Edit tour
Windows
Analysis Report
FW_ SLS properties Credit application.msg
Overview
General Information
| Sample name: | FW_ SLS properties Credit application.msg |
| Analysis ID: | 1498073 |
| MD5: | 6550979bbc9d04348f3d32e0764ad95a |
| SHA1: | caa91816d5da43dee533d98775e9ff7cfc272819 |
| SHA256: | 899bf7076e1030ae35dbf1e13157d62b707593734fd146b6379cb5ce17fbe6be |
| Infos: |  |
 | |
Detection
| Score: | 48 |
| Range: | 0 - 100 |
| Whitelisted: | false |
| Confidence: | 100% |
Signatures
Phishing site detected (based on shot match)
Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)
HTML page contains hidden javascript code
Javascript checks online IP of machine
Queries the volume information (name, serial number etc) of a device
Sigma detected: Office Autorun Keys Modification
Stores files to the Windows start menu directory
Classification
- System is w10x64_ra
OUTLOOK.EXE (PID: 6780 cmdline: "C:\Progra m Files (x 86)\Micros oft Office \Root\Offi ce16\OUTLO OK.EXE" /f "C:\Users \user\Desk top\FW_ SL S properti es Credit applicatio n.msg" MD5: 91A5292942864110ED734005B7E005C0) 
ai.exe (PID: 6960 cmdline: "C:\Progra m Files (x 86)\Micros oft Office \root\vfs\ ProgramFil esCommonX6 4\Microsof t Shared\O ffice16\ai .exe" "596 D25AB-B66E -4175-A155 -48EB7DB65 00E" "6D46 B4B3-AA18- 4D8C-B7BC- 95B0F75ACE FD" "6780" "C:\Progr am Files ( x86)\Micro soft Offic e\Root\Off ice16\OUTL OOK.EXE" " WordCombin edFloatieL reOnline.o nnx" MD5: EC652BEDD90E089D9406AFED89A8A8BD) 
chrome.exe (PID: 6388 cmdline: "C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --st art-maximi zed --sing le-argumen t https:// urldefense .proofpoin t.com/v2/u rl?u=https -3A__www.c anva.com_d esign_DAGO mfvTQik_JO V039GfGLa9 -2DL3q9YZI rQ_view-3F utm-5Fcont ent-3DDAGO mfvTQik-26 utm-5Fcamp aign-3Ddes ignshare-2 6utm-5Fmed ium-3Dlink -26utm-5Fs ource-3Ded itor&d=DwM GaQ&c=euGZ stcaTDllvi mEN8b7jXrw qOf-v5A_Cd pgnVfiiMM& r=_q-s3QiV uOPjtHJaJV kKfweCaffZ 83--RRmzYL W5xz8&m=md W_iTAcERmy kitoq0JvIE ABLskmQdaE glbGg99bNm -8JYwQDx66 eHAvBVhOGz WR&s=7BTLf 4d7joI8hUO D4oRSjtHYM yv5oKmd9mD 0yG-l0R8&e = MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA) - chrome.exe (PID: 4188 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --ty pe=utility --utility -sub-type= network.mo jom.Networ kService - -lang=en-U S --servic e-sandbox- type=none --mojo-pla tform-chan nel-handle =2328 --fi eld-trial- handle=203 2,i,114687 6927556935 7622,91912 8370813001 9680,26214 4 --disabl e-features =Optimizat ionGuideMo delDownloa ding,Optim izationHin ts,Optimiz ationHints Fetching,O ptimizatio nTargetPre diction /p refetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA) - chrome.exe (PID: 3772 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --ty pe=utility --utility -sub-type= audio.mojo m.AudioSer vice --lan g=en-US -- service-sa ndbox-type =audio --m ojo-platfo rm-channel -handle=58 00 --field -trial-han dle=2032,i ,114687692 7556935762 2,91912837 0813001968 0,262144 - -disable-f eatures=Op timization GuideModel Downloadin g,Optimiza tionHints, Optimizati onHintsFet ching,Opti mizationTa rgetPredic tion /pref etch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA) - chrome.exe (PID: 1132 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --st art-maximi zed --sing le-argumen t https:// urldefense .proofpoin t.com/v2/u rl?u=https -3A__www.c anva.com_d esign_DAGO mfvTQik_JO V039GfGLa9 -2DL3q9YZI rQ_view-3F utm-5Fcont ent-3DDAGO mfvTQik-26 utm-5Fcamp aign-3Ddes ignshare-2 6utm-5Fmed ium-3Dlink -26utm-5Fs ource-3Ded itor&d=DwM GaQ&c=euGZ stcaTDllvi mEN8b7jXrw qOf-v5A_Cd pgnVfiiMM& r=_q-s3QiV uOPjtHJaJV kKfweCaffZ 83--RRmzYL W5xz8&m=md W_iTAcERmy kitoq0JvIE ABLskmQdaE glbGg99bNm -8JYwQDx66 eHAvBVhOGz WR&s=7BTLf 4d7joI8hUO D4oRSjtHYM yv5oKmd9mD 0yG-l0R8&e = MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA) - chrome.exe (PID: 1508 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --ty pe=utility --utility -sub-type= network.mo jom.Networ kService - -lang=en-U S --servic e-sandbox- type=none --mojo-pla tform-chan nel-handle =2176 --fi eld-trial- handle=190 8,i,174276 9738245992 3548,16447 6694379093 09874,2621 44 --disab le-feature s=Optimiza tionGuideM odelDownlo ading,Opti mizationHi nts,Optimi zationHint sFetching, Optimizati onTargetPr ediction / prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)
- cleanup
⊘No yara matches
| Source: | Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): | ||
⊘No Suricata rule has matched
Click to jump to signature section
Show All Signature Results
Phishing |   |
|---|
| Source: | Matcher: | ||
| Source: | Matcher: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | Memory has grown: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | Classification label: | ||
| Source: | File created: | ||
| Source: | File created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Key value queried: | ||
| Source: | Window found: | ||
| Source: | Window detected: | ||
| Source: | Key opened: | ||
| Source: | File created: | ||
| Source: | File created: | ||
| Source: | File created: | ||
| Source: | File created: | ||
| Source: | File created: | ||
| Source: | File created: | ||
| Source: | File created: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | File Volume queried: | ||
| Source: | Process information queried: | ||
| Source: | Queries volume information: | ||
| Source: | Key value queried: | ||
| Reconnaissance | Resource Development | Initial Access | Execution | Persistence | Privilege Escalation | Defense Evasion | Credential Access | Discovery | Lateral Movement | Collection | Command and Control | Exfiltration | Impact |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Gather Victim Identity Information | 1 Scripting | Valid Accounts | Windows Management Instrumentation | 1 Scripting | 1 Process Injection | 1 Masquerading | OS Credential Dumping | 1 Process Discovery | Remote Services | Data from Local System | 2 Encrypted Channel | Exfiltration Over Other Network Medium | Abuse Accessibility Features |
| Credentials | Domains | Default Accounts | Scheduled Task/Job | 1 DLL Side-Loading | 1 DLL Side-Loading | 1 Process Injection | LSASS Memory | 13 System Information Discovery | Remote Desktop Protocol | Data from Removable Media | 1 Non-Application Layer Protocol | Exfiltration Over Bluetooth | Network Denial of Service |
| Email Addresses | DNS Server | Domain Accounts | At | 1 Registry Run Keys / Startup Folder | 1 Registry Run Keys / Startup Folder | 1 Deobfuscate/Decode Files or Information | Security Account Manager | Query Registry | SMB/Windows Admin Shares | Data from Network Shared Drive | 2 Application Layer Protocol | Automated Exfiltration | Data Encrypted for Impact |
| Employee Names | Virtual Private Server | Local Accounts | Cron | Login Hook | 1 Extra Window Memory Injection | 1 DLL Side-Loading | NTDS | System Network Configuration Discovery | Distributed Component Object Model | Input Capture | Protocol Impersonation | Traffic Duplication | Data Destruction |
| Gather Victim Network Information | Server | Cloud Accounts | Launchd | Network Logon Script | Network Logon Script | 1 Extra Window Memory Injection | LSA Secrets | Internet Connection Discovery | SSH | Keylogging | Fallback Channels | Scheduled Transfer | Data Encrypted for Impact |
This section contains all screenshots as thumbnails, including those not shown in the slideshow.
