IOC Report
https://download.dymo.com/dymo/Software/Win/DCDSetup1.4.5.1.exe

loading gif

Files

File Path
Type
Category
Malicious
C:\Users\user\Downloads\Unconfirmed 402072.crdownload
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
Chrome Cache Entry: 43
PE32 executable (GUI) Intel 80386, for MS Windows
downloaded

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1992,i,13061498868380142058,2880947330329604299,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://download.dymo.com/dymo/Software/Win/DCDSetup1.4.5.1.exe"

Domains

Name
IP
Malicious
bg.microsoft.map.fastly.net
199.232.214.172
www.google.com
64.233.177.103
fp2e7a.wpc.phicdn.net
192.229.211.108
download.dymo.com
unknown

IPs

IP
Domain
Country
Malicious
192.168.2.22
unknown
unknown
239.255.255.250
unknown
Reserved
64.233.177.103
www.google.com
United States
192.168.2.4
unknown
unknown
192.168.2.5
unknown
unknown