Edit tour

Windows Analysis Report
https://coretrustbids.easibuy.com/advertisements/2128?token=b42ae94736116862a16cd227

Overview

General Information

Sample URL:	https://coretrustbids.easibuy.com/advertisements/2128?token=b42ae94736116862a16cd227
Analysis ID:	1456863

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 1828 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://coretrustbids.easibuy.com/advertisements/2128?token=b42ae94736116862a16cd227 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6192 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1928,i,10307687551420882602,15709229663194372078,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7020 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5188 --field-trial-handle=1928,i,10307687551420882602,15709229663194372078,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

• Phishing
• Compliance
• Networking
• System Summary
• Boot Survival

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://coretrustbids.easibuy.com/registration?email=

HTTP Parser: <input type="password" .../> found

Source: https://coretrustbids.easibuy.com/registration?email=

HTTP Parser: No <meta name="author".. found

Source: https://coretrustbids.easibuy.com/registration?email=

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:49744 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 92.123.104.67
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183

Source: global traffic	DNS traffic detected: DNS query: coretrustbids.easibuy.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: specs-eprocurelive-pro.s3.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:49744 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@16/33@14/153

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://coretrustbids.easibuy.com/advertisements/2128?token=b42ae94736116862a16cd227
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1928,i,10307687551420882602,15709229663194372078,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5188 --field-trial-handle=1928,i,10307687551420882602,15709229663194372078,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1928,i,10307687551420882602,15709229663194372078,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5188 --field-trial-handle=1928,i,10307687551420882602,15709229663194372078,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	2 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	2 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact

Screenshots

Download Video

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://coretrustbids.easibuy.com/advertisements/2128?token=b42ae94736116862a16cd227	0%	Avira URL Cloud	safe

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s3-w.us-east-1.amazonaws.com	3.5.29.64	true	false	unknown
code.jquery.com	151.101.130.137	true	false	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	unknown
www.google.com	216.58.206.68	true	false	unknown
coretrustbids.easibuy.com	96.126.127.73	true	false	unknown
specs-eprocurelive-pro.s3.amazonaws.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://coretrustbids.easibuy.com/registration?email=	false		unknown
https://coretrustbids.easibuy.com/advertisements/2128?token=b42ae94736116862a16cd227	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
96.126.127.73	coretrustbids.easibuy.com	United States	63949	LINODE-APLinodeLLCUS	false
1.1.1.1	unknown	Australia	13335	CLOUDFLARENETUS	false
142.250.74.206	unknown	United States	15169	GOOGLEUS	false
216.58.206.78	unknown	United States	15169	GOOGLEUS	false
3.5.29.64	s3-w.us-east-1.amazonaws.com	United States	14618	AMAZON-AESUS	false
142.250.185.202	unknown	United States	15169	GOOGLEUS	false
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false
216.58.206.35	unknown	United States	15169	GOOGLEUS	false
64.233.166.84	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.131	unknown	United States	15169	GOOGLEUS	false
52.217.9.172	unknown	United States	16509	AMAZON-02US	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1456863
Start date and time:	2024-06-13 21:13:15 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://coretrustbids.easibuy.com/advertisements/2128?token=b42ae94736116862a16cd227
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	16
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled
Analysis Mode:	stream
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@16/33@14/153

Warnings

Exclude process from analysis (whitelisted): audiodg.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.206.35, 142.250.74.206, 64.233.166.84, 34.104.35.123, 199.232.214.172
Excluded domains from analysis (whitelisted): clients2.google.com, accounts.google.com, edgedl.me.gvt1.com, ctldl.windowsupdate.com, clientservices.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
VT rate limit hit for: https://coretrustbids.easibuy.com/advertisements/2128?token=b42ae94736116862a16cd227

LLM Input / Output

Input	Output
URL: https://coretrustbids.easibuy.com/advertisements/2128?token=b42ae94736116862a16cd227 Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "urgency": true, "captcha": false, "reasons": [ "The webpage contains a 'Sign-in' link which might lead to a login form.", "The text creates a sense of urgency by mentioning 'Your response due Thu, Jul 11th at 9:00 pm UTC' and 'Vendor Questions / Clarification Due Date - Revised Tuesday June 18th, 2024 by 5 p.m. EDT'." ] }
Title: Advertisements - RFP Document Package - Commodity Chemicals - CoreTrust OCR: Advertisements Sign-in CoreTrust Bids CORE TRUST' Commodity Chemicals RFP Document Package - Commodity Chemicals Your Response Due Thu, Jul 11th at 9:00 pm UTC Published Tue, May 28th at 9:00 pm UTC Interested in to this procurement? Let's get This website is intended tor use by CoreTrust and the asscciated memrs identified vendors only. It you have you registered questions, or would like to participate in upcoming projects, please contact Bill Grega at 330.931.4687 or bgrega@easiuy.com. Email address@example com A. Introduction CoreTrust, a group purchasing organization (GPO) that provides custom sourcing services tor over 3000 members. espons EASiBuy, a subsidiary ot CoreTrust, will be managing and this oppounity on nalf ot CoreTrust and its members. EASiauy will be the pont ot contact throughout this process. B. Membership Companies (Part ot this RFP) Chase Corporation (https://chasecorp.com) Hyperion Materials & Technologies (https://uww.'_nyperionmt_com) Novaria Group (https hWww.novariagroup.com) Consolidated Precision Products (CPP) (https://uw.'w_cppcorp.com) Function ot Beauty com) Prefere Melamines LLC (https //prefere com) AZZ Precoat Metals The Jordan Company (TJC) Private Equity Firm (on behalf ot their PortCo's) c. RFP Timeline: RFPRe,'ease and postjng Date - Tuesday May 28th, 2024 Vendor Questions / Clarification Due Date - Revised Tuesday June 18th, 2024 by 5 p.m. EDT (Note: all questions must be submitted via the Vendor questions or clarifications /ynk in Task #3) Response Answers to Clarification Questions: will be posted by Friday June 21 st, 2024 (in attachments) RFP sum-lisson Due Date - Thursday July 11th, 2024 by 5 p.m. EDT Items required to be completed and or uploaded to be considered compliant. o Bid submitted with initial pricing (Uploaded) o Easiauy Supplier Agreement Signed (Uploaded) o All questions answered in the RFP Questionnaire (online torm Task #5) o Any required Attachment requests from the RFP Questionnaire. online Live pncjng event - weanesday, 18th, 2024 Time: TBD Thank you tor your interest in this Commodity Chemical Program RFP
URL: https://coretrustbids.easibuy.com Model: gpt-4o	```json { "phishing_score": 2, "brands": "CoreTrust", "phishing": false, "suspicious_domain": false, "has_loginform": true, "has_captcha": false, "setechniques": false, "has_suspicious_link": false, "legitmate_domain": "easibuy.com", "reasons": "The URL 'https://coretrustbids.easibuy.com' appears to be legitimate. The domain 'easibuy.com' is consistent with the brand name 'CoreTrust' mentioned on the page. The page contains a login form but no CAPTCHA, which is common for legitimate sites. There are no obvious social engineering techniques or suspicious links present. The content and layout of the page look professional and consistent with a legitimate business site. Therefore, it is concluded that this site is not a phishing site." }

URL: https://coretrustbids.easibuy.com Model: gpt-4o	```json { "phishing_score": 6, "brands": "CoreTrust", "phishing": true, "suspicious_domain": true, "has_loginform": true, "has_captcha": false, "setechniques": true, "has_suspicious_link": false, "legitmate_domain": "coretrustpg.com", "reasons": "The URL 'https://coretrustbids.easibuy.com' does not match the legitimate domain 'coretrustpg.com' associated with CoreTrust. The presence of a registration form asking for personal information such as email, password, and phone numbers is typical of phishing sites. The domain 'easibuy.com' is not directly related to CoreTrust, which raises suspicion. Additionally, the use of a subdomain 'coretrustbids' can be a social engineering technique to mislead users into thinking it is a legitimate CoreTrust site." }

