IOC Report
https://dev-validacion-galicia.pantheonsite.io/

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 44
ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 45
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 46
Unicode text, UTF-8 text, with very long lines (8411), with CRLF line terminators
downloaded
Chrome Cache Entry: 47
ASCII text, with very long lines (33696), with CRLF line terminators
downloaded
Chrome Cache Entry: 48
HTML document, Unicode text, UTF-8 text
downloaded
Chrome Cache Entry: 49
ASCII text, with CRLF line terminators
dropped
Chrome Cache Entry: 50
MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel
dropped
Chrome Cache Entry: 51
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 52
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 53
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=17, height=2448, bps=218, PhotometricIntepretation=RGB, description= , manufacturer=NIKON, model=COOLPIX B500, orientation=upper-left, width=3264], progressive, precision 8, 1000x1309, components 3
dropped
Chrome Cache Entry: 54
MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel
downloaded
Chrome Cache Entry: 55
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=17, height=2448, bps=218, PhotometricIntepretation=RGB, description= , manufacturer=NIKON, model=COOLPIX B500, orientation=upper-left, width=3264], progressive, precision 8, 1000x1309, components 3
downloaded
There are 3 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2336 --field-trial-handle=2264,i,3358240941095444524,13793628101986246960,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://dev-validacion-galicia.pantheonsite.io/"

URLs

Name
IP
Malicious
https://dev-validacion-galicia.pantheonsite.io/
malicious
https://dev-validacion-galicia.pantheonsite.io/regas/img/logo.svg
23.185.0.1
malicious
https://dev-validacion-galicia.pantheonsite.io/regas/img/favicon.ico
23.185.0.1
malicious
https://dev-validacion-galicia.pantheonsite.io/regas/design/gali.css
23.185.0.1
malicious
https://dev-validacion-galicia.pantheonsite.io/
malicious
https://dev-validacion-galicia.pantheonsite.io/regas/img/seis.jpg
23.185.0.1
malicious
https://dev-validacion-galicia.pantheonsite.io/regas/design/lib.css
23.185.0.1
malicious
https://dev-validacion-galicia.pantheonsite.io/regas/taran/other.js
23.185.0.1
malicious

Domains

Name
IP
Malicious
fe1.edge.pantheon.io
23.185.0.1
www.google.com
142.250.186.164
fp2e7a.wpc.phicdn.net
192.229.221.95
dev-validacion-galicia.pantheonsite.io
unknown

IPs

IP
Domain
Country
Malicious
239.255.255.250
unknown
Reserved
23.185.0.1
fe1.edge.pantheon.io
United States
142.250.186.164
www.google.com
United States
192.168.2.6
unknown
unknown
192.168.2.5
unknown
unknown

DOM / HTML

URL
Malicious
https://dev-validacion-galicia.pantheonsite.io/