Automated Malware Analysis IOC Report for

Files

File Path

Type

Category

Malicious

https://web1.zixmail.net/s/e?b=4eri&m=ABCQiFe9wlqI9X9vKBvYvvDp&c=ABBhRV19Ad0FHPsNXID7AQI6&em=new%2eclaimsnotices%40jamesriverins%2ecom

URL

initial url

C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic

data

dropped

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\0C2A6B05AF7011FB1228AE98D31E7D22_906CFB2450238D0B4C3B6D559BA937CB

data

dropped

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\223DE96EE265046957A660ED7C9DD9E7_EFF9B9BA98DEAA773F261FA85A0B1771

data

dropped

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2508E8D974CC05F224A38A6A068698E0_1FA4F51F50E531077AD3338680850105

data

dropped

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2508E8D974CC05F224A38A6A068698E0_79F9901B6CE1C0907957A8D61937ACE1

data

dropped

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

Microsoft Cabinet archive data, 59134 bytes, 1 file

dropped

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\A37B8BA80004D3266CB4D93B2052DC10_994B5C515D64A296EABD42B0A2E46349

data

dropped

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D8A5A4A0441F7653C3609E0E2DE6769F_7CB1F9CF5591E73A1593763D843A4B86

data

dropped

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\EB2C4AB8B68FFA4B7733A9139239A396_D76DB901EE986B889F30D8CC06229E2D

data

dropped

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\0C2A6B05AF7011FB1228AE98D31E7D22_906CFB2450238D0B4C3B6D559BA937CB

data

dropped

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\223DE96EE265046957A660ED7C9DD9E7_EFF9B9BA98DEAA773F261FA85A0B1771

data

dropped

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2508E8D974CC05F224A38A6A068698E0_1FA4F51F50E531077AD3338680850105

data

dropped

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2508E8D974CC05F224A38A6A068698E0_79F9901B6CE1C0907957A8D61937ACE1

data

dropped

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

data

dropped

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\A37B8BA80004D3266CB4D93B2052DC10_994B5C515D64A296EABD42B0A2E46349

data

dropped

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D8A5A4A0441F7653C3609E0E2DE6769F_7CB1F9CF5591E73A1593763D843A4B86

data

dropped

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EB2C4AB8B68FFA4B7733A9139239A396_D76DB901EE986B889F30D8CC06229E2D

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\05fe5c1e-4746-4d06-a5e4-b8f54d0d89ef.tmp

ASCII text, with very long lines, with no line terminators

modified

C:\Users\user\AppData\Local\Google\Chrome\User Data\06f4c19f-9055-4202-a3ed-61cce8892560.tmp

ASCII text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\12ad13b7-4ddf-4e8b-b350-14d42be72735.tmp

SysEx File -

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\3ab3e183-b81a-41d3-8ff8-fe5f966f25bf.tmp

ASCII text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\4cfea814-af7f-4e81-a970-3e1bc892084e.tmp

ASCII text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\6b39e29f-1a02-4a57-834a-6fa84c208bc6.tmp

ASCII text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\8f4cdda7-cd17-4037-9caf-53381fdac500.tmp

ASCII text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\072b894c-01b5-4e89-9844-7609209a8413.tmp

ASCII text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\1096b430-6533-413c-a6fe-700abe74f8cc.tmp

ASCII text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\14c2d5b3-d481-4abe-8b7e-0e9a5b403260.tmp

UTF-8 Unicode text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\21730865-840d-4481-958f-26dda0af949e.tmp

UTF-8 Unicode text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\7437324c-1854-4ffc-b2b4-7ecc65c8738d.tmp

ASCII text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\7b24153b-3089-4657-bc7f-1196e24e6b45.tmp

ASCII text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\81a09fc3-901b-48b2-a1ea-8506c2f16f0c.tmp

UTF-8 Unicode text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\8a345bb5-7d51-419f-b6fe-6a34e791b7cf.tmp

ASCII text, with very long lines, with no line terminators

modified

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\00a1982a45dd042c_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\01c430a9b102894d_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\03ca1713717c7b03_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\03cf3aa0642e3d9a_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\05fcd8b85e1b3284_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\0732e770b7a445ab_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\08d63749a47a6a6d_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\0a410274e64860bf_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\0e3296782ad5e5d3_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\10cf6fd86d883fb4_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\11c9e752de6044e2_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\1c5861241d6b406d_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\20649622586617ff_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\2147111f92e1d00b_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\218586790dcc80fc_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\23aff70ab1c25091_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\246397e51840c87c_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\24d7281d94368b01_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\2963110023e01e19_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\2a2e88f45b19464c_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\2facd160e9b3281d_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\2fd021f1c66e0410_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\36211ac3aab3f4f0_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\3b38794615c80537_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\3eb2d54d6b1ecd70_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\41475b42dddb0b1b_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\48367205b83f4fa8_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\484a67f8e93657dc_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\4d8b7a5ac3fa9c09_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\50283a465e0a4d29_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\57e301f7a5008375_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\61a07f18ec27b798_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\648f965c0b7dabbc_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\655aacf938afda06_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\67ccf06e65d83ecc_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\7658764de37070f0_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\78b25ab234a5213d_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\791d5b9834f8c9fd_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\8164647a8748d80a_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\85eb2726a8e59d21_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\8896057fcbff1c19_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\89a3ee021aa8fff9_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\8d86142e4c1aaf72_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\90e0fc941053c5e0_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\9b493ae1aa245169_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\9bea1099a402aeb8_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\9c58a5bd2d855331_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\9ff8bace99163776_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\a6864e076f152ec3_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\b2f66da88d7b43b0_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\bb0383b41217c93d_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\bd3855900f676b3a_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\bf80d895833efe33_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\c0e42b091147ff06_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\ca75a81802d989a1_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\deeb90394251543d_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\eadf69b2511119d6_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\ed6f4c080ca8024e_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\efc82e9adcf42c5c_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\f2c5b710fbc9e04f_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\f2d69cb8ea7d653f_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\f39e117abfee7d27_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\f4458942201558ca_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\f526fee988bc24e1_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\f547e4ebb0310f07_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\f7267d924f102f30_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies

SQLite 3.x database, last written using SQLite version 3032001

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies-journal

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Session

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Tabs

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000003.log

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\000003.log

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json

ASCII text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\8520.615.0.5_1\_metadata\computed_hashes.json

ASCII text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Favicons

SQLite 3.x database, last written using SQLite version 3032001

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History

SQLite 3.x database, last written using SQLite version 3032001

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History-journal

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000003.log

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor

SQLite 3.x database, last written using SQLite version 3032001

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor-journal

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb\LOG

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications\LOG

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\000003.log

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\LOG

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\e240cf68-9eb1-4521-8143-35cce841bb60.tmp

ASCII text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\2ed3e941-0770-4faf-bb86-a55d154374b8.tmp

ASCII text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\LOG

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications\LOG

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\000003.log

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000003.log

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Visited Links

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\a7f28885-50fc-43b8-83dd-81aa57c25fc4.tmp

ASCII text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\a9fa012b-9cc8-409e-905e-d3f11d4a8b70.tmp

ASCII text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\b4fb9719-eab6-4229-bc46-0ec7bfd1a0dd.tmp

ASCII text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\b7d7dfaf-e056-4f1f-95c4-f554ad52c16b.tmp

ASCII text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\c7ac03c6-693f-4cd8-aa84-707736a5d308.tmp

ASCII text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\d864175f-a927-46af-8641-a5f26b92768a.tmp

ASCII text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000004.dbtmp

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\MANIFEST-000004

MPEG-4 LOAS

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\e73f8371-24fe-4b71-b63c-f921cbde6d3d.tmp

very short file (no magic)

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\f874252b-4fb3-47ff-b36d-d444a88a01b9.tmp

ASCII text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Browser

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Version

ASCII text, with no line terminators

dropped

C:\Users\user\AppData\Local\Temp\1ff2f152-2011-45ae-8494-b3b61d7aeadf.tmp

Google Chrome extension, version 3

dropped

C:\Users\user\AppData\Local\Temp\4156251b-c210-4e9b-89cd-1eba11bd5e01.tmp

Google Chrome extension, version 3

dropped

C:\Users\user\AppData\Local\Temp\4bd43884-6654-49de-a519-b183269b75a2.tmp

very short file (no magic)

dropped

C:\Users\user\AppData\Local\Temp\c754e452-35c1-4d18-b5d8-4325f724a6d6.tmp

very short file (no magic)

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\1ff2f152-2011-45ae-8494-b3b61d7aeadf.tmp

Google Chrome extension, version 3

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\CRX_INSTALL\_locales\bg\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\CRX_INSTALL\_locales\ca\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\CRX_INSTALL\_locales\cs\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\CRX_INSTALL\_locales\da\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\CRX_INSTALL\_locales\de\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\CRX_INSTALL\_locales\el\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\CRX_INSTALL\_locales\en\messages.json

ASCII text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\CRX_INSTALL\_locales\en_GB\messages.json

ASCII text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\CRX_INSTALL\_locales\es\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\CRX_INSTALL\_locales\es_419\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\CRX_INSTALL\_locales\et\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\CRX_INSTALL\_locales\fi\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\CRX_INSTALL\_locales\fil\messages.json

ASCII text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\CRX_INSTALL\_locales\fr\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\CRX_INSTALL\_locales\hi\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\CRX_INSTALL\_locales\hr\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\CRX_INSTALL\_locales\hu\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\CRX_INSTALL\_locales\id\messages.json

ASCII text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\CRX_INSTALL\_locales\it\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\CRX_INSTALL\_locales\ja\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\CRX_INSTALL\_locales\ko\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\CRX_INSTALL\_locales\lt\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\CRX_INSTALL\_locales\lv\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\CRX_INSTALL\_locales\nb\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\CRX_INSTALL\_locales\nl\messages.json

