IOC Report
test@barclays.com.html

loading gif

Files

File Path
Type
Category
Malicious
test@barclays.com.html
HTML document, ISO-8859 text, with very long lines, with CRLF line terminators
initial sample
malicious
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\5dd7ae69-e6ad-4a15-a5cb-99a213f83493.tmp
ASCII text, with very long lines, with no line terminators
dropped
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\7edfe7eb-47ee-4924-af2b-297a69664551.tmp
data
dropped
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\934a3bab-1920-40b2-aca2-fff43d1629aa.tmp
ASCII text, with very long lines, with no line terminators
dropped
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
data
dropped
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\05f5fc9d-0b67-4173-b3d0-47807686f7eb.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
dropped
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\425d98ad-f4df-4e13-b8fb-41dff37b5585.tmp
very short file (no magic)
dropped
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\4b5a2f7e-0423-447f-8da5-5df0d2bb6dd8.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
dropped
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\52d67da0-d354-4a40-bad6-22c5d5bd7bf3.tmp
MS Windows icon resource - 13 icons, 8x8, 32 bits/pixel, 10x10, 32 bits/pixel
dropped
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\592ac4df-946e-4d99-9532-8cb93f7c5a77.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
dropped
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\7220f273-efaa-47a9-bdff-54e88e0f464d.tmp
ASCII text, with very long lines, with no line terminators
modified
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\7a4b5349-6aec-4abd-8d0f-8d8b0bc4a6a6.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
dropped
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000003.log
data
dropped
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG
ASCII text
dropped
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_1\_metadata\computed_hashes.json
ASCII text, with very long lines, with no line terminators
dropped
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG
ASCII text
dropped
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1
data
dropped
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\Google Profile.ico (copy)
MS Windows icon resource - 13 icons, 8x8, 32 bits/pixel, 10x10, 32 bits/pixel
dropped
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\History
SQLite 3.x database, last written using SQLite version 3035005
dropped
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache
data
dropped
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG
ASCII text
dropped
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
SQLite 3.x database, last written using SQLite version 3035005
dropped
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\Preferences (copy)
ASCII text, with very long lines, with no line terminators
dropped
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences (copy)
UTF-8 Unicode text, with very long lines, with no line terminators
dropped
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log
data
dropped
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\Sessions\Session_13301172988058248
data
dropped
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\Sessions\Tabs_13301172989165152
data
dropped
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG
ASCII text
dropped
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1
data
dropped
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\000001.dbtmp
ASCII text
dropped
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\MANIFEST-000001
PGP\011Secret Key -
dropped
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\LOG
ASCII text
dropped
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
ASCII text
dropped
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\Visited Links
data
dropped
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\Web Data
SQLite 3.x database, last written using SQLite version 3035005
dropped
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000006.dbtmp
ASCII text
dropped
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\f6839c5e-12a8-4271-8c6e-3b1843bbc857.tmp
ASCII text, with very long lines, with no line terminators
dropped
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\ffc0ae26-ecd7-4faf-8bc3-14b4ecff9872.tmp
ASCII text, with very long lines, with no line terminators
dropped
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Last Browser
data
dropped
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Last Version
ASCII text, with no line terminators
dropped
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Local State (copy)