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jun 13 18:13:45 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.992136130503583
Encrypted:	false
SSDEEP:
MD5:	A2582EA177E4B47D57CD21F0736DCDAB
SHA1:	79D58883EA56EEB31D2CFBE7122D0B27BFF5811E
SHA-256:	5594B2C1B9DB53824727EF7BBB07AF8C9B03FECA1B8DD65E242B2A0A56F2F04B
SHA-512:	91529BC1F9BD6FEA6DD7F683B9C17F606CDF1ADDC51166EDC6C6C89A53F5FE950A0593736D877F3DB553EF92986B9FFDDA13AF61D0574D7906488DB173888EB8
Malicious:	false
Reputation:	unknown
Preview:	L..................F.@.. ...$+.,....W5.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........#U.b.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jun 13 18:13:45 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.010771757321478
Encrypted:	false
SSDEEP:
MD5:	C6E5D716129DD680436DBC772FD917DC
SHA1:	882D738CC75B5E35FB4F5D27A3276D2AFA4F5F15
SHA-256:	8120E62C25F0AB51445082A80C5C424C2FD58A28869EE9749817A7F4BB350BCB
SHA-512:	A913BA1019B6567644BE1A01785982F77F5151EF518E36D067BD5BF391766FE03167057B9E53727A03C9E91115E00FFF2E175803D0686995F63AF822EF908A2A
Malicious:	false
Reputation:	unknown
Preview:	L..................F.@.. ...$+.,...........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........#U.b.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.015303979949846
Encrypted:	false
SSDEEP:
MD5:	8EB0706C6E6D0D8CBC0B6060AAF3AAA8
SHA1:	7519F6D38E59B10A2C9374447404C6B326985E9D
SHA-256:	60C1C9EC16A9559499E01CEF8BAD65EF701CC66759F43D5CB65220EAA86C5894
SHA-512:	0922F93E5EC7EC3CBD8C185E07F17D030421C5835A5AC77A54EB9780AD771166476F37F0F5C6DDC7356748B72F38534855EEDF6FFB00C72FD4E73ED1F113AC4C
Malicious:	false
Reputation:	unknown
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........#U.b.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jun 13 18:13:45 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	4.007348180635678
Encrypted:	false
SSDEEP:
MD5:	753CF50CD911218E975356D2E1A3948B
SHA1:	1B29A2ABE95EB38F2383B342FF4BC73FF3A64386
SHA-256:	F7B7E5CB8101CBAB80D2A48A4E3DF12826722FA722107F480F418FE0431BA973
SHA-512:	5DF8536EE463C911F3D127EC4B045E3D82EA65F6350930931E686539E82CC3A0BB97D177CB7120F3ACCF4C3DEEA41C17A069CCEB0A6358CB929F701F94D770EE
Malicious:	false
Reputation:	unknown
Preview:	L..................F.@.. ...$+.,....NE.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........#U.b.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jun 13 18:13:45 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9975488631178777
Encrypted:	false
SSDEEP:
MD5:	3C28E8A1A8BB1FCD81E9301540295C28
SHA1:	EC94FC1F30CA8802546E5E8B217F123A1B6C8985
SHA-256:	776F0378AF9628DCC3E378D659D6332C8DC4317B215BAD1E4FDBF896582E57D3
SHA-512:	8A23C6972B59080F26550E3B1D64A2AEE737A19E54972E2AFD013A0AEC363A16E4069883D0A8A9CB20BC4F66ED7F0B51A308C818B21C46C77803D441A818FA66
Malicious:	false
Reputation:	unknown
Preview:	L..................F.@.. ...$+.,...........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........#U.b.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jun 13 18:13:45 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.007797612803022
Encrypted:	false
SSDEEP:
MD5:	339FEADF571F356D3FD87860A6DC91D6
SHA1:	9349CFFCD95AB23E9BA646EBC3ABBAD425E565CA
SHA-256:	67E44E1A51762CC019DB9A3F47A37012C9417F063EE3E4AB5BA3A52E7252E6B3
SHA-512:	17FD1032DACFC5997AC709AD2D11037C48018B0C660B9A45325F6D6B03FBF4C86E099C6F3B45EAAFE046C0050DE308C6ACF364D4926B0DF58B490F2079F8E016
Malicious:	false
Reputation:	unknown
Preview:	L..................F.@.. ...$+.,....}......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........#U.b.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (407)
Category:	downloaded
Size (bytes):	30492
Entropy (8bit):	5.23436704623718
Encrypted:	false
SSDEEP:
MD5:	98B3E41C73067D59356E7C23656761EB
SHA1:	27AF3183F8C73E41E1E9F7FF6E73B119F94668DF
SHA-256:	7C0298F1889DA380B254673E2ABA070FB55FF8C922F3BC3F126C23EA63A4195F
SHA-512:	D0CDD24EEA772D50721258452BB9EF1C42F5911244C33A43C274E8EE4DC6F40A25B557019E7F3867055A117FA96358CCDF933D9C5A5712DF4D0B233F562DC0F3
Malicious:	false
Reputation:	unknown
URL:	https://coretrustbids.easibuy.com/registration?email=
Preview:	<!DOCTYPE html>.<html>.<head>.<meta charset='utf-8'>. Always force latest IE rendering engine (even in intranet) & Chrome Frame -->.<meta content='IE=edge' http-equiv='X-UA-Compatible'>.<meta content='width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no' name='viewport'>.<meta name="csrf-param" content="authenticity_token" />.<meta name="csrf-token" content="2eVIhj6ahF3h5ZApCgoldqEHSJC6Rbec8ay/qg7xHzYxtyeNa7v0tkDkUPJqSR7Ow6QulS3QABwAWTViLh3iPQ==" />..<title>Register for an Account - CoreTrust</title>.<link rel="shortcut icon" type="image/x-icon" href="/assets/favicon-50341a48a39bd77b6b1f047e94f918fc5f5bc370796ba349b98cf1f37a3e8651.ico" />.<link rel="stylesheet" media="screen" href="/assets/application-85fc9fcf88696ac454fd721e24f93fc0126a5e8ee7b9f233040331f0daa0bf04.css" />.<link rel="stylesheet" media="screen" href="/packs/css/595-1e45b9e2.css" />.<link rel="stylesheet" media="screen" href="/packs/css/241-60720111.css" />.<link rel="stylesheet" media="screen"

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1585)
Category:	downloaded
Size (bytes):	1642
Entropy (8bit):	5.264095888542694
Encrypted:	false
SSDEEP:
MD5:	520D65DFAEA7D80AA212ABBF5BBAF28B
SHA1:	19AB7E10C175D5D88CBE8667FF0086047958C8F0
SHA-256:	2EA8578D0FD17CCEA183A6EFCB49175D29CCFC5B25C7485471EAC6FB5BC6A975
SHA-512:	737412970AD349EDAFA39F9FACBB2D08EEE1ED1050C08976A06EBA51CC3F8F0FD46CAB259B15AC572292DB1DBA0C4B7E4DA9B1E6DB600C5DD275BBF23B326C01
Malicious:	false
Reputation:	unknown
URL:	https://coretrustbids.easibuy.com/packs/js/runtime-7f5667b8730ce8b5bfab.js
Preview:	!function(){"use strict";var n,e={},r={};function t(n){var o=r[n];if(void 0!==o)return o.exports;var u=r[n]={exports:{}};return e[n].call(u.exports,u,u.exports,t),u.exports}t.m=e,n=[],t.O=function(e,r,o,u){if(!r){var i=1/0;for(l=0;l<n.length;l++){r=n[l][0],o=n[l][1],u=n[l][2];for(var f=!0,c=0;c<r.length;c++)(!1&u\|\|i>=u)&&Object.keys(t.O).every((function(n){return t.O[n](r[c])}))?r.splice(c--,1):(f=!1,u<i&&(i=u));if(f){n.splice(l--,1);var a=o();void 0!==a&&(e=a)}}return e}u=u\|\|0;for(var l=n.length;l>0&&n[l-1][2]>u;l--)n[l]=n[l-1];n[l]=[r,o,u]},t.n=function(n){var e=n&&n.__esModule?function(){return n.default}:function(){return n};return t.d(e,{a:e}),e},t.d=function(n,e){for(var r in e)t.o(e,r)&&!t.o(n,r)&&Object.defineProperty(n,r,{enumerable:!0,get:e[r]})},t.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(n){if("object"==typeof window)return window}}(),t.o=function(n,e){return Object.prototype.hasOwnProperty.call(n,e)},