⊘No Antivirus matches
⊘No Antivirus matches
⊘No Antivirus matches
⊘No Antivirus matches
| Source | Detection | Scanner | Label | Link |
|---|---|---|---|---|
| 0% | Avira URL Cloud | safe |
| Name | IP | Active | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|---|---|
| static.cloudflareinsights.com | 104.16.80.73 | true | false | unknown | |
| logicwavewe.ru | 188.114.96.3 | true | false | unknown | |
| p.tvpixel.com | 99.83.205.94 | true | false | unknown | |
| www.canva.com | 104.16.102.112 | true | false | unknown | |
| adservice.google.com | 142.250.185.66 | true | false | unknown | |
| spdc-global.pbp.gysm.yahoodns.net | 34.252.40.201 | true | false | unknown | |
| d1w725hft9421a.cloudfront.net | 3.161.119.88 | true | false | unknown | |
| ct.canva.com | 216.239.32.21 | true | false | unknown | |
| code.jquery.com | 151.101.66.137 | true | false | unknown | |
| static.canva.com | 104.16.103.112 | true | false | unknown | |
| media.canva.com | 104.16.102.112 | true | false | unknown | |
| cdnjs.cloudflare.com | 104.17.24.14 | true | false | unknown | |
| font-public.canva.com | 104.16.102.112 | true | false | unknown | |
| www.google.com | 142.250.185.196 | true | false | unknown | |
| a.nel.cloudflare.com | 35.190.80.1 | true | false | unknown | |
| o13855.ingest.sentry.io | 34.120.195.249 | true | false | unknown | |
| urldefense.com | 52.71.28.102 | true | false | unknown | |
| ad.doubleclick.net | 142.250.185.230 | true | false | unknown | |
| chunk-composing.canva.com | 104.16.102.112 | true | false | unknown | |
| logicvortexe.pl | 172.67.140.75 | true | false | unknown | |
| telemetry.canva.com | 104.16.102.112 | true | false | unknown | |
| googleads.g.doubleclick.net | 172.217.18.2 | true | false | unknown | |
| challenges.cloudflare.com | 104.18.94.41 | true | false | unknown | |
| sb.scorecardresearch.com | 18.239.83.58 | true | false | unknown | |
| api.ipify.org | 104.26.13.205 | true | false | unknown | |
| sp.analytics.yahoo.com | unknown | unknown | false | unknown | |
| urldefense.proofpoint.com | unknown | unknown | false | unknown | |
| cdn.metadata.io | unknown | unknown | false | unknown |
| Name | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|
| false |
| unknown | |
| true | unknown | ||
| true | unknown | ||
| false | unknown |
- No. of IPs < 25%
- 25% < No. of IPs < 50%
- 50% < No. of IPs < 75%
- 75% < No. of IPs
| IP | Domain | Country | Flag | ASN | ASN Name | Malicious |
|---|---|---|---|---|---|---|
| 142.250.186.67 | unknown | United States | 15169 | GOOGLEUS | false | |
| 52.71.28.102 | urldefense.com | United States | 14618 | AMAZON-AESUS | false | |
| 142.250.74.200 | unknown | United States | 15169 | GOOGLEUS | false | |
| 142.250.185.100 | unknown | United States | 15169 | GOOGLEUS | false | |
| 52.111.231.25 | unknown | United States | 8075 | MICROSOFT-CORP-MSN-AS-BLOCKUS | false | |
| 104.16.80.73 | static.cloudflareinsights.com | United States | 13335 | CLOUDFLARENETUS | false | |
| 104.16.102.112 | www.canva.com | United States | 13335 | CLOUDFLARENETUS | false | |
| 216.239.36.21 | unknown | United States | 15169 | GOOGLEUS | false | |
| 35.190.80.1 | a.nel.cloudflare.com | United States | 15169 | GOOGLEUS | false | |
| 172.217.16.142 | unknown | United States | 15169 | GOOGLEUS | false | |
| 142.250.185.66 | adservice.google.com | United States | 15169 | GOOGLEUS | false | |
| 104.26.12.205 | unknown | United States | 13335 | CLOUDFLARENETUS | false | |
| 142.250.186.36 | unknown | United States | 15169 | GOOGLEUS | false | |
| 74.125.133.84 | unknown | United States | 15169 | GOOGLEUS | false | |
| 74.125.71.84 | unknown | United States | 15169 | GOOGLEUS | false | |
| 142.250.185.110 | unknown | United States | 15169 | GOOGLEUS | false | |
| 104.18.95.41 | unknown | United States | 13335 | CLOUDFLARENETUS | false | |
| 172.217.18.2 | googleads.g.doubleclick.net | United States | 15169 | GOOGLEUS | false | |
