IOCReport

loading gif

Files

File Path
Type
Category
Malicious
https://tendaggisilvana.it/officix/
URL
initial url
 malicious
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
Microsoft Cabinet archive data, 61020 bytes, 1 file
dropped
 clean
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\0050ec22-f187-43a3-847c-c2f678420bfb.tmp
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\5cd31337-3cc5-401a-9ce3-b1b8f1ddb31c.tmp
ASCII text, with very long lines, with no line terminators
modified
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\6f2f16a7-88db-404f-80de-4cad351569ce.tmp
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\7417fa0f-3ab8-47db-9f9e-0a6ae5528647.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\990b6f74-ede8-46ee-80cb-58f017429266.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\0c8c60f4-5f2c-4963-ba5b-e5edcda68b59.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\114ed127-3f9f-451e-8653-73bee937e8be.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\195d7acd-9172-4664-84cb-9ec323fec992.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\454701ac-4bc5-4887-b755-89b21dc911b9.tmp
very short file (no magic)
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\48ada2ef-bb21-4750-9063-6dab0147735d.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\4e840cfa-e490-43b5-9300-24a14ab17106.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\52aaa0ad-dc5c-4259-9261-04d5b91bf149.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\874b9b01-d12f-46df-98fa-f10f12326915.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\93130777-005e-4aa2-878f-f445fbbe5e2a.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG.old. (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\5bb5e88508645c3a_0
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\7003b29a8a2647cb_0
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\c1cd9e851ac26739_0
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\c3ce0511532c1330_0
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\cfa84d9308b472a8_0
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
MIPSEB-LE ECOFF executable not stripped - version 0.0
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index.l (copy)
MIPSEB-LE ECOFF executable not stripped - version 0.0
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies
SQLite 3.x database, last written using SQLite version 3032001
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies-journal
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Session
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Tabs
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000003.log
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\000003.log
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG.old. (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\8520.615.0.5_1\_metadata\computed_hashes.json
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Favicons
SQLite 3.x database, last written using SQLite version 3032001
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG.oldl (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG.oldn (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
SQLite 3.x database, last written using SQLite version 3032001
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History-journal
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Last Session.. (copy)
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Last Tabs. (copy)
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000003.log
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG.oldg (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent State6 (copy)
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent State8 (copy)
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent StateTM (copy)
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG.oldvb (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences (copy)
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Reporting and NEL
SQLite 3.x database, last written using SQLite version 3032001
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Reporting and NEL-journal
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences (copy)
UTF-8 Unicode text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\7ee224ed-9a10-4157-9664-9fb2a9819c41.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Network Persistent Statet (copy)
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\000003.log
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network Persistent StateTM (copy)
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\000003.log
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\faef4a32-2cf8-4ef1-86f6-9c5c358f74a8.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000003.log
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG.oldTM (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\TransportSecurityd (copy)
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Visited Links
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\a3dc6d3f-ce8e-48ac-aa4c-aadaa00f6721.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000004.dbtmp
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\CURRENT. (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG.old21 (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\MANIFEST-000004
MPEG-4 LOAS
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\eafdbacb-bf8f-415d-a97b-f2407caad30b.tmp
ASCII text, with very long lines, with no line terminators
modified
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Browser
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Version
ASCII text, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State (copy)
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State. (copy)
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Module Info Cache (copy)
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Module Info Cachep (copy)
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\b817e5e2-4194-45bf-9912-693d7816ed4a.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\bc6c8f61-a092-4977-ba37-62a924e96ee0.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\c479d2b4-c458-42df-ada6-3849a155bc6d.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\d82fbd6e-c815-489a-b2f3-5a9a8df9f1db.tmp
SysEx File -
dropped
 clean
C:\Users\user\AppData\Local\Temp\0adb7606-4797-4f9c-ab02-b29b3a975d3e.tmp
very short file (no magic)
dropped
 clean
C:\Users\user\AppData\Local\Temp\182698fb-be4a-41d0-a795-1681c894ec47.tmp
Google Chrome extension, version 3
dropped
 clean
C:\Users\user\AppData\Local\Temp\5904_2129350163\manifest.fingerprint
ASCII text, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\8f459b5d-f0c3-4d0a-b386-bbf337b2411d.tmp
Google Chrome extension, version 3
dropped
 clean
C:\Users\user\AppData\Local\Temp\browser-sslkeys.log
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Temp\c09f41db-1a5e-4a47-91c7-66e42241cea4.tmp
very short file (no magic)
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\8f459b5d-f0c3-4d0a-b386-bbf337b2411d.tmp
Google Chrome extension, version 3
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\am\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\ar\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\bg\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\bn\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\ca\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\cs\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\da\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\de\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\el\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\en\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\es\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\et\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\fa\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\fi\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\fil\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\fr\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\gu\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\hi\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\hr\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\hu\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\id\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\it\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\ja\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\kn\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\ko\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\lt\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\lv\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\ml\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\mr\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\ms\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\nb\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\nl\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\pl\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\pt\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\ro\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\ru\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\sk\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\sl\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\sr\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\sv\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\sw\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\ta\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\te\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\th\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\tr\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\uk\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\vi\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\zh\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\_locales\zh_TW\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_1083262431\CRX_INSTALL\manifest.json
ASCII text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\182698fb-be4a-41d0-a795-1681c894ec47.tmp
Google Chrome extension, version 3
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\CRX_INSTALL\_locales\bg\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\CRX_INSTALL\_locales\ca\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\CRX_INSTALL\_locales\cs\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\CRX_INSTALL\_locales\da\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\CRX_INSTALL\_locales\de\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\CRX_INSTALL\_locales\el\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\CRX_INSTALL\_locales\en\messages.json
ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\CRX_INSTALL\_locales\en_GB\messages.json
ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\CRX_INSTALL\_locales\es\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\CRX_INSTALL\_locales\es_419\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\CRX_INSTALL\_locales\et\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\CRX_INSTALL\_locales\fi\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\CRX_INSTALL\_locales\fil\messages.json
ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\CRX_INSTALL\_locales\fr\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\CRX_INSTALL\_locales\hi\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\CRX_INSTALL\_locales\hr\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\CRX_INSTALL\_locales\hu\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\CRX_INSTALL\_locales\id\messages.json
ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\CRX_INSTALL\_locales\it\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\CRX_INSTALL\_locales\ja\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\CRX_INSTALL\_locales\ko\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\CRX_INSTALL\_locales\lt\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\CRX_INSTALL\_locales\lv\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\CRX_INSTALL\_locales\nb\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\CRX_INSTALL\_locales\nl\messages.json
ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\CRX_INSTALL\_locales\pl\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\CRX_INSTALL\_locales\pt_BR\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\CRX_INSTALL\_locales\pt_PT\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\CRX_INSTALL\_locales\ro\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\CRX_INSTALL\_locales\ru\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\CRX_INSTALL\_locales\sk\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\CRX_INSTALL\_locales\sl\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\CRX_INSTALL\_locales\sr\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\CRX_INSTALL\_locales\sv\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\CRX_INSTALL\_locales\th\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\CRX_INSTALL\_locales\tr\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\CRX_INSTALL\_locales\uk\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\CRX_INSTALL\_locales\vi\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\CRX_INSTALL\_locales\zh_CN\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\CRX_INSTALL\_locales\zh_TW\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\CRX_INSTALL\images\icon_128.png
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\CRX_INSTALL\images\icon_16.png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5904_662416031\CRX_INSTALL\manifest.json
ASCII text, with CRLF line terminators
dropped
 clean
There are 209 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
'C:\Program Files\Google\Chrome\Application\chrome.exe' --start-maximized --enable-automation 'https://tendaggisilvana.it/officix/'
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1552,13813088594936222501,123881940111943640,131072 --lang=en-GB --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1724 /prefetch:8
clean

URLs

Name
IP
Malicious
https://tendaggisilvana.it/officix/
unknown
 malicious
http://54.211.202.147/excel-b/excel/excel/mailred.php
unknown
 malicious
https://tendaggisilvana.it/officix/2
unknown
 malicious
https://tendaggisilvana.it/officix/l
unknown
 malicious
https://tendaggisilvana.it/officix/Log
unknown
 malicious
https://tendaggisilvana.it/officix/images/logo.png
unknown
 malicious
https://tendaggisilvana.it/officix/
malicious
https://dns.google
unknown
 clean
https://ogs.google.com
unknown
 clean
https://tendaggisilvana.it/B
unknown
 clean
https://support.google.com/chromecast/troubleshooter/2995236
unknown
 clean
https://tendaggisilvana.it/
unknown
 clean
https://ka-f.fontawesome.com
unknown
 clean
https://play.google.com
unknown
 clean
https://payments.google.com/payments/v4/js/integrator.js
unknown
 clean
https://tendaggisilvana.it/J
unknown
 clean
https://www.google.com;
unknown
 clean
https://hangouts.google.com/
unknown
 clean
https://a.nel.cloudflare.com/report/v3?s=SHGtnX9xazknqYiGPoGRaqx%2F%2FWy8Y8PBr5kVPAS86WujjGpNvLxWPqb
unknown
 clean
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
unknown
 clean
https://sandbox.google.com/payments/v4/js/integrator.js
unknown
 clean
https://stackpath.bootstrapcdn.com
unknown
 clean
https://www.google.com
unknown
 clean
https://kit.fontawesome.com
unknown
 clean
https://a.nel.cloudflare.com/report/v3?s=fhkClAt69gcnS2E4qLW03HMRV7K9exETWnVnDpnUTaFoSowtMflZ1V8o0ct
unknown
 clean
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
unknown
 clean
https://tendaggisilvana.it
unknown
 clean
https://accounts.google.com
unknown
 clean
https://maxcdn.bootstrapcdn.com
unknown
 clean
https://support.google.com/chromecast/answer/2998456
unknown
 clean
https://cdnjs.cloudflare.com
unknown
 clean
https://clients2.googleusercontent.com
unknown
 clean
https://apis.google.com
unknown
 clean
https://kit.fontawesome.com/585b051251.js
unknown
 clean
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
unknown
 clean
https://www.google.com/
unknown
 clean
https://feedback.googleusercontent.com
unknown
 clean
https://clients2.google.com
unknown
 clean
https://clients2.google.com/service/update2/crx
unknown
 clean
There are 29 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
gstaticadssl.l.google.com
142.250.185.131
 clean
stackpath.bootstrapcdn.com
104.18.11.207
 clean
accounts.google.com
216.58.205.77
 clean
cdnjs.cloudflare.com
104.16.18.94
 clean
maxcdn.bootstrapcdn.com
104.18.10.207
 clean
clients.l.google.com
216.58.208.174
 clean
tendaggisilvana.it
168.119.64.244
 clean
googlehosted.l.googleusercontent.com
216.58.208.129
 clean
clients2.googleusercontent.com
unknown
 clean
clients2.google.com
unknown
 clean
ka-f.fontawesome.com
unknown
 clean
code.jquery.com
unknown
 clean
kit.fontawesome.com
unknown
 clean
There are 3 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
192.168.2.1
unknown
unknown
clean
104.18.10.207
maxcdn.bootstrapcdn.com
United States
clean
192.168.2.4
unknown
unknown
clean
192.168.2.6
unknown
unknown
clean
192.168.2.5
unknown
unknown
clean
216.58.208.129
googlehosted.l.googleusercontent.com
United States
clean
104.16.18.94
cdnjs.cloudflare.com
United States
clean
168.119.64.244
tendaggisilvana.it
Germany
clean
216.58.208.174
clients.l.google.com
United States
clean
216.58.205.77
accounts.google.com
United States
clean
104.18.11.207
stackpath.bootstrapcdn.com
United States
clean
192.168.2.30
unknown
unknown
clean
239.255.255.250
unknown
Reserved
clean
142.250.185.131
gstaticadssl.l.google.com
United States
clean
127.0.0.1
unknown
unknown
clean
There are 5 hidden IPs, click here to show them.

