download: | index.html |
Full analysis: | https://app.any.run/tasks/b017dd12-bd1f-4d12-ac88-f048bede7154 |
Verdict: | Malicious activity |
Analysis date: | April 25, 2019, 14:42:39 |
OS: | Windows 7 Professional Service Pack 1 (build: 7601, 32 bit) |
Indicators: | |
MIME: | text/html |
File info: | HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators |
MD5: | 2F81FA9845453C8012013979A063345B |
SHA1: | 6A2216AF008BDC01274AB3DDA9B992A5AF0CB05B |
SHA256: | 266C5541E5CC218BA9A7F73D6C827C05B2F4683F84824051A41654481FAFE2E0 |
SSDEEP: | 6144:6aj8Ge0OTYdFsmtM2SYJey/KdzG1Ys7X+OjsgpPHsW41Hog:RKdzG1Ys7XCIg |
baiduSiteVerification: | g5yt0h5wVy |
---|---|
Title: | iHerb.com - Vitamine, Nahrungsergänzungsmittel & natürliche Gesundheitsprodukte |
Description: | 30.000+ erstklassige, gesunde Produkte; mit reduziertem Versand, unglaubliche Werte und Kundenbelohnungen. |
formatDetection: | telephone=no |
ContentType: | text/html; charset=utf-8 |
HTTPEquivXUACompatible: | IE=edge |
viewport: | width=device-width |
googleSiteVerification: | zBEQuibjR3T_pcVIOOVisw5Zm_nOvhR78nG0Qj4KJ5M |
msvalidate01: | 218C371F3F2FC3B0C10E5B28263F5392 |
The: | 53b512aa45a3a17d78b3f7e92e3a00fb4518f252 |
PID | CMD | Path | Indicators | Parent process |
---|---|---|---|---|
3864 | "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\admin\AppData\Local\Temp\index.html | C:\Program Files\Internet Explorer\iexplore.exe | explorer.exe | |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Internet Explorer Version: 8.00.7600.16385 (win7_rtm.090713-1255) | ||||
1904 | "C:\Program Files\Internet Explorer\iexplore.exe" SCODEF:3864 CREDAT:79873 | C:\Program Files\Internet Explorer\iexplore.exe | iexplore.exe | |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Internet Explorer Version: 8.00.7600.16385 (win7_rtm.090713-1255) |
PID | Process | Filename | Type | |
---|---|---|---|---|
3864 | iexplore.exe | C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H6QNMHE9\favicon[1].ico | — | |
MD5:— | SHA256:— | |||
3864 | iexplore.exe | C:\Users\admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico | — | |
MD5:— | SHA256:— | |||
1904 | iexplore.exe | C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LH043OAM\ie[1].png | image | |
MD5:6CFBC6A95FD0C07F9FE381E9AB2BBFAA | SHA256:70335B3F7F543895205EE4731CB4954B8B7E58E5F05C69EA16F2081A2EBDFD74 | |||
1904 | iexplore.exe | C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I0488CJO\edge[1].png | image | |
MD5:85BA65EE0DBDEC71C98CFF435D2EB198 | SHA256:388F5D2029F2D7C2CB107DE0E23B689BF6A71058648AF32F059BBDE729950DB5 | |||
1904 | iexplore.exe | C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H6QNMHE9\four_sigmatic_v1_logo[1].png | image | |
MD5:519C0FD1B1B6C8B04BE2A6EFD35AF930 | SHA256:7D92FC05F5C47C9908726E2D884B17C21623FE1956CAA1EC7149E5502FACBDB6 | |||
1904 | iexplore.exe | C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I0488CJO\safari[1].png | image | |
MD5:A197A94640821F0B997DD2C3F2BAFE65 | SHA256:48D1602BA003FA7FEED371EB91EEE8D39D377A9F7991FAC1402613AFD27E129F | |||
1904 | iexplore.exe | C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I0488CJO\white_egret_v1_logo[1].png | image | |