| 18.66.102.115 | unknown | United States | 3 | MIT-GATEWAYSUS | false | |
| 239.255.255.250 | unknown | Reserved | unknown | unknown | false | |
| 142.250.185.196 | www.google.com | United States | 15169 | GOOGLEUS | false | |
| 142.250.185.230 | ad.doubleclick.net | United States | 15169 | GOOGLEUS | false | |
| 104.17.25.14 | unknown | United States | 13335 | CLOUDFLARENETUS | false | |
| 142.250.186.130 | unknown | United States | 15169 | GOOGLEUS | false | |
| 104.18.94.41 | challenges.cloudflare.com | United States | 13335 | CLOUDFLARENETUS | false | |
| 216.58.206.38 | unknown | United States | 15169 | GOOGLEUS | false | |
| 52.182.141.63 | unknown | United States | 8075 | MICROSOFT-CORP-MSN-AS-BLOCKUS | false | |
| 3.161.119.88 | d1w725hft9421a.cloudfront.net | United States | 16509 | AMAZON-02US | false | |
| 142.250.181.232 | unknown | United States | 15169 | GOOGLEUS | false | |
| 99.83.205.94 | p.tvpixel.com | United States | 16509 | AMAZON-02US | false | |
| 104.16.79.73 | unknown | United States | 13335 | CLOUDFLARENETUS | false | |
| 104.26.13.205 | api.ipify.org | United States | 13335 | CLOUDFLARENETUS | false | |
| 142.250.74.195 | unknown | United States | 15169 | GOOGLEUS | false | |
| 52.113.194.132 | unknown | United States | 8068 | MICROSOFT-CORP-MSN-AS-BLOCKUS | false | |
| 142.250.110.84 | unknown | United States | 15169 | GOOGLEUS | false | |
| 104.17.24.14 | cdnjs.cloudflare.com | United States | 13335 | CLOUDFLARENETUS | false | |
| 3.255.41.64 | unknown | United States | 16509 | AMAZON-02US | false | |
| 216.239.32.21 | ct.canva.com | United States | 15169 | GOOGLEUS | false | |
| 104.16.103.112 | static.canva.com | United States | 13335 | CLOUDFLARENETUS | false | |
| 172.67.140.75 | logicvortexe.pl | United States | 13335 | CLOUDFLARENETUS | false | |
| 142.250.185.130 | unknown | United States | 15169 | GOOGLEUS | false | |
| 34.252.40.201 | spdc-global.pbp.gysm.yahoodns.net | United States | 16509 | AMAZON-02US | false | |
| 18.239.83.98 | unknown | United States | 16509 | AMAZON-02US | false | |
| 188.114.96.3 | logicwavewe.ru | European Union | 13335 | CLOUDFLARENETUS | false | |
| 184.28.90.27 | unknown | United States | 16625 | AKAMAI-ASUS | false | |
| 18.239.83.58 | sb.scorecardresearch.com | United States | 16509 | AMAZON-02US | false | |
| 34.120.195.249 | o13855.ingest.sentry.io | United States | 15169 | GOOGLEUS | false | |
| 172.217.16.132 | unknown | United States | 15169 | GOOGLEUS | false |
| IP |
|---|
| 192.168.2.17 |
| Joe Sandbox version: | 40.0.0 Tourmaline |
| Analysis ID: | 1498073 |
| Start date and time: | 2024-08-23 16:00:35 +02:00 |
| Joe Sandbox product: | CloudBasic |
| Overall analysis duration: | |
| Hypervisor based Inspection enabled: | false |
| Report type: | full |
| Cookbook file name: | defaultwindowsinteractivecookbook.jbs |
| Analysis system description: | Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01 |
| Number of analysed new started processes analysed: | 26 |
| Number of new started drivers analysed: | 0 |
| Number of existing processes analysed: | 0 |
| Number of existing drivers analysed: | 0 |
| Number of injected processes analysed: | 0 |
| Technologies: |
|
| Analysis Mode: | stream |
| Analysis stop reason: | Timeout |
| Sample name: | FW_ SLS properties Credit application.msg |
| Detection: | MAL |
| Classification: | mal48.phis.winMSG@31/108@102/290 |
| Cookbook Comments: |
|
- Exclude process from analysis (whitelisted): dllhost.exe, TextInputHost.exe
- Excluded IPs from analysis (whitelisted): 52.113.194.132
- Excluded domains from analysis (whitelisted): ecs.office.com, s-0005.s-msedge.net, ecs.office.trafficmanager.net, s-0005-office.config.skype.com, ecs-office.s-0005.s-msedge.net
- Not all processes where analyzed, report is missing behavior information
- Report size getting too big, too many NtQueryAttributesFile calls found.