ASCII text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\CRX_INSTALL\_locales\pl\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\CRX_INSTALL\_locales\pt_BR\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\CRX_INSTALL\_locales\pt_PT\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\CRX_INSTALL\_locales\ro\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\CRX_INSTALL\_locales\ru\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\CRX_INSTALL\_locales\sk\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\CRX_INSTALL\_locales\sl\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\CRX_INSTALL\_locales\sr\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\CRX_INSTALL\_locales\sv\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\CRX_INSTALL\_locales\th\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\CRX_INSTALL\_locales\tr\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\CRX_INSTALL\_locales\uk\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\CRX_INSTALL\_locales\vi\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\CRX_INSTALL\_locales\zh_CN\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\CRX_INSTALL\_locales\zh_TW\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\CRX_INSTALL\images\icon_128.png

PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\CRX_INSTALL\images\icon_16.png

PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_1469135028\CRX_INSTALL\manifest.json

ASCII text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\4156251b-c210-4e9b-89cd-1eba11bd5e01.tmp

Google Chrome extension, version 3

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\am\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\ar\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\bg\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\bn\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\ca\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\cs\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\da\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\de\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\el\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\en\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\es\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\et\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\fa\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\fi\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\fil\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\fr\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\gu\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\hi\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\hr\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\hu\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\id\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\it\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\ja\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\kn\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\ko\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\lt\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\lv\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\ml\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\mr\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\ms\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\nb\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\nl\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\pl\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\pt\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\ro\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\ru\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\sk\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\sl\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\sr\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\sv\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\sw\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\ta\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\te\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\th\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\tr\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\uk\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\vi\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\zh\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\_locales\zh_TW\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir6956_559519040\CRX_INSTALL\manifest.json

ASCII text, with very long lines, with CRLF line terminators

dropped

There are 248 hidden files, click here to show them.

Processes

Path

Cmdline

Malicious

C:\Program Files\Google\Chrome\Application\chrome.exe

'C:\Program Files\Google\Chrome\Application\chrome.exe' --start-maximized 'https://web1.zixmail.net/s/e?b=4eri&m=ABCQiFe9wlqI9X9vKBvYvvDp&c=ABBhRV19Ad0FHPsNXID7AQI6&em=new%2eclaimsnotices%40jamesriverins%2ecom'

Details

Is windows:	true
Is dropped:	false
PID:	6956
Target ID:	0
Parent PID:	1420
Name:	chrome.exe
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Commandline:	'C:\Program Files\Google\Chrome\Application\chrome.exe' --start-maximized 'https://web1.zixmail.net/s/e?b=4eri&m=ABCQiFe9wlqI9X9vKBvYvvDp&c=ABBhRV19Ad0FHPsNXID7AQI6&em=new%2eclaimsnotices%40jamesriverins%2ecom'
Size:	2150896
MD5:	C139654B5C1438A95B321BB01AD63EF6
Time:	19:49:57
Date:	03/02/2021
Reason:	newprocess
Reputation:	low
Is admin:	true
Is elevated:	true
Modulebase:	0x7ff7c15e0000
Modulesize:	2199552
Wow64:	false

Signature Hits	Behavior Group	Mitre Attack
Spawns processes	System Summary,	Process Injection

C:\Program Files\Google\Chrome\Application\chrome.exe

'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1552,991956672690595382,7383702837834195658,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1728 /prefetch:8

Details

Is windows:	true
Is dropped:	false
PID:	7128
Target ID:	1
Parent PID:	6956
Name:	chrome.exe
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Commandline:	'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1552,991956672690595382,7383702837834195658,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1728 /prefetch:8
Size:	2150896
MD5:	C139654B5C1438A95B321BB01AD63EF6
Time:	19:49:58
Date:	03/02/2021
Reason:	newprocess
Reputation:	low
Is admin:	true
Is elevated:	true
Modulebase:	0x7ff7c15e0000
Modulesize:	2199552
Wow64:	false

Signature Hits	Behavior Group	Mitre Attack
Spawns processes	System Summary,	Process Injection

C:\Program Files\Google\Chrome\Application\chrome.exe

'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1552,991956672690595382,7383702837834195658,131072 --lang=en-US --service-sandbox-type=audio --enable-audio-service-sandbox --mojo-platform-channel-handle=2192 /prefetch:8

Details

Is windows:	true
Is dropped:	false
PID:	6460
Target ID:	3
Parent PID:	6956
Name:	chrome.exe
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Commandline:	'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1552,991956672690595382,7383702837834195658,131072 --lang=en-US --service-sandbox-type=audio --enable-audio-service-sandbox --mojo-platform-channel-handle=2192 /prefetch:8
Size:	2150896
MD5:	C139654B5C1438A95B321BB01AD63EF6
Time:	19:50:35
Date:	03/02/2021
Reason:	newprocess
Reputation:	low
Is admin:	false
Is elevated:	false
Modulebase:	0x7ff7c15e0000
Modulesize:	2199552
Wow64:	false

Signature Hits	Behavior Group	Mitre Attack
Spawns processes	System Summary,	Process Injection

