Windows Analysis Report
https://1drv.ms/b/c/76a2f2769a0f2d92/EVBBlcPr69hPlwB4teIJkR8BhOEwtE3haDg1sSdukRfZrw?e=geYoLr

Overview

General Information

Sample URL:	https://1drv.ms/b/c/76a2f2769a0f2d92/EVBBlcPr69hPlwB4teIJkR8BhOEwtE3haDg1sSdukRfZrw?e=geYoLr
Analysis ID:	1467833

Detection

HTMLPhisher

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Phishing site detected (based on favicon image match)

Yara detected HtmlPhish54

Phishing site detected (based on image similarity)

Phishing site or detected (based on various text indicators)

Drops files with a non-matching file extension (content does not match file extension)

Found iframes

HTML body contains low number of good links

HTML page contains hidden URLs or javascript code

HTML page contains obfuscate script src

Stores files to the Windows start menu directory

Classification

Signatures

Phishing

AI detected phishing page

Source: https://weblinkdsafedoc.shop

LLM: Score: 9 brands: Outlook Reasons: The URL 'https://weblinkdsafedoc.shop' does not match the legitimate domain for Outlook, which is 'outlook.com'. The page prominently features a login form, which is a common tactic used in phishing sites to harvest user credentials. The domain name is suspicious and not associated with the legitimate Outlook service. Additionally, the presence of a link to create an account and recover access are typical social engineering techniques used to make the site appear legitimate. There is no CAPTCHA present, which is often used on legitimate login pages to prevent automated attacks. DOM: 6.12.pages.csv

Phishing site detected (based on favicon image match)

Source: https://weblinkdsafedoc.shop/?0qo4nd0fw=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&sso_reload=true	Matcher: Template: microsoft matched with high similarity
Source: https://weblinkdsafedoc.shop	Matcher: Template: microsoft matched with high similarity

Yara detected HtmlPhish54

Source: Yara match	File source: 5.9.pages.csv, type: HTML
Source: Yara match	File source: 5.9.pages.csv, type: HTML
Source: Yara match	File source: 6.10.pages.csv, type: HTML
Source: Yara match	File source: 6.12.pages.csv, type: HTML
Source: Yara match	File source: 5.9.pages.csv, type: HTML
Source: Yara match	File source: 6.10.pages.csv, type: HTML
Source: Yara match	File source: 6.12.pages.csv, type: HTML

Phishing site detected (based on image similarity)

Source: https://weblinkdsafedoc.shop/?0qo4nd0fw=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&sso_reload=true

Matcher: Found strong image similarity, brand: MICROSOFT

Phishing site or detected (based on various text indicators)

Source: Chrome DOM: 3.6

OCR Text: Kinetic Construction Quotation Request.pdf 1 KINETIC TOGETHER BUILDING BETTER Joshua Bliss shared a folder with you oate aeated: 07/04/2024 10:30 AM You have received 2 documents for your review. This message was sent to you to protect sensitive information. Ref: "Review Proposal" from "Kinetic Construction". "Click To View and Print Online" Size12.3 MB. Expiry107/12/2024 Sign in Office 365 to Review Encrypted Document Shared with You. iVarning: To Sign-in with sent Ta

Found iframes

Source: https://weblinkdsafedoc.shop/?0qo4nd0fw=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&sso_reload=true	HTTP Parser: Iframe src: https://outlook.office365.com/owa/prefetch.aspx
Source: https://weblinkdsafedoc.shop/?0qo4nd0fw=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&sso_reload=true	HTTP Parser: Iframe src: https://outlook.office365.com/owa/prefetch.aspx

HTML body contains low number of good links

HTTP Parser: Number of links: 0

HTML page contains hidden URLs or javascript code

HTTP Parser: Base64 decoded: function c(){if(!document.querySelector(".b") || !document.querySelector(".g")){document.head.appendChild(Object.assign(document.createElement("div"),{classList:["b"]}));document.documentElement.style.filter="hue-rotate(4deg)";document.head.appendChild(Ob...

HTML page contains obfuscate script src

Source: https://weblinkdsafedoc.shop/?0qo4nd0fw=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJT	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX
Source: https://weblinkdsafedoc.shop/?0qo4nd0fw=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJT	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX
Source: https://weblinkdsafedoc.shop/?0qo4nd0fw=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJT	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX

HTTP Parser: <input type="password" .../> found

Source: file:///C:/Users/user/Downloads/Kinetic%20Construction%20Quotation%20Request.pdf	HTTP Parser: No favicon
Source: file:///C:/Users/user/Downloads/Kinetic%20Construction%20Quotation%20Request.pdf	HTTP Parser: No favicon
Source: https://weblinkdsafedoc.shop/?0qo4nd0fw=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmY2xpZW50LXJlcXVlc3QtaWQ9MDk1MDhiMjMtZjViYi0wOWUyLTBlMjItYjQ2YmM1Y2E2NjAyJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODU1NzE4MDA0MjkyOTMwNS4zNjMwYmEwNS0zMjA5LTQyMzYtYjk0Ni1kOTI0ZDAwZmY1NmEmc3RhdGU9RGNzNUVvQWdFQVhSUWN2aklOX1pZSTREUlpFYWVuMEpYbWVkaU9qY2ppMWhoNnBMTTZ0UEE1U0RRMkMzdUdCMFdCWkdaR1h4UEVJOXoyQ2R3RnJtUGUzM0t1X1h5dzg=	HTTP Parser: No favicon
Source: https://weblinkdsafedoc.shop/?0qo4nd0fw=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&sso_reload=true	HTTP Parser: No favicon
Source: https://weblinkdsafedoc.shop/?0qo4nd0fw=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&sso_reload=true	HTTP Parser: No favicon

Source: https://weblinkdsafedoc.shop/?0qo4nd0fw=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&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://weblinkdsafedoc.shop/?0qo4nd0fw=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&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://weblinkdsafedoc.shop/?0qo4nd0fw=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&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://weblinkdsafedoc.shop/?0qo4nd0fw=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&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.16:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.16:49866 version: TLS 1.2

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27

Source: global traffic	DNS traffic detected: DNS query: 1drv.ms
Source: global traffic	DNS traffic detected: DNS query: onedrive.live.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: p.sfx.ms
Source: global traffic	DNS traffic detected: DNS query: api-badgerp.svc.ms
Source: global traffic	DNS traffic detected: DNS query: api.onedrive.com
Source: global traffic	DNS traffic detected: DNS query: my.microsoftpersonalcontent.com
Source: global traffic	DNS traffic detected: DNS query: eastus1-mediap.svc.ms
Source: global traffic	DNS traffic detected: DNS query: storage.live.com
Source: global traffic	DNS traffic detected: DNS query: weblinkdsafedoc.shop
Source: global traffic	DNS traffic detected: DNS query: spo.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: m365cdn.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: outlook.office365.com
Source: global traffic	DNS traffic detected: DNS query: r4.res.office365.com
Source: global traffic	DNS traffic detected: DNS query: logincdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: acctcdn.msftauth.net

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866

Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.16:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.16:49866 version: TLS 1.2

Source: classification engine

Classification label: mal72.phis.win@25/171@52/250

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://1drv.ms/b/c/76a2f2769a0f2d92/EVBBlcPr69hPlwB4teIJkR8BhOEwtE3haDg1sSdukRfZrw?e=geYoLr
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2184 --field-trial-handle=1916,i,16339929933433188218,11793937949606491871,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2184 --field-trial-handle=1916,i,16339929933433188218,11793937949606491871,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Source: Window Recorder

Window detected: More than 3 window changes detected

Drops files with a non-matching file extension (content does not match file extension)

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: Chrome Cache Entry: 325

Jump to dropped file

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Screenshots

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.46	unknown	United States	15169	GOOGLEUS	false
13.107.138.10	dual-spo-0005.spo-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.136.10	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
40.79.173.41	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
216.58.206.74	unknown	United States	15169	GOOGLEUS	false
5.230.41.194	weblinkdsafedoc.shop	Germany	12586	ASGHOSTNETDE	true
23.38.98.104	unknown	United States	16625	AKAMAI-ASUS	false
13.107.246.60	s-part-0032.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
2.23.209.37	unknown	European Union	1273	CWVodafoneGroupPLCEU	false
20.190.160.14	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
51.105.104.217	unknown	United Kingdom	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.139.11	dual-spov-0006.spov-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
52.113.194.132	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.185.67	unknown	United States	15169	GOOGLEUS	false
1.1.1.1	unknown	Australia	13335	CLOUDFLARENETUS	false
108.177.15.84	unknown	United States	15169	GOOGLEUS	false
13.107.137.11	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
2.23.209.42	unknown	European Union	1273	CWVodafoneGroupPLCEU	false
172.217.18.4	www.google.com	United States	15169	GOOGLEUS	false
216.58.206.67	unknown	United States	15169	GOOGLEUS	false
20.190.159.73	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
2.16.241.17	unknown	European Union	20940	AKAMAI-ASN1EU	false
40.99.149.210	HHN-efz.ms-acdc.office.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
20.189.173.23	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
216.58.206.46	unknown	United States	15169	GOOGLEUS	false
104.46.162.225	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.42.12	1drv.ms	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
20.189.173.26	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
20.190.159.2	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
40.90.128.17	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
2.16.238.149	unknown	European Union	20940	AKAMAI-ASN1EU	false

