Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Chrome Cache Entry: 117
|
ASCII text, with very long lines (58316), with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 118
|
ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 119
|
ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 120
|
Unicode text, UTF-8 text, with very long lines (32000)
|
downloaded
|
||
|
Chrome Cache Entry: 121
|
MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
|
dropped
|
||
|
Chrome Cache Entry: 122
|
TrueType Font data, digitally signed, 19 tables, 1st "DSIG", 26 names, Macintosh, Digitized data copyright \251 2010-2011,
Google Corporation.Open SansRegularAscender - Open Sans
|
downloaded
|
||
|
Chrome Cache Entry: 123
|
ASCII text, with very long lines (65536), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 124
|
Unicode text, UTF-8 text, with very long lines (32000)
|
dropped
|
||
|
Chrome Cache Entry: 125
|
HTML document, ASCII text, with very long lines (1528)
|
downloaded
|
||
|
Chrome Cache Entry: 126
|
ASCII text, with very long lines (2051)
|
dropped
|
||
|
Chrome Cache Entry: 127
|
ASCII text, with very long lines (3015), with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 128
|
ASCII text, with very long lines (2051)
|
downloaded
|
||
|
Chrome Cache Entry: 129
|
ASCII text, with very long lines (1572)
|
downloaded
|
||
|
Chrome Cache Entry: 130
|
ASCII text, with very long lines (65536), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 131
|
MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
|
downloaded
|
||
|
Chrome Cache Entry: 132
|
ASCII text, with very long lines (3015), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 133
|
ASCII text, with very long lines (582), with CRLF, LF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 134
|
ASCII text, with very long lines (58316), with no line terminators
|
downloaded
|
There are 9 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US
--service-sandbox-type=none --mojo-platform-channel-handle=2388 --field-trial-handle=2184,i,9724161557650723365,11028119364261934946,262144
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
/prefetch:8
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://patientportal.advancedmd.com/appointment/unsubscribe?token=dlU0NEdEaktVUUp6VUl5eU1ydlUwZCtXaW00K1o4REIrK3I3VFVQKy90bz0=&lk=142138'"
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://patientportal.advancedmd.com/appointment/unsubscribe?token=dlU0NEdEaktVUUp6VUl5eU1ydlUwZCtXaW00K1o4REIrK3I3VFVQKy90bz0=&lk=142138'
|
|||
|
http://www.apache.org/licenses/LICENSE-2.0
|
unknown
|
||
|
https://pp-wfe-100.advancedmd.com/appointment/unsubscribe?token=dlU0NEdEaktVUUp6VUl5eU1ydlUwZCtXaW00K1o4REIrK3I3VFVQKy90bz0=&lk=142138%27
|
|||
|
https://classroom.google.com/sharewidget?usegapi=1
|
unknown
|
||
|
https://apis.google.com/js/api.js
|
142.250.185.174
|
||
|
https://amds-material-dev.advancedmd.com/8/stable/8.0/amds-theme-default/material-theme.css
|
13.224.189.37
|
||
|
https://www.youtube.com/subscribe_embed?usegapi=1
|
unknown
|
||
|
https://api2.heartlandportico.com/SecureSubmit.v1/token/2.1/securesubmit.min.js
|
35.211.11.79
|
||
|
https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1
|
unknown
|
||
|
https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
|
unknown
|
||
|
https://amds-material-dev.advancedmd.com/8/stable/8.0/amds-icons/amds-icons.css
|
13.224.189.37
|
||
|
https://plus.google.com
|
unknown
|
||
|
https://clients3.google.com/cast/chromecast/home/widget/backdrop?usegapi=1
|
unknown
|
||
|
https://pp-wfe-100.advancedmd.com/styles.bc20a01cb439f66e.css
|
18.244.18.92
|
||
|
https://www.google.com/shopping/customerreviews/badge?usegapi=1
|
unknown
|
||
|
https://patientportal.advancedmd.com/appointment/unsubscribe?token=dlU0NEdEaktVUUp6VUl5eU1ydlUwZCtXaW00K1o4REIrK3I3VFVQKy90bz0=&lk=142138%27
|
13.227.219.121
|
||
|
http://www.ascendercorp.com/http://www.ascendercorp.com/typedesigners.htmlLicensed
|
unknown
|
||
|
https://pay.google.com/gp/v/widget/save
|
unknown
|
||
|
https://drive.google.com/savetodrivebutton?usegapi=1
|
unknown
|
||
|
http://www.apache.org/licenses/LICENSE-2.0Digitized
|
unknown
|
||
|
https://talkgadget.google.com/:session_prefix:talkgadget/_/widget
|
unknown
|
||
|
https://play.google.com/work/embedded/search?usegapi=1&usegapi=1
|
unknown
|
||
|
https://www.google.com/shopping/customerreviews/optin?usegapi=1
|
unknown
|
||
|
https://pp-wfe-100.advancedmd.com/main.679ab1521d22507c.js
|
18.244.18.92
|
||
|
https://pp-wfe-100.advancedmd.com/runtime.828784c1b995f56f.js
|
18.244.18.92
|
||
|
https://apis.google.com
|
unknown
|
||
|
https://families.google.com/webcreation?usegapi=1&usegapi=1
|
unknown
|
||
|
https://pp-wfe-100.advancedmd.com/polyfills.55f1c22607bcff8d.js
|
18.244.18.92
|
||
|
https://clients6.google.com
|
unknown
|
||
|
https://pp-wfe-100.advancedmd.com/OpenSans.4543090a37b427da.ttf
|
18.244.18.92
|
||
|
https://pp-wfe-100.advancedmd.com/favicon.ico?v=2
|
18.244.18.92
|
There are 20 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
bg.microsoft.map.fastly.net
|
199.232.210.172
|
||
|
api2.heartlandportico.com
|
35.211.11.79
|
||
|
plus.l.google.com
|
142.250.185.174
|
||
|
www.google.com
|
216.58.206.68
|
||
|
d1nn1qnqm7ih5y.cloudfront.net
|
18.244.18.92
|
||
|
d11ag707s7acdq.cloudfront.net
|
13.227.219.121
|
||
|
d1he4b11razhen.cloudfront.net
|
13.224.189.37
|
||
|
fp2e7a.wpc.phicdn.net
|
192.229.221.95
|
||
|
windowsupdatebg.s.llnwi.net
|
87.248.205.0
|
||
|
patientportal.advancedmd.com
|
unknown
|
||
|
amds-material-dev.advancedmd.com
|
unknown
|
||
|
apis.google.com
|
unknown
|
||
|
pp-wfe-100.advancedmd.com
|
unknown
|
There are 3 hidden domains, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
142.250.185.78
|
unknown
|
United States
|
||
|
35.211.11.79
|
api2.heartlandportico.com
|
United States
|
||
|
13.224.189.37
|
d1he4b11razhen.cloudfront.net
|
United States
|
||
|
13.227.219.121
|
d11ag707s7acdq.cloudfront.net
|
United States
|
||
|
192.168.2.6
|
unknown
|
unknown
|
||
|
216.58.206.68
|
www.google.com
|
United States
|
||
|
239.255.255.250
|
unknown
|
Reserved
|
||
|
142.250.185.174
|
plus.l.google.com
|
United States
|
||
|
18.244.18.92
|
d1nn1qnqm7ih5y.cloudfront.net
|
United States
|
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://pp-wfe-100.advancedmd.com/appointment/unsubscribe?token=dlU0NEdEaktVUUp6VUl5eU1ydlUwZCtXaW00K1o4REIrK3I3VFVQKy90bz0=&lk=142138%27
|