URLs

Name

Malicious

https://zix.com//

unknown

https://js.driftt.com/core/assets/js/26.91e0f92d.chunk.js

unknown

https://www.linkedin.com

unknown

http://eriglobal.com/css/fonts/oswald-regular.woff2

68.233.236.236

http://eriglobal.com/

68.233.236.236

https://js.driftt.com/core/assets/js/13.a9247e5d.chunk.jsaD

unknown

https://js.driftt.com/core/assets/js/28.a2bddfe2.chunk.jsaD

unknown

https://js.driftt.com/core/assets/js/36.56cefaf3.chunk.js

unknown

http://eriglobal.com/8

unknown

https://js.driftt.com/core/assets/js/25.5675afde.chunk.jsaD

unknown

https://js.driftt.com/core?embedId=65e63pi6mu5c&forceShow=false&skipCampaigns=false&sessionId=ac0f9c

unknown

https://px.ads.linkedin.com/collect?

unknown

https://zix.com/2

unknown

https://zix.com/4

unknown

https://zix.comh

unknown

http://eriglobal.com/js/default.js

68.233.236.236

https://js.driftt.com/core/assets/js/32.24776eab.chunk.js

unknown

https://metrics.api.drift.com

unknown

https://zix.com/

https://www.zix.com/core/misc/drupal.js?v=8.9.10

unknown

https://zix.com/

unknown

https://js.driftt.com/core/assets/js/36.56cefaf3.chunk.jsaD

unknown

http://eriglobal.com/css/fonts/opensans-semibold.woff

68.233.236.236

https://js.driftt.com/core/assets/js/2.04b0c69b.chunk.js

unknown

https://js.driftt.com/core?embedId=65e63pi6mu5c&forceShow=false&skipCampaigns=false&sessionId=b37c012e-a28c-431b-b8c9-9a6e07b0fca5&sessionStarted=1612410652&campaignRefreshToken=b76b3bc0-4b91-485c-92a0-0bd0bebe41e1&pageLoadStartTime=1612410645525

https://js.driftt.com/core/assets/js/43.0bd3f7fc.chunk.jsaD

unknown

https://js.driftt.com/core/assets/js/1.0af467a5.chunk.jsa

unknown

https://zix.com/themes/custom/zix/favicon.ico

unknown

https://zixmail.net/S

unknown

http://eriglobal.com/css/plugins/alerts.css

68.233.236.236

https://js.driftt.com/core/chat

https://js.driftt.com/core/assets/js/19.d206834e.chunk.js

unknown

https://js.driftt.com/core/assets/js/25.5675afde.chunk.js

unknown

https://customer2.api.driftqa.com

unknown

https://js.driftt.com/core/assets/js/0.45eb4005.chunk.jsaD

unknown

https://js.driftt.com/core/assets/js/main~970f9218.06709018.chunk.jsa

unknown

https://conversation2.api.driftqa.com

unknown

https://js.driftt.com/core/assets/js/runtime~main.643a3a55.jsaD

unknown

https://js.driftt.com/core/assets/js/main~53ca99a6.4d7f7a8a.chunk.jsaD

unknown

https://js.driftt.com/core/assets/js/runtime~main.643a3a55.js

unknown

https://identify.api.driftqa.com

unknown

https://zix.com/l

unknown

https://zix.com/libraries/bootstrap/dist/js/bootstrap.js?v=1.x

unknown

https://js.driftt.com/core/assets/js/23.5562c7f5.chunk.jsaD

unknown

https://metrics.api.driftqa.com

unknown

http://eriglobal.com/uploads/videos/c4ca4238a0b923820dcc509a6f75849b/videoplayback-1558705888.mp4

68.233.236.236

https://www.zix.com

unknown

https://enrichment.api.driftqa.com

unknown

http://ocsp.affirmtrust.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRtMhZQYpqo2xxcFXSxtJGrbVcLygQU2%2B9lNwvlR8

unknown

https://driftt.com/4tC

unknown

https://messaging.api.driftqa.com

unknown

https://www.zix.com/core/assets/vendor/jquery/jquery.min.js?v=3.5.1

unknown

http://eriglobal.com/images/b-bullet.png

68.233.236.236

http://eriglobal.com/#topp

unknown

https://zixmail.net/

unknown

http://eriglobal.com/css/plugins/bt.css

68.233.236.236

http://eriglobal.com/images/build3.jpg

68.233.236.236

https://embeds.driftcdn.com

unknown

http://ocsp.entrust.net/ME0wSzBJMEcwRTAJBgUrDgMCGgUABBTLXNCzDvBhHecWjg70iJhBW0InywQUanImetAe733nO2lR

