IOC Report
https://u13328681.ct.sendgrid.net/ls/click?upn=u001.cgHr6lPqHbtOUmKBWZDagaQco126iNSHSna09Vequ0FP1W-2F0V2RF4Xw5SExEi2bXpO1zF85vofqMeUbzAG6QTy8mE1Jr15Jf2viVbvKU6QtVTfthV7dWQM-2BBrOKr9yuSYje-2FN2hESSmnabQosA5BGKQhuDBhwtw6flddPW-2F4jK4-3DLsKd_hQ4JjD4eO2FkhzbSWnYEdpaGljyWsYJZBkVUvUrI1d1Xfk2-2FFqbY-2FUikO

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 41
HTML document, ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 42
HTML document, ASCII text, with CRLF line terminators
downloaded

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2012 --field-trial-handle=1944,i,4364717561584766759,4099793444156998364,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://u13328681.ct.sendgrid.net/ls/click?upn=u001.cgHr6lPqHbtOUmKBWZDagaQco126iNSHSna09Vequ0FP1W-2F0V2RF4Xw5SExEi2bXpO1zF85vofqMeUbzAG6QTy8mE1Jr15Jf2viVbvKU6QtVTfthV7dWQM-2BBrOKr9yuSYje-2FN2hESSmnabQosA5BGKQhuDBhwtw6flddPW-2F4jK4-3DLsKd_hQ4JjD4eO2FkhzbSWnYEdpaGljyWsYJZBkVUvUrI1d1Xfk2-2FFqbY-2FUikOCXS1TGl62cc906nxfWh"

URLs

Name
IP
Malicious
https://u13328681.ct.sendgrid.net/ls/click?upn=u001.cgHr6lPqHbtOUmKBWZDagaQco126iNSHSna09Vequ0FP1W-2F0V2RF4Xw5SExEi2bXpO1zF85vofqMeUbzAG6QTy8mE1Jr15Jf2viVbvKU6QtVTfthV7dWQM-2BBrOKr9yuSYje-2FN2hESSmnabQosA5BGKQhuDBhwtw6flddPW-2F4jK4-3DLsKd_hQ4JjD4eO2FkhzbSWnYEdpaGljyWsYJZBkVUvUrI1d1Xfk2-2FFqbY-2FUikOCXS1TGl62cc906nxfWh
https://u13328681.ct.sendgrid.net/favicon.ico
167.89.123.147

Domains

Name
IP
Malicious
u13328681.ct.sendgrid.net
167.89.123.147
bg.microsoft.map.fastly.net
199.232.210.172
s-part-0023.t-0009.fb-t-msedge.net
13.107.253.51
www.google.com
172.217.18.4
fp2e7a.wpc.phicdn.net
192.229.221.95
s-part-0032.t-0009.t-msedge.net
13.107.246.60

IPs

IP
Domain
Country
Malicious
167.89.123.147
u13328681.ct.sendgrid.net
United States
239.255.255.250
unknown
Reserved
172.217.18.4
www.google.com
United States
192.168.2.4
unknown
unknown

DOM / HTML

URL
Malicious
https://u13328681.ct.sendgrid.net/ls/click?upn=u001.cgHr6lPqHbtOUmKBWZDagaQco126iNSHSna09Vequ0FP1W-2F0V2RF4Xw5SExEi2bXpO1zF85vofqMeUbzAG6QTy8mE1Jr15Jf2viVbvKU6QtVTfthV7dWQM-2BBrOKr9yuSYje-2FN2hESSmnabQosA5BGKQhuDBhwtw6flddPW-2F4jK4-3DLsKd_hQ4JjD4eO2FkhzbSWnYEdpaGljyWsYJZBkVUvUrI1d1Xfk2-2FFqbY-2FUikOCXS1TGl62cc906nxfWh