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (28999)
Category:	downloaded
Size (bytes):	29044
Entropy (8bit):	5.237436795561538
Encrypted:	false
SSDEEP:
MD5:	B158625D2CBE98C6A94F8E90D278693C
SHA1:	FC4D2D9047FD77490F0014433197E52DF04F5C7E
SHA-256:	F3C721C66D3F9CC9952105761F9395208F94D97871E8291051C977576ED3CEBD
SHA-512:	4CFE84871BCDC8240C5713B101F1D718797B7B7B1A3D1B8D8805CA88E59BBAB4D394BBF4856CDC25386BAF6C91D28F2FB20FF91A94A988422B75BB375FA60775
Malicious:	false
Reputation:	unknown
URL:	https://coretrustbids.easibuy.com/packs/css/595-1e45b9e2.css
Preview:	@charset "UTF-8";trix-editor{border:1px solid #bbb;border-radius:3px;margin:0;min-height:5em;outline:none;padding:.4em .6em}trix-toolbar *{box-sizing:border-box}trix-toolbar .trix-button-row{display:flex;flex-wrap:nowrap;justify-content:space-between;overflow-x:auto}trix-toolbar .trix-button-group{border-color:#ccc #bbb #888;border-radius:3px;border-style:solid;border-width:1px;display:flex;margin-bottom:10px}trix-toolbar .trix-button-group:not(:first-child){margin-left:1.5vw}@media (max-device-width:768px){trix-toolbar .trix-button-group:not(:first-child){margin-left:0}}trix-toolbar .trix-button-group-spacer{flex-grow:1}@media (max-device-width:768px){trix-toolbar .trix-button-group-spacer{display:none}}trix-toolbar .trix-button{background:transparent;border:none;border-bottom:1px solid #ddd;border-radius:0;color:rgba(0,0,0,.6);float:left;font-size:.75em;font-weight:600;margin:0;outline:none;padding:0 .5em;position:relative;white-space:nowrap}trix-toolbar .trix-button:not(:first-child

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (558)
Category:	downloaded
Size (bytes):	794151
Entropy (8bit):	4.728994036671972
Encrypted:	false
SSDEEP:
MD5:	7E1E330ACFAE4CCC1C8E30C1FEA1E5A8
SHA1:	4C32FFC8BF3F605CF47C137A7AA4B606943A34DD
SHA-256:	EB5133DB396E9E11880B152EB79B3B4402E5E1A85D8C6073D2D695F3DA137254
SHA-512:	0ECACD9BFEDCF213002213383B084DDFBE0C9099B34E4B6810B53B1E7725A7448E62D59B3ECD2650FA021A359E8A88A6C028CF9D12FCEDBBCCB301B56ECFF969
Malicious:	false
Reputation:	unknown
URL:	https://coretrustbids.easibuy.com/assets/application-38fe90a72a1707ee4ec1aff0c9735deaf6740e0745e6c5b36f3cc8c918033dcc.js
Preview:	/.Unobtrusive JavaScript.https://github.com/rails/rails/blob/main/actionview/app/assets/javascripts.Released under the MIT license. /;..(function() {. var context = this;.. (function() {. (function() {. this.Rails = {. linkClickSelector: 'a[data-confirm], a[data-method], a[data-remote]:not([disabled]), a[data-disable-with], a[data-disable]',. buttonClickSelector: {. selector: 'button[data-remote]:not([form]), button[data-confirm]:not([form])',. exclude: 'form button'. },. inputChangeSelector: 'select[data-remote], input[data-remote], textarea[data-remote]',. formSubmitSelector: 'form:not([data-turbo=true])',. formInputClickSelector: 'form:not([data-turbo=true]) input[type=submit], form:not([data-turbo=true]) input[type=image], form:not([data-turbo=true]) button[type=submit], form:not([data-turbo=true]) button:not([type]), input[type=submit][form], input[type=image][form], button[type=submit][form], button[form]:not

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65454)
Category:	downloaded
Size (bytes):	585438
Entropy (8bit):	5.284575676199509
Encrypted:	false
SSDEEP:
MD5:	0B0B5C34CF1199B07CF273174AC11C06
SHA1:	C2F0043114B0D2654CF23A3E5380794DA76F6D60
SHA-256:	32FC64868EA32B4B785FDE47A4E8D711ABAAC456665B76A9A17A134881CBB4A9
SHA-512:	924E964AF3160EB31D2CBA9B9B04ACF4416F6A959AF395B206D61EA779D05A6940AE5189A5B8CE2BE1AA05593C413067280A499C9EC32819734D3AE48C18C239
Malicious:	false
Reputation:	unknown
URL:	https://coretrustbids.easibuy.com/packs/js/595-2b0564ebb184a8f62743.js
Preview:	/! For license information please see 595-2b0564ebb184a8f62743.js.LICENSE.txt /.(self.webpackChunkapp=self.webpackChunkapp\|\|[]).push([[595],{36893:function(t,e,n){"use strict";n.d(e,{b:function(){return G}});var r,o,i=n(57695),a=n(45062),s=(r=function(t,e){return r=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in e)e.hasOwnProperty(n)&&(t[n]=e[n])},r(t,e)},function(t,e){function n(){this.constructor=t}r(t,e),t.prototype=null===e?Object.create(e):(n.prototype=e.prototype,new n)}),u=function(t,e,n,r){var o,i=arguments.length,a=i<3?e:null===r?r=Object.getOwnPropertyDescriptor(e,n):r;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)a=Reflect.decorate(t,e,n,r);else for(var s=t.length-1;s>=0;s--)(o=t[s])&&(a=(i<3?o(a):i>3?o(e,n,a):o(e,n))\|\|a);return i>3&&a&&Object.defineProperty(e,n,a),a},c=function(t){function e(){var e=null!==t&&t.apply(this,arguments)\|\|this;return e.pauseStoreUpdateListening=!1,e.started=!1,e

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 135 x 32, 8-bit/color RGBA, interlaced
Category:	dropped
Size (bytes):	4020
Entropy (8bit):	7.9252359214909704
Encrypted:	false
SSDEEP:
MD5:	C43D4D14F9EF8050782CA9715BEB279D
SHA1:	9B446E4CFE319AC49342372764E67472D18E3F0F
SHA-256:	682E96A543512D6B4567C1FACE6D2660649E40CF3C3A04166751723CE39CC18B
SHA-512:	C672D6BEF0482701603011652AF4A4BE9B78379A56E9D351A2B5E9C27FB650917C04EC192DF5B69BB39D9CEA65A6091652480E5806189A62D3271EB46F8F80E8
Malicious:	false
Reputation:	unknown
Preview:	.PNG........IHDR....... .....O.[.....gAMA......a....8eXIfMM........i....................................... ....;.....'IDATx..[}pT......d......S.#....>.@+H.....Z..O....t.ul......3..[K.h...U...Z.UD.......\|..d.....<r........&ofs.=..{.;..s.=.F.:..`.fY.+d....X+.#.u.........'".....E..)....V..PGZ..p....Y.3..?3..L..e..~......w..gR(Tz.t./...:./C\|..^.....[.N..9.N.>.-...i.rP....M.......p..j..W....?Ti.....z p.A.H.+../.8...zj..J.NH2....?....wm,..j<3g.....Y........Ce&.P..C. .!n.m....;..a...BN....i2..?..v..\|C~.o..MMQ...(w[{rP...&.]/.....c....>..".t.......g]7....'...........r....< ....sdYBU.d.t..+.Z.Kp.%...S!.U..]..=.}Z.4.m.,.TH...i.2.....&kx...V.^....J.B...-[....5.&...-.H\g......*.$....B.K..<~#.[...K..w....9....{..C....'.'.'H.g.$.J..P...1".\|..{.2....s....h...n.@......e=e.. ..q..e..=..."......<.U=%..{LS,Hw ...uu..K?P.R.>s.g..8.1V..9.%_...3..1..B..C5...T.....D...s..9.p..td.`...8..M{....R.B.A...R{R..#rs......d>k...,.r>jb.2...R..=B.....1v&9.7..L+....jh.L.