unknown

https://js.driftt.com/core/assets/js/38.feef3c6b.chunk.jsaD

unknown

https://customer.api.drift.com

unknown

https://zix.com/themes/custom/zixappriver/js/main.js?v=1.x

unknown

https://integration.drift.com

unknown

https://www.zix.com/search

unknown

https://js.driftt.com/core/assets/js/14.274c57c3.chunk.jsaD

unknown

https://js.driftt.com/core/assets/js/main~493df0b3.1bfc4c5f.chunk.js

unknown

https://targeting.api.driftqa.com

unknown

https://zix.com/Y

unknown

https://feedback.googleusercontent.com

unknown

https://js.driftt.com/core/assets/js/17.0833007f.chunk.jsaD

unknown

https://js.driftt.com/core/assets/js/38.feef3c6b.chunk.js

unknown

https://use.typekit.net

unknown

https://js.driftt.com/core/assets/js/20.ec5afb3b.chunk.jsaD

unknown

https://js.driftt.com/core/assets/js/main~2e35577e.69c90f86.chunk.js

unknown

https://zix.com/B&s

unknown

https://api.giphy.com/v1/gifs

unknown

http://eriglobal.com/images/bull.jpg

68.233.236.236

https://meetings.api.driftqa.com

unknown

https://js.driftt.com/core/assets/js/15.ba891359.chunk.js

unknown

https://js.driftt.com/core/assets/js/34.fe729046.chunk.js

unknown

https://zix.com/Email

unknown

https://js.driftt.com/core/assets/js/20.ec5afb3b.chunk.js

unknown

https://conversation.api.drift.com

unknown

https://web1.zixmail.net/s/REL-5.11.17.280/userNotifier.js

unknown

https://js.driftt.com/core/assets/js/35.9da4441f.chunk.jsaD

unknown

https://js.driftt.com/core/assets/js/main~53ca99a6.4d7f7a8a.chunk.jsa

unknown

https://driftt.com/

unknown

http://ocsp.entrust.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQnuEQcScL%2FkljKed%2BRzpzFYOq9kwQUw%2FfQtSowra

unknown

https://web1.zixmail.net/s/REL-5.11.17.280/emailfieldvalue.js

unknown

https://flow.api.drift.com

unknown

https://js.driftt.com/core/assets/js/34.fe729046.chunk.jsaD

unknown

https://optanon.blob.core.windows.net/

unknown

https://web1.zixmail.net/s/e?b=4eri&m=ABCQiFe9wlqI9X9vKBvYvvDp&c=ABBhRV19Ad0FHPsNXID7AQI6&em=new%2ec

unknown

https://www.zix.com/t

unknown

https://www.zix.com/themes/custom/zix/favicon.ico/

unknown

https://js.driftt.com/core/assets/js/12.8c7dd5ee.chunk.js

unknown

https://snap.licdn.com/li.lms-analytics/insight.min.jsaD

unknown

http://eriglobal.com/images/bottom-BG2.jpg

68.233.236.236

https://zix.com//Email

unknown

http://eriglobal.com/images/cuild2.jpg

68.233.236.236

There are 90 hidden URLs, click here to show them.

Domains

Name

Malicious

alb-event-1454785217.us-east-1.elb.amazonaws.com

18.205.49.143

4eri.com

184.168.131.241

www.zixcorp.com

199.30.234.249

afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com

54.147.21.139

segments.company-target.com

99.86.167.90

ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com

54.198.218.148

eriglobal.com

68.233.236.236

dl7g9llrghqi1.cloudfront.net

143.204.2.71

tag.demandbase.com

143.204.2.74

a2f905133e04e4d35ade9cd4751dd35b-4fd69d4b6621dbbd.elb.us-east-1.amazonaws.com

54.85.240.191

www.webdesignerexpress.com

172.67.138.15

z-p42-instagram.c10r.facebook.com

185.60.216.174

id.rlcdn.com

34.120.207.148

star-mini.c10r.facebook.com

185.60.216.35

twitter.com

104.244.42.129

match.prod.bidr.io

54.72.203.0

js.driftqa.com

3.229.202.186

stats.l.doubleclick.net

108.177.15.156

targeting.api.drift.com

100.24.186.63

zix.com

199.30.234.249

www.zix.com

199.30.234.249

embeds.driftcdn.com

13.226.169.56

pop-tln1-alpha.mix.linkedin.com

185.63.144.5

bootstrap.api.drift.com

18.215.11.20

web1.zixmail.net

63.71.15.50

www.bugherd.com.herokudns.com

3.213.190.117

blob.db3prdstr11a.store.core.windows.net

52.239.137.4

api.company-target.com

99.86.167.33

googlehosted.l.googleusercontent.com

172.217.20.225

presence.api.drift.com

unknown

metrics.api.drift.com

unknown

stats.g.doubleclick.net

unknown

clients2.googleusercontent.com

unknown

js.driftt.com

unknown

code.jquery.com

unknown

customer.api.drift.com

unknown

event.api.drift.com

unknown

www.bugherd.com

unknown

conversation.api.drift.com

unknown

www.facebook.com

unknown

use.typekit.net

unknown

115079-29.chat.api.drift.com

unknown

www.linkedin.com

unknown

optanon.blob.core.windows.net

unknown

px.ads.linkedin.com

unknown

ocsp.affirmtrust.com

unknown

www.instagram.com

unknown

p.typekit.net

unknown

snap.licdn.com

unknown

ocsp.entrust.net

unknown

There are 40 hidden domains, click here to show them.

IPs

Domain

Country

Active

Malicious

108.177.15.156

unknown

United States

unknown

192.168.2.1

unknown

63.71.15.50

unknown

United States

unknown

99.86.167.90

unknown

United States

unknown

18.215.11.20

unknown

United States

unknown

13.226.169.56

unknown

United States

unknown

184.168.131.241

unknown

United States

unknown

99.86.167.33

unknown

United States

unknown

54.147.21.139

unknown

United States

unknown

192.168.2.6

unknown

172.217.20.225

unknown

United States

unknown

52.239.137.4

unknown

United States

unknown

18.205.49.143

unknown

United States

unknown

185.63.144.5

unknown

United States

unknown

34.120.207.148

unknown

United States

unknown

54.85.240.191

unknown

United States

unknown

199.30.234.249

unknown

United States

unknown

143.204.2.74

unknown

United States

unknown

54.72.203.0

unknown

United States

unknown

143.204.2.71

unknown

United States

unknown

54.198.218.148

unknown

United States

unknown

239.255.255.250

unknown

Reserved

unknown

3.229.202.186

unknown

United States

unknown

100.24.186.63

unknown

United States

unknown

68.233.236.236

unknown

United States

unknown

3.213.190.117

unknown

United States

unknown

127.0.0.1

unknown

There are 17 hidden IPs, click here to show them.