MD5:1AE3BD627D9445D8F9C53917302CA5FF | SHA256:A788ACD0BD953529431563B156F2DE4BF37CC19A657FE57925E0D42813688D73 | |||
1904 | iexplore.exe | C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H6QNMHE9\hyalogic_v1_logo[1].png | image | |
MD5:9690A4BD6635FAFB479DC02C5CCE4B33 | SHA256:EE4782CA09EB1B83D8EA8DDFE5AEA5771BF08E83976E665B1E7B5CB35F4D6506 | |||
1904 | iexplore.exe | C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H6QNMHE9\firefox[1].png | image | |
MD5:334DDA12B13ABEB9E079F0F24490AEB0 | SHA256:E565C46F2957F42DB3F58619062B59D038C455C08E1DE4B90EFE737954B84255 | |||
1904 | iexplore.exe | C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LH043OAM\wileys_finest_v1_logo[1].png | image | |
MD5:A670EF867DE601AA8E3C2A056CD82163 | SHA256:A98D26468F9FC51B8F972E02D2D108967783D6F714537EA0CD33663D9FBA3010 |
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
---|---|---|---|---|---|---|---|---|---|
1904 | iexplore.exe | OPTIONS | 400 | 216.58.206.8:80 | http://www.googletagmanager.com/ | US | html | 1.52 Kb | whitelisted |
1904 | iexplore.exe | OPTIONS | 400 | 216.58.206.8:80 | http://www.googletagmanager.com/ | US | html | 1.52 Kb | whitelisted |
1904 | iexplore.exe | OPTIONS | 400 | 216.58.206.8:80 | http://www.googletagmanager.com/ | US | html | 1.52 Kb | whitelisted |
1904 | iexplore.exe | OPTIONS | 400 | 216.58.206.8:80 | http://www.googletagmanager.com/ | US | html | 1.52 Kb | whitelisted |
1904 | iexplore.exe | OPTIONS | 400 | 216.58.206.8:80 | http://www.googletagmanager.com/ | US | html | 1.52 Kb | whitelisted |
1904 | iexplore.exe | OPTIONS | 400 | 216.58.206.8:80 | http://www.googletagmanager.com/ | US | html | 1.52 Kb | whitelisted |
1904 | iexplore.exe | OPTIONS | 400 | 216.58.206.8:80 | http://www.googletagmanager.com/ | US | html | 1.52 Kb | whitelisted |
1904 | iexplore.exe | OPTIONS | 400 | 216.58.206.8:80 | http://www.googletagmanager.com/ | US | html | 1.52 Kb | whitelisted |
1904 | iexplore.exe | OPTIONS | 400 | 216.58.206.8:80 | http://www.googletagmanager.com/ | US | html | 1.52 Kb | whitelisted |
1904 | iexplore.exe | OPTIONS | 400 | 216.58.206.8:80 | http://www.googletagmanager.com/ | US | html | 1.52 Kb | whitelisted |
PID | Process | IP | Domain | ASN | CN | Reputation |
---|---|---|---|---|---|---|
1904 | iexplore.exe | 104.16.167.250:443 | s3.images-iherb.com | Cloudflare Inc | US | shared |
4 | System | 104.16.166.250:139 | s3.images-iherb.com | Cloudflare Inc | US | shared |
4 | System | 104.16.166.250:445 | s3.images-iherb.com | Cloudflare Inc | US | shared |
3864 | iexplore.exe | 204.79.197.200:80 | www.bing.com | Microsoft Corporation | US | whitelisted |
4 | System | 104.16.167.250:445 | s3.images-iherb.com | Cloudflare Inc | US | shared |
4 | System | 216.58.206.8:445 | www.googletagmanager.com | Google Inc. | US | whitelisted |
4 | System | 216.58.206.8:139 | www.googletagmanager.com | Google Inc. | US | whitelisted |
— | — | 104.16.167.250:443 | s3.images-iherb.com | Cloudflare Inc | US | shared |
1904 | iexplore.exe | 216.58.206.8:80 | www.googletagmanager.com | Google Inc. | US | whitelisted |
Domain | IP | Reputation |
---|---|---|
s3.images-iherb.com |
| suspicious |
dns.msftncsi.com |
| shared |
www.bing.com |
| whitelisted |
www.googletagmanager.com |
| whitelisted |