IOC Report
https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfe

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 48
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 49
ASCII text, with CRLF line terminators
dropped
Chrome Cache Entry: 50
PNG image data, 116 x 116, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 51
ASCII text
downloaded
Chrome Cache Entry: 52
ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 53
ASCII text
downloaded
Chrome Cache Entry: 54
PNG image data, 116 x 116, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 55
ASCII text, with very long lines (65536), with no line terminators
dropped
Chrome Cache Entry: 56
ASCII text
downloaded
Chrome Cache Entry: 57
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 58
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 59
JSON data
dropped
Chrome Cache Entry: 60
JSON data
downloaded
Chrome Cache Entry: 61
HTML document, ASCII text, with CRLF line terminators
dropped
There are 5 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2256 --field-trial-handle=2196,i,17227430046646712005,2420801444140375319,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW-RUZlqmDnxxITNZ0E6A4yDZcAN6fIj3BdkHfM7nln6BjdOiZABN4O1R72o9PLvDFHUgGF4Xcq5UsXRkO4GpjVuL42O3Jz-pKL9VranwdYeQ5rgnP7ienRSMRZjiidKObVbcyPQ6H5KCcdJq-BxXGFZWUvsoJKX5CIo2Z8NAcx5B1_LAwif1lWs3i9AH9kopwjbCp6DGspBSxwy86guR8jAXZ2Wk1TAAn5OztNpCofxxfZSIJCZbK_CWToRqpvibrMfy3ZE0__XUgJCplxf4tsZnquCca55DauOxVKTEmiO4QPmCZ_aVhJcLrlmi4kgFxy0fYBacPN5CUNnRFEFCZd3k10zs1ru7CvuzhDf-RdytcxM4J5TLApRT1pkjBROwEEb6BrO5XcLQ9JQsaV0IqTTzvto37VyOnbculrKv1CJUWWp81ACcgmwU_t5hM69S6gQbGjlT10SSse33claFiYvzAnpqJkRD9hiydOxY2rHmbV-l6Z-ikBBwazAY8EVpWydekK3If_6GKbHLjcjNPDcOB8u7fFNqIytXZqjYhIYZzq5vaZmJ62lR_VntoGLh4kzoHaCJfI0R4BHTbLujm1MjXph8ePJnuhAyKfu07moFaaK2FhzRQnPKgTS6rmCBCiTc4k_VUXGMKS_rxHZukcRZzGQafexVV7QbWyHaGSh5AR3UfB8gXMAYeEm6IncwIQKwLNAEIyPNjQJFygCioFLxW6mnOjtxftARNbudbNy__SpIH1gbvFcqZfHromJkY9BhKoKewT0SCS_GviJRnRm2jNLZ3SMSebLFjZUQiT03rpEqhFf0ST5DBxrawkILtzw66_LnCWl8BfdN-pEGd0qO9E1y__IJ9UlfskklLIkKLUDq81JJi-YqYm8Yw3JAbJUKfMpM4cMtiC9jIjhZchsz9ajn5ubk4LAExwmil_5CwIH7WXIiZYIafo3FtF0x0uSFUiBQas_HorQ0rnU6WrJlRa"

URLs

Name
IP
Malicious
https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW-RUZlqmDnxxITNZ0E6A4yDZcAN6fIj3BdkHfM7nln6BjdOiZABN4O1R72o9PLvDFHUgGF4Xcq5UsXRkO4GpjVuL42O3Jz-pKL9VranwdYeQ5rgnP7ienRSMRZjiidKObVbcyPQ6H5KCcdJq-BxXGFZWUvsoJKX5CIo2Z8NAcx5B1_LAwif1lWs3i9AH9kopwjbCp6DGspBSxwy86guR8jAXZ2Wk1TAAn5OztNpCofxxfZSIJCZbK_CWToRqpvibrMfy3ZE0__XUgJCplxf4tsZnquCca55DauOxVKTEmiO4QPmCZ_aVhJcLrlmi4kgFxy0fYBacPN5CUNnRFEFCZd3k10zs1ru7CvuzhDf-RdytcxM4J5TLApRT1pkjBROwEEb6BrO5XcLQ9JQsaV0IqTTzvto37VyOnbculrKv1CJUWWp81ACcgmwU_t5hM69S6gQbGjlT10SSse33claFiYvzAnpqJkRD9hiydOxY2rHmbV-l6Z-ikBBwazAY8EVpWydekK3If_6GKbHLjcjNPDcOB8u7fFNqIytXZqjYhIYZzq5vaZmJ62lR_VntoGLh4kzoHaCJfI0R4BHTbLujm1MjXph8ePJnuhAyKfu07moFaaK2FhzRQnPKgTS6rmCBCiTc4k_VUXGMKS_rxHZukcRZzGQafexVV7QbWyHaGSh5AR3UfB8gXMAYeEm6IncwIQKwLNAEIyPNjQJFygCioFLxW6mnOjtxftARNbudbNy__SpIH1gbvFcqZfHromJkY9BhKoKewT0SCS_GviJRnRm2jNLZ3SMSebLFjZUQiT03rpEqhFf0ST5DBxrawkILtzw66_LnCWl8BfdN-pEGd0qO9E1y__IJ9UlfskklLIkKLUDq81JJi-YqYm8Yw3JAbJUKfMpM4cMtiC9jIjhZchsz9ajn5ubk4LAExwmil_5CwIH7WXIiZYIafo3FtF0x0uSFUiBQas_HorQ0rnU6WrJlRa
https://links.us1.defend.egress.com/_blazor/initializers
75.2.120.244
https://links.us1.defend.egress.com/_blazor?id=P4t2-W12MkpVBqka3FOdOA
75.2.120.244
https://links.us1.defend.egress.com/_framework/blazor.server.js
75.2.120.244
https://links.us1.defend.egress.com/_blazor?id=DEiYMxeErarpJfn_-KAnOA&_=1729761488888
75.2.120.244
https://links.us1.defend.egress.com/images/egress-icon.png
75.2.120.244
https://links.us1.defend.egress.com/_blazor/negotiate?negotiateVersion=1
75.2.120.244
https://links.us1.defend.egress.com/_framework/blazor.polyfill.min.js
75.2.120.244
https://links.us1.defend.egress.com/_blazor?id=DEiYMxeErarpJfn_-KAnOA
75.2.120.244
https://links.us1.defend.egress.com/css/site.css
75.2.120.244
https://links.us1.defend.egress.com/_blazor?id=DEiYMxeErarpJfn_-KAnOA&_=1729761489761
75.2.120.244
https://links.us1.defend.egress.com/images/egress-logo-dark.svg
75.2.120.244
https://links.us1.defend.egress.com/_blazor?id=DEiYMxeErarpJfn_-KAnOA&_=1729761488026
75.2.120.244
https://links.us1.defend.egress.com/~/js/JsInteropFuncions.js
75.2.120.244
There are 3 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
bg.microsoft.map.fastly.net
199.232.214.172
www.google.com
142.250.186.36
default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com
217.20.57.37
links.us1.defend.egress.com
75.2.120.244

IPs

IP
Domain
Country
Malicious
75.2.120.244
links.us1.defend.egress.com
United States
99.83.228.139
unknown
United States
142.250.186.36
www.google.com
United States
239.255.255.250
unknown
Reserved
192.168.2.7
unknown
unknown

DOM / HTML

URL
Malicious
https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW-RUZlqmDn