ASCII text, with very long lines, with no line terminators
dropped
C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\a7e5f443-b449-45ad-8e8b-7d84a52d0a3a.tmp
ASCII text, with very long lines, with no line terminators
dropped
C:\Users\alfredo\AppData\Local\Temp\1bb9848a-13e0-481e-9182-6f8c10c78242.tmp
gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
dropped
C:\Users\alfredo\AppData\Local\Temp\cd7b350f-5982-4504-8046-216985eb3307.tmp
Google Chrome extension, version 3
modified
C:\Users\alfredo\AppData\Local\Temp\cf3055ee-f737-4238-b99a-ce800a1e765f.tmp
gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
dropped
C:\Users\alfredo\AppData\Local\Temp\de7d353a-91ad-46d9-9dca-e1f03ca82a0b.tmp
gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
dropped
C:\Users\alfredo\AppData\Local\Temp\e2101325-4ca1-4db2-95b9-c345399cc004.tmp
gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
dropped
C:\Users\alfredo\AppData\Local\Temp\e6b0db7b-9f08-487a-a9ef-699c08b3ce7f.tmp
gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
dropped
C:\Users\alfredo\AppData\Local\Temp\scoped_dir7108_695416080\CRX_INSTALL\_locales\bg\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
C:\Users\alfredo\AppData\Local\Temp\scoped_dir7108_695416080\CRX_INSTALL\_locales\ca\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
C:\Users\alfredo\AppData\Local\Temp\scoped_dir7108_695416080\CRX_INSTALL\_locales\cs\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
C:\Users\alfredo\AppData\Local\Temp\scoped_dir7108_695416080\CRX_INSTALL\_locales\da\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
C:\Users\alfredo\AppData\Local\Temp\scoped_dir7108_695416080\CRX_INSTALL\_locales\de\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
C:\Users\alfredo\AppData\Local\Temp\scoped_dir7108_695416080\CRX_INSTALL\_locales\el\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
C:\Users\alfredo\AppData\Local\Temp\scoped_dir7108_695416080\CRX_INSTALL\_locales\en\messages.json
ASCII text, with CRLF line terminators
dropped
C:\Users\alfredo\AppData\Local\Temp\scoped_dir7108_695416080\CRX_INSTALL\_locales\es\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
C:\Users\alfredo\AppData\Local\Temp\scoped_dir7108_695416080\CRX_INSTALL\_locales\es_419\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
C:\Users\alfredo\AppData\Local\Temp\scoped_dir7108_695416080\CRX_INSTALL\_locales\et\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
C:\Users\alfredo\AppData\Local\Temp\scoped_dir7108_695416080\CRX_INSTALL\_locales\fi\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
C:\Users\alfredo\AppData\Local\Temp\scoped_dir7108_695416080\CRX_INSTALL\_locales\fil\messages.json
ASCII text, with CRLF line terminators
dropped
C:\Users\alfredo\AppData\Local\Temp\scoped_dir7108_695416080\CRX_INSTALL\_locales\fr\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
C:\Users\alfredo\AppData\Local\Temp\scoped_dir7108_695416080\CRX_INSTALL\_locales\hi\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
C:\Users\alfredo\AppData\Local\Temp\scoped_dir7108_695416080\CRX_INSTALL\_locales\hr\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
C:\Users\alfredo\AppData\Local\Temp\scoped_dir7108_695416080\CRX_INSTALL\_locales\hu\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
C:\Users\alfredo\AppData\Local\Temp\scoped_dir7108_695416080\CRX_INSTALL\_locales\id\messages.json
ASCII text, with CRLF line terminators
dropped
C:\Users\alfredo\AppData\Local\Temp\scoped_dir7108_695416080\CRX_INSTALL\_locales\it\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
C:\Users\alfredo\AppData\Local\Temp\scoped_dir7108_695416080\CRX_INSTALL\_locales\ja\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
C:\Users\alfredo\AppData\Local\Temp\scoped_dir7108_695416080\CRX_INSTALL\_locales\ko\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
C:\Users\alfredo\AppData\Local\Temp\scoped_dir7108_695416080\CRX_INSTALL\_locales\lt\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
C:\Users\alfredo\AppData\Local\Temp\scoped_dir7108_695416080\CRX_INSTALL\_locales\lv\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
C:\Users\alfredo\AppData\Local\Temp\scoped_dir7108_695416080\CRX_INSTALL\_locales\nb\messages.json
ASCII text, with very long lines
dropped
C:\Users\alfredo\AppData\Local\Temp\scoped_dir7108_695416080\CRX_INSTALL\_locales\nl\messages.json
ASCII text, with CRLF line terminators
dropped
C:\Users\alfredo\AppData\Local\Temp\scoped_dir7108_695416080\CRX_INSTALL\_locales\pl\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
C:\Users\alfredo\AppData\Local\Temp\scoped_dir7108_695416080\CRX_INSTALL\_locales\pt_BR\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped