_white_0ad430848
unknown
 clean
https://portal.microsoftonline.com/Prefetch/Prefetch.aspx
unknown
 clean
https://account.live.com/query.aspx
unknown
 clean
https://developer.mozilla.org/en-US/docs/CSS/display
unknown
 clean
https://acctcdn.msauth.net/converged_ux_v2_RfnRCrmapm3W_OFn994CMA2.css?v=1
unknown
 clean
http://www.opensource.org/licenses/mit-license.php)
unknown
 clean
https://jquery.com/
unknown
 clean
http://fontello.comiconsRegulariconsiconsVersion
unknown
 clean
http://www._20_2021_05_43_05.shamanno.com
unknown
 clean
https://acctcdn.msauth.net/images/AppCentipede/AppCentipede_Microsoft_white_ufRYlllWOw4YyDRiKcBvxQ2.
unknown
 clean
https://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager.html
unknown
 clean
https://www.skype.com/go/legal
unknown
 clean
https://mixer.com/about/tos
unknown
 clean
https://www.microsoft.
unknown
 clean
https://www.linkedin.com/legal/privacy-policy
unknown
 clean
https://github.com/jquery/sizzle/pull/225
unknown
 clean
https://little-sparkly-buffalo.glitch.me/#logan@skyline-events.com
clean
https://acctcdn.msauth.net/lightweightsignuppackage_OwHbS0yAbvGpBlUF0ZS3iA2.js?v=1
unknown
 clean
https://aka.ms/DPA
unknown
 clean
https://bugs.jquery.com/ticket/4833
unknown
 clean
https://little-sparkly-buffalo.glitch.me/#
unknown
 clean
https://sizzlejs.com/
unknown
 clean
https://bugs.chromium.org/p/chromium/issues/detail?id=449857
unknown
 clean
https://js.foundation/
unknown
 clean
https://bugs.jquery.com/ticket/13393
unknown
 clean
https://support.xbox.com/help/friends-social-activity/community/use-safety-settings
unknown
 clean
https://www.xbox.com/Legal/ThirdPartyDataSharing
unknown
 clean
https://acctcdn.msauth.net/lwsignupstringscountrybirthdate_en-us_VxjLzmQAiLRyhA2ROX72uQ2.js?v=1
unknown
 clean
https://aka.ms/redeemrewards
unknown
 clean
https://signin.kissmetrics.com/privacy/#controls
unknown
 clean
https://account.live.c
unknown
 clean
https://login.skype.com/login
unknown
 clean
https://bugs.webkit.org/show_bug.cgi?id=136851
unknown
 clean
https://outlook.office.com?response_type=code&fatpt=
unknown
 clean
https://www.skype.com/go/ustax
unknown
 clean
http://jquery.org/license
unknown
 clean
https://jsperf.com/thor-indexof-vs-for/5
unknown
 clean
https://acctcdn.msauth.net
unknown
 clean
https://bugs.jquery.com/ticket/12359
unknown
 clean
https://www.optimizely.com/legal/opt-out/
unknown
 clean
http://sizzlejs.com/
unknown
 clean
https://acctcdn.msauth.net/images/AppCentipede/AppCentipede_Microsoft_HFeToeM4u6fzMQF_f_rQ5Q2.svg
unknown
 clean
http://www._20_2021_05_43_05.shamanno.com/#aHR0cHM6Ly9saXR0bGUtc3BhcmtseS1idWZmYWxvLmdsaXRjaC5tZS8jb
unknown
 clean
There are 90 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
little-sparkly-buffalo.glitch.me
52.3.182.213
 clean
sni1gl.wpc.alphacdn.net
152.199.21.175
 clean
www._20_2021_05_43_05.shamanno.com
162.213.251.166
 clean
oddstips.co.uk
87.117.239.10
 clean
signup.live.com
unknown
 clean
secure.aadcdn.microsoftonline-p.com
unknown
 clean
code.jquery.com
unknown
 clean
www.oddstips.co.uk
unknown
 clean
aadcdn.msauth.net
unknown
 clean
assets.onestore.ms
unknown
 clean
account.live.com
unknown
 clean
ajax.aspnetcdn.com
unknown
 clean
acctcdn.msauth.net
unknown
 clean
There are 3 hidden domains, click here to show them.

IPs

IP
Domain
Country
Active
Malicious
192.168.2.1
unknown
unknown
unknown
 clean
87.117.239.10
oddstips.co.uk
United Kingdom
unknown
 clean
52.3.182.213
little-sparkly-buffalo.glitch.me
United States
unknown
 clean
152.199.21.175
sni1gl.wpc.alphacdn.net
United States
unknown
 clean
162.213.251.166
www._20_2021_05_43_05.shamanno.com
United States
unknown
 clean