Registry

Path

Value

Malicious

C:\Program Files\Google\Chrome\Application\chrome.exe

S-1-5-21-3853321935-2125563209-4053062332-1002

C:\Program Files\Google\Chrome\Application\chrome.exe

ahfgeienlihckogmohjhadlkjgocpleb

C:\Program Files\Google\Chrome\Application\chrome.exe

gdaefkejpgkiemlaofpalmlakkmbjdnl

C:\Program Files\Google\Chrome\Application\chrome.exe

gfdkimpbcpahaombhbimeihdjnejgicl

C:\Program Files\Google\Chrome\Application\chrome.exe

kmendfapggjehodndflmmgagdbamhnfd

C:\Program Files\Google\Chrome\Application\chrome.exe

mfehgcgbbipciphmccgaenjidiccnmng

C:\Program Files\Google\Chrome\Application\chrome.exe

mhjfbmdgcfjbbpaeojofohoefgiehjai

C:\Program Files\Google\Chrome\Application\chrome.exe

neajdppkdcdipfabeoofebfddakdcjhd

C:\Program Files\Google\Chrome\Application\chrome.exe

nkeimhogjdpnpccoofpliimaahmaaome

C:\Program Files\Google\Chrome\Application\chrome.exe

prefs.preference_reset_time

C:\Program Files\Google\Chrome\Application\chrome.exe

gfdkimpbcpahaombhbimeihdjnejgicl

C:\Program Files\Google\Chrome\Application\chrome.exe

nmmhkkegccagdldgiimedpiccmgmieda

C:\Program Files\Google\Chrome\Application\chrome.exe

pkedcjkdefgpdelpbcmbmeomcjbeemfm

C:\Program Files\Google\Chrome\Application\chrome.exe

nmmhkkegccagdldgiimedpiccmgmieda

C:\Program Files\Google\Chrome\Application\chrome.exe

state

C:\Program Files\Google\Chrome\Application\chrome.exe

StatusCodes

C:\Program Files\Google\Chrome\Application\chrome.exe

StatusCodes

C:\Program Files\Google\Chrome\Application\chrome.exe

state

C:\Program Files\Google\Chrome\Application\chrome.exe

software_reporter.reporting

C:\Program Files\Google\Chrome\Application\chrome.exe

module_blacklist_cache_md5_digest

C:\Program Files\Google\Chrome\Application\chrome.exe

media.storage_id_salt

C:\Program Files\Google\Chrome\Application\chrome.exe

google.services.last_account_id

C:\Program Files\Google\Chrome\Application\chrome.exe

google.services.account_id

C:\Program Files\Google\Chrome\Application\chrome.exe

software_reporter.prompt_seed

C:\Program Files\Google\Chrome\Application\chrome.exe

settings_reset_prompt.last_triggered_for_homepage

C:\Program Files\Google\Chrome\Application\chrome.exe

default_search_provider_data.template_url_data

C:\Program Files\Google\Chrome\Application\chrome.exe

safebrowsing.incidents_sent

C:\Program Files\Google\Chrome\Application\chrome.exe

pinned_tabs

C:\Program Files\Google\Chrome\Application\chrome.exe

search_provider_overrides

C:\Program Files\Google\Chrome\Application\chrome.exe

settings_reset_prompt.last_triggered_for_default_search

C:\Program Files\Google\Chrome\Application\chrome.exe

prefs.preference_reset_time

C:\Program Files\Google\Chrome\Application\chrome.exe

google.services.last_username

C:\Program Files\Google\Chrome\Application\chrome.exe

session.startup_urls

C:\Program Files\Google\Chrome\Application\chrome.exe

session.restore_on_startup

C:\Program Files\Google\Chrome\Application\chrome.exe

software_reporter.prompt_version

C:\Program Files\Google\Chrome\Application\chrome.exe

settings_reset_prompt.last_triggered_for_startup_urls

C:\Program Files\Google\Chrome\Application\chrome.exe

settings_reset_prompt.prompt_wave

C:\Program Files\Google\Chrome\Application\chrome.exe

homepage

C:\Program Files\Google\Chrome\Application\chrome.exe

homepage_is_newtabpage

C:\Program Files\Google\Chrome\Application\chrome.exe

browser.show_home_button

C:\Program Files\Google\Chrome\Application\chrome.exe

user_experience_metrics.stability.exited_cleanly

C:\Program Files\Google\Chrome\Application\chrome.exe

lastrun

C:\Program Files\Google\Chrome\Application\chrome.exe

S-1-5-21-3853321935-2125563209-4053062332-1002

C:\Program Files\Google\Chrome\Application\chrome.exe

Blob

C:\Program Files\Google\Chrome\Application\chrome.exe

Blob

C:\Program Files\Google\Chrome\Application\chrome.exe

Blob

C:\Program Files\Google\Chrome\Application\chrome.exe

Blob

C:\Program Files\Google\Chrome\Application\chrome.exe

Blob

C:\Program Files\Google\Chrome\Application\chrome.exe

Blob

C:\Program Files\Google\Chrome\Application\chrome.exe

Blob

C:\Program Files\Google\Chrome\Application\chrome.exe

Blob

C:\Program Files\Google\Chrome\Application\chrome.exe

Blob

C:\Program Files\Google\Chrome\Application\chrome.exe

Blob

C:\Program Files\Google\Chrome\Application\chrome.exe

Blob

C:\Program Files\Google\Chrome\Application\chrome.exe

Blob

C:\Program Files\Google\Chrome\Application\chrome.exe

Blob

C:\Program Files\Google\Chrome\Application\chrome.exe

Blob

There are 47 hidden registries, click here to show them.