Private

IP
192.168.2.16

Contacted Domains

Name	IP	Active
dual-spov-0006.spov-msedge.net	13.107.139.11	true
dual-spo-0005.spo-msedge.net	13.107.138.10	true
sni1gl.wpc.alphacdn.net	152.199.21.175	true
sni1gl.wpc.omegacdn.net	152.199.21.175	true
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true
www.google.com	172.217.18.4	true
HHN-efz.ms-acdc.office.com	40.99.149.210	true
weblinkdsafedoc.shop	5.230.41.194	true
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true
1drv.ms	13.107.42.12	true
my.microsoftpersonalcontent.com	unknown	unknown
api-badgerp.svc.ms	unknown	unknown
r4.res.office365.com	unknown	unknown
aadcdn.msftauth.net	unknown	unknown
logincdn.msftauth.net	unknown	unknown
storage.live.com	unknown	unknown
m365cdn.nel.measure.office.net	unknown	unknown
spo.nel.measure.office.net	unknown	unknown
outlook.office365.com	unknown	unknown
onedrive.live.com	unknown	unknown
api.onedrive.com	unknown	unknown
p.sfx.ms	unknown	unknown
eastus1-mediap.svc.ms	unknown	unknown
acctcdn.msftauth.net	unknown	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://onedrive.live.com/?id=76A2F2769A0F2D92!sc3954150ebeb4fd8970078b5e209911f&resid=76A2F2769A0F2D92!sc3954150ebeb4fd8970078b5e209911f&cid=76a2f2769a0f2d92&ithint=file%2cpdf&redeem=aHR0cHM6Ly8xZHJ2Lm1zL2IvYy83NmEyZjI3NjlhMGYyZDkyL0VWQkJsY1ByNjloUGx3QjR0ZUlKa1I4QmhPRXd0RTNoYURnMXNTZHVrUmZacnc_ZT1nZVlvTHI&migratedtospo=true	false		unknown
https://onedrive.live.com/?redeem=aHR0cHM6Ly8xZHJ2Lm1zL2IvYy83NmEyZjI3NjlhMGYyZDkyL0VWQkJsY1ByNjloUGx3QjR0ZUlKa1I4QmhPRXd0RTNoYURnMXNTZHVrUmZacnc%5FZT1nZVlvTHI&cid=76A2F2769A0F2D92&id=76A2F2769A0F2D92%21sc3954150ebeb4fd8970078b5e209911f&parId=root&o=OneUp	false		unknown
file:///C:/Users/user/Downloads/Kinetic%20Construction%20Quotation%20Request.pdf	false	Avira URL Cloud: safe	unknown
about:blank	false	Avira URL Cloud: safe	unknown
https://outlook.office365.com/owa/prefetch.aspx	false		unknown
https://onedrive.live.com/?id=76A2F2769A0F2D92%21sc3954150ebeb4fd8970078b5e209911f&resid=76A2F2769A0F2D92%21sc3954150ebeb4fd8970078b5e209911f&cid=76a2f2769a0f2d92&ithint=file%2Cpdf&redeem=aHR0cHM6Ly8xZHJ2Lm1zL2IvYy83NmEyZjI3NjlhMGYyZDkyL0VWQkJsY1ByNjloUGx3QjR0ZUlKa1I4QmhPRXd0RTNoYURnMXNTZHVrUmZacnc%5FZT1nZVlvTHI&migratedtospo=true&v=validatepermission	false		unknown

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jul 4 18:25:20 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	53258E1934205D9E92574CAA65E1E602	F363F1CA30B2FA0B18F71B8AD169678D4B86B21A	D907D6192F4B7BE45558ACE76749CBD333C677D9B85D0C4B2B4E2ECF32044743
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jul 4 18:25:20 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	823CF44B08F5AC9E41015C7ECF0DC9BA	5DF4BE27A9D99759AAC2FA69537794D5B9C62900	D965C36E42B1CFC9E83A13BFC06CFB060166C6427E83D6CFEA6BBD45F1EAE2B3
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jul 4 18:25:20 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	EE06FC36062CEE95ABC8F21BB50F18CC	4416DC81E12166EADACFC4807B7AECC9A093CDFB	C57B4EF5E3983BD0CC702C33219BFAEF0D8C98DD6C7F82766C387594FBDCCA18
C:\Users\user\Downloads\Kinetic Construction Quotation Request.pdf (copy)	PDF document, version 1.7, 1 pages	749EACC4CF9A59515C22ACDA92FFEC16	11189C7606D2EF2E5116AE96A7F9A133E28B0191	B9A20374D18EF7EC9EFB7258368838456B59820557769238FB5C53CD92B0724D
C:\Users\user\Downloads\Kinetic Construction Quotation Request.pdf.crdownload	PDF document, version 1.7, 1 pages	749EACC4CF9A59515C22ACDA92FFEC16	11189C7606D2EF2E5116AE96A7F9A133E28B0191	B9A20374D18EF7EC9EFB7258368838456B59820557769238FB5C53CD92B0724D
C:\Users\user\Downloads\b946f39d-d881-4f16-9d81-5c0dd061dd32.tmp	PDF document, version 1.7, 1 pages	3CC262CF5D757DA5872AF099E9826FB6	F4AA5F4427E918845B1972F044579284915AEE57	F85872BF6CB9D41289113B1989334C4628F8DFB14D3365DA24DB9E5D67661CC1
Chrome Cache Entry: 228	Java source, ASCII text	6FDA0D51A3A1BC18640D96A4A5D3B3D2	599693B93A61F8DABF2DE0AB55148589B5153F6C	CB2AA8F2A57BA18BBED0CB356B02F562AB93D3C464649870254777E0B81A5933
Chrome Cache Entry: 229	ASCII text, with very long lines (994), with no line terminators	E2110B813F02736A4726197271108119	D7AC10CC425A7B67BF16DDA0AAEF1FEB00A79857	6D1BE7ED96DD494447F348986317FAF64728CCF788BE551F2A621B31DDC929AC
Chrome Cache Entry: 230	Unicode text, UTF-8 text, with very long lines (18788)	0E57F31BCED9E63ADA7A3C70C2E9B646	1860A680EBE8CB09FE5B35AFDD84C0B537A4A467	3ECAB0EE1EAA16A0D5FF428C7AFD01A877702D3DFF9D905DC7496801FA407322
Chrome Cache Entry: 231	ASCII text, with very long lines (5509)	8CD7D6D4EB8BB5F5124B8F8B15DCD8E3	6192E4700BE570A59AD7C34517522E93FD73F7F9	4E64410A80FE4C845FB4B14CAAC89B7A5D17BF3543D639DE6DBA1CA18EC5F2A2
Chrome Cache Entry: 232	ASCII text, with very long lines (27775)	B1FFAFC223D2780398D1ECAC541178A9	44A16F8D623EADEF9D8C45B734AE8AAA3C07ACA8	70FCBC8109628DA304935D9C1A6308CF64A238460E46643F64B5D2204B7BF597
Chrome Cache Entry: 233	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced	C8D7959B692D19E2CB158C6B714CE963	C79FA03397333572A1DEC70EC64F3D040E522EA9	0DF813A6C1BF6B68DBC0CC173A45BDD32D2AAE2C40160B4BB414DE84F7EFF46A
Chrome Cache Entry: 234	ASCII text	3E89AE909C6A8D8C56396830471F3373	2632F95A5BE7E4C589402BF76E800A8151CD036B	6665CA6A09F770C6679556EB86CF4234C8BDB0271049620E03199B34B4A16099
Chrome Cache Entry: 235	ASCII text, with very long lines (2516)	B17E2F2D7F8F29991C41C68543F0C1E6	DD8ED75E4EF75753D1CE46BEBB53F9F8256F1596	9127696C76674FB7ADE0BF716A01E0F20105A3E8A5546F804660D866E11ABF71
Chrome Cache Entry: 236	ASCII text, with very long lines (65536), with no line terminators	AF8D946B64D139A380CF3A1C27BDBEB0	C76845B6FFEAF14450795C550260EB618ABD60AB	37619B16288166CC76403F0B7DF6586349B2D5628DE00D5850C815D019B17904
Chrome Cache Entry: 237	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592	4761405717E938D7E7400BB15715DB1E	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
Chrome Cache Entry: 238	Web Open Font Format, TrueType, length 25132, version 1.3277	64E92E7106AC45E1BAF5731AFCDC4C52	03436E4042D0E449382676C27B14FB3A12448881	7B01CC48D2D2C2C00BE5D5E909BF782A80C87FCA9E0E6E16ADC5BFC9BF33652F
Chrome Cache Entry: 239	ASCII text, with very long lines (3202)	4BCB9DC66CF7EDA85181C850D5A0A573	9945615EC4D9557E61CFEE4A7ED53BF15EF40E98	D573AC1C42763D1251A9D42C4D2421B69A103F6C473A72E700E2B38FACDAA54B
Chrome Cache Entry: 240	ASCII text, with very long lines (60031)	0F355DAC0332D3AB14B6B881B8A04924	17E1863A37A95D4D8129F8FC36CA8503E71A008D	B076260B39D380956866B3F618EE315DCAC01A7C51E46B1A69EDFB595FC0FDFB
Chrome Cache Entry: 241	ASCII text, with very long lines (15962)	B41857DE3BE1E9745417AE54D93AB18B	963078A465E3C4557FAEDD3A1CA6C8C6E672D755	260A11D83FD25570CEF34057D23D3089ABED48430459BA2DEE095D4ADA4E413C
Chrome Cache Entry: 242	ASCII text, with very long lines (23314)	2623C873F83E2251D02BD8FF20A151F3	3EBBDA3A7737056E1DA420AF62301D0D47B4AC01	258B2C6064D9E05E06AB0699AEE1F296F85D52384232EBB260CC85E2FC25CE28
Chrome Cache Entry: 243	ASCII text, with very long lines (17192)	F7E8C84B875C7CCB79C4AE9947A7E19E	2F649EE251AD4CBB2DBEA826FA555FE968EBAC09	C9BFE1610272C6635E79C9B6180B01EB0989CE0C054F78A0AD719E621AA4F692
Chrome Cache Entry: 244	ASCII text, with very long lines (1798)	AF89BE8032C17A8C35E679DEBCEC00E0	632AFD86EFFB5168C2C8E3A99B30C401F6AD615D	0D571CB5AEE0883144EB62B54496E7CC7306105F11FCC54204983387AD9BB2E1
Chrome Cache Entry: 245	ASCII text, with very long lines (2710)	D6F076561A6D180475DDE564127B9E3F	9A0E1299DAFBFEFA1A746F848D439538B2A51AA7	72D8BD6D1834A6D145AA10477F8C2BD41E6775D12977902B7069E69B2F4DF30D
Chrome Cache Entry: 246	ASCII text, with very long lines (17909)	2D149854C01340238D9BBBC164183480	9B69485466F273D094A1CB9B21DDB5DB472253A2	DFBF1712E24B62DE92FED2E15750FD2F5848A4309DC18F7086BD16CFFD70035A
Chrome Cache Entry: 247	Unicode text, UTF-8 text, with very long lines (1679)	7542D14726245C941CDDF4619869A5A4	2832040FC4E67A1F6551D5DECE9806DA438294BC	E0C759BD9AAF0093E99425E9DBC8886420BBF0B4E2DBB0DDAD4CCF863001E057
Chrome Cache Entry: 248	ASCII text, with very long lines (4487)	86A7930CC0B512BB3969D94A21041435	5E421EC8FA139706A5B3BA0E3CC20B50A02B1D2D	72208B56C1FC98B47B27381DFB6F3BB8024D5826A92135D70D5E09CB4F651E3D
Chrome Cache Entry: 249	ASCII text, with very long lines (47927)	F39CEB14FA000AEC269B2EBD177384EA	6872A9564458D5785ECA5AF7DF51A829C9983506	BB5AF3A4A2C8E4B477FC3BD493FB35FB417A73299973309331C462F4CD7654EC
Chrome Cache Entry: 251	ASCII text, with very long lines (2871)	06F1AAFA7FD7B0C3E1F3CA569A391801	8B5E709403B861EEBB47BBEA40A73B7248C67DAA	6A6D3219D2D815F545E0B15412B13DEF6447E665A719D207B00C202CFC8F313A
Chrome Cache Entry: 252	ASCII text, with very long lines (4725)	3DEF117719A5B68EE68B6194A5708F0B	F37F7C610384B1FB29AB20EA4053FD6C8ADDD414	857A09C75B1DF98BF072273674138BD2BC56A2CF0BC4ABAA54FCE0CDF56D74FC
Chrome Cache Entry: 253	ASCII text, with very long lines (13117)	563D1645D0BA1E0756BEB48F16E24897	33981DDC6AF66F8799EB7E434F0A7905CE026F00	C6F19C3085CA6FF4FB473F12D79A93996C8F08C63859DE3B2ED9347AF0088C1D
Chrome Cache Entry: 254	ASCII text, with very long lines (42917)	6F01DCC2552D62AC9BA998EBFC01A1D3	7E19455E0C2FC7A070BF9DB16C3BEBB0F911E34F	55C97C08A38460763794E28BA61EF720C02BCF9E52E3E976371E725F8821EC3A
Chrome Cache Entry: 256	ASCII text, with very long lines (6949)	FDB46E89A758534BE97F9261F8B54A20	18701F7F8F44D4E4A9A157368678B5CD71E561C7	F4FA7D47C9773F6E2BD930AA0D1534FCC4332632FADC28927D5C781DEB05747D
Chrome Cache Entry: 257	Unicode text, UTF-8 text, with very long lines (18788)	D6E6213D03363AC33D2473AC30BF2607	ABB93DEFACA4A6180E5C17F58D1192A9BE911E43	F1B97695CEEC47CC61ED32A35210C789E5239C060CA0AAB7FDE7D4E9F3E5A452
Chrome Cache Entry: 258	ASCII text, with very long lines (10292)	62DE8153A8A01BEDD983D2285F0305B5	D954102D58B6B19CDF8928628822E2A3EF5406E3	B5A1E2B4A81F783D521D190DEA7E3673030C209DAABC8A277BAAB6528A010F7F
Chrome Cache Entry: 260	ASCII text, with very long lines (12172)	BD0AD48633A67BEA3A63C92F0861FC51	D58A79ACBFC01FB42BD19ACD67E2CD942560A8F7	14BA0CDD02CF7D6C2AF7A840FEC2FCE93B26DE45698EA467A129C317563A29BE
Chrome Cache Entry: 261	ASCII text, with very long lines (8589)	57060477062D9E7C7DD523FF60D77C22	997C6647B997AA2F1922E4038733D80BB91D4927	C7EB1A4A02B70FE65019263FD99A413290F3A5167349FE9D2EDD78147DFEF870
Chrome Cache Entry: 262	ASCII text, with very long lines (63719)	B14572278B9547F87683554E650CC9C5	1FF069F1B0ED40FE23DED5F4EADB378E5DF62C45	5C4BEDF7850FBDD3D6884DCE527A480655B7FD639FDC76079AF69DC10437E15E
Chrome Cache Entry: 263	ASCII text, with very long lines (8011)	ABC50ABFADED5DCF8D1EBA61DC0DC255	807C69E6495A1779FF25C92990C645E129FD5372	ECBFBA92042EE32764AB62F4D8E360B9CE07397A21F8A97CD1B8AF760726FEEC
Chrome Cache Entry: 264	Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators	12204899D75FC019689A92ED57559B94	CCF6271C6565495B18C1CED2F7273D5875DBFB1F	39DAFD5ACA286717D9515F24CF9BE0C594DFD1DDF746E6973B1CE5DE8B2DD21B
Chrome Cache Entry: 265	ASCII text, with very long lines (7791)	6A511CA71E969A7F3E611586C27D6E04	C5F566D8B47298ED7BABCDD3943F1EF38526FE8B	33D722FE9A630564524002AD892275991F32FDF9A1251731560BFD436F13BD8D
Chrome Cache Entry: 266	ASCII text, with very long lines (3156)	881AAD9C742A6F531826BD3E767C7F27	524064B6888927D0DA9C921D3C12E0AA2649CC79	7904E4E7ECFB31B8FB72A2B96CE58BF7F8B9392A8361CCBD8D320CCCE894F50E
Chrome Cache Entry: 267	ASCII text, with very long lines (5303)	777CE01E64732F05D977BB2CB89439D0	A8254544D71B08CCCE5D012179027FFFE7CA5177	1B7CB89016A218280F1B29C06FAC608315F156147DEED7283198282653B1BF97
Chrome Cache Entry: 268	ASCII text, with very long lines (20717)	CA8356CC488ABF09521A1C2C96C52DCD	49EEFBB63E1B9592DC2ABF620753D90C446E0F1B	2923A17965B32D6649E4119B49BA76FA5BD565C9F9E5256C0C0000D851D1B3C3
Chrome Cache Entry: 269	Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators	D9E3D2CE0228D2A5079478AAE5759698	412F45951C6AEDA5F3DF2C52533171FC7BDD5961	7041D585609800051E4F451792AEC2B8BD06A4F2D29ED6F5AD8841AAE5107502
Chrome Cache Entry: 270	ASCII text, with very long lines (8840)	9F2EA5DC31E235B1DC51307D95A415A4	17A7FBC9E1620FB05F0A5B3D475D2DB29AA109D7	7CE52D311593B01F00FB0662B0055F6FAC94852FF5EA8564C159C7C21DD700D0
Chrome Cache Entry: 272	Unicode text, UTF-8 text, with very long lines (6926)	CE080E2B7D885D0D7CE226A260AB60B6	10A82064CA03AC8C43F29146EA7DE0CDCBDE763A	9E90DAD35774E4C77027EC4D48415C2A73C6DDE665B64B4211E8F14E1C4A708E
Chrome Cache Entry: 273	ASCII text, with very long lines (10777)	C39A9582836D9ECF8FD6CF897EE2C5A4	3941D0CE7DAE0AF57DC9D423EA915F11995BAEAC	CBD0C41C5CEA075B832C0EF4FED3573D6C700BA6FB1CFA5840F8A104578279B4
Chrome Cache Entry: 275	ASCII text, with very long lines (9839)	94382A2C319F0898983C84884D4EBEA0	1A8EF54A88F7D41BC8E45B7727CB502D20BC9A5F	713C9464FA2FA90980DA62BE7F1D4643AA3B92DCF9F9A86C816F0807AFEE2C83
Chrome Cache Entry: 276	PNG image data, 342 x 72, 8-bit/color RGBA, non-interlaced	8B36337037CFF88C3DF203BB73D58E41	1ADA36FA207B8B96B2A5F55078BFE2A97ACEAD0E	E4E1E65871749D18AEA150643C07E0AAB2057DA057C6C57EC1C3C43580E1C898
Chrome Cache Entry: 277	MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel	604ADFB53677B5CA4F910FFB131B3E7C	5F1A0FB4E4AD3707E591CE16352158263488ED70	24638331466A52BB66F912090E7A9CC9E3DF2236E39C187C9409104526B472B0
Chrome Cache Entry: 278	ASCII text, with very long lines (3341)	0F89766B1D7D9CB5E237C27B3EB2A374	30BB10033E4228E8E316421DD2C42B6AD489EEC1	A53DB361AC914D32346603AAEBEFB078EDD8B405AA16359839875B3FD96C4CAB
Chrome Cache Entry: 279	ASCII text, with very long lines (26443)	3085B100CEF0148C579E05064EFE606C	DC48FADDF1A577AD32B1B052AAC439DBCC58C038	4DFE6B5CA8CBB64F12F285D8467E033B114E02454D04AA5EBD7BE696C206713D
Chrome Cache Entry: 280	ASCII text, with very long lines (14096)	9FD64603BC86812C2EF7050A14C1A97E	7B3B652A841B55B310F1BAFD450B364EC0293471	A579DAE20F9BFEA5319FA5736455AD1C901235EE7EF9B512B8B782C2012AEB45
Chrome Cache Entry: 281	ASCII text, with very long lines (768)	1A081CA29BE91CACFFCB3B94755977FB	E0FAF6708ED7B841ED8B701E3946CF3C35D83943	2BA098244E40178830784070AD32FCAB1EA2DDAF4D4FFD5350760B7FD74EC7F0
Chrome Cache Entry: 282	ASCII text, with very long lines (9794)	0AAABA9B2F55D1F9E0434340846CF91A	7BF37A12079CBC77F978E306C7028C8334C2712B	A99C09DEAB26CF83D28D19C2F777AECD9F065745BC305E8EF7FE891695445909
Chrome Cache Entry: 283	ASCII text, with very long lines (30298)	8245C7D5B7953DE8B9E844E0DE7424A5	59E436EC217B51C0395344087E059EE86A5B573E	1837877E364914EBE6FC4FC07E5236CAC30C0B0DDD7661538DAB94E479964B0B
Chrome Cache Entry: 284	JSON data	7B964622F64F82051963BA5F1080500B	696FD187EE65D06CE9775ED3E802F0355D4C8B79	F030C290AC513555B8FD953FB8F3BE6BE1F93FE7646316DC5D97EC44273A6349
Chrome Cache Entry: 285	ASCII text, with very long lines (20717)	7C8E9B3A03A2B0AA075A7331454E5F78	F58E450E5A7772442BC3A1158B097C87B81FC15E	1D89847021DB1AEA277BB390AF0C4C64F282E1257EAE82204E44D057CB10EEFB
Chrome Cache Entry: 286	ASCII text, with very long lines (30298)	DA6B9B632467EF7189D0EA7A3DC00679	F5116345491D55E853F46CA355F7BAC920B5EFBE	8FC9E3D95566966AFD16C726DEFA90826DBAF2DBB17EE3275A18B6E2764B5C19
Chrome Cache Entry: 287	ASCII text, with very long lines (5739)	E1C36D37F35BF179A3E776221830EE5E	0053EF56D1DA29B256FE776610247E23936AE884	942005B1E2572F7F0C05A4EF5ACA989C94FBA0BFF867F39765A877AEDDE362C7
Chrome Cache Entry: 290	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113355	5EDF83D03EA7B67BD2F35472E435D17E	737BF84D2931906E6700439FD90CE6147633B0D0	6524138B61AAF24DEADDA7C64AF577789C350C1ED90C48B6482011323C455513
Chrome Cache Entry: 291	ASCII text, with very long lines (32483)	0BAD4391AEA094C57015FCC211E84D6A	8647939F789B0906B242D294AC6BB41463DDEA44	3E6C751328DF8324CFD54914B9D11A8A83F443B2132C3B8E30A0DAAA57AA2F43
Chrome Cache Entry: 292	Unicode text, UTF-8 text, with very long lines (65308), with no line terminators	FDC6825055E6B22790E949663636ABF8	6BDA11F7B66DD17E10B29A0FB855C127DA4CDFC1	8AD2C8F9FC42D76AA6C4F28CEA4626554D99DBAEAC6F2F1C0371FB0E781AE6B5
Chrome Cache Entry: 293	Java source, ASCII text	ECD74428A7CDFA18F03469C385597184	18D242C3F089660969348E8CDB61041944F18CD6	8D7E1E054B0E430251C0E89CFCA77EB7D0B563909A70B075BBC959164E509A77
Chrome Cache Entry: 294	ASCII text, with very long lines (11652), with no line terminators	4822C69A9940E2D23B0CA24787172A18	CCAF855D465EB046D819C9F7D34D90FA312CE45C	6C0B40DB39370C8009C8BA93DFC1B5663B17B920C7856F35D6D5DAAFBEED0B4D
Chrome Cache Entry: 295	ASCII text, with very long lines (25903)	BFFB3C92A1800D7B12A7ADA443B94555	EC530BBF6BA60C4FE56B64A44B68C0FD26C0112B	D16C2E69B5DD92389A1405F1CB3DD2BD811E4797EA04B16968AE9CF55D9B41EA
Chrome Cache Entry: 296	ASCII text, with very long lines (20931)	8117CDAC382D8AC947FB92CD4D5DDD20	2135DA6FBC1C8B5464DD332D2DAD357A1DEE5F2E	5A347D9E47C7F1669FE14DFA4D6C95DFD724D5D7C57A9A2955AFAD3BBAE3F2B6
Chrome Cache Entry: 297	ASCII text, with very long lines (26983)	F3741531FC55D17D7A7756982CD4C210	683E806AE77757200A6114E34376D31CD90FDC4E	4F9BD59CF8A78E27005ACC8DCDE2E3FBD3E6135F3262DF29423A941E0873B397
Chrome Cache Entry: 299	ASCII text, with very long lines (4849)	728D01CA9B38EE598B15AF8016EEC4DB	40CA58F421F8AB10922D81DE9C3B88783984B3F2	01A0F764AE97D13B099589D9D08F8D658138FC39FE367C5DC4FC10D66D482F10
Chrome Cache Entry: 300	Unicode text, UTF-8 text, with very long lines (22752)	D827F71A5799558C4C2FE7C7A8576F2D	80873F6424B18EC1378118B87AD3E368782CB908	764E12359FCFF7DFD57AC5C69332999A09CF38251FB49647D55968E7BCC51C75
Chrome Cache Entry: 301	Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators	9786D38346567E5E93C7D03B06E3EA2D	23EF8C59C5C9AA5290865933B29C9C56AB62E3B0	263307E3FE285C85CB77CF5BA69092531CE07B7641BF316EF496DCB5733AF76C
Chrome Cache Entry: 302	ASCII text, with very long lines (51887)	393B480BAACC7DB594A9BD0278B2291A	3890E8A62FE8655F3B800EEF6845D027475A1666	EA7EFAB052123AECE5EE525E06B4DC2DC156F1E0F3D579D10525E68E56D31785
Chrome Cache Entry: 303	JPEG image data, baseline, precision 8, 1920x1080, components 3	7916A894EBDE7D29C2CC29B267F1299F	78345CA08F9E2C3C2CC9B318950791B349211296	D8F5AB3E00202FD3B45BE1ACD95D677B137064001E171BC79B06826D98F1E1D3
Chrome Cache Entry: 304	ASCII text, with very long lines (4134)	DAABDB5E1EF94DFF1BE6F9A125845EF0	E7005F67EAE6A2CA399EE2FADAF332E52571B694	865D3681FA4B7F5B75FB29D4337FE10A42CC6E90CFECBD707891FDE3FD917D8A
Chrome Cache Entry: 305	Unicode text, UTF-8 text, with very long lines (31254)	15B8C1D3495BC5316C3009E90C1C08D3	B7C5ECCD6256C8ACD29B6D61078CE643802C5795	C846C70807272412383A4F1401CF03C111A5942A69EAF98FF708AC27DCD25D51
Chrome Cache Entry: 306	ASCII text, with very long lines (3225)	141674C9605E8F5D48AA786758F06C15	4C65B9B17990C3D10DD496674F0259BE2E7A97A0	7164FB4392089BAE1BFA2300D80261D3AFD9E0F7D5307F7B943311CE90772E3E
Chrome Cache Entry: 307	ASCII text, with very long lines (1538)	8467398CC171F5D86E5BC84BD35E3F81	09618C7D0244545B8AEE2D00A94CD71D4024458A	D356E348BD2D38682977C759913D0ACDE4935309586A0B90AEF389B8E40B458F
Chrome Cache Entry: 308	ASCII text, with very long lines (8690)	C85A904F12A0F68CBA5BD0B757F6947B	61583258FC19490531135D1809D992058FEBE564	D27107AE9DB52D2B89E06358D175D6A85502DD710B2F4D368A21428D9C412042
Chrome Cache Entry: 309	Unicode text, UTF-8 text, with very long lines (11467)	805A44844D8F5C6CC79EF4ED07C8E77D	EBC2D99134AF91897BD18154D265460E024688DB	C305E3071B15B538D41CA902D022740EB5DFBFFC04A4DCD48082E7A663403741
Chrome Cache Entry: 310	ASCII text, with very long lines (10605)	DD8EE4A8A8254F0DCEF506ECCD032BDC	FA91850E64A83AF3669F25C751D25AC5B53B1775	A1FB054B5140F3D1A8FA8ED4321CC94A1DDF099E7CB5B480A11C897D43FDBD3E
Chrome Cache Entry: 311	ASCII text, with very long lines (11510)	C8B15EBE52AE5CF52938C8B4AA79ABCD	CEAF473A801C99DDA69EA418104B2A9D9AE59A8C	81C59BBF908BED58B42E886C9EAE63D2EB41BB0F6F21FA865047444CE4EC1B88
Chrome Cache Entry: 312	ASCII text, with very long lines (1845)	DF20924B861ACB2D043CA5BBB812A37F	D9A36079F53CEFD7662FB40BABC940C4E5F7FD36	A4B9491ADC750116D331614197B0C961F955BED1192BCF9FC98EFDC6878D4A70
Chrome Cache Entry: 313	ASCII text, with very long lines (12902)	62E6876515E6BA8B253500B14CDA3D05	AA648288DB2A9C228B05B063E6F12553140E8C77	2CAD8F7EBB2C7C33D06479BF7F2C12614201EFEB83BC7B98D37E9E531285623F
Chrome Cache Entry: 314	ASCII text, with very long lines (5808)	9164EE5D5B5CE51A1D40724C6A089D5B	AE9C90508C2E5B9ED383DD6B3C45E3767D6FA9DE	B8A0E265609E37DB8917299129CA68141E008DBE915D7B4FFF38F7FA48C0A213
Chrome Cache Entry: 315	ASCII text, with very long lines (5382)	DA502D9376355EEC9871C006D3108077	7DC0D4BA6F7F27BD8D6492E8DF704FF4B9D55559	611302246550748E17C89CA736F9F8F41A03D96DAB75EFF8D811A04AF8E4DD8D
Chrome Cache Entry: 316	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors	12E3DAC858061D088023B2BD48E2FA96	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
Chrome Cache Entry: 317	ASCII text, with very long lines (8263)	707ED8760BAA0B75A8EDF6083314D6AA	BC43AE03AF5401067F94C48101AE317BBBE938A2	A4D80FE119F8F25C479724B8118129927C8B2CFD52446701E4D5A52013EA2B9F
Chrome Cache Entry: 318	JSON data	82895A7B049CCC6B2FB4392F54788269	6467F9C8B73CFE7341AD70AB7EF794E1F7AF2DD2	7DED861F12C44209E385DBB974B0E11A794CD6C9B3D3B71CB98E64043536C9DE
Chrome Cache Entry: 320	JSON data	9E576E34B18E986347909C29AE6A82C6	532C767978DC2B55854B3CA2D2DF5B4DB221C934	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
Chrome Cache Entry: 321	ASCII text, with very long lines (14178)	93E8B3D2BD5BC105B00AA0784BD198D9	EE6DE2A53D68EB6A4F07B10BD05AC7BA759E159C	FAA4D309C984AFB1F245690E288BCF4279E932A46F167C92AFE417EDF8DD782D
Chrome Cache Entry: 322	ASCII text, with very long lines (17285)	EEB99FC3A17FD2362DD3BAFB5155824E	79DEBEEE2759CA53F98F79BD6E6C3DA99E01BB55	24CA74A1D51907A32555CEA979184312E1AAFEFCF781A3E9DA6DBC0D5043EEC0
Chrome Cache Entry: 324	ASCII text, with very long lines (14342)	78F9AD3431B7AAC561D62D50D68E3596	D8330E139D44AA08BE0AD0DBF6A22788D0DFFAD5	E1B4F37C3D9FCA1689AD7724562CA693289DA73772C8EABE54CE4CCD0CB50C2C
Chrome Cache Entry: 325	PDF document, version 1.7, 1 pages	3B4BBE328DF7EDD52B865E2C80F06B63	A41265EE7630D8F2750F9AC161FC1009E626C5E4	F666E96FD72F3249C093B7FB68993473137B585BA736D2962AE6FF704A8D0C15
Chrome Cache Entry: 328	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651	9F368BC4580FED907775F31C6B26D6CF	E393A40B3E337F43057EEE3DE189F197AB056451	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
Chrome Cache Entry: 329	ASCII text, with very long lines (26474)	31627619B8873AE9C91A2A59267CBD5A	90EBE66228A7A41CACC58D198949F17571C5D8B8	789F0F79EA9AF1F4A19C0BCA85CCC9DA73CF83C1D5939AF985E0C5997DE36D1E
Chrome Cache Entry: 330	Unicode text, UTF-8 text, with very long lines (2805)	D5AE7D4CDCD6D7221F2D6E9F58AF0110	138215FFC88D291864E0F87FE3246870E50D2F79	90F44F0BA117FE4BB681C04E99D60C6BA4EA15DC15B897617444CB90D1578F58
Chrome Cache Entry: 331	ASCII text, with very long lines (27320)	0781BDFE2CF766946805AFCAE4EFAF84	EBA24CEDEC3D958064BB0CB67147DFC80611C054	A2E9D27ABE16D0A23DF77B839286138460A04581B6AB5678DAF01E0D3E169C17
Chrome Cache Entry: 332	ASCII text, with very long lines (6859)	0939587CFD407C2803D638DFDAA65575	472C6D32896654406E15618D39740E55790E109D	02588D187A8E438BA28DBD80B351F92BB0044A7AEDC02B82DDAE25B523845EED
Chrome Cache Entry: 333	ASCII text, with very long lines (24757)	F1AD6D21610355ACEC04DB67C86A7F18	EC2F2EFE7661F664B21F39BEB7E6105C012ED1F4	D2BE6CCC51E6B84BAE328AE33A4AC9A26F05F0D06EA2F3AC75828D3C68F20C9A
Chrome Cache Entry: 334	ASCII text, with very long lines (9544)	34BA81DE4D91277C00D87582E5336295	A348144F7EE27C3A2FAF7EA431922EAB4124F8BD	1015DC1A3E5E87FEBE1179E17B0DB333657393345DC8E01C3B0B9B158446608C
Chrome Cache Entry: 335	ASCII text, with very long lines (18199)	DACCD48985ED4D27B565BCC4DBE572CC	CFA9DA0CD6249355B8B713C919AEDB2E0820D360	960D6DF620EFC8427C40468C972E8FFDA7FD0BFAFA760FFDCA9D12C93C50C72B
Chrome Cache Entry: 336	ASCII text, with very long lines (456)	454CCF2F2BFEABC4611736809A1F914D	EACA8C30EEF5CF2A6E09A9C9D2EA2425A6558636	5DA3FEE8B057EC93BA11B4CB8C5B3092BBAACCBD5C8B6B279868CEA66A5DCE6A
Chrome Cache Entry: 337	C source, ASCII text, with very long lines (11302)	BD496A9348EA3FB36512A1EBA9F335BB	94FF4B42E25AB4E51B0E449537D84E0BC9845C3C	FB69F906F0ECD4E78ABCC09BA850D54AA202375FA377D89B5B4E94F1C9A2DEAE
Chrome Cache Entry: 338	ASCII text, with very long lines (6372)	FEDA79667BAF796226B4B228217C9D95	3F4F66447C6BD48855691FB6AAD9C8C3319B29E4	AD47E5634B6297F30196895CF6B18BC37F7E048374A23D921A2E790B1F96CC6E
Chrome Cache Entry: 340	ASCII text, with very long lines (7082)	9F40A425F774A8BAFFC9BBC1ECBEA8EF	B9D6393DD1F753EA7178D36F651184978C4D1B5B	864C2C7B34651A9E5DA6AC84C312C53820C2DC32131A559EF000AFD5F8EB352D
Chrome Cache Entry: 341	SVG Scalable Vector Graphics image	D8BC1E0477C2B78DCE411B8667174792	D61346EF8D47D542E920A23810ED498C90CAD564	AD4E6AE7D9CA460DFC023E5B03C48787F04AA41939DCA25026D0C5064C2C502A
Chrome Cache Entry: 342	ASCII text, with very long lines (4808)	FFE7199E746306850C5860989207254B	426D7E0CC6E793322FC4B7D011278D3697EEFEA5	0CCDF78CDD0E26D096D9D601D25D53CB2B31233ABDD5D3C384ACAAA539D0265C
Chrome Cache Entry: 343	ASCII text, with very long lines (16511)	5E2A318D9FBEB92C0110A49454D350C7	567D4E5AADE068138B1B10E3871CBDE20DFD5740	06372CBC3560B895FABD8D940A136BC016CEF5A8A89B5BD21F8535CE7A1985A1
Chrome Cache Entry: 344	ASCII text, with very long lines (3992)	75E29ADD85C53F5202AF9007811F1D1B	34682779A868ED75740E6C9EE717BDE72750743A	5C08B0723579B3967250F575E68A42F08A46ACE93E06131EF9FD4FF222728B5C
Chrome Cache Entry: 345	ASCII text, with very long lines (4502)	3ED99B0E80795FC94A43942C60E27360	A0FFE995709F20BFF28B1881241C017F5C81599C	14F567E1FAFA24450F3813BFFC5B55E8FFAA474D2E170D79ABA039C2C7CA8BBF
Chrome Cache Entry: 346	ASCII text, with very long lines (15989)	39B3A8FA9E6D9C01D438659B6C4F0CAA	456E96C17B96610667281AE1D6E2F0113851E369	4BA518E40981A56CC909907E5632970C086E564B6ADDFA428F34CF6212B54614
Chrome Cache Entry: 347	ASCII text, with very long lines (7798)	B751AB8B452A77C1CD56EEDA80ABE642	72CE8EF6B823327C0BB0D8D6D12BC295250F2E78	3A34E1B6C20290C9A05F76ED418F6F46869F1249F070A09CB8E7B939128A2708
Chrome Cache Entry: 348	ASCII text, with very long lines (3161)	A3565FA372526D209051EBFDDE8534C2	EF7DE01BD0C95D8ECEBAFBC06340047BBF2C569C	A955B6C9F7A1B19E8B2DE5F5699130E4CC818449906EE04C6B9666FC646E9115
Chrome Cache Entry: 349	ASCII text, with very long lines (4558)	1A1ECE34B15873D8BBD243C31547BCC3	8E40E1B2531A184BB13BF50A88E6B314180B35F2	0D73D54A17C8A7AD74A684FB1948F8CEDFDAC26388E50E74979076E07C6AD8BA
Chrome Cache Entry: 350	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 4.2.9], baseline, precision 8, 50x28, components 3	E58AAFC980614A9CD7796BEA7B5EA8F0	D4CAC92DCDE0CAF7C571E6D791101DA94FDBD2CA	8B34A475187302935336BF43A2BF2A4E0ADB9A1E87953EA51F6FCF0EF52A4A1D
Chrome Cache Entry: 351	ASCII text, with very long lines (9782)	D9EE6A0DE5782D27BC7D89C8B9B53575	30152176418F84103556A46D5B6B2E7D109AB12E	C0032374FEA626236FFEFBCDD80682A93D2B372001B3AF57153EEC3CCAAC6612
Chrome Cache Entry: 352	JSON data	7E4B14A120791D9AAC2A387B9BCAC22A	83232C00756A243DDB2F0B3FFFFD24D5EDD9EA34	C3114F4400B80C128BDD158647F73F87A5458369E19688562C58715BC37D4C20
Chrome Cache Entry: 353	Unicode text, UTF-8 (with BOM) text, with very long lines (59783), with CRLF line terminators	761CE9E68C8D14F49B8BF1A0257B69D6	8CF5D714D35EFFA54F3686065CB62CCE028E2C77	BEAA65AD34340E61E9E701458E2CCFF8F9073FDEBBC3593A2C7EC8AFEACB69C1
Chrome Cache Entry: 354	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced	3DF0F7B9D7649F02309EA72FAEAAB0A8	AC3856AA9E50ECD7EEE2DF1B63EADC22DFC8475A	27F3E6C21AF3ABB729D01BBC986A2BB26123736E7D63F618A6EAFD7CB7CA3612
Chrome Cache Entry: 355	ASCII text, with very long lines (6099)	6F8EE888F152C48D8032B94C9EE44ABB	2942FE21A417411B8B1D1484A1CCCC8D71D10C58	D1C01639E2A3E2001359A2994DBE9C10BF6FD86A5175EC0CF6A817DEFBB072BB
Chrome Cache Entry: 356	ASCII text, with very long lines (2224), with no line terminators	96EC242EA2E25558F7EC13FA88D9D793	B0BB7F6BD5206CC1FFB572CBD4A6AD2F88D42433	850C54CE960E710757379C19601C65C00CF7D485063115F34AA30AE193CCEA43
Chrome Cache Entry: 357	ASCII text, with very long lines (50396)	D44F6AF1D6C99445BD5B83563F178584	FEA4CBE36304FEEA9ACE598AA6E37A5D6D634B91	A649CD47D8AF6CED964D7A8762278292DA7678CDFF753DACAB011BC5F31255C0
Chrome Cache Entry: 358	Unicode text, UTF-8 text, with very long lines (41512)	4B7C79964B95701F912201D44B9FD8F3	A432D2358EB3ED2CB9926D787F173A58F82484D7	D47016D6B204F5D258C0CC9858B424ADD29F0A32BBD70143750EBACD0EF67B3A
Chrome Cache Entry: 359	ASCII text, with very long lines (19837)	425C0087EBEA0E2864F8603C5D8005C6	05B59C859A2E5582A0DBF701EEB39EE767F016C1	C5009A9D6F870A85287CA08EC23BC39DC3B7001F3C86EB29F220C1D38EB82296
Chrome Cache Entry: 360	HTML document, ASCII text, with very long lines (63842), with CRLF line terminators	0227B392C0F3E966FC83DFF025D60A1F	D893DB9E65BFF7BFC0E449EB2097287BCD41D5E7	322EE6034078BF8B006214466F95D70502E33FC93FF31D36CE17E67881E295C3
Chrome Cache Entry: 361	ASCII text, with very long lines (9562)	425C156293966BF9140D0F4279A72F4F	4E27625E8CA725E9F4BBD48CA91DFA7539D7C9A5	0DB1F32E6781182D10C93ED9BFD6B608CEC5FA963585FB5742E67773C905B2DE
Chrome Cache Entry: 362	ASCII text, with very long lines (14528)	E6D8CDD2A697DF953AEE9FD4C1F48DA1	23E3FB5261661879CB02353F8D1FC45C44DB1C04	98E4821C98E5CA98757F0BD5013C33C8DAE400AC15919218F3BAEFA399E0237C
Chrome Cache Entry: 363	ASCII text, with very long lines (11120)	CB067A37305E199FC37A709397A990E1	D68ECDFE12BDABB1EC91194FD50C83529FE4CAA1	2A62E5CB8A85E60DCB5F03BE2BF946B2F5804FD58A3C3B70F9EB37A201857640
Chrome Cache Entry: 364	Unicode text, UTF-8 text, with very long lines (4116)	5205C92454841958EF13A0EB9D5074D4	C8D40533B38AB4486902C5D1FDA097286436E9A8	F043DC1C51AF4FDFC8D9C7E000C60F1D0AD73210094F25FEC49167DF7981C99A
Chrome Cache Entry: 365	JSON data	2B9DF4847BA579F30F0B37FEBB2659A6	F3FC0F61BCBAB53142A4854293E51572E22F9EB1	AB4A9A7899AEDA213F2351252D5E6E2ED382C1B9762A1376BB03FBAABB4F9CC9
Chrome Cache Entry: 366	ASCII text, with very long lines (8905)	CBC23E4F8FEA4D8789856F4FD4F071EC	C5E99FA5CC94421F62ADFE6C74314ACBA48450E8	16E57FB64469B87B414352325B274BE64B3646763229528A2C39659E11E1014E
Chrome Cache Entry: 367	ASCII text, with very long lines (10448)	BB3A5D83A36399BCF9D672C8403B8B56	53749282F54A3EF65C43F90DBF2714A65209BE2E	B7787E67ABA4FD759FECAB9A6BF7B6B2CF8EFDBD6B0DB7C7F303F8D76E1457D9
Chrome Cache Entry: 368	ASCII text, with very long lines (48338)	9EC64B9C38E11E8367A1325483462D35	EFCBE99F5375B6518AEB41E39D9676998C87A361	F9C3971345E0E699C474F1DD6FC89A671243F69E471A9022BD1E7A9F6DE3F243
Chrome Cache Entry: 369	ASCII text, with very long lines (4251)	33B77C6882439F1AAFC0C589969904FC	99161BC692F2A35B4E918FE0648BE9E8E9259735	10C9D2C4618717F31A5B0346099E9316907CA675C3703DEBB6F2D765834A9BC7
Chrome Cache Entry: 370	ASCII text, with very long lines (5354)	0BE20C0E9A6E9AD48EC8739AE0487EB7	16A8B99B7807282A3AB89756E244D3B44922601B	E25AAE8A33C8370F41A4F032C97C32E040D2C892F1F53A7C5C9E28AB4F98E48C
Chrome Cache Entry: 371	ASCII text, with very long lines (12283)	35CF612CFAA611E075B18E35D2C5BC72	A70D15A5FCA13E59409DDC3259A9A10E79F3AF5E	FB9800D40725AED56E40AA9EC4FFF3726DACAA422E27D2555BAC9A0E8E7B9B0E
Chrome Cache Entry: 372	ASCII text, with very long lines (4069)	DEC752400BD4ECA8EE21D50FAB4C55A3	759D084CE06C2418743AB8063A8CC76E713BCDF9	A20743624A48FFF00B2E5D8A157078F0A8DFEA2E9B63497D2CD46F42001C0C6D
Chrome Cache Entry: 373	ASCII text, with very long lines (12589)	4198C82969C574CE02FB22DC56959921	2535ED9B681A34894D67AC2B73E950D89E86A525	94D77D3FBFB4C111B089685B19192B44233005E31BC99C0060E2B71365F91F6D
Chrome Cache Entry: 374	ASCII text, with very long lines (4893)	01C94CE7FF3D5442DCD2FE7CC14DC497	232176A5A11A9CF91ADBD0869CA48B85F0EEB425	43F6A44FD13C01E9DBC207019BE99170EDBB7491E57EA430280575BD524D77F5
Chrome Cache Entry: 376	ASCII text, with very long lines (7193)	B9AD17568D93E10D7A26938B4503023D	F6D1738375200CC4DB5B4CB6B8864BC882D725AE	9F12E036B4736225A33F7FECC109988154ECB776D69C9C3BCC3F5ECE4A3DC954
Chrome Cache Entry: 377	ASCII text, with very long lines (10184)	5813C4AE0591218A05AF85646A7F63C5	A9798DB5AE68241AE1CDAD905AA9E9BD158D3CCD	5F1F06020FB62869DDBDFC129E116B44550DFA8FE35677E99C06B63D34E82361
Chrome Cache Entry: 378	ASCII text, with very long lines (9576)	C0614EC9D148008C4431243EA8AE103D	393B2EBCB32C556D6C0B6589189CAF2202B3CDFA	C30D9BE20A688C5081F180BAABF3EDB6E51A5CAE872DE6577F7148900205D67A
Chrome Cache Entry: 380	PNG image data, 144 x 144, 8-bit colormap, non-interlaced	00919F576A1CB40F041748220D234CDF	5619B72B6CFEDCC11FDF4751A345DA497F929709	12AF22F534B12A11D7547EF235A97A21587CACA07BFD99D4E346E2B3C1714A84
Chrome Cache Entry: 381	ASCII text, with very long lines (13882)	50E0626A4E8773D34572DF12EB97B706	81A3D5FC80F4F34575D2D44332F0C169BFD00342	DB47051D1C04BAE8FF21AF7EBC26104B6B5D4DF27E4EA9CA2E178C6C47E830D1
Chrome Cache Entry: 382	ASCII text	FE46325BF6167047462E10177C5D208F	B54445BCCC3F97503835D374A8BEEDE48759723D	E46A8F98BDF831BBDCA0057CD9F046E6454C85478BDE2202A8FAEE6BDBF7B683
Chrome Cache Entry: 383	ASCII text, with very long lines (1249)	B48E6F35C71F8C4305E432A2375247C2	729D08B29DAB0F87C967A6731F8586C168A1EBAB	95054980E7BEB649D2BE3A26965E0E49E10225ABD8975FBC2A35B1A065E19CA8
Chrome Cache Entry: 385	ASCII text, with very long lines (10967)	3400C3FE40DA3B32D9C6F0EE828C96D5	CFF812B0A581D78EFAB1DA9304A52A8D3EAF7271	0364875591011BD61E491F10A73E049973AD5BCDB355A89A94AE137280956C98
Chrome Cache Entry: 386	ASCII text, with very long lines (30855)	AED9C393F29A29DEAF8309FDE004C2DA	BC304D47F92F18C3B8FBDE4623B18C4B5303E508	17294A434B55DE436D5822EABDB16DF15012073A47609ABC20BF899AED7B241C
Chrome Cache Entry: 387	PNG image data, 600 x 1, 8-bit/color RGBA, non-interlaced	3EDA15637AFEAC6078F56C9DCC9BBDB8	97B900884183CB8CF99BA069EEDC280C599C1B74	68C66D144855BA2BC8B8BEE88BB266047367708C1E281A21B9D729B1FBD23429
Chrome Cache Entry: 388	ASCII text, with very long lines (3327)	14FE863FD4E347384CDF377A59366533	D56A9E537AF27C708271D06BE45A1B17149C24C9	A1DD7AC7DC8AE52400AC782E379EF72DC8449582D40DE7C4F15FDE12D49FCD92
Chrome Cache Entry: 389	ASCII text, with very long lines (13476)	8921B4F0C298581754AE4C65B3D01F72	C013ED8089950828F28C8305532951596574A352	021CA50B1ABF54DBB69D8B24A06CF7236F350B821ABD448C62B79C710AC52F6D
Chrome Cache Entry: 390	ASCII text, with very long lines (1278)	E49A79CBF8DAA488B6DB2BA6056A046C	96192C0AD00C6907CD60EB9D2690FFDDE46B8C33	9E28E30E7C503963DCEA86D92CE821140CBC3DF310295FD1EE14A9F74AED750C
Chrome Cache Entry: 391	WebAssembly (wasm) binary module version 0x1 (MVP)	F0C734CD4EB9D61D3B0E3BE434D39CFC	2DB2C38F18F2EE64EB4E14432D80AB5EF2D87C9B	8172234E24B53A0F71EDF8AACCE4FA0A2DF3306A0592FA975DFF8996F50C88B0
Chrome Cache Entry: 392	Unicode text, UTF-8 text, with very long lines (13485)	FE6FB1251D637CFFFA41661E5DB941D7	53B68520B09EFA8F9BE6850EE42A91E716358DCE	5D156B4208475A3C81DE12F6EFEE6D14E540D774DE9DA856842868F31BE6405A
Chrome Cache Entry: 393	ASCII text, with very long lines (13750)	C87ABF9A8D075A429E6133149E247638	6D8F8D681E78207E71AE6553D878971F39D8BBC3	368C27BB0CC4C129218AD9B6427A8A954C601CA66EF8ED03DD15D1713DDF1FB3
Chrome Cache Entry: 394	Web Open Font Format, TrueType, length 15564, version 1.3277	BFD1591908B1C5A0653348E7A0D63018	AB933EB1258582C1E38357FE762F647B4806E30A	E6615E26D74377EF43FA50C456A7142E7C5384DFE854D9C33E0CC6A3CA6B0EDC
Chrome Cache Entry: 395	Web Open Font Format, TrueType, length 15696, version 1.3277	A8482C77FEAB1EC29835C17337F19170	FF7CFA9DD949F57B01AC68BDE8355290EEF11B38	7C7878E552E192332F01AB2A0074036A836FA2A4B8F88487B3552291A6AAC33E
Chrome Cache Entry: 396	ASCII text, with very long lines (15711)	D2D4B3E6C312D525A00F0FDCCFBC7D3D	88C05AA5D2AB3C8729128BA70C8BBF4A7F538026	3DC533067F7CE6843478B1BA523BBF90FB87014994A8485A1F61AF41D4CFB203
Chrome Cache Entry: 397	GIF image data, version 89a, 352 x 3	166DE53471265253AB3A456DEFE6DA23	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
Chrome Cache Entry: 398	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 625x809, components 3	AA27CE59B9A37BEBF8130E72FB5DBA70	001C63CDD7646BEE1CA083EA4B41445C87C1320A	359ABF8DD3AA34501BF2491CA7BD6A0B8FCD8C1276F39718D65B14372CB5A973
Chrome Cache Entry: 399	ASCII text, with very long lines (65475)	20FD6D40892CFACCCEC80230EAE58186	DC5A413ABF892B4B3D10F61D46993970DD090E1C	6A099DE12C71CE47085C194F3BFDC8AE98DA8CC9B4886122451362801181909C
Chrome Cache Entry: 400	ASCII text, with no line terminators	9F9FA94F28FE0DE82BC8FD039A7BDB24	6FE91F82974BD5B101782941064BCB2AFDEB17D8	9A37FDC0DBA8B23EB7D3AA9473D59A45B3547CF060D68B4D52253EE0DA1AF92E
Chrome Cache Entry: 401	HTML document, ASCII text, with very long lines (3437), with CRLF line terminators	6635D7000669B3B00D3577DB7EE58F5D	7DB793D847EDC78B731185C85AD93BA4761D139B	4E52043A45804E7CDB6C9D09A0F64A4293082E6F32BB3D689BE4822A6E18BACB
Chrome Cache Entry: 402	ASCII text, with very long lines (8876)	C5F10F48AA10D4449526A4FC4B534D24	2AF906B8B95437BDA7713AA315B84DC58ABA4117	7F28F5CAA828EFE3BF1C59286ACE586BE35996EBB34E3AA7D181DB3968E1B80B
Chrome Cache Entry: 403	ASCII text, with very long lines (3586)	9BDC5CC2B20F1839B955BF495D2F5471	0EF6ECD22D72E0A920DA6FB192A21FF2AAE721C0	4A89A97948A79BA74876ABBB43CD92991E10B889C16C0E7831C493434500FFB5
Chrome Cache Entry: 404	ASCII text, with very long lines (1753)	2C65B53B756BCD57AFDDC711D6E3B96A	4C618BC2B4097FE61ADB14E87784F9E60F410FC5	B48447307A0523A5285B5C6234059D5FF832330601B23D7A320DEDD13E089960
Chrome Cache Entry: 406	ASCII text, with very long lines (16689)	F476792C89B3CB893DC8AE94B5FF64F3	DD1176BB42791FCD7D4D2286A35CB56850CF63A7	62ADED330AD58E8B4002D2B58FB8C5859D1B3961BC39ADE984DF7D96000CF54B
Chrome Cache Entry: 407	Web Open Font Format, TrueType, length 11476, version 1.3277	4E7AFA2D04F2FC5D301A115267B59E43	E4399E3FF38B1335DADD18AF763252F78A420376	6797E158026751C76BFB6380BFF17A239902D456B721A4A97162E7A47FF23EC9
Chrome Cache Entry: 408	ASCII text, with CRLF, LF line terminators	D2C7B285712CA981A8C982944156B91D	AEBA38894A4CC6F9B82CFAE3F5F8B0C3057C3964	872AB2B1CD553085722CFFB933F1C23590850315D73EA84F17C21ECB6C7FED10
Chrome Cache Entry: 409	ASCII text, with very long lines (25009)	E89CCFA7FB436F1F6BC0977225A99A71	D674AF4F5A93134E473C2D83C2AA02BDAC2BE4D7	419EAE6742498CC0A1F0E62E9D1DFBCC9BC853D796CA1F8641D6A30E61136DFB
Chrome Cache Entry: 410	SVG Scalable Vector Graphics image	D3E99DC5C534B41FAC830E37F9C7CF79	3361024E24A7A289D7456C752A815204B5089086	DD83F95D0017AACB701E9681ED4528E949419F34B6E85B7A7A44D861500DCDD0

