Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Chrome Cache Entry: 56
|
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
|
dropped
|
||
|
Chrome Cache Entry: 57
|
ASCII text, with very long lines (65536), with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 58
|
Web Open Font Format (Version 2), TrueType, length 137104, version 331.-31196
|
downloaded
|
||
|
Chrome Cache Entry: 59
|
ASCII text, with very long lines (1492), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 60
|
HTML document, ASCII text, with very long lines (2088)
|
downloaded
|
||
|
Chrome Cache Entry: 61
|
JSON data
|
downloaded
|
||
|
Chrome Cache Entry: 62
|
Web Open Font Format (Version 2), TrueType, length 37608, version 1.0
|
downloaded
|
||
|
Chrome Cache Entry: 63
|
ASCII text, with very long lines (65536), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 64
|
ASCII text, with very long lines (65536), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 65
|
PNG image data, 254 x 120, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 66
|
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
|
downloaded
|
||
|
Chrome Cache Entry: 67
|
ASCII text, with very long lines (1492), with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 68
|
PNG image data, 254 x 120, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 69
|
ASCII text, with very long lines (65536), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 70
|
ASCII text, with very long lines (65536), with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 71
|
HTML document, ASCII text
|
dropped
|
||
|
Chrome Cache Entry: 72
|
JSON data
|
dropped
|
||
|
Chrome Cache Entry: 73
|
ASCII text, with very long lines (65536), with no line terminators
|
dropped
|
There are 9 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US
--service-sandbox-type=none --mojo-platform-channel-handle=2348 --field-trial-handle=2256,i,4693434156636577527,5681028497695980635,262144
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
/prefetch:8
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://url.uk.m.mimecastprotect.com/s/YqYdCWLlDU5vY6KC6f1FoGt7r?domain=is.gd"
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://url.uk.m.mimecastprotect.com/s/YqYdCWLlDU5vY6KC6f1FoGt7r?domain=is.gd
|
|||
|
https://security-uk.m.mimecastprotect.com/ttpwp/resources/styles.5257ca6e429949972959.js
|
195.130.217.87
|
||
|
https://security-uk.m.mimecastprotect.com/ttpwp/resources/runtime.5257ca6e429949972959.js
|
195.130.217.87
|
||
|
https://security-uk.m.mimecastprotect.com/ttpwp/resources/languages/en.json
|
195.130.217.87
|
||
|
https://security-uk.m.mimecastprotect.com/ttpwp/resources/mimecast-icons.bb1a2cd16db9345fc437.woff2?25417273
|
195.130.217.87
|
||
|
https://url.uk.m.mimecastprotect.com/s/YqYdCWLlDU5vY6KC6f1FoGt7r?domain=is.gd
|
195.130.217.180
|
||
|
https://security-uk.m.mimecastprotect.com/ttpwp/resources/fa-solid-900.54dfc8f551be346014e4.woff2
|
195.130.217.87
|
||
|
https://security-uk.m.mimecastprotect.com/ttpwp/resources/images/mimecast-logo.png
|
195.130.217.87
|
||
|
https://security-uk.m.mimecastprotect.com/ttpwp/#/block?key=1TW5hWlpqEUDJWB7Q-sIuwFS9MDmwCkOmYVNJVkSL324ken-RK9opxK6UdfKVHNJns7rDsPYYjPmaMBNAHsL6DJfzOOfA4yYQ5Cuj5OmIiYdwbDFrBQZCY7QqgxspZ49
|
|||
|
https://security-uk.m.mimecastprotect.com/ttpwp/resources/main.5257ca6e429949972959.js
|
195.130.217.87
|
||
|
http://www.mimecast.com/
|
unknown
|
||
|
https://security-uk.m.mimecastprotect.com/ttpwp
|
195.130.217.87
|
||
|
https://security-uk.m.mimecastprotect.com/api/ttp/url/get-page-data
|
195.130.217.87
|
||
|
https://security-uk.m.mimecastprotect.com/ttpwp/resources/polyfills.5257ca6e429949972959.js
|
195.130.217.87
|
||
|
https://security-uk.m.mimecastprotect.com/ttpwp/resources/images/favicon.ico
|
195.130.217.87
|
||
|
https://community.mimecast.com/docs/DOC-241
|
unknown
|
There are 5 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
bg.microsoft.map.fastly.net
|
199.232.214.172
|
||
|
url.uk.m.mimecastprotect.com
|
195.130.217.180
|
||
|
security-uk.m.mimecastprotect.com
|
195.130.217.87
|
||
|
www.google.com
|
142.250.185.228
|
||
|
fp2e7a.wpc.phicdn.net
|
192.229.221.95
|
||
|
s-part-0032.t-0009.t-msedge.net
|
13.107.246.60
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
142.250.185.228
|
www.google.com
|
United States
|
||
|
195.130.217.180
|
url.uk.m.mimecastprotect.com
|
United Kingdom
|
||
|
91.220.42.87
|
unknown
|
United Kingdom
|
||
|
192.168.2.4
|
unknown
|
unknown
|
||
|
195.130.217.87
|
security-uk.m.mimecastprotect.com
|
United Kingdom
|
||
|
239.255.255.250
|
unknown
|
Reserved
|
||
|
192.168.2.23
|
unknown
|
unknown
|
||
|
192.168.2.15
|
unknown
|
unknown
|
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://security-uk.m.mimecastprotect.com/ttpwp/#/block?key=1TW5hWlpqEUDJWB7Q-sIuwFS9MDmwCkOmYVNJVkSL324ken-RK9opxK6UdfKVHNJns7rDsPYYjPmaMBNAHsL6DJfzOOfA4yYQ5Cuj5OmIiYdwbDFrBQZCY7QqgxspZ49
|
||
|
https://security-uk.m.mimecastprotect.com/ttpwp/#/block?key=1TW5hWlpqEUDJWB7Q-sIuwFS9MDmwCkOmYVNJVkSL324ken-RK9opxK6UdfKVHNJns7rDsPYYjPmaMBNAHsL6DJfzOOfA4yYQ5Cuj5OmIiYdwbDFrBQZCY7QqgxspZ49
|
||
|
https://security-uk.m.mimecastprotect.com/ttpwp/#/block?key=1TW5hWlpqEUDJWB7Q-sIuwFS9MDmwCkOmYVNJVkSL324ken-RK9opxK6UdfKVHNJns7rDsPYYjPmaMBNAHsL6DJfzOOfA4yYQ5Cuj5OmIiYdwbDFrBQZCY7QqgxspZ49
|