Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Town Of Castle Rock Health Insurance Benefits Open Enrollment Plan.shtml
|
HTML document, ASCII text, with CRLF, LF line terminators
|
initial sample
|
||
|
Chrome Cache Entry: 100
|
HTML document, ASCII text, with very long lines (2088)
|
downloaded
|
||
|
Chrome Cache Entry: 82
|
PNG image data, 254 x 120, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 83
|
Web Open Font Format (Version 2), TrueType, length 37608, version 1.0
|
downloaded
|
||
|
Chrome Cache Entry: 84
|
ASCII text, with very long lines (1492), with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 85
|
ASCII text, with very long lines (1492), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 86
|
ASCII text, with very long lines (65536), with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 87
|
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
|
downloaded
|
||
|
Chrome Cache Entry: 88
|
ASCII text, with very long lines (65536), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 89
|
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
|
dropped
|
||
|
Chrome Cache Entry: 90
|
JSON data
|
downloaded
|
||
|
Chrome Cache Entry: 91
|
HTML document, ASCII text
|
dropped
|
||
|
Chrome Cache Entry: 92
|
Web Open Font Format, TrueType, length 183368, version 331.-31196
|
downloaded
|
||
|
Chrome Cache Entry: 93
|
ASCII text, with very long lines (65536), with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 94
|
ASCII text, with very long lines (65536), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 95
|
Web Open Font Format (Version 2), TrueType, length 137104, version 331.-31196
|
downloaded
|
||
|
Chrome Cache Entry: 96
|
JSON data
|
dropped
|
||
|
Chrome Cache Entry: 97
|
ASCII text, with very long lines (65536), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 98
|
PNG image data, 254 x 120, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 99
|
ASCII text, with very long lines (65536), with no line terminators
|
dropped
|
There are 10 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Town Of Castle Rock Health
Insurance Benefits Open Enrollment Plan.shtml"
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US
--service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1952,i,1762574967066200094,5516614366961201195,262144
/prefetch:8
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://security-us.m.mimecastprotect.com/api/ttp/url/get-page-data
|
170.10.128.88
|
||
|
https://security-us.m.mimecastprotect.com/ttpwp/resources/images/mimecast-logo.png
|
170.10.128.88
|
||
|
https://security-us.m.mimecastprotect.com/ttpwp
|
170.10.128.88
|
||
|
https://security-us.m.mimecastprotect.com/ttpwp/#/block?key=x7LPR3m-tEws89GPpZtaq1cFlx_CYVPiHET2l5XLVP9BaK4hjSG277Di2a5J55HfaTL-D35HyETaGZFL6hw8j72U6oEQ3i14bXAiIAzk3QE
|
|||
|
https://security-us.m.mimecastprotect.com/ttpwp/resources/polyfills.5257ca6e429949972959.js
|
170.10.128.88
|
||
|
https://security-us.m.mimecastprotect.com/ttpwp/resources/fa-solid-900.6057f0f7f9a9a68b2eed.woff
|
170.10.128.88
|
||
|
https://security-us.m.mimecastprotect.com/ttpwp/resources/mimecast-icons.bb1a2cd16db9345fc437.woff2?25417273
|
170.10.128.88
|
||
|
https://security-us.m.mimecastprotect.com/ttpwp/resources/languages/en.json
|
170.10.128.88
|
||
|
https://url.us.m.mimecastprotect.com/s/bsrcCxkw9pCLRZmZS8foHypG0I?domain=sherwin.cw1.ro
|
205.139.111.113
|
||
|
http://www.mimecast.com/
|
unknown
|
||
|
file:///C:/Users/user/Desktop/Town%20Of%20Castle%20Rock%20Health%20Insurance%20Benefits%20Open%20Enrollment%20Plan.shtml
|
|||
|
https://security-us.m.mimecastprotect.com/ttpwp/resources/runtime.5257ca6e429949972959.js
|
170.10.128.88
|
||
|
https://security-us.m.mimecastprotect.com/ttpwp/resources/styles.5257ca6e429949972959.js
|
170.10.128.88
|
||
|
https://security-us.m.mimecastprotect.com/ttpwp/resources/fa-solid-900.54dfc8f551be346014e4.woff2
|
170.10.128.88
|
||
|
https://security-us.m.mimecastprotect.com/ttpwp/resources/main.5257ca6e429949972959.js
|
170.10.128.88
|
||
|
https://security-us.m.mimecastprotect.com/ttpwp/resources/images/favicon.ico
|
170.10.128.88
|
||
|
https://community.mimecast.com/docs/DOC-241
|
unknown
|
There are 7 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
url.us.m.mimecastprotect.com
|
205.139.111.113
|
||
|
security-us.m.mimecastprotect.com
|
170.10.128.88
|
||
|
www.google.com
|
142.250.181.68
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
205.139.111.113
|
url.us.m.mimecastprotect.com
|
United States
|
||
|
192.168.2.7
|
unknown
|
unknown
|
||
|
192.168.2.4
|
unknown
|
unknown
|
||
|
239.255.255.250
|
unknown
|
Reserved
|
||
|
170.10.128.89
|
unknown
|
United States
|
||
|
142.250.181.68
|
www.google.com
|
United States
|
||
|
170.10.128.88
|
security-us.m.mimecastprotect.com
|
United States
|
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
file:///C:/Users/user/Desktop/Town%20Of%20Castle%20Rock%20Health%20Insurance%20Benefits%20Open%20Enrollment%20Plan.shtml
|
||
|
https://security-us.m.mimecastprotect.com/ttpwp/#/block?key=x7LPR3m-tEws89GPpZtaq1cFlx_CYVPiHET2l5XLVP9BaK4hjSG277Di2a5J55HfaTL-D35HyETaGZFL6hw8j72U6oEQ3i14bXAiIAzk3QE
|
||
|
https://security-us.m.mimecastprotect.com/ttpwp/#/block?key=x7LPR3m-tEws89GPpZtaq1cFlx_CYVPiHET2l5XLVP9BaK4hjSG277Di2a5J55HfaTL-D35HyETaGZFL6hw8j72U6oEQ3i14bXAiIAzk3QE
|
||
|
https://security-us.m.mimecastprotect.com/ttpwp/#/block?key=x7LPR3m-tEws89GPpZtaq1cFlx_CYVPiHET2l5XLVP9BaK4hjSG277Di2a5J55HfaTL-D35HyETaGZFL6hw8j72U6oEQ3i14bXAiIAzk3QE
|
||
|
https://security-us.m.mimecastprotect.com/ttpwp/#/block?key=x7LPR3m-tEws89GPpZtaq1cFlx_CYVPiHET2l5XLVP9BaK4hjSG277Di2a5J55HfaTL-D35HyETaGZFL6hw8j72U6oEQ3i14bXAiIAzk3QE
|