Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US
--service-sandbox-type=none --mojo-platform-channel-handle=2512 --field-trial-handle=2444,i,11004403337077409759,7609749337395893540,262144
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
/prefetch:8
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://t5.emails.virginatlantic.com/r/?id=h1156f0e5,23add98e,23ade7cf&p1=Magairports.btuijkoi.com/Z2FycnkuYmFybG93QG1hZ2FpcnBvcnRzLmNvbQ=="
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://t5.emails.virginatlantic.com/r/?id=h1156f0e5,23add98e,23ade7cf&p1=Magairports.btuijkoi.com/Z2FycnkuYmFybG93QG1hZ2FpcnBvcnRzLmNvbQ==
|
|||
|
https://t5.emails.virginatlantic.com/r/?id=h1156f0e5,23add98e,23ade7cf&p1=Magairports.btuijkoi.com/Z2FycnkuYmFybG93QG1hZ2FpcnBvcnRzLmNvbQ==
|
52.19.118.92
|
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
google.com
|
142.250.217.174
|
||
|
www.google.com
|
142.250.105.106
|
||
|
virginatlantic-mid-prod5-alb-1704172162.eu-west-1.elb.amazonaws.com
|
52.19.118.92
|
||
|
fp2e7a.wpc.phicdn.net
|
192.229.211.108
|
||
|
t5.emails.virginatlantic.com
|
unknown
|
||
|
magairports.btuijkoi.com
|
unknown
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
239.255.255.250
|
unknown
|
Reserved
|
||
|
192.168.2.4
|
unknown
|
unknown
|
||
|
142.250.105.106
|
www.google.com
|
United States
|
||
|
52.19.118.92
|
virginatlantic-mid-prod5-alb-1704172162.eu-west-1.elb.amazonaws.com
|
United States
|