Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Urgent Secure File Transfer Notification.eml
|
RFC 822 mail, ASCII text, with CRLF line terminators
|
initial sample
|
||
|
C:\Users\user\AppData\Local\Microsoft\FORMS\FRMCACHE.DAT
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\AddInClassifierCache\OfficeSharedEntities.bin
|
ASCII text, with very long lines (65536), with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\AddInClassifierCache\OfficeSharedEntitiesUpdated.bin
|
ASCII text, with no line terminators
|
modified
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\SmartLookupCache\main_ssr.html
|
HTML document, ASCII text, with very long lines (56354), with CRLF, LF line terminators
|
modified
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\0A31A525-9351-49F3-A96B-19E9DC3A5FA6
|
XML 1.0 document, ASCII text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-journal
|
SQLite Rollback Journal
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Office\MSO3072.acl
|
data
|
dropped
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
52.113.194.132
|
unknown
|
United States
|
||
|
2.19.126.151
|
unknown
|
European Union
|
||
|
23.212.88.34
|
unknown
|
United States
|
||
|
52.109.89.18
|
unknown
|
United States
|
||
|
52.109.89.19
|
unknown
|
United States
|
||
|
52.168.112.67
|
unknown
|
United States
|