- Report size getting too big, too many NtQueryValueKey calls found.
- Report size getting too big, too many NtReadVirtualMemory calls found.
- VT rate limit hit for: FW_ SLS properties Credit application.msg
| Input | Output |
|---|---|
| URL: Email Model: jbxai | {
"brand":["SIAM"],
"contains_trigger_text":false,
"prominent_button_name":"REVIEW DOCUMENT",
"text_input_field_labels":["unknown"],
"pdf_icon_visible":false,
"has_visible_captcha":false,
"has_urgent_text":false,
"has_visible_qrcode":false} |
 | |
| URL: e-Mail Model: gpt-4o | ```json
{
"riskscore": 8,
"brand_impersonated": "Steam Solutions, SLS Properties",
"reasons": "The email contains several indicators of phishing. Firstly, it impersonates two brands: Steam Solutions and SLS Properties. The sender's email address (cvazquez@steamsolutions.com) appears legitimate, but this can be easily spoofed. The subject line is not visible, but the body of the email contains a prominent 'REVIEW DOCUMENT' button, which is a common tactic to induce clicks. The email also includes a warning that it originated from outside the organization, which is a red flag. The presence of multiple email addresses and contact information at the bottom could be an attempt to appear legitimate. However, the overall structure and the urgent call to action suggest phishing."
} |
| |
| URL: https://logicvortexe.pl/YBBW6/ Model: jbxai | {
"brand":["CLOUDFLARE"],
"contains_trigger_text":false,
"prominent_button_name":"unknown",
"text_input_field_labels":["unknown"],
"pdf_icon_visible":false,
"has_visible_captcha":false,
"has_urgent_text":false,
"has_visible_qrcode":false} |
 | |
| URL: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/xkbon/0x4AAAAAAAhTwdWbdnGPyTzD/auto/fbE/normal/auto/ Model: jbxai | {
"brand":["CLOUDFLARE"],
"contains_trigger_text":false,
"prominent_button_name":"unknown",
"text_input_field_labels":["unknown"],
"pdf_icon_visible":false,
"has_visible_captcha":false,
"has_urgent_text":false,
"has_visible_qrcode":false} |
|
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 231348 |
| Entropy (8bit): | 4.393208906148746 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | D0DFA49BDC34FD1D8714D090254C16F2 |
| SHA1: | 95BC18853EB00911C2F99AEB6DBF1ED16726AD8C |
| SHA-256: | FFEDA7AFA486DB73D46C3A382C9B9D2FDACF10F5BD6F51D17537AFEA685B50C4 |
| SHA-512: | 5A67D7C7768066F67B203A02D290E9F7C679BA5CB35439A926981CC15E5CCE721DE494482871ABF752AEA0193D820C55FEF9A403433C5156AED190A05C417EEF |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | modified |
| Size (bytes): | 2167 |
| Entropy (8bit): | 5.11489207072026 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 351B43DEAF339F1AAC0784B21D758E23 |
| SHA1: | 1268B60C4F9B38402ED377454FEFAA732231D4A7 |
| SHA-256: | 11011D2F4DE3336444A06874675162BFAD5B38FB9D2E2A453CDC4C9B9A9ACD14 |
| SHA-512: | B944086817E31DADEC9A77CE6BDD6EAF9B71141E515092C8599DDF3EABAE791A3E73BA5FCBC4B348E8EC4107093B4DF70226CBFDE847B1009536BBF022D06257 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Amasis MT Pro\33838392561.ttf
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 157496 |
