IOC Report
https://cobmailcobedu-my.sharepoint.com/:w:/g/personal/fdosne179_ub_edu_bs/ETw4y3_FiRhPo78XRbs3yBcBJkIR-h2UX6ZLezGqajDGrQ?e=4%3aOunGCd&at=9

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 57
PNG image data, 226 x 48, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 58
ASCII text, with very long lines (65329), with CRLF line terminators
downloaded
Chrome Cache Entry: 59
XML 1.0 document, Unicode text, UTF-8 (with BOM) text
downloaded
Chrome Cache Entry: 60
HTML document, ASCII text, with very long lines (30522), with CRLF, LF line terminators
downloaded
Chrome Cache Entry: 61
MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
downloaded
Chrome Cache Entry: 62
PNG image data, 226 x 48, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 63
ASCII text, with very long lines (17444)
dropped
Chrome Cache Entry: 64
ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 65
ASCII text, with very long lines (37521)
dropped
Chrome Cache Entry: 66
ASCII text, with very long lines (39257), with CRLF line terminators
downloaded
Chrome Cache Entry: 67
ASCII text, with very long lines (17444)
downloaded
Chrome Cache Entry: 68
MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
dropped
Chrome Cache Entry: 69
ASCII text, with CRLF line terminators
dropped
Chrome Cache Entry: 70
ASCII text, with CRLF line terminators
dropped
Chrome Cache Entry: 71
ASCII text, with very long lines (39257), with CRLF line terminators
dropped
Chrome Cache Entry: 72
ASCII text, with very long lines (37521)
downloaded
Chrome Cache Entry: 73
ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 74
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 75
ASCII text, with very long lines (65329), with CRLF line terminators
dropped
There are 10 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=2004,i,10550284870352843195,5970084853583364495,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://cobmailcobedu-my.sharepoint.com/:w:/g/personal/fdosne179_ub_edu_bs/ETw4y3_FiRhPo78XRbs3yBcBJkIR-h2UX6ZLezGqajDGrQ?e=4%3aOunGCd&at=9"

URLs

Name
IP
Malicious
https://cobmailcobedu-my.sharepoint.com/:w:/g/personal/fdosne179_ub_edu_bs/ETw4y3_FiRhPo78XRbs3yBcBJkIR-h2UX6ZLezGqajDGrQ?e=4%3aOunGCd&at=9
https://cobmailcobedu-my.sharepoint.com/:w:/g/personal/fdosne179_ub_edu_bs/ETw4y3_FiRhPo78XRbs3yBcBJkIR-h2UX6ZLezGqajDGrQ?e=4%3aOunGCd&at=9
https://cobmailcobedu-my.sharepoint.com/_layouts/15/images/favicon.ico?rev=47
13.107.136.10
http://github.com/jrburke/requirejs
unknown
https://cobmailcobedu-my.sharepoint.com/WebResource.axd?d=MDedHlx8b2pl4b5Fdk63dEGyHzE3cM29fVevlgooIJCkxZnZy8PEpDtwbjmZuQKoFivcE2AjCxe780fsFC4ThuR6rXvB2-UE9MkNflkAjEk1&t=638611486345608193
13.107.136.10
https://cobmailcobedu-my.sharepoint.com/ScriptResource.axd?d=_1f5By8kpJIg7BHQfeQMhiyniGn6gkhvgdOJq9xGXJKGyKUiM3ZNYI6z4cYjDKhk20XZW4EN7usZFNeRtdCVKNaMIWRvwXUYZGs25n8a-oW1VO1JE8e9p5hec9cTh5DkrBxL3-QbR7cUqo7RzSU-bT21c8_XIHN1i-JwWe7Ao3uMpl4eFe6WKMS8rL2PZOGk0&t=7a0cc936
13.107.136.10
https://cobmailcobedu-my.sharepoint.com/_layouts/15/images/microsoft-logo.png
13.107.136.10
https://cobmailcobedu-my.sharepoint.com/personal/fdosne179_ub_edu_bs/_layouts/15/images/256_icdocx.p
unknown
https://cobmailcobedu-my.sharepoint.com/ScriptResource.axd?d=k35jNMc92mMci0TCnshB1XvHlBNtumHQiGArbPAY9vBXufzKHEJWQo8BMJFCSut7t-s8AYsFzTYCdoJj4aQw_42v4jEvcR8MmidIigjUgaOyLAIDwJ7Irs3LXuDkZ6kcnF3HHVrOLTwDlPClLlYZ9IwwTbDzlZEwoooqrzfu0Li2MX1W3hUp1JaFsCsvNbXh0&t=7a0cc936
13.107.136.10
https://spoprod-a.akamaihd.net/files/odsp-common-library-prod_2019-02-15_20190219.002/require.js
unknown
https://reactjs.org/docs/error-decoder.html?invariant=
unknown
https://cobmailcobedu-my.sharepoint.com/ScriptResource.axd?d=IykUWNXh_nCgxgkXmdaFHJwzD361cTQlmDi_oxlSDxhm71-keW8TjtJsFAp_tCkKyeiq9MdRx5I2m16l0y66-aEKUpgO6YkdHtdzO-FcOlHZsu6KAqIIICnSTvuVrWNVJsZlHB-W8NMuZbiquQFjwfY3j2xTivk8t-fj6h7-bTI1&t=ffffffffedc3492c
13.107.136.10
There are 1 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
dual-spo-0005.spo-msedge.net
13.107.136.10
s-part-0017.t-0009.t-msedge.net
13.107.246.45
www.google.com
142.250.184.196
default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com
217.20.57.27
fp2e7a.wpc.phicdn.net
192.229.221.95
cobmailcobedu-my.sharepoint.com
unknown
241.42.69.40.in-addr.arpa
unknown
m365cdn.nel.measure.office.net
unknown

IPs

IP
Domain
Country
Malicious
142.250.184.196
www.google.com
United States
13.107.136.10
dual-spo-0005.spo-msedge.net
United States
192.168.2.4
unknown
unknown
216.58.206.36
unknown
United States
239.255.255.250
unknown
Reserved

DOM / HTML

URL
Malicious
https://cobmailcobedu-my.sharepoint.com/:w:/g/personal/fdosne179_ub_edu_bs/ETw4y3_FiRhPo78XRbs3yBcBJkIR-h2UX6ZLezGqajDGrQ?e=4%3aOunGCd&at=9