Phishing

AI detected phishing page

Source: https://weblinkdsafedoc.shop

Phishing site detected (based on favicon image match)

Source: https://weblinkdsafedoc.shop/?0qo4nd0fw=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&sso_reload=true	Matcher: Template: microsoft matched with high similarity
Source: https://weblinkdsafedoc.shop	Matcher: Template: microsoft matched with high similarity

Yara detected HtmlPhish54

Source: Yara match	File source: 5.9.pages.csv, type: HTML
Source: Yara match	File source: 5.9.pages.csv, type: HTML
Source: Yara match	File source: 6.10.pages.csv, type: HTML
Source: Yara match	File source: 6.12.pages.csv, type: HTML
Source: Yara match	File source: 5.9.pages.csv, type: HTML
Source: Yara match	File source: 6.10.pages.csv, type: HTML
Source: Yara match	File source: 6.12.pages.csv, type: HTML

Phishing site detected (based on image similarity)

Matcher: Found strong image similarity, brand: MICROSOFT

Phishing site or detected (based on various text indicators)

Source: Chrome DOM: 3.6

Found iframes

Source: https://weblinkdsafedoc.shop/?0qo4nd0fw=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmY2xpZW50LXJlcXVlc3QtaWQ9MDk1MDhiMjMtZjViYi0wOWUyLTBlMjItYjQ2YmM1Y2E2NjAyJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODU1NzE4MDA0MjkyOTMwNS4zNjMwYmEwNS0zMjA5LTQyMzYtYjk0Ni1kOTI0ZDAwZmY1NmEmc3RhdGU9RGNzNUVvQWdFQVhSUWN2aklOX1pZSTREUlpFYWVuMEpYbWVkaU9qY2ppMWhoNnBMTTZ0UEE1U0RRMkMzdUdCMFdCWkdaR1h4UEVJOXoyQ2R3RnJtUGUzM0t1X1h5dzg=&sso_reload=true	HTTP Parser: Iframe src: https://outlook.office365.com/owa/prefetch.aspx
Source: https://weblinkdsafedoc.shop/?0qo4nd0fw=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&sso_reload=true	HTTP Parser: Iframe src: https://outlook.office365.com/owa/prefetch.aspx

HTML body contains low number of good links

HTTP Parser: Number of links: 0

HTML page contains hidden URLs or javascript code

HTML page contains obfuscate script src

Source: https://weblinkdsafedoc.shop/?0qo4nd0fw=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJT	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX
Source: https://weblinkdsafedoc.shop/?0qo4nd0fw=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJT	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX
Source: https://weblinkdsafedoc.shop/?0qo4nd0fw=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJT	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX

HTTP Parser: <input type="password" .../> found

Source: file:///C:/Users/user/Downloads/Kinetic%20Construction%20Quotation%20Request.pdf	HTTP Parser: No favicon
Source: file:///C:/Users/user/Downloads/Kinetic%20Construction%20Quotation%20Request.pdf	HTTP Parser: No favicon
Source: https://weblinkdsafedoc.shop/?0qo4nd0fw=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	HTTP Parser: No favicon
Source: https://weblinkdsafedoc.shop/?0qo4nd0fw=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&sso_reload=true	HTTP Parser: No favicon
Source: https://weblinkdsafedoc.shop/?0qo4nd0fw=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&sso_reload=true	HTTP Parser: No favicon

Source: https://weblinkdsafedoc.shop/?0qo4nd0fw=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&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://weblinkdsafedoc.shop/?0qo4nd0fw=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&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://weblinkdsafedoc.shop/?0qo4nd0fw=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&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://weblinkdsafedoc.shop/?0qo4nd0fw=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&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.16:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.16:49866 version: TLS 1.2

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27

Source: global traffic	DNS traffic detected: DNS query: 1drv.ms
Source: global traffic	DNS traffic detected: DNS query: onedrive.live.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: p.sfx.ms
Source: global traffic	DNS traffic detected: DNS query: api-badgerp.svc.ms
Source: global traffic	DNS traffic detected: DNS query: api.onedrive.com
Source: global traffic	DNS traffic detected: DNS query: my.microsoftpersonalcontent.com
Source: global traffic	DNS traffic detected: DNS query: eastus1-mediap.svc.ms
Source: global traffic	DNS traffic detected: DNS query: storage.live.com
Source: global traffic	DNS traffic detected: DNS query: weblinkdsafedoc.shop
Source: global traffic	DNS traffic detected: DNS query: spo.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: m365cdn.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: outlook.office365.com
Source: global traffic	DNS traffic detected: DNS query: r4.res.office365.com
Source: global traffic	DNS traffic detected: DNS query: logincdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: acctcdn.msftauth.net

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866

Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.16:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.16:49866 version: TLS 1.2

Source: classification engine

Classification label: mal72.phis.win@25/171@52/250

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://1drv.ms/b/c/76a2f2769a0f2d92/EVBBlcPr69hPlwB4teIJkR8BhOEwtE3haDg1sSdukRfZrw?e=geYoLr
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2184 --field-trial-handle=1916,i,16339929933433188218,11793937949606491871,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2184 --field-trial-handle=1916,i,16339929933433188218,11793937949606491871,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Source: Window Recorder

Window detected: More than 3 window changes detected

Drops files with a non-matching file extension (content does not match file extension)

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: Chrome Cache Entry: 325

Jump to dropped file

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

ID:	1467833
Product:	CloudBasic
Start time:	21:24:48
Start date:	04.07.2024
Cookbook:	defaultwindowsinteractivecookbook.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Windows Analysis Report
https://1drv.ms/b/c/76a2f2769a0f2d92/EVBBlcPr69hPlwB4teIJkR8BhOEwtE3haDg1sSdukRfZrw?e=geYoLr

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Persistence and Installation Behavior

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://1drv.ms/b/c/76a2f2769a0f2d92/EVBBlcPr69hPlwB4teIJkR8BhOEwtE3haDg1sSdukRfZrw?e=geYoLr

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Persistence and Installation Behavior

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://1drv.ms/b/c/76a2f2769a0f2d92/EVBBlcPr69hPlwB4teIJkR8BhOEwtE3haDg1sSdukRfZrw?e=geYoLr