| Entropy (8bit): | 5.873883254547588 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | EEAF543EB37D720685E5C2B1CED42CA1 |
| SHA1: | 1CD542229D3CFCD022383D85EB8A8A9C93CC637D |
| SHA-256: | 0F026E9899C85018A489BE8FBE9AFB6475EC755CF08AEACE0CC989A0D961D70D |
| SHA-512: | 66F560B26BAA4C13B0CA3A13BEE53336B3100F8CC8B3D67AB5391AA30C27C761D46487F6E6F1EAE0532E8D54B4D06AB2F463EC831BE8DBE426541A9A4248D070 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 126932 |
| Entropy (8bit): | 5.9464216979504085 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 630AACCB7BB6056DFB1A3929CA4BC0B8 |
| SHA1: | F97864AFF9E27E3C057CBA4833185D7B3B9F605B |
| SHA-256: | 272A2548F5F10B502B68F20D751671D4A32EE67B5D1CB630F1F3DD5DF7951080 |
| SHA-512: | 767AD909B2CB15A050B9B31B2B2F0E5A940C2ABDEFA8F3D16AB2521E0BB7B22B45D827E0DE2A0AADC6E044BDCFE78F9C96A4A7C6C64DA7C2B8685A67127B2459 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 32768 |
| Entropy (8bit): | 0.04568135146424745 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | ACA21289CEA0E6DECAAC0556ADC51EFE |
| SHA1: | 065858C00BCA2CF8AB1A1CE9734C2C4C5A1EF9DF |
| SHA-256: | 2755953CFBAD762CC8956DD08F4A0738507C0BA2A11A934DE7289DA44E31BB19 |
| SHA-512: | 36DEDFD671AACA68677E2C965BB7C59581DD4165B72DCA70207A8A86AD6FB8245B2BC38F4C2F7B983B7BA09CE25D7AC29909FBC9C2230AB12664AADBA3999CB8 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | modified |
| Size (bytes): | 49472 |
| Entropy (8bit): | 0.4832624230359242 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | EDD04F979D3EA3C013992F739489182A |
| SHA1: | 2C9A7ECC9CAC1C8BAA1381CF3C780BBC4B1144C2 |
| SHA-256: | 3EF35A8B2B85C97F97977A8A3962CE6FFC570C1EC3FF39E99D1D944845DFA4BC |
| SHA-512: | 5239FFD86E1E57CD126FE52A381617CCAB25E982582D5EB554B1DC77DDADA289A72C1A41CC2B7DFF3B26CDFEDD2D5C359E47E1F54D16BA889B20E570A8BE88A7 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 11707 |
| Entropy (8bit): | 7.980492793648253 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 8A0C9A0A1D553280EF0A28818ED6DCCC |
| SHA1: | A810C2024B1F802B175B7693D807F8C22F637EFF |
| SHA-256: | 26354CD5F2E90B2F6C421ED8C704377B05D3265377CE4D2103400FD89AED80E0 |
| SHA-512: | 073B4BF905A3445021C37D4798450429FFCE7581B79D3429342F9928EAD3FCA0FB801288CAAB354B7FC212EEAED09A1CE49C13A60880C4FFBC827EC542AB4D38 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 6174 |
| Entropy (8bit): | 7.955212838132905 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | B117FC31B6D34BEA55E9164A4C9F77B8 |
| SHA1: | 99F23874B30926C4F953574E84C67586838312BD |
| SHA-256: | 6E3B84BCE7645B1A19951E6BBEBBFBC6142BD361A7135802245334270D6BBCE0 |
| SHA-512: | F6C7526DD69E6C1040B99448072697FF3834F860ED444F878F81FB6E0B335F148CDCB56AB6FC7F0A76F597326D6F15C9795B5AA435758355601D787F094EE6A6 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 11785 |
| Entropy (8bit): | 7.976789944894214 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | B8602A0B5B0CEF778F2B125317ABFFD7 |
| SHA1: | BF946CC197E9B60B82535E91823683A20515597A |
| SHA-256: | 217E2C7149D78DAD8073BA2AC988C0890C3AA77759F3D2F94B02A7D1C2511AEF |
| SHA-512: | B4750136EC51A643EE4E4C44D548CE74F73615DF6518D84270EEA7CD8182C436E171553058BE0201AD4B8DEB846E2413B051962909DE6C1809345E17362CE09A |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{205CEDB5-0416-4B58-A5AD-C31F6A9897CF}.tmp
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 31216 |
| Entropy (8bit): | 3.6988387529927587 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 1D6348062B6431DA1E62EF584A97BA34 |
| SHA1: | 51E6A974692A0C654E28ACEC88B813CD5A001D16 |
| SHA-256: | E22652EFCBC4D52E4EC08EA336B77B526F0B2EC24CA8065416DDC0E2C5D6288A |
| SHA-512: | 02FCED3E47E9F465C2BBEB8B901391CD07B253DC1F9358B107F1C8A9F7E74E8CBF7F65E940A905E658DC47E5C91B7833EEE0F0724095D6B9773D8250998D5357 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1724421667782542200_8E978AA2-033F-4351-9E75-DD4AA540DE4C.log
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 20971520 |
| Entropy (8bit): | 0.20141584179480648 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 9C5456D645F52DBDF7BDBECAA4F33BAF |
| SHA1: | 8897BBE5CAA653C3E60F15399229F2BD892364A3 |
| SHA-256: | 5C38BF0AAC87E9CADEE55B55897458517E835AEE1EA21B56DD94947CF36019BD |
| SHA-512: | 5B0E77548B28A3CDC058F907DD06A8CB8139B07CCF8A709F419272DDF7E25EAEDAD0FF2D24149F9398E189556FC58DD7EA80B4C53B668ABD2D52077A0B513DC2 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1724421667783298200_8E978AA2-033F-4351-9E75-DD4AA540DE4C.log
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 20971520 |
| Entropy (8bit): | 0.0 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 8F4E33F3DC3E414FF94E5FB6905CBA8C |
| SHA1: | 9674344C90C2F0646F0B78026E127C9B86E3AD77 |
| SHA-256: | CD52D81E25F372E6FA4DB2C0DFCEB59862C1969CAB17096DA352B34950C973CC |
| SHA-512: | 7FB91E868F3923BBD043725818EF3A5D8D08EBF1059A18AC0FE07040D32EEBA517DA11515E6A4AFAEB29BCC5E0F1543BA2C595B0FE8E6167DDC5E6793EDEF5BB |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
C:\Users\user\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_16827_20130-20240823T1001070563-6780.etl
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | modified |
| Size (bytes): | 94208 |
| Entropy (8bit): | 4.473306886262815 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 785AB74E2E16050FA8FDF25717DA3F27 |
| SHA1: | AFCE13D3C2C18E421AEEEF46A2EBEC0EF0D7C621 |
| SHA-256: | B0220B14CA464F82A907BC78EF106E0AB04DDB9049C1F1716C41FB9B3C81510A |
| SHA-512: | 03B1231DA52014DFB6103C036368D8E6E9B5F51BD59BBD43CBDC4CAE1508A30307796DDDAFA465267B94A16D069ED7BE269A115C9808BB3B713E4809D1830D42 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 163840 |
| Entropy (8bit): | 0.4899935425626479 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 644A41F447820772672D8C4F7BD4D131 |
| SHA1: | 963761EA96272BC9BD99D18BB958737385D75530 |
| SHA-256: | 74B079881BD0F8D7A74E325271FAAD72A6811354D0A7CDD7AE8E303D58809ED0 |
| SHA-512: | 1A6DF2693BE301534FB14CBEE137E83171BACBC5E161FE159B779A58D9A84EA89632E01258B469FC718A018CA68641D47A6AD73690AB812CA7D501492302ED2C |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 30 |
| Entropy (8bit): | 1.2