IOC Report
http://gorgias.win

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 41
JSON data
downloaded
Chrome Cache Entry: 42
JSON data
downloaded

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2732 --field-trial-handle=2628,i,10194469646598770039,10656022401284505159,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://gorgias.win"

URLs

Name
IP
Malicious
http://gorgias.win
https://gorgias.win/
https://gorgias.win/favicon.ico
104.18.33.105

Domains

Name
IP
Malicious
gorgias.win
104.18.33.105
www.google.com
142.250.64.196
fp2e7a.wpc.phicdn.net
192.229.211.108

IPs

IP
Domain
Country
Malicious
142.250.64.196
www.google.com
United States
239.255.255.250
unknown
Reserved
104.18.33.105
gorgias.win
United States
192.168.2.4
unknown
unknown

DOM / HTML

URL
Malicious
https://gorgias.win/