Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Chrome Cache Entry: 48
|
Unicode text, UTF-8 text, with very long lines (41512)
|
downloaded
|
||
|
Chrome Cache Entry: 49
|
JSON data
|
dropped
|
||
|
Chrome Cache Entry: 50
|
Java source, ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 51
|
Java source, ASCII text
|
dropped
|
||
|
Chrome Cache Entry: 52
|
JSON data
|
dropped
|
||
|
Chrome Cache Entry: 53
|
Unicode text, UTF-8 text, with very long lines (41512)
|
dropped
|
||
|
Chrome Cache Entry: 54
|
JSON data
|
downloaded
|
||
|
Chrome Cache Entry: 55
|
JSON data
|
downloaded
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US
--service-sandbox-type=none --mojo-platform-channel-handle=2420 --field-trial-handle=2380,i,17675968954408797570,2451989077997798258,262144
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
/prefetch:8
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://communicationcc-my.sharepoint.com/:f:/g/personal/kberumen_cccpi_net/Eqw-YLJwX8xNp6xCcDby6XoBUpJZ1ePl5QseKmejK0SMxw?e=Zr3HqK"
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://communicationcc-my.sharepoint.com/:f:/g/personal/kberumen_cccpi_net/Eqw-YLJwX8xNp6xCcDby6XoBUpJZ1ePl5QseKmejK0SMxw?e=Zr3HqK
|
|||
|
https://communicationcc-my.sharepoint.com/personal/kberumen_cccpi_net/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fkberumen%5Fcccpi%5Fnet%2FDocuments%2FCCC%20%2D%20Shared%2FProjects%2FPI%2FKraemer%2FCrystal%20Valley%20Interchange%20Pkg%201%2FPhotos%2F09%20September%202024%2FGroundbreaking%20Aerials&ga=1
|
13.107.136.10
|
||
|
https://communicationcc-my.sharepoint.com/_layouts/15/spwebworkerproxy.ashx
|
13.107.136.10
|
||
|
http://www.opensource.org/licenses/mit-license.php
|
unknown
|
||
|
https://communicationcc-my.sharepoint.com/:f:/g/personal/kberumen_cccpi_net/Eqw-YLJwX8xNp6xCcDby6XoBUpJZ1ePl5QseKmejK0SMxw?e=Zr3HqK
|
13.107.136.10
|
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
dual-spo-0005.spo-msedge.net
|
13.107.136.10
|
||
|
www.google.com
|
142.250.184.196
|
||
|
fp2e7a.wpc.phicdn.net
|
192.229.221.95
|
||
|
15.164.165.52.in-addr.arpa
|
unknown
|
||
|
communicationcc-my.sharepoint.com
|
unknown
|
||
|
m365cdn.nel.measure.office.net
|
unknown
|
||
|
spo.nel.measure.office.net
|
unknown
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
142.250.184.196
|
www.google.com
|
United States
|
||
|
13.107.136.10
|
dual-spo-0005.spo-msedge.net
|
United States
|
||
|
192.168.2.16
|
unknown
|
unknown
|
||
|
142.250.185.132
|
unknown
|
United States
|
||
|
192.168.2.4
|
unknown
|
unknown
|
||
|
239.255.255.250
|
unknown
|
Reserved
|