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	257551
Entropy (8bit):	5.076103298470518
Encrypted:	false
SSDEEP:
MD5:	888D4551B8DB7C41CDA28D95E494F998
SHA1:	26E6B63B81813D8AD942C90D369DF2673602B812
SHA-256:	893E90F6230962E42231635DF650F20544AD22AFFC3EE396DF768EAA6BC5A6A2
SHA-512:	38AB8BDA4A62F337DE5DCA925E719B2FAB4A73D2715A6A69258E263929F512C9E045BEDFC75379FBBC0E4C6AAED9B23938060BDCE83BFC17A0EC4B161B638128
Malicious:	false
Reputation:	unknown
URL:	https://code.jquery.com/jquery-2.2.4.js
Preview:	/!. jQuery JavaScript Library v2.2.4. * http://jquery.com/. . Includes Sizzle.js. * http://sizzlejs.com/. . Copyright jQuery Foundation and other contributors. * Released under the MIT license. * http://jquery.org/license. . Date: 2016-05-20T17:23Z. */..(function( global, factory ) {...if ( typeof module === "object" && typeof module.exports === "object" ) {...// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factory( w );....};..}

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65454)
Category:	downloaded
Size (bytes):	107896
Entropy (8bit):	5.25916751604631
Encrypted:	false
SSDEEP:
MD5:	4A9B1D6E29FC4C86BD17D5A0C16D9D47
SHA1:	2B956DECD220ED2E960BCF37D5B43AD7F9283304
SHA-256:	A4E2C970885CB16738791D5A0EB5DBA382A3CFAF50FF2216D0E2630435893E54
SHA-512:	1E4B4BE2A6758CAD741B1B1A519AC048836EC314E866D990CA7337F4593CDB16F718AFA3FBB95F73BFF98491C045B76E243D2099313111743FDD4CDCBD7A7EC8
Malicious:	false
Reputation:	unknown
URL:	https://coretrustbids.easibuy.com/packs/js/106-95c12eee3ae35e7fd0fa.js
Preview:	/! For license information please see 106-95c12eee3ae35e7fd0fa.js.LICENSE.txt /.(self.webpackChunkapp=self.webpackChunkapp\|\|[]).push([[106],{13590:function(e,t,n){e.exports=n(7793)},85428:function(e,t,n){"use strict";var r=n(39084),i=n(74031),o=n(96847),a=n(2910),s=n(24165),c=n(44268),u="undefined"!=typeof window&&window.btoa&&window.btoa.bind(window)\|\|n(59499);e.exports=function(e){return new Promise((function(t,l){var f=e.data,p=e.headers;r.isFormData(f)&&delete p["Content-Type"];var d=new XMLHttpRequest,v="onreadystatechange",h=!1;if("undefined"==typeof window\|\|!window.XDomainRequest\|\|"withCredentials"in d\|\|s(e.url)\|\|(d=new window.XDomainRequest,v="onload",h=!0,d.onprogress=function(){},d.ontimeout=function(){}),e.auth){var m=e.auth.username\|\|"",y=e.auth.password\|\|"";p.Authorization="Basic "+u(m+":"+y)}if(d.open(e.method.toUpperCase(),o(e.url,e.params,e.paramsSerializer),!0),d.timeout=e.timeout,d[v]=function(){if(d&&(4===d.readyState\|\|h)&&(0!==d.status\|\|d.responseURL&&0===d.respon

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (603)
Category:	downloaded
Size (bytes):	70857
Entropy (8bit):	5.4224329637937805
Encrypted:	false
SSDEEP:
MD5:	F1E6C13D39826544090E00E128207EDB
SHA1:	DEE4D8852A0358695E2A9AAE4970FCFBD337D438
SHA-256:	0D9001FDE03D23B01294CDCA5DCD9A4E121CC96A84C0E2CBA4B1B65659CA3C56
SHA-512:	19EE71144C245F830FAD8F9D53D7F66D9540E10C61B7539C4A50ADDA84C7E502B474B1B1099555B97A6C4E3DA65FEBDA97C3E3E2530AD8941456032D118E9CAA
Malicious:	false
Reputation:	unknown
URL:	https://cdnjs.cloudflare.com/ajax/libs/datatables/1.9.4/jquery.dataTables.min.js
Preview:	/. File: jquery.dataTables.min.js. * Version: 1.9.4. * Author: Allan Jardine (www.sprymedia.co.uk). * Info: www.datatables.net. * . * Copyright 2008-2012 Allan Jardine, all rights reserved.. . This source file is free software, under either the GPL v2 license or a. * BSD style license, available at:. * http://datatables.net/license_gpl2. * http://datatables.net/license_bsd. * . * This source file is distributed in the hope that it will be useful, but . * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY . * or FITNESS FOR A PARTICULAR PURPOSE. See the license files for details.. */.(function(X,l,n){var L=function(h){var j=function(e){function o(a,b){var c=j.defaults.columns,d=a.aoColumns.length,c=h.extend({},j.models.oColumn,c,{sSortingClass:a.oClasses.sSortable,sSortingClassJUI:a.oClasses.sSortJUI,nTh:b?b:l.createElement("th"),sTitle:c.sTitle?c.sTitle:b?b.innerHTML:"",aDataSort:c.aDataSort?c.aDataSort:[d],mData:c.mData?c.oDefau

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16194)
Category:	downloaded
Size (bytes):	16449
Entropy (8bit):	5.151903892689731
Encrypted:	false
SSDEEP:
MD5:	543FEB1ECAF06EA516F8CEC5F9F3F279
SHA1:	2A515632E0FD8FFDEB8D94CB25E44CF287FEB32F
SHA-256:	A1B6400A21DDEE090E93D8882FFA629963132785BFA41B0ABBEA199D278121E9
SHA-512:	EDF361ECE5066BB6DDA66490F3588DC60072C2CA4D4F15710717DB4F58129D0D76E1519F92C8F7011FD01A175868EF192C704B4A869AF95B150E0C3BF797816B
Malicious:	false
Reputation:	unknown
URL:	https://cdnjs.cloudflare.com/ajax/libs/underscore.js/1.8.3/underscore-min.js
Preview:	// Underscore.js 1.8.3.// http://underscorejs.org.// (c) 2009-2015 Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors.// Underscore may be freely distributed under the MIT license..(function(){function n(n){function t(t,r,e,u,i,o){for(;i>=0&&o>i;i+=n){var a=u?u[i]:i;e=r(e,t[a],a,t)}return e}return function(r,e,u,i){e=b(e,i,4);var o=!k(r)&&m.keys(r),a=(o\|\|r).length,c=n>0?0:a-1;return arguments.length<3&&(u=r[o?o[c]:c],c+=n),t(r,e,u,o,c,a)}}function t(n){return function(t,r,e){r=x(r,e);for(var u=O(t),i=n>0?0:u-1;i>=0&&u>i;i+=n)if(r(t[i],i,t))return i;return-1}}function r(n,t,r){return function(e,u,i){var o=0,a=O(e);if("number"==typeof i)n>0?o=i>=0?i:Math.max(i+a,o):a=i>=0?Math.min(i+1,a):i+a+1;else if(r&&i&&a)return i=r(e,u),e[i]===u?i:-1;if(u!==u)return i=t(l.call(e,o,a),m.isNaN),i>=0?i+o:-1;for(i=n>0?o:a-1;i>=0&&a>i;i+=n)if(e[i]===u)return i;return-1}}function e(n,t){var r=I.length,e=n.constructor,u=m.isFunction(e)&&e.prototype\|\|a,i="constructor";for(m

