Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\3f837ef4-6bb6-4c49-a519-d6ce8a8680f8.tmp
|
ASCII text, with very long lines, with no line terminators
|
modified
|
||
|
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\9f38feb6-e82b-4425-a3ef-6bd8fd95420e.tmp
|
data
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
|
data
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\01e6f39d-7cc0-47be-ad51-6610b8bd74bb.tmp
|
ASCII text, with very long lines, with no line terminators
|
modified
|
||
|
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\1310830b-321e-4d8a-b5f8-6497f65556f4.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\1ee046b7-032d-48ff-a71a-0c87bbc557a4.tmp
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
modified
|
||
|
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\36f094cc-4ce6-46e6-b6c3-f540df4c72f9.tmp
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\3c353e07-df8e-4f8a-8ac7-8e18137f1466.tmp
|
very short file (no magic)
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\3c359289-0de6-400b-955b-23b983b9f614.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache
|
data
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\Network Persistent State (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\Preferences (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences (copy)
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\21bba6cd-6715-4435-b492-c1c47b007104.tmp
|
ASCII text, with no line terminators
|
modified
|
||
|
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1
|
data
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\000001.dbtmp
|
ASCII text
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\CURRENT
(copy)
|
ASCII text
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\MANIFEST-000001
|
PGP\011Secret Key -
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\a7209e08-6427-4eac-953e-fb4b5eaf5207.tmp
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000006.dbtmp
|
ASCII text
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\CURRENT (copy)
|
ASCII text
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\f066315c-3d7d-4dae-9156-124a8978280e.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\f899b80f-8c64-433b-9da2-58d312288467.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Last Browser
|
data
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Last Version
|
ASCII text, with no line terminators
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Local State (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Module Info Cache (copy)
|
data
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\d7ec130d-d787-480e-82fe-bbfd2e27b454.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\df762e06-ea47-4b4d-89f4-cd299bad136a.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\1265fdd7-b325-4713-8bab-ac90b940fd66.tmp
|
Google Chrome extension, version 3
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\3401be7f-e326-4c4f-89f4-aa17a0e1a6ba.tmp
|
gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\6ddee3e6-6cfb-4c59-a955-a3de15642fce.tmp
|
gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\83e67817-03b7-49e0-988d-1f43779420a4.tmp
|
gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\8b86b677-e793-4955-89c0-50d83b300d38.tmp
|
gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\ffc15e06-a205-4a54-a19b-fb5ba8b6890a.tmp
|
gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\_locales\bg\messages.json
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\_locales\ca\messages.json
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\_locales\cs\messages.json
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\_locales\da\messages.json
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\_locales\de\messages.json
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\_locales\el\messages.json
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\_locales\en\messages.json
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\_locales\es\messages.json
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\_locales\es_419\messages.json
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\_locales\et\messages.json
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\_locales\fi\messages.json
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\_locales\fil\messages.json
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\_locales\fr\messages.json
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\_locales\hi\messages.json
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\_locales\hr\messages.json
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\_locales\hu\messages.json
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\_locales\id\messages.json
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\_locales\it\messages.json
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\_locales\ja\messages.json
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\_locales\lt\messages.json
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\_locales\lv\messages.json
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\_locales\nb\messages.json
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\_locales\nl\messages.json
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\_locales\pl\messages.json
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\_locales\pt_BR\messages.json
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\_locales\pt_PT\messages.json
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\_locales\ro\messages.json
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\_locales\ru\messages.json
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\_locales\sk\messages.json
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\_locales\sl\messages.json
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\_locales\sr\messages.json
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\_locales\sv\messages.json
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\_locales\th\messages.json
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\_locales\tr\messages.json
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\_locales\uk\messages.json
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\_locales\vi\messages.json
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\_locales\zh_CN\messages.json
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\_locales\zh_TW\messages.json
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\craw_background.js
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\craw_window.js
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\css\craw_window.css
|
ASCII text
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\html\craw_window.html
|
HTML document, ASCII text
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\images\flapper.gif
|
GIF image data, version 89a, 30 x 30
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\images\icon_128.png
|
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\images\icon_16.png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\images\topbar_floating_button.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\images\topbar_floating_button_close.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\images\topbar_floating_button_hover.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\images\topbar_floating_button_maximize.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\scoped_dir1836_251390515\CRX_INSTALL\manifest.json
|
ASCII text
|
dropped
|
||
|
C:\Users\alfredo\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
|
Little-endian UTF-16 Unicode text, with no line terminators
|
dropped
|
There are 77 hidden files, click here to show them.