Memdumps

Base Address

Regiontype

Protect

Malicious

7FF505D86000

unkown

page readonly

251037A0000

unkown

page read and write

7FF505EA3000

unkown

page readonly

B48418E000

unkown

page read and write

B48410B000

unkown

page read and write

1D38E49A000

unkown

page read and write

7FF532907000

unkown

page readonly

7FF505DD8000

unkown

page readonly

B48447E000

unkown

page read and write

2510324B000

unkown

page read and write

7FF532901000

unkown

page readonly

7FF532D5F000

unkown

page readonly

1D38E49A000

unkown

page read and write

FC1697F000

unkown

page read and write

1D3901F0000

unkown

page read and write

25103802000

unkown

page read and write

7FF505F47000

unkown

page readonly

FC16F7F000

unkown

page read and write

7FF505E15000

unkown

page readonly

1D38E49D000

unkown

page read and write

7FF532E43000

unkown

page readonly

7FF505EC2000

unkown

page readonly

1D38E49B000

unkown

page read and write

7FF532CCE000

unkown

page readonly

28DDAE00000

unkown

page read and write

7FF532D6D000

unkown

page readonly

1D38E493000

unkown

page read and write

1D390202000

unkown

page read and write

7FF532CD5000

unkown

page readonly

28DDAE54000

unkown

page read and write

7FF505EAD000

unkown

page readonly

25103270000

unkown

page read and write

7FF532D96000

unkown

page readonly

7FF505EDD000

unkown

page readonly

7FF505F97000

unkown

page readonly

1D38E489000

unkown

page read and write

7FF505EB6000

unkown

page readonly

7FF532C60000

unkown

page readonly

7FF5AB447000

unkown

page readonly

25103D40000

unkown

page readonly

28DDADF0000

unkown

page read and write

7FF532D51000

unkown

page readonly

1D38E495000

unkown

page read and write

7FF505E9F000

unkown

page readonly

1D38E495000

unkown

page read and write

7FF505F92000

unkown

page readonly

7FF532D7A000

unkown

page readonly

25103120000

unkown

page readonly

1D38E493000

unkown

page read and write

7FF505E91000

unkown

page readonly

1D38E49F000

unkown

page read and write

28DDAE71000

unkown

page read and write

FC16E7F000

unkown

page read and write

1D38E498000

unkown

page read and write

28DDABC0000

heap private

page read and write

7FF532DA9000

unkown

page readonly

25103229000

unkown

page read and write

1D38E49A000

unkown

page read and write

7FF505E0E000

unkown

page readonly

28DDAE48000

unkown

page read and write

28DDAE4B000

unkown

page read and write

1D38E493000

unkown

page read and write

28DDAE51000

unkown

page read and write

28DDB940000

unkown

page readonly

7FF505D57000

unkown

page readonly

1D3901F0000

unkown

page read and write

25103200000

unkown

page read and write

7FF532C46000

unkown

page readonly

28DDAF13000

unkown

page read and write

28DDAF00000

unkown

page read and write

1D38E49B000

unkown

page read and write

7FF532D76000

unkown

page readonly

FC16D7D000

unkown

page read and write

25103308000

unkown

page read and write

B48497E000

unkown

page read and write

2510322C000

unkown

page read and write

2510324A000

unkown

page read and write

28DDAE91000

unkown

page read and write

1D38E489000

unkown

page read and write

28DDAE47000

unkown

page read and write

1D38E49A000

unkown

page read and write

25103050000

unkown

page readonly

1D38E4AF000

unkown

page read and write

FC16B7B000

unkown

page read and write

25103302000

unkown

page read and write

1D38E494000

unkown

page read and write

7FF505F4D000

unkown

page readonly

7FF505DA8000

unkown

page readonly

1D38E488000

unkown

page read and write

28DDAF02000

unkown

page read and write

28DDAE4E000

unkown

page read and write

7FF532E07000

unkown

page readonly

B48487E000

unkown

page read and write

1D38E49B000

unkown

page read and write

7FF50567E000

unkown

page readonly

28DDB402000

unkown

page read and write

B48467B000

unkown

page read and write

7FF505F6A000

unkown

page readonly

1D38E493000

unkown

page read and write

7FF532E2A000

unkown

page readonly

28DDB000000

unkown

page readonly

28DDAE8B000

unkown

page read and write

7FF505ED6000

unkown

page readonly

7FF532E1B000

unkown

page readonly

1D38E49C000

unkown

page read and write

1D38E489000

unkown

page read and write

7FF532D9D000

unkown

page readonly

1D38E4E8000

unkown

page read and write

7FF532E57000

unkown

page readonly

7FF505F5B000

unkown

page readonly

7FF532E57000

unkown

page readonly

7FF505C01000

unkown

page readonly

FC168FF000

unkown

page read and write

25103213000

unkown

page read and write

1D38E49C000

unkown

page read and write

7FF532E52000

unkown

page readonly

2510328C000

unkown

page read and write

B484777000

unkown

page read and write

25103249000

unkown

page read and write

28DDAC30000

unkown

page readonly

1D3901F0000

unkown

page read and write

7FF53253E000

unkown

page readonly

1D38E493000

unkown

page read and write

28DDAE13000

unkown

page read and write

28DDAD00000

unkown

page readonly

25103A00000

unkown

page readonly

7FF532D82000

unkown

page readonly

1D38E497000

unkown

page read and write

2510323C000

unkown

page read and write

7FF505A41000

unkown

page readonly

7FF505F57000

unkown

page readonly

25103300000

unkown

page read and write

28DDAE3C000

unkown

page read and write

1D38E493000

unkown

page read and write

7FF532C17000

unkown

page readonly

2510324F000

unkown

page read and write

7FF532E46000

unkown

page readonly

7FF505EBA000

unkown

page readonly

7FF532E17000

unkown

page readonly

1D38E4A7000

unkown

page read and write

7FF505A47000

unkown

page readonly

2510324D000

unkown

page read and write

28DDAF08000

unkown

page read and write

FC1687B000

unkown

page read and write

1D38E488000

unkown

page read and write

B484575000

unkown

page read and write

7FF505F54000

unkown

page readonly

7FF505EE9000

unkown

page readonly

FC16C77000

unkown

page read and write

25103040000

heap default

page read and write

7FF505F44000

unkown

page readonly

1D38E497000

unkown

page read and write

7FF505EE7000

unkown

page readonly

25103790000

unkown

page readonly

7FF505F97000

unkown

page readonly

1D38E48A000

unkown

page read and write

28DDAE8F000

unkown

page read and write

28DDAC20000

heap default

page read and write

25103313000

unkown

page read and write

7FF532E04000

unkown

page readonly

7FF505DA5000

unkown

page readonly

25102FE0000

heap private

page read and write

7FF532E14000

unkown

page readonly

7FF532DA7000

unkown

page readonly

7FF532E01000

unkown

page readonly

7FF532E0D000

unkown

page readonly

7FF505F41000

unkown

page readonly

7FF505F83000

unkown

page readonly

28DDAE29000

unkown

page read and write

7FF532D4F000

unkown

page readonly

1D38E497000

unkown

page read and write

2510324E000

unkown

page read and write

7FF505D2A000

unkown

page readonly

7FF532C65000

unkown

page readonly

7FF532D63000

unkown

page readonly

28DDB600000

unkown

page readonly

1D38E4AB000

unkown

page read and write

7FF505E8F000

unkown

page readonly

7FF532C68000

unkown

page readonly

25103400000

unkown

page readonly

7FF532AC1000

unkown

page readonly

1D38E4A1000

unkown

page read and write

1D38E488000

unkown

page read and write

1D38E49D000

unkown

page read and write

7FF505F86000

unkown

page readonly

7FF505DA0000

unkown

page readonly

28DDADE0000

unkown

page readonly

7FF532C98000

unkown

page readonly

1D38E4A3000

unkown

page read and write

7FF532BEA000

unkown

page readonly

There are 180 hidden memdumps, click here to show them.

DOM / HTML

URL

Malicious

https://web1.zixmail.net/s/e?b=4eri&m=ABCQiFe9wlqI9X9vKBvYvvDp&c=ABBhRV19Ad0FHPsNXID7AQI6&em=new%2eclaimsnotices%40jamesriverins%2ecom

https://js.driftt.com/core?embedId=65e63pi6mu5c&forceShow=false&skipCampaigns=false&sessionId=ac0f9c01-ebdf-45ee-9cea-667e5f515f8e&sessionStarted=1612410636&campaignRefreshToken=035c5193-236b-4f15-b6d7-9e26f8a66359&pageLoadStartTime=1612410624678

https://www.zix.com/

https://zix.com/

http://eriglobal.com/#top

https://js.driftt.com/core/chat

http://eriglobal.com/

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

IOCReport

Files

Processes

URLs

Domains

IPs

Registry

Memdumps

DOM / HTML