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 760 x 144, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	50550
Entropy (8bit):	7.9911408834314885
Encrypted:	true
SSDEEP:
MD5:	FD01DE814DE0D637252639DC84F9E89C
SHA1:	6D7BFDB9698E3E75C3C97145F3E38C3F0A5FA468
SHA-256:	E1932197A09018205DBC6178EDF84837BFF76AF3C935FE7FDC59181609C72F4B
SHA-512:	8D1A91E65342D892CBFAA973A99F117D1DC72C4D6B32152683C1449ED05B350E57C1007C0A61687FE2925E2BD8FF18D4545CB6D92B78AE6D5522A3E85AA1E134
Malicious:	false
Reputation:	unknown
Preview:	.PNG........IHDR..............x......tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:9D4873F0D93711E8BE21A3A4DC9EBBA8" xmpMM:InstanceID="xmp.iid:9D4873EFD93711E8BE21A3A4DC9EBBA8" xmp:CreatorTool="Adobe Photoshop CC 2018 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="D87232646FF4E980D784AD17A191B59C" stRef:documentID="D87232646FF4E980D784AD17A191B59C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>., e....IDATx..}..]U.....L/.TJzB/I......b(..O@P......~....T..Q.t...A.I...B..J.).^..{.{......$........;........oqc.;..n=..Ov.9..

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65454)
Category:	downloaded
Size (bytes):	1074978
Entropy (8bit):	5.263518860164025
Encrypted:	false
SSDEEP:
MD5:	1E726BE88CCC11DAAEC56B2163D96A74
SHA1:	00A505E68ED5141FF8A5F4733AE26B752164771D
SHA-256:	6D1A261FF6B595FE5CA9D9C59793F4A6C25159C1CAA1A8BAE3DF0E5180C18A98
SHA-512:	91473B87D406CDA98EFBF53DB1ED3B6A479436E45E4639C218761CAC9BE65BC50B85EEAF31ACCBE6D6CE828F5E7E55B13D43E1504D2561AAD55D589B896D42BB
Malicious:	false
Reputation:	unknown
URL:	https://coretrustbids.easibuy.com/packs/js/136-9510c927c0f087469fc9.js
Preview:	/! For license information please see 136-9510c927c0f087469fc9.js.LICENSE.txt /.(self.webpackChunkapp=self.webpackChunkapp\|\|[]).push([[136],{57695:function(t,e,o){"use strict";o.d(e,{jkc:function(){return Xp},sJC:function(){return Rh},O_3:function(){return yh},j_S:function(){return xr},Cvn:function(){return gl},fsG:function(){return Rt},Nk3:function(){return ny},Vu6:function(){return Et},AS9:function(){return we},StC:function(){return Pl},Dkq:function(){return hd},j_r:function(){return bp},NdC:function(){return Co},sgG:function(){return Gt},Exx:function(){return ee},wA2:function(){return Kr},plv:function(){return no},gTE:function(){return Nt},fQL:function(){return vp},jUB:function(){return Ks},rvo:function(){return Gs},POd:function(){return At},zW2:function(){return Pe},nPL:function(){return zs},rjZ:function(){return ey},wfB:function(){return al},fkf:function(){return be},poj:function(){return xs},VDZ:function(){return ni},D_6:function(){return ai},GXE:function(){return _t},O3h:funct

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60567)
Category:	downloaded
Size (bytes):	60620
Entropy (8bit):	5.214175486646739
Encrypted:	false
SSDEEP:
MD5:	0C566DE4F5D22822918874CEAED9A591
SHA1:	5AFCC9E7F4B2C4A6286B3C8F2DEE51A166A92CC0
SHA-256:	A0D8CD7DB9E6086823DF1AFF364A58D3A47CF4B5AE38E48C8B278EDA53313776
SHA-512:	7AB2398D2E4405E51F3CCF53835EA7933B17ABA4EF8C8B7D512C7F6797615C2DCCD30041502BCE9CB1409DF891F59D9426AF3422C6CD8D1C383A5C3C308461DD
Malicious:	false
Reputation:	unknown
URL:	https://coretrustbids.easibuy.com/packs/js/160-c6ce2e6f0488877e7a2c.js
Preview:	"use strict";(self.webpackChunkapp=self.webpackChunkapp\|\|[]).push([[160],{39160:function(e,t,o){o.d(t,{kv:function(){return Z},N:function(){return H},qZ:function(){return ee},wY:function(){return ne}});var n,r=o(57695),i=o(45062),a=(n=function(e,t){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var o in t)t.hasOwnProperty(o)&&(e[o]=t[o])},n(e,t)},function(e,t){function o(){this.constructor=e}n(e,t),e.prototype=null===t?Object.create(t):(o.prototype=t.prototype,new o)}),s=function(e,t,o,n){var r,i=arguments.length,a=i<3?t:null===n?n=Object.getOwnPropertyDescriptor(t,o):n;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)a=Reflect.decorate(e,t,o,n);else for(var s=e.length-1;s>=0;s--)(r=e[s])&&(a=(i<3?r(a):i>3?r(t,o,a):r(t,o))\|\|a);return i>3&&a&&Object.defineProperty(t,o,a),a},u=function(e){function t(){return null!==e&&e.apply(this,arguments)\|\|this}return a(t,e),t.prototype.execute=function(e){var t=r._.missi

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65518), with no line terminators
Category:	downloaded
Size (bytes):	85946
Entropy (8bit):	5.21627080913403
Encrypted:	false
SSDEEP:
MD5:	E86DAFAD4D9C3FCAFA051F0007C8E125
SHA1:	193612A43654809382DF216395BE1DC6942FD40A
SHA-256:	ECC1849B3CF6FF91E0BB3EBE4DCC49D551254C4E5454CC10BFD7D5AFA5B1AD9B
SHA-512:	A085809892390F716CFEAB4DA660E04289B97E556000A8120C2D2B44D85FD2E87692FCAC4E8795DE6E48B066790699A1381FEE05CC470E330DA193AE6A38ED3D
Malicious:	false
Reputation:	unknown
URL:	https://coretrustbids.easibuy.com/packs/js/663-2144540fc7b2c44fcaec.js
Preview:	"use strict";(self.webpackChunkapp=self.webpackChunkapp\|\|[]).push([[663],{72663:function(t,e,i){i.r(e),i.d(e,{Affix:function(){return Pt},Alert:function(){return Ot},BreadcrumbItem:function(){return qt},Breadcrumbs:function(){return jt},Btn:function(){return ft},BtnGroup:function(){return dt},BtnToolbar:function(){return Kt},Carousel:function(){return u},Collapse:function(){return Q},DatePicker:function(){return $t},Dropdown:function(){return tt},MessageBox:function(){return xe},Modal:function(){return yt},MultiSelect:function(){return Ut},Navbar:function(){return Wt},NavbarForm:function(){return Jt},NavbarNav:function(){return Gt},NavbarText:function(){return Xt},Notification:function(){return ze},Pagination:function(){return Nt},Popover:function(){return Rt},ProgressBar:function(){return Yt},ProgressBarStack:function(){return Vt},Slide:function(){return p},Tab:function(){return kt},Tabs:function(){return xt},TimePicker:function(){return Lt},Tooltip:function(){return Ft},Typeahead:fun

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2867)
Category:	downloaded
Size (bytes):	9832
Entropy (8bit):	5.3589909157166975
Encrypted:	false
SSDEEP:
MD5:	D549ED73A2B126EF96A5734593C40254
SHA1:	BBACE8ACE2EDDA77862435D6C125DC4DC5F6DEDD
SHA-256:	5793D89E8CC9B98F3417F457C93FF8624E4DA50AD9E8B07F4A6FE106C7A66443
SHA-512:	E84CFCCD3D6004C70159EF4DEC152A3A1CE6DF480DF0E5DC5BA7FEEE27D5EA7F42F4C14EB435592A429BC8C701C02280747E5A215A64656A427DEE087AC34E19
Malicious:	false
Reputation:	unknown
URL:	https://coretrustbids.easibuy.com/advertisements/2128?token=b42ae94736116862a16cd227
Preview:	<!DOCTYPE html>.<html>.<head>.<meta charset='utf-8'>. Always force latest IE rendering engine (even in intranet) & Chrome Frame -->.<meta content='IE=edge' http-equiv='X-UA-Compatible'>.<meta content='width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no' name='viewport'>.<meta name="csrf-param" content="authenticity_token" />.<meta name="csrf-token" content="lQr2uewMvXY4FoJEWhfSR0Wdd1auHddIrP2kYDqDuuZ9WJmyuS3NnZkXQp86VOn/Jz4RUzmIYMhdCC6oGm9H7Q==" />..<title>Advertisements - RFP Document Package - Commodity Chemicals - CoreTrust</title>.<link rel="shortcut icon" type="image/x-icon" href="/assets/favicon-50341a48a39bd77b6b1f047e94f918fc5f5bc370796ba349b98cf1f37a3e8651.ico" />.<link rel="stylesheet" media="screen" href="/assets/application-85fc9fcf88696ac454fd721e24f93fc0126a5e8ee7b9f233040331f0daa0bf04.css" />.<link rel="stylesheet" media="screen" href="/packs/css/595-1e45b9e2.css" />.<link rel="stylesheet" media="screen" href="/packs/css/241-60720111.css" />.<

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	177838
Entropy (8bit):	5.094288422483829
Encrypted:	false
SSDEEP:
MD5:	93571113D5208E2ED9D34EE33DA70033
SHA1:	C899A3DCD89D60627694ABDE840E1E56C1807B1D
SHA-256:	2C5DDA032B18A1EF49046B8228EE45260A95C5A2B2E7CCF67A3D3B356DA7E1C7
SHA-512:	3D8AE6FE7E26C0294A4AF995AC8FE91C38D1B80171A3CD40AD3DD277A5339F0E4147333A69AFF385CE3733E86CFB62069E7BF8B7187FF4CA862EC934CE5DF3C9
Malicious:	false
Reputation:	unknown
URL:	https://coretrustbids.easibuy.com/packs/css/241-60720111.css
Preview:	ag-grid,ag-grid-angular,ag-grid-aurelia,ag-grid-ng2,ag-grid-polymer{display:block}.ag-hidden{display:none!important}.ag-invisible{visibility:hidden!important}.ag-drag-handle{cursor:grab}.ag-column-drop-wrapper{display:flex}.ag-column-drop-horizontal-half-width{display:inline-block;width:50%!important}.ag-unselectable{-moz-user-select:none;-webkit-user-select:none;-ms-user-select:none;user-select:none}.ag-selectable{-moz-user-select:text;-webkit-user-select:text;-ms-user-select:text;user-select:text}.ag-tab{position:relative}.ag-tab-guard{display:block;height:0;width:0}.ag-select-agg-func-popup,.ag-tab-guard{position:absolute}.ag-input-wrapper,.ag-picker-field-wrapper{align-items:center;display:flex;flex:1 1 auto;line-height:normal;position:relative}.ag-shake-left-to-right{animation-direction:alternate;animation-duration:.2s;animation-iteration-count:infinite;animation-name:ag-shake-left-to-right}@keyframes ag-shake-left-to-right{0%{padding-left:6px;padding-right:2px}to{padding-left:2px

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 137104, version 331.-31196
Category:	downloaded
Size (bytes):	137104
Entropy (8bit):	7.998265825794848
Encrypted:	true
SSDEEP:
MD5:	DBF1FC91F1BEEC2915123257EA4D58EF
SHA1:	D2A6D5D31334F6D0831F1C17D26E23FE0AA6A8DB
SHA-256:	8D4D29042C23B5FCBED3AF690421776DE0F8AD3D308D66E24A9D80BCC8CCB522
SHA-512:	72E9CCB5CE2D88AAC739B513B95DFB7667CF80B617510AAFEB2C72345C7CDC3459B7002C4A46AFD967AFC1E3CAB091E078EA9CB6437550B4C7990009799128A2
Malicious:	false
Reputation:	unknown
URL:	https://coretrustbids.easibuy.com/packs/shared/node_modules/@fortawesome/fontawesome-pro/webfonts/fa-solid-900-54dfc8f551be346014e4.woff2
Preview:	wOF2...............P...4.K.$....................?FFTM....`........h..9.6.$..\|..... ......=[...D...66U..n2..s.O7..-.n......^...O...R..'@.......d"...Iv".kZ.......(..A...b.Te..!d.I......f....{.})2.W.lo....a^......S..K..^A.t..z.7.[s.....&9H.}k...rU4.rt..u..'......o............FsD!....)FERh....Q2.4@...3df..i...q5pU.(7W7m........x\...o.(...!....O5n........J...^s.5.~...3=""B}...z...#&.....oX.~}.]H..yF.I.j.H.DJ..o.-...i.. }......\k.u.h...o..b-y..\7..S: ...#4...O./...=H.s@...S..YV.Z_...'......."..\4...N....... \.....b.?.=...6^&..E.a.....".W..\..P t..&<...>......u...B.q.....^VB....T..2.....S...H.p.(y..t..5...>4....U...q...C....A..b......E.....y."...P.......{wMr...0....CR~..l..j.O.M.-.%Ip................6D..L(5l..u......'4..Z..L...ZQ&V.F....-g+..+..V.Cn.....l.&B.f.X.L.lh......5...T....Z.5?...t..e.]...2H...Vd.. ..A..C...D...%.B]..C..8@..j.h.U......:j...B..m]......6..;.;Wv..'$I7.B...p....@.6.T!.?.F{..R...C[...../U....j..[U.......3N.'f........4_./6..x...

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6010)
Category:	downloaded
Size (bytes):	6063
Entropy (8bit):	5.245696485572685
Encrypted:	false
SSDEEP:
MD5:	1BFD880F597ED7586861C35F99EA1976
SHA1:	3DF2F10658C3F8867B5FA297223CF12BB1FC1571
SHA-256:	5980EF07D3C32E34139FF91D39CD038A62BA7510C5BF55663D7847762A940299
SHA-512:	E0749173F9E516C21B3AA449760894AF382A46DEA6F9E15CBC9D5393F200F11F1367083173CADD55198ABE3E1EAFD14A8724B19A71B07D144E0AC3116834FB95
Malicious:	false
Reputation:	unknown
URL:	https://coretrustbids.easibuy.com/packs/js/216-ac02e1c86f8fae32a42e.js
Preview:	(self.webpackChunkapp=self.webpackChunkapp\|\|[]).push([[216],{44216:function(r,e,t){var n;!function(i){"use strict";var s,o=1e6,c=1e6,f="[big.js] ",u=f+"Invalid ",h=u+"decimal places",l=u+"rounding mode",a=f+"Division by zero",p={},w=void 0,g=/^-?(\d+(\.\d*)?\|\.\d+)(e[+-]?\d+)?$/i;function v(r,e,t,n){var i=r.c,s=r.e+e+1;if(s<i.length){if(1===t)n=i[s]>=5;else if(2===t)n=i[s]>5\|\|5==i[s]&&(n\|\|s<0\|\|i[s+1]!==w\|\|1&i[s-1]);else if(3===t)n=n\|\|!!i[0];else if(n=!1,0!==t)throw Error(l);if(s<1)i.length=1,n?(r.e=-e,i[0]=1):i[0]=r.e=0;else{if(i.length=s--,n)for(;++i[s]>9;)i[s]=0,s--\|\|(++r.e,i.unshift(1));for(s=i.length;!i[--s];)i.pop()}}else if(t<0\|\|t>3\|\|t!==~~t)throw Error(l);return r}function d(r,e,t,n){var i,s,c=r.constructor,f=!r.c[0];if(t!==w){if(t!==~~t\|\|t<(3==e)\|\|t>o)throw Error(3==e?u+"precision":h);for(t=n-(r=new c(r)).e,r.c.length>++n&&v(r,t,c.RM),2==e&&(n=r.e+t+1);r.c.length<n;)r.c.push(0)}if(i=r.e,t=(s=r.c.join("")).length,2!=e&&(1==e\|\|3==e&&n<=i\|\|i<=c.NE\|\|i>=c.PE))s=s.charAt(0)+(t>1?"."+

