Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US
--service-sandbox-type=none --mojo-platform-channel-handle=2332 --field-trial-handle=2220,i,1714232857553739519,8348514245164664097,262144
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
/prefetch:8
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://Hi%20Team,%20%20We%20have%20blocked%20the%20sender%20on%20user%20outlook.%20%20Please%20check%20the%20below%20URL%20reputation%20and%20block%20if%20required.%20And%20perform%20full%20scan%20on%20this%20john.lennie@elders.com.au%20user%20machine.%20And%20ask%20SD%20team%20to%20reset%20password%20if%20required.%20%20https://www.wrike.com/form/eyJhY2NvdW50SWQiOjY2NTMyNDcsInRhc2tGb3JtSWQiOjIxNTE4ODl9CTQ4ODUxOTMwNjM4NDYJOTc4NmYyOGNlZTc2NmFhOGU1MDBiYmVmMjZjYTYyZmIzZmQ0NGNjYTY5ZjNhMzE5NTg1YjE1ZjAxNzUxYmY5NQ=="
|
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
google.com
|
142.250.181.142
|
||
|
www.google.com
|
172.217.21.36
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
239.255.255.250
|
unknown
|
Reserved
|
||
|
172.217.21.36
|
www.google.com
|
United States
|
||
|
192.168.2.4
|
unknown
|
unknown
|