IOC Report
https://support-ads-team-34d19.web.app/form-2122.html

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 111
ASCII text, with very long lines (1442)
downloaded
Chrome Cache Entry: 112
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 113
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 114
JPEG image data, baseline, precision 8, 1920x175, components 3
dropped
Chrome Cache Entry: 115
PNG image data, 192 x 192, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 116
PNG image data, 192 x 192, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 117
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 118
JPEG image data, baseline, precision 8, 1920x175, components 3
downloaded
Chrome Cache Entry: 119
JSON data
downloaded
Chrome Cache Entry: 120
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 121
HTML document, ASCII text, with very long lines (1262), with no line terminators
downloaded
Chrome Cache Entry: 122
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 123
ASCII text, with very long lines (65465)
downloaded
There are 4 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2296 --field-trial-handle=2260,i,13518984095885643774,4557549284787884026,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://support-ads-team-34d19.web.app/form-2122.html"

URLs

Name
IP
Malicious
https://support-ads-team-34d19.web.app/form-2122.html
malicious
https://support-ads-team-34d19.web.app/form-2122.html
malicious
https://support-ads-team-34d19.web.app/static/js/main.597a1abe.js
199.36.158.100
https://support-ads-team-34d19.web.app/static/css/main.4dd8a724.css
199.36.158.100
https://support-ads-team-34d19.web.app/resources/bg.jpeg
199.36.158.100
https://support-ads-team-34d19.web.app/resources/meta.svg
199.36.158.100
https://support-ads-team-34d19.web.app/manifest.json
199.36.158.100
https://support-ads-team-34d19.web.app/resources/logo.png
199.36.158.100
https://support-ads-team-34d19.web.app/logo192.png
199.36.158.100

Domains

Name
IP
Malicious
bg.microsoft.map.fastly.net
199.232.214.172
support-ads-team-34d19.web.app
199.36.158.100
www.google.com
142.250.74.196
fp2e7a.wpc.phicdn.net
192.229.221.95

IPs

IP
Domain
Country
Malicious
199.36.158.100
support-ads-team-34d19.web.app
United States
239.255.255.250
unknown
Reserved
192.168.2.4
unknown
unknown
192.168.2.6
unknown
unknown
142.250.74.196
www.google.com
United States

DOM / HTML

URL
Malicious
https://support-ads-team-34d19.web.app/form-2122.html