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	200
Entropy (8bit):	5.150458435405089
Encrypted:	false
SSDEEP:
MD5:	2BCCD1F187C407F18DE1725D8CB863FB
SHA1:	2DF00C8D3D849C575B4F84898081CC05AFEEC665
SHA-256:	F71963836984C90242A41C8318D677C504F564D8F76816CCEEE4E225959B8A0D
SHA-512:	0ADE0415B3AF69798362BF02EFB6EA8DD2D7F57C198BD42E72E30911788FDDCEC3290D3C338894C03697E623E15A1764313FBA66CE5FA3D7C993F0CC6D216296
Malicious:	false
Reputation:	unknown
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISawlvG6cffuvFERIFDTMC9eoSBQ3lQxliEgUNkCITrRIFDcsC9mISBQ2izUkREgUNTKaTbxIFDYPkI5MSBQ2OgCiXEgUN39RXVRIFDcNhrv8SBQ1MMYa9EgUNu4CcoxIFDXh4nAQSBQ3f1uQG?alt=proto
Preview:	CpIBCgsNMwL16hoECAMYAQoLDeVDGWIaBAgFGAEKBw2QIhOtGgAKBw3LAvZiGgAKBw2izUkRGgAKCw1MppNvGgQIDRgBCgcNg+QjkxoACgcNjoAolxoACgsN39RXVRoECDwYAQoLDcNhrv8aBAgkGAEKBw1MMYa9GgAKBw27gJyjGgAKBw14eJwEGgAKBw3f1uQGGgA=

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9927)
Category:	downloaded
Size (bytes):	9979
Entropy (8bit):	5.243402321619897
Encrypted:	false
SSDEEP:
MD5:	99B0F1829BB5772D9D8BF2F5278A2C65
SHA1:	E1BEE3D108BE8CBA58AA456A7DE33C2B6F8D06BD
SHA-256:	901B68647B7BCF108DE91ED2C26D2EBF683F14F53E78891B79AA4CA852B72753
SHA-512:	CD71E40172B80BE4A52CBA6B60550B8697BEB91A9FC8A62A0F82F82E0096480A8427EA683502E57422248F55E66DF2D093954B489AD0E9DC1378510A8A12D523
Malicious:	false
Reputation:	unknown
URL:	https://coretrustbids.easibuy.com/packs/js/19-b9f0d0d94f8e44a3cf93.js
Preview:	(self.webpackChunkapp=self.webpackChunkapp\|\|[]).push([[19],{71019:function(t){var e;e=function(){return function(t){var e={};function n(o){if(e[o])return e[o].exports;var i=e[o]={i:o,l:!1,exports:{}};return t[o].call(i.exports,i,i.exports,n),i.l=!0,i.exports}return n.m=t,n.c=e,n.i=function(t){return t},n.d=function(t,e,o){n.o(t,e)\|\|Object.defineProperty(t,e,{configurable:!1,enumerable:!0,get:o})},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="/dist/",n(n.s=2)}([function(t,e,n){n(8);var o=n(6)(n(1),n(7),"data-v-25adc6c0",null);t.exports=o.exports},function(t,e,n){"use strict";Object.defineProperty(e,"__esModule",{value:!0});var o=n(3),i="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},r="#75c791",s="#f

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	4.281087379656709
Encrypted:	false
SSDEEP:
MD5:	18C51CD55EC5454FEEFDB2FD14F48794
SHA1:	4B402DEED4A7A175647D951FA8356BA22E087AFA
SHA-256:	205D11DCC978E5351856BBC357DADB73B3CA51EC846FDD182C0ABB5EB2253005
SHA-512:	3C6E1F3AD7A1AD522809DD83EE450BA27BB3ADB7F6D5A4C454304025C63EE2965521F5AB7F1E077D4D3938F4CCDEBECAEFD5F1A1164957CE6FAE735B2D6D000E
Malicious:	false
Reputation:	unknown
Preview:	............ .h.......(....... ..... ......................................................................................................................................2.........................................................................................................................#...........................................................$......5...................................................&..........5...............................................&..............5...........................................(..................5..........................................~...................5...............-...r..."..........<...q.......................5...........8...y...........#...8...d...........................5.......F...k..................a...............................5.......^.......................................................5...............................................................5..............................................

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (23718)
Category:	downloaded
Size (bytes):	23793
Entropy (8bit):	5.206238157046813
Encrypted:	false
SSDEEP:
MD5:	FAF3A6FB70818459BE166612EDA8FD37
SHA1:	E878C9EC5DC0846FF11180B0E83E400F02AEF44E
SHA-256:	CA7EE5B67355B3C46754C30B321938DF35655F222D83D0339663369B33253578
SHA-512:	F700C8FD5754871A2CEFEC1BF16187D9AEAE384BC9F92EA3375629FEF62BE841AF0AECE7C424FA81D57AFCABD9089BB38FAEAE9CD0BF70774C5C762AA3092CB5
Malicious:	false
Reputation:	unknown
URL:	https://coretrustbids.easibuy.com/packs/js/18-214700cd4e54fe30a1cf.js
Preview:	"use strict";(self.webpackChunkapp=self.webpackChunkapp\|\|[]).push([[18],{31438:function(e,t,r){var n=r(13590),a=r.n(n);a().defaults.headers.common.Accept="application/json";var i=document.getElementsByName("csrf-token")[0];i&&(a().defaults.headers.common["X-CSRF-Token"]=i.getAttribute("content"));var l=function(e){return!a().isCancel(e)&&e.response&&401===e.response.status&&(window.location="/login"),Promise.reject(e)};a().interceptors.request.use((function(e){return e}),l),a().interceptors.response.use((function(e){return e}),l),t.Z=a()},50352:function(e,t,r){r.d(t,{dF:function(){return P},ZP:function(){return ye},xG:function(){return de},T3:function(){return me},ah:function(){return ie},fp:function(){return F},i6:function(){return N},kX:function(){return I}});var n=r(44216),a=r.n(n),i=r(93273),l=(0,i.Z)({},(function(){var e=this,t=e.$createElement,r=e._self._c\|\|t;return r("div",[r("div",{staticClass:"pull-right"},[r("popover",{attrs:{trigger:"hover","show-delay":600}},[r("template",{

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:
MD5:	F7D59D3BE131AD16CC24D036112D9991
SHA1:	635B8DB4843997BA0331C4C0EDDD2601F4F69698
SHA-256:	57CCDE9F4BE6E3F510E37BEFB67BA272AB6D263980802EA18C18F3B78B3DAB32
SHA-512:	1446489C33DA980A237731A984D9FD017475CC0BA4C022DE45571A1AD4F295860717712DB60E6EA3E1F79ABB0C8EB7F1B15C5FB05E436D170E94B8740DFBF595
Malicious:	false
Reputation:	unknown
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkd075RC0aakxIFDXhvEhk=?alt=proto
Preview:	CgkKBw14bxIZGgA=