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://businessadmin.org/
|
 |
||
|
https://www.businessadmin.org/
|
|
||
|
https://productoffice365fax.weebly.com/
|
|||
|
https://productoffice365fax.weebly.com/ajax/apps/formSubmitAjax.php
|
|||
|
http://productoffice365fax.weebly.com/incorrect-password.html
|
199.34.228.54
|
||
|
https://productoffice365fax.weebly.com/incorrect-password.html
|
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
gstaticadssl.l.google.com
|
142.250.184.227
|
||
|
td-ccm-168-233.wixdns.net
|
34.117.168.233
|
||
|
accounts.google.com
|
142.250.186.141
|
||
|
sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com
|
52.41.81.16
|
||
|
gcp.media-router.wixstatic.com
|
34.102.176.152
|
||
|
weebly.map.fastly.net
|
151.101.1.46
|
||
|
pages-wildcard.weebly.com
|
199.34.228.54
|
||
|
td-static-34-96-106-200.parastorage.com
|
34.96.106.200
|
||
|
businessadmin.org
|
185.230.63.107
|
||
|
ssl-google-analytics.l.google.com
|
142.250.185.136
|
||
|
www.google.com
|
142.250.184.196
|
||
|
clients.l.google.com
|
142.250.184.206
|
||
|
bi-flogger-alb-ext-343643057.us-east-1.elb.amazonaws.com
|
52.201.127.108
|
||
|
productoffice365fax.weebly.com
|
unknown
|
||
|
siteassets.parastorage.com
|
unknown
|
||
|
static.wixstatic.com
|
unknown
|
||
|
cdn2.editmysite.com
|
unknown
|
||
|
frog.editorx.com
|
unknown
|
||
|
ec.editmysite.com
|
unknown
|
||
|
clients2.google.com
|
unknown
|
||
|
frog.wix.com
|
unknown
|
||
|
www.businessadmin.org
|
unknown
|
||
|
static.parastorage.com
|
unknown
|
There are 13 hidden domains, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
74.125.108.199
|
unknown
|
United States
|
||
|
192.168.2.1
|
unknown
|
unknown
|
||
|
216.58.212.142
|
unknown
|
United States
|
||
|
34.96.106.200
|
td-static-34-96-106-200.parastorage.com
|
United States
|
||
|
52.41.81.16
|
sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com
|
United States
|
||
|
199.34.228.54
|
pages-wildcard.weebly.com
|
United States
|
||
|
185.230.63.107
|
businessadmin.org
|
Israel
|
||
|
34.203.102.82
|
unknown
|
United States
|
||
|
52.201.127.108
|
bi-flogger-alb-ext-343643057.us-east-1.elb.amazonaws.com
|
United States
|
||
|
142.250.184.227
|
gstaticadssl.l.google.com
|
United States
|
||
|
142.250.184.206
|
clients.l.google.com
|
United States
|
||
|
142.250.186.138
|
unknown
|
United States
|
||
|
142.250.185.67
|
unknown
|
United States
|
||
|
142.250.184.196
|
www.google.com
|
United States
|
||
|
142.250.186.141
|
accounts.google.com
|
United States
|
||
|
151.101.1.46
|
weebly.map.fastly.net
|
United States
|
||
|
34.117.168.233
|
td-ccm-168-233.wixdns.net
|
United States
|
||
|
142.250.185.136
|
ssl-google-analytics.l.google.com
|
United States
|
||
|
142.251.37.99
|
unknown
|
United States
|
||
|
142.250.181.227
|
unknown
|
United States
|
||
|
239.255.255.250
|
unknown
|
Reserved
|
||
|
34.102.176.152
|
gcp.media-router.wixstatic.com
|
United States
|
||
|
142.250.186.42
|
unknown
|
United States
|
||
|
142.250.185.74
|
unknown
|
United States
|
||
|
127.0.0.1
|
unknown
|
unknown
|
There are 15 hidden IPs, click here to show them.