Registry

Path
Value
Malicious
C:\Program Files\internet explorer\iexplore.exe
{10B311BF-7E86-11EB-90EB-ECF4BBEA1588}
 clean
C:\Program Files\internet explorer\iexplore.exe
Count
 clean
C:\Program Files\internet explorer\iexplore.exe
Time
 clean
C:\Program Files\internet explorer\iexplore.exe
Blocked
 clean
C:\Program Files\internet explorer\iexplore.exe
Count
 clean
C:\Program Files\internet explorer\iexplore.exe
Time
 clean
C:\Program Files\internet explorer\iexplore.exe
Count
 clean
C:\Program Files\internet explorer\iexplore.exe
Time
 clean
C:\Program Files\internet explorer\iexplore.exe
LoadTimeArray
 clean
C:\Program Files\internet explorer\iexplore.exe
LoadTimeArray
 clean
C:\Program Files\internet explorer\iexplore.exe
DecayDateQueue
 clean
C:\Program Files\internet explorer\iexplore.exe
LastProcessed
 clean
C:\Program Files\internet explorer\iexplore.exe
Count
 clean
C:\Program Files\internet explorer\iexplore.exe
Time
 clean
C:\Program Files\internet explorer\iexplore.exe
Blocked
 clean
C:\Program Files\internet explorer\iexplore.exe
Count
 clean
C:\Program Files\internet explorer\iexplore.exe
Time
 clean
C:\Program Files\internet explorer\iexplore.exe
LoadTimeArray
 clean
C:\Program Files\internet explorer\iexplore.exe
Count
 clean
C:\Program Files\internet explorer\iexplore.exe
Time
 clean
C:\Program Files\internet explorer\iexplore.exe
LoadTimeArray
 clean
C:\Program Files\internet explorer\iexplore.exe
DecayDateQueue
 clean
C:\Program Files\internet explorer\iexplore.exe
LastProcessed
 clean
C:\Program Files\internet explorer\iexplore.exe
DecayDateQueue
 clean
C:\Program Files\internet explorer\iexplore.exe
LastProcessed
 clean
C:\Program Files\internet explorer\iexplore.exe
DecayDateQueue
 clean
C:\Program Files\internet explorer\iexplore.exe
LastProcessed
 clean
C:\Program Files\internet explorer\iexplore.exe
CVListPingLastYMD
 clean
C:\Program Files\internet explorer\iexplore.exe
DecayDateQueue
 clean
C:\Program Files\internet explorer\iexplore.exe
LastProcessed
 clean
C:\Program Files\internet explorer\iexplore.exe
DecayDateQueue
 clean
C:\Program Files\internet explorer\iexplore.exe
LastProcessed
 clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
@C:\Windows\System32\ieframe.dll,-912
 clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
@C:\Windows\System32\ieframe.dll,-904
 clean
There are 24 hidden registries, click here to show them.

DOM / HTML

URL
Malicious
https://little-sparkly-buffalo.glitch.me/#
 malicious
https://little-sparkly-buffalo.glitch.me/#logan@skyline-events.com
 malicious
https://account.live.com/ResetPassword.aspx?wreply=https://login.live.com/oauth20_authorize.srf%3fresponse_type%3dcode%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26scope%3dopenid%2bprofile%2bemail%2boffline_access%26response_mode%3dform_post%26redirect_uri%3dhttps%253a%252f%252flogin.microsoftonline.com%252fcommon%252ffederation%252foauth2%26state%3drQIIAeNisNLJKCkpKLbS1y_ILypJzNHLzUwuyi_OTyvJz8vJzEvVS87P1csvSs9MAbGKhLgEOhzkFBYXR3m11Zle3FvBmjCLkTM-J7MMrHIVozJh4_QvMDK-YGS8xSToX5TumRJe7JaaklqUWJKZn3eBReAVC48BsxUHB5cAgwSDAsMPFsZFrEBb40pDQg3r0t0nbto2zWOTN8MpVv2oKm-LfF_zTK8UU_-wSjdfS9PSXAsLj9w8L-00g6LwoKKQzICSsjKjgNBAWwsrwwlsQhPYmE6xMXxgY-xgZzjAyXiLS8TIwNBS18BI18BEwcDCysTCytgkCgA1%26estsfed%3d1%26uaid%3d201e408873a34a5a867e35d1bd780560%26fci%3dhttps%253a%252f%252fportal.microsoftonline.com.orgid.com%26username%3d%26contextid%3d34A42CC81359F79A%26bk%3d1549270157&id=293577&uiflavor=web&client_id=1E00004417ACAE&mkt=EN-US&lc=1033&bk=1549270157
 clean
https://privacy.microsoft.com/en-US/privacystatement
 clean
https://signup.live.com/signup?ru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26response_type%3dcode%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26scope%3dopenid%2bprofile%2bemail%2boffline_access%26response_mode%3dform_post%26redirect_uri%3dhttps%253a%252f%252flogin.microsoftonline.com%252fcommon%252ffederation%252foauth2%26state%3drQIIAeNisNLJKCkpKLbS1y_ILypJzNHLzUwuyi_OTyvJz8vJzEvVS87P1csvSs9MAbGKhLgE5N-HsRnaz3GZ3Nb0o0aAj2MWI2d8TmYZWOUqRmXCxulfYGR8wch4i0nQvyjdMyW82C01JbUosSQzP-8Ci8ArFh4DZisODi4BBgkGBYYfLIyLWIG2Rik0X16_dbXTrqAUuYQeZ4ZTrPpRVd4W-b7mmV4ppv5hlW6-lqaluRYWHrl5XtppBkXhQUUhmQElZWVGAaGBtqZWhhPYhCawMZ1iY_jAxtjBznCAk_EWl4iRgaGlroGRroGJgoGllZGRlbFRFAA1%26estsfed%3d1%26lw%3d1%26fl%3deasi2%26fci%3dhttps%253a%252f%252fportal.microsoftonline.com.orgid.com%26mkt%3dEN-US%26uaid%3d0656ef1f3f31449c938682f87c100e08&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=0656ef1f3f31449c938682f87c100e08&suc=https%3a%2f%2fportal.microsoftonline.com.orgid.com&lic=1
 clean
https://www.microsoft.com/en-US/servicesagreement/
 clean