Registry

Path
Value
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
ahfgeienlihckogmohjhadlkjgocpleb
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
gdaefkejpgkiemlaofpalmlakkmbjdnl
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
gfdkimpbcpahaombhbimeihdjnejgicl
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
kmendfapggjehodndflmmgagdbamhnfd
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
mfehgcgbbipciphmccgaenjidiccnmng
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
mhjfbmdgcfjbbpaeojofohoefgiehjai
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
neajdppkdcdipfabeoofebfddakdcjhd
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
nkeimhogjdpnpccoofpliimaahmaaome
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
prefs.preference_reset_time
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
S-1-5-21-3853321935-2125563209-4053062332-1002
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
gfdkimpbcpahaombhbimeihdjnejgicl
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
nmmhkkegccagdldgiimedpiccmgmieda
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
pkedcjkdefgpdelpbcmbmeomcjbeemfm
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
nmmhkkegccagdldgiimedpiccmgmieda
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
state
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
StatusCodes
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
StatusCodes
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
state
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
dr
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
software_reporter.reporting
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
module_blacklist_cache_md5_digest
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
media.storage_id_salt
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
google.services.last_account_id
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
google.services.account_id
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
software_reporter.prompt_seed
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
settings_reset_prompt.last_triggered_for_homepage
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
default_search_provider_data.template_url_data
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
safebrowsing.incidents_sent
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
pinned_tabs
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
search_provider_overrides
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
settings_reset_prompt.last_triggered_for_default_search
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
prefs.preference_reset_time
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
google.services.last_username
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
session.startup_urls
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
session.restore_on_startup
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
software_reporter.prompt_version
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
settings_reset_prompt.last_triggered_for_startup_urls
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
settings_reset_prompt.prompt_wave
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
homepage
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
homepage_is_newtabpage
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
browser.show_home_button
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
user_experience_metrics.stability.exited_cleanly
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
lastrun
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
Blob
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
Blob
 clean
There are 35 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
244C38C0000
unkown
page read and write
 clean
7FF4EB805000
unkown
page readonly
 clean
244BE276000
unkown
page read and write
 clean
244C3C10000
unkown
page readonly
 clean
7FF4EB9BF000
unkown
page readonly
 clean
7FF4EB5F1000
unkown
page readonly
 clean
244C38A0000
unkown
page write copy
 clean
244BF630000
unkown
page read and write
 clean
244C3A8A000
unkown
page read and write
 clean
244BE400000
unkown
page readonly
 clean
7FF4EB98C000
unkown
page readonly
 clean
7FF4EB80F000
unkown
page readonly
 clean
244C3A86000
unkown
page read and write
 clean
244BE313000
unkown
page read and write
 clean
6A52DFF000
unkown
page read and write
 clean
7FF4EB93F000
unkown
page readonly
 clean
7FF4EB7B1000
unkown
page readonly
 clean
7FF4EB9D9000
unkown
page readonly
 clean
