Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Chrome Cache Entry: 60
|
ASCII text, with very long lines (65536), with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 61
|
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
|
downloaded
|
||
|
Chrome Cache Entry: 62
|
ASCII text, with very long lines (65536), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 63
|
ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 64
|
ASCII text, with very long lines (65536), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 65
|
HTML document, ASCII text, with very long lines (2088)
|
downloaded
|
||
|
Chrome Cache Entry: 66
|
ASCII text, with very long lines (65536), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 67
|
ASCII text, with very long lines (1492), with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 68
|
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
|
dropped
|
||
|
Chrome Cache Entry: 69
|
JSON data
|
downloaded
|
||
|
Chrome Cache Entry: 70
|
ASCII text, with very long lines (65536), with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 71
|
PNG image data, 254 x 120, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 72
|
JSON data
|
dropped
|
||
|
Chrome Cache Entry: 73
|
Web Open Font Format (Version 2), TrueType, length 137104, version 331.-31196
|
downloaded
|
||
|
Chrome Cache Entry: 74
|
PNG image data, 254 x 120, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 75
|
Web Open Font Format (Version 2), TrueType, length 37608, version 1.0
|
downloaded
|
||
|
Chrome Cache Entry: 76
|
ASCII text, with very long lines (1492), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 77
|
ASCII text, with very long lines (65536), with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 78
|
HTML document, ASCII text
|
dropped
|
There are 10 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US
--service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=2016,i,7900966632897452332,14855132564354637883,262144
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
/prefetch:8
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://url.za.m.mimecastprotect.com/s/tloGC76zVXi77gphkIJHoVrqi"
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://url.za.m.mimecastprotect.com/s/tloGC76zVXi77gphkIJHoVrqi
|
|||
|
https://security-za.m.mimecastprotect.com/ttpwp/resources/languages/en.json
|
41.74.196.87
|
||
|
https://security-za.m.mimecastprotect.com/api/ttp/url/enroll-user
|
41.74.196.87
|
||
|
https://security-za.m.mimecastprotect.com/ttpwp/resources/images/favicon.ico
|
41.74.196.87
|
||
|
https://security-za.m.mimecastprotect.com/ttpwp
|
41.74.196.87
|
||
|
https://security-za.m.mimecastprotect.com/ttpwp/resources/mimecast-icons.bb1a2cd16db9345fc437.woff2?25417273
|
41.74.196.87
|
||
|
https://security-za.m.mimecastprotect.com/ttpwp/#/enrollment?key=11685494-d311-4544-9671-390efd78b28c
|
|||
|
https://security-za.m.mimecastprotect.com/ttpwp/resources/polyfills.5257ca6e429949972959.js
|
41.74.196.87
|
||
|
https://security-za.m.mimecastprotect.com/ttpwp/resources/fa-solid-900.54dfc8f551be346014e4.woff2
|
41.74.196.87
|
||
|
https://security-za.m.mimecastprotect.com/ttpwp/resources/images/mimecast-logo.png
|
41.74.196.87
|
||
|
https://url.za.m.mimecastprotect.com/s/tloGC76zVXi77gphkIJHoVrqi
|
41.74.196.103
|
||
|
http://www.mimecast.com/
|
unknown
|
||
|
https://security-za.m.mimecastprotect.com/ttpwp/resources/main.5257ca6e429949972959.js
|
41.74.196.87
|
||
|
https://security-za.m.mimecastprotect.com/ttpwp/resources/styles.5257ca6e429949972959.js
|
41.74.196.87
|
||
|
https://security-za.m.mimecastprotect.com/ttpwp/resources/runtime.5257ca6e429949972959.js
|
41.74.196.87
|
||
|
https://community.mimecast.com/docs/DOC-241
|
unknown
|
There are 5 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
www.google.com
|
172.217.21.36
|
||
|
security-za.m.mimecastprotect.com
|
41.74.196.87
|
||
|
url.za.m.mimecastprotect.com
|
41.74.196.103
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
41.74.196.87
|
security-za.m.mimecastprotect.com
|
South Africa
|
||
|
41.74.196.103
|
url.za.m.mimecastprotect.com
|
South Africa
|
||
|
192.168.2.4
|
unknown
|
unknown
|
||
|
239.255.255.250
|
unknown
|
Reserved
|
||
|
192.168.2.23
|
unknown
|
unknown
|
||
|
41.74.192.87
|
unknown
|
South Africa
|
||
|
172.217.21.36
|
www.google.com
|
United States
|
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://security-za.m.mimecastprotect.com/ttpwp/#/enrollment?key=11685494-d311-4544-9671-390efd78b28c
|
||
|
https://security-za.m.mimecastprotect.com/ttpwp/#/enrollment?key=11685494-d311-4544-9671-390efd78b28c
|
||
|
https://security-za.m.mimecastprotect.com/ttpwp/#/enrollment?key=11685494-d311-4544-9671-390efd78b28c
|
||
|
https://security-za.m.mimecastprotect.com/ttpwp/#/enrollment?key=11685494-d311-4544-9671-390efd78b28c
|