IOC Report
http://ocsp.sectigo.com

loading gif

Files

File Path
Type
Category
Malicious
C:\Users\user\Downloads\ac1dde37-7d6a-4ab9-956d-7367473adae0.tmp
data
dropped
C:\Users\user\Downloads\download (copy)
data
dropped
C:\Users\user\Downloads\download.crdownload (copy)
data
dropped
Chrome Cache Entry: 43
data
downloaded

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 --field-trial-handle=2196,i,17557991363450363132,15008697545932215638,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://ocsp.sectigo.com"

Domains

Name
IP
Malicious
www.google.com
142.250.185.100
ocsp.sectigo.com
unknown

IPs

IP
Domain
Country
Malicious
239.255.255.250
unknown
Reserved
192.168.2.13
unknown
unknown
192.168.2.16
unknown
unknown
142.250.185.100
www.google.com
United States
192.168.2.6
unknown
unknown