6A52EFB000
unkown
page read and write
 clean
244C3800000
unkown
page read and write
 clean
7FF4EB6E0000
unkown
page readonly
 clean
6A5327F000
unkown
page read and write
 clean
6A5367D000
unkown
page read and write
 clean
244BEA02000
unkown
page read and write
 clean
7FF4EB80A000
unkown
page readonly
 clean
7FF4EB74B000
unkown
page readonly
 clean
7FF4EB923000
unkown
page readonly
 clean
244C3930000
unkown
page read and write
 clean
244C3C54000
unkown
page write copy
 clean
244BEB00000
unkown
page read and write
 clean
7FF4EB4C2000
unkown
page readonly
 clean
244C3810000
unkown
page read and write
 clean
244C3A1D000
unkown
page read and write
 clean
244C37F0000
unkown
page read and write
 clean
7FF4EB96B000
unkown
page readonly
 clean
244C3A7B000
unkown
page read and write
 clean
244C3CA9000
unkown
page write copy
 clean
244BEB9A000
unkown
page read and write
 clean
244BE9F0000
unkown
page readonly
 clean
244C3C6C000
unkown
page read and write
 clean
244C3930000
unkown
page read and write
 clean
244C3C57000
unkown
page write copy
 clean
7FF4EBA44000
unkown
page readonly
 clean
244C3A00000
unkown
page read and write
 clean
244BE9B0000
unkown
page readonly
 clean
7FF4EB75F000
unkown
page readonly
 clean
7FF4EB647000
unkown
page readonly
 clean
6A5317F000
unkown
page read and write
 clean
244BEA15000
unkown
page read and write
 clean
244C36D0000
unkown
page read and write
 clean
244C3A55000
unkown
page read and write
 clean
244C3A8A000
unkown
page read and write
 clean
244BE180000
unkown
page readonly
 clean
6A5347E000
unkown
page read and write
 clean
244BEB59000
unkown
page read and write
 clean
7FF4EB965000
unkown
page readonly
 clean
244C3930000
unkown
page read and write
 clean
244BE22A000
unkown
page read and write
 clean
6A52BFA000
unkown
page read and write
 clean
244C37D0000
unkown
page read and write
 clean
244C3A9B000
unkown
page read and write
 clean
244C3A82000
unkown
page read and write
 clean
244C3C94000
unkown
page readonly
 clean
7FF4EAF14000
unkown
page readonly
 clean
244C3640000
unkown
page read and write
 clean
7FF4EB1B2000
unkown
page readonly
 clean
244BE256000
unkown
page read and write
 clean
244BE23D000
unkown
page read and write
 clean
244C38A0000
unkown
page read and write
 clean
7FF4EB913000
unkown
page readonly
 clean
244C3940000
unkown
page read and write
 clean
244C3800000
unkown
page read and write
 clean
7FF4EB7F2000
unkown
page readonly
 clean
244C3810000
unkown
page read and write
 clean
244BE190000
unkown
page readonly
 clean
244BE302000
unkown
page read and write
 clean
244BE26C000
unkown
page read and write
 clean
7FF4EB71B000
unkown
page readonly
 clean
7FF4EB94A000
unkown
page readonly
 clean
7FF4EB751000
unkown
page readonly
 clean
6A52FFF000
unkown
page read and write
 clean
7FF4EB650000
unkown
page readonly
 clean
6A52F7D000
unkown
page read and write
 clean
244BF620000
unkown
page read and write
 clean
7FF4EB9CE000
unkown
page readonly
 clean
244C3980000
unkown
page readonly
 clean
7FF4EB639000
unkown
page readonly
 clean
244BF601000
unkown
page read and write
 clean
244BF623000
unkown
page read and write
 clean
7FF4EB960000
unkown
page readonly
 clean
244C3A98000
unkown
page read and write
 clean
7FF4EB575000
unkown
page readonly
 clean
7FF4EB9A8000
unkown
page readonly
 clean
244C36C0000
unkown
page read and write
 clean
7FF4EB726000
unkown
page readonly
 clean
244BEB58000
unkown
page read and write
 clean
244C3A62000
unkown
page read and write
 clean
244BE271000
unkown
page read and write
 clean
6A5307F000
unkown
page read and write
 clean
244BE170000
heap default
page read and write
 clean
244C3A7D000
unkown
page read and write
 clean
244BE9C0000
unkown
page readonly
 clean
7FF4EB2AE000
unkown
page readonly
 clean
244C3C38000
unkown
page read and write
 clean
244C37D6000
unkown
page read and write
 clean
7FF4EB7A1000
unkown
page readonly
 clean
6A52AF7000
unkown
page read and write
 clean
7FF4EB577000
unkown
page readonly
 clean
6A5278E000
unkown
page read and write
 clean
7FF4EBA4A000
unkown
page readonly
 clean
244C3CA8000
unkown
page read and write
 clean
244BE1A0000
unkown
page read and write
 clean
7FF4EB1EA000
unkown
page readonly
 clean
244C3C88000
unkown
page readonly
 clean
244C3990000
unkown
page readonly
 clean
7FF4EB91F000
unkown
page readonly
 clean
244C3C20000
unkown
page read and write
 clean
7FF4EB98F000
unkown
page readonly
 clean
7FF4EB738000
unkown
page readonly
 clean
7FF4EB934000
unkown
page readonly
 clean
244C38F0000
unkown
page read and write
 clean
244C3650000
unkown
page read and write
 clean
244BEB13000
unkown
page read and write
 clean
244BE213000
unkown
page read and write
 clean
7FF4EB75D000
unkown
page readonly
 clean
244C3C74000
unkown
page read and write
 clean
7FF4EB9D6000
unkown
page readonly
 clean
244C38E0000
unkown
page read and write
 clean
6A5270E000
unkown
page read and write
 clean
6A5357C000
unkown
page read and write
 clean
7FF4EB900000
unkown
page readonly
 clean
7FF4EB8A6000
unkown
page readonly
 clean
244C3900000
unkown
page read and write
 clean
244BE2F9000
unkown
page read and write
 clean
6A530FE000
unkown
page read and write
 clean
244C3C90000
unkown
page read and write
 clean
244BE1B0000
unkown
page read and write
 clean
244C37D0000
unkown
page read and write
 clean
244BE2B7000
unkown
page read and write
 clean
244BF000000
unkown
page read and write
 clean
244C37DE000
unkown
page read and write
 clean
7FF4EB977000
unkown
page readonly
 clean
244BE9A0000
unkown
page readonly
 clean
6A5268B000
unkown
page read and write
 clean
7FF4EB9A4000
unkown
page readonly
 clean
244C3A3F000
unkown
page read and write
 clean
244C3C90000
unkown
page read and write
 clean
7FF4EB1F5000
unkown
page readonly
 clean
244BE4D0000
unkown
page readonly
 clean
7FF4EB64A000
unkown
page readonly
 clean
244C38D4000
unkown
page readonly
 clean
7FF4EBA51000
unkown
page readonly
 clean
244C38D7000
unkown
page readonly
 clean
244C3920000
unkown
page read and write
 clean
244BE273000
unkown
page read and write
 clean
244BF1E0000
unkown
page read and write
 clean
244C3C3C000
unkown
page readonly
 clean
7FF4EB8AD000
unkown
page readonly
 clean
7FF4EB8CC000
unkown
page readonly
 clean
244C3970000
unkown
page readonly
 clean
244C37F1000
unkown
page read and write
 clean
244C3A8A000
unkown
page read and write
 clean
244BEB18000
unkown
page read and write
 clean
244C3A4C000
unkown
page read and write
 clean
244C38AC000
unkown
page readonly
 clean
7FF4EB5E0000
unkown
page readonly
 clean
244C3A95000
unkown
page read and write
 clean
244C3A99000
unkown
page read and write
 clean
7FF4EB95A000
unkown
page readonly
 clean
244C36B0000
unkown
page read and write
 clean
244C37F4000
unkown
page read and write
 clean
7FF4EB73F000
unkown
page readonly
 clean
244BEB02000
unkown
page read and write
 clean
7FF4EB709000
unkown
page readonly
 clean
6A52CFA000
unkown
page read and write
 clean
244BE860000
unkown
page readonly
 clean
244BF2C0000
unkown
page readonly
 clean
7FF4EB9B4000
unkown
page readonly
 clean
244C3A13000
unkown
page read and write
 clean
244BED81000
unkown
page read and write
 clean
244C3A2B000
unkown
page read and write
 clean
244BED01000
unkown
page read and write
 clean
7FF4EB794000
unkown
page readonly
 clean
7FF4EB5B6000
unkown
page readonly
 clean
244C3930000
unkown
page read and write
 clean
6A5337F000
unkown
page read and write
 clean
244BF100000
unkown
page read and write
 clean
244C3680000
unkown
page readonly
 clean
7FF4EB796000
unkown
page readonly
 clean
244C3A94000
unkown
page read and write
 clean
244C37D1000
unkown
page read and write
 clean
244C38A3000
unkown
page write copy
 clean
7FF4EB997000
unkown
page readonly
 clean
7FF4EB644000
unkown
page readonly
 clean
244BE28D000
unkown
page read and write
 clean
7FF4EB94C000
unkown
page readonly
 clean
7FF4EB1E5000
unkown
page readonly
 clean
244C3C77000
unkown
page read and write
 clean
7FF4EB9C8000
unkown
page readonly
 clean
244BE288000
unkown
page read and write
 clean
244BE298000
unkown
page read and write
 clean
7FF4EBA52000
unkown
page readonly
 clean
244BEB18000
unkown
page read and write
 clean
244BE9E0000
unkown
page readonly
 clean
6A532FE000
unkown
page read and write
 clean
244C3930000
unkown
page readonly
 clean
244C3814000
unkown
page read and write
 clean
244BE200000
unkown
page read and write
 clean
244C3A99000
unkown
page read and write
 clean
244BE110000
heap private
page read and write
 clean
244C37D4000
unkown
page read and write
 clean
244C3920000
unkown
page read and write
 clean
244C3910000
unkown
page read and write
 clean
244C37D8000
unkown
page read and write
 clean
244BE9D0000
unkown
page readonly
 clean
7FF4EB821000
unkown
page readonly
 clean
244C3A90000
unkown
page read and write
 clean
7FF4EB95E000
unkown
page readonly
 clean
244C3630000
unkown
page read and write
 clean
244BEA00000
unkown
page read and write
 clean
244C3A65000
unkown
page read and write
 clean
7FF4EAF1E000
unkown
page readonly
 clean
244C3A8C000
unkown
page read and write
 clean
There are 213 hidden memdumps, click here to show them.

DOM / HTML

URL
Malicious
https://tendaggisilvana.it/officix/
 malicious