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (61099)
Category:	downloaded
Size (bytes):	176963
Entropy (8bit):	4.960395639085655
Encrypted:	false
SSDEEP:
MD5:	E72FA8F7AD1C90A1FF3D7AA689BA18F2
SHA1:	FED2FCB4853576F180754ACE70F8A5FE74F9FADE
SHA-256:	3A903B56E3A9BBCE7B4B89A6FFFD61FE0765F1DEDDF4A6C8F6AAB11C2609CC3E
SHA-512:	31195E995E5E15B345B3247C7CF5F67F1D5F12825E06A55A67BD1B5966103BBFD261775F44FDFDFC45654A29EF44AA229EDC159C6BAFC09CDB816EE55005E51C
Malicious:	false
Reputation:	unknown
URL:	https://coretrustbids.easibuy.com/packs/css/application-bdfea8f5.css
Preview:	span.empty[data-v-5eefa36e]{color:#999}h1[data-v-5eefa36e]{font-size:3em}.fa-lock[data-v-5eefa36e]{color:#999}i.locked[data-v-44ab90aa]{cursor:not-allowed}i.disabled[data-v-44ab90aa]{cursor:progress!important}.fa-square[data-v-44ab90aa]{background:#fff;color:#999}.fa-check-square[data-v-44ab90aa]{background:#fff;color:#555}.icon-flag[data-v-44ab90aa],.icon-flagged[data-v-44ab90aa]{font-size:1.2em}.modal-loading{position:absolute;text-align:center;top:0;width:100%}.modal-loading span{background:#fff;background:#f2d887;box-shadow:0 0 4px #999;color:#664a1b;display:inline-block;font-size:1.1em;font-weight:700;padding:6px 10px}.modal-body header h2 small{color:#f4e1c1;font-size:.75em;font-weight:400}.inbox .modal-body{background:#f5f5f5;padding:10px}.clickable-rows tr:hover td{cursor:pointer}.clickable-rows tr:hover td a{text-decoration:underline}./!. Font Awesome Pro 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license (Commercial License). */.f

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (53237)
Category:	downloaded
Size (bytes):	53300
Entropy (8bit):	5.25507580335313
Encrypted:	false
SSDEEP:
MD5:	85AA1C52768157FFEF935CC93D970982
SHA1:	9116093D9FB7F895002D373B811C1FFA3A35CBFD
SHA-256:	36B01C4BEBCFD7C2014AD74CD6D8C147ECA4DA55D78ECD2D1CF05ADB89930E6A
SHA-512:	8101F3C52C589CA27FAE93EBCF792B90FCDC3253067C8D43C0F7F7A5B093A7C8B80A815F7B10C0E3B606CA82276BDDE17046F9993C25F2FD4152BC8217F6EE76
Malicious:	false
Reputation:	unknown
URL:	https://coretrustbids.easibuy.com/packs/js/application-0796b2bd7cd31ac3d96e.js
Preview:	(self.webpackChunkapp=self.webpackChunkapp\|\|[]).push([[34],{32079:function(t,e,n){var r={"./add_to_event_controller.js":36965,"./advertise_form_controller.js":5360,"./award_form_controller.js":34542,"./base_stats_controller.js":78998,"./bidders_controller.js":15911,"./categories_controller.js":82834,"./clients_controller.js":64743,"./direct_upload_controller.js":57101,"./document_form_controller.js":40682,"./due_flatpickr_controller.js":58345,"./duplicate_document_controller.js":52827,"./event_form_controller.js":11230,"./events_controller.js":6782,"./flatpickr_controller.js":78306,"./form_list_controller.js":83081,"./lot_form_controller.js":74122,"./open_form_controller.js":5403,"./publish_flatpickr_controller.js":11360,"./registration_form_controller.js":81979,"./reminder_flatpickr_controller.js":5266,"./response_inbox_controller.js":54253,"./search_events_controller.js":25300,"./task_list_controller.js":86096,"./toggler_controller.js":29746,"./user_search_controller.js":64357,"./yea

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (596)
Category:	downloaded
Size (bytes):	153909
Entropy (8bit):	5.4020562698485115
Encrypted:	false
SSDEEP:
MD5:	BDD06F45E34C33DFAAAC249F3EB50040
SHA1:	9305510952CFEB4ED26CC43965D070AFADC1E021
SHA-256:	AF5E4F327B79424352A42BF43DF71E6A2F52D6F8948B82D6A42B4C2E97F7BFEA
SHA-512:	95481082BCF482DAC7807A7D70B12E08800336442CD8D2D0E7EAFCD62C91DBD404A3DDCCAE086A95D199CBCAEC12FEE440E9D15FD109D85959BBC6DCD13E2F63
Malicious:	false
Reputation:	unknown
URL:	https://cdnjs.cloudflare.com/ajax/libs/highcharts/4.0.4/highcharts.js
Preview:	/. Highcharts JS v4.0.4 (2014-09-02).. (c) 2009-2014 Torstein Honsi.. License: www.highcharts.com/license./.(function(){function r(a,b){var c;a\|\|(a={});for(c in b)a[c]=b[c];return a}function w(){var a,b=arguments,c,d={},e=function(a,b){var c,d;typeof a!=="object"&&(a={});for(d in b)b.hasOwnProperty(d)&&(c=b[d],a[d]=c&&typeof c==="object"&&Object.prototype.toString.call(c)!=="[object Array]"&&d!=="renderTo"&&typeof c.nodeType!=="number"?e(a[d]\|\|{},c):b[d]);return a};b[0]===!0&&(d=b[1],b=Array.prototype.slice.call(b,2));c=b.length;for(a=0;a<c;a++)d=e(d,b[a]);return d}function y(a,b){return parseInt(a,b\|\|.10)}function Ga(a){return typeof a==="string"}function da(a){return a&&typeof a==="object"}function Ha(a){return Object.prototype.toString.call(a)==="[object Array]"}function ja(a){return typeof a==="number"}function za(a){return V.log(a)/V.LN10}function ka(a){return V.pow(10,a)}function la(a,b){for(var c=a.length;c--;)if(a[c]===b){a.splice(c,1);break}}function s(a){return a!==u&&a!==n

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65301)
Category:	downloaded
Size (bytes):	175971
Entropy (8bit):	5.056803451232712
Encrypted:	false
SSDEEP:
MD5:	4B16A301EA7E5CE6C88A873B595B560A
SHA1:	22A83E507FE6B029C6B4314B592BA10D268C009F
SHA-256:	3FEC827EF7D849D661F1D7EB7DD8F65C6C310B4F7CF14A4FDE9ADD8EFA30914E
SHA-512:	666960A18F95F6FEBEC308A189F3B5D58FFE68EA8ED8BA6D291102A63080C88BCBF0D97175D183734A9CAE766DF15C7FF82A1F9EF7BE4FE720874F6845F672D7
Malicious:	false
Reputation:	unknown
URL:	https://coretrustbids.easibuy.com/assets/application-85fc9fcf88696ac454fd721e24f93fc0126a5e8ee7b9f233040331f0daa0bf04.css
Preview:	/!. Bootstrap-select v1.13.2 (https://developer.snapappointments.com/bootstrap-select). . Copyright 2012-2018 SnapAppointments, LLC. * Licensed under MIT (https://github.com/snapappointments/bootstrap-select/blob/master/LICENSE). */select.bs-select-hidden,.bootstrap-select>select.bs-select-hidden,select.selectpicker{display:none !important}.bootstrap-select{width:220px \0}.bootstrap-select>.dropdown-toggle{position:relative;width:100%;z-index:1;text-align:right;white-space:nowrap}.bootstrap-select>.dropdown-toggle.bs-placeholder,.bootstrap-select>.dropdown-toggle.bs-placeholder:hover,.bootstrap-select>.dropdown-toggle.bs-placeholder:focus,.bootstrap-select>.dropdown-toggle.bs-placeholder:active{color:#999}.bootstrap-select>.dropdown-toggle.bs-placeholder.btn-primary,.bootstrap-select>.dropdown-toggle.bs-placeholder.btn-secondary,.bootstrap-select>.dropdown-toggle.bs-placeholder.btn-success,.bootstrap-select>.dropdown-toggle.bs-placeholder.btn-danger,.bootstrap-select>.dropdown-to

Static File Info

⊘No static file info

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://coretrustbids.easibuy.com/advertisements/2128?token=b42ae94736116862a16cd227

Overview

General Information

Detection

Signatures

Classification

Process Tree

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

LLM Input / Output

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 130

Static File Info

Windows Analysis Report
https://coretrustbids.easibuy.com/advertisements/2128?token=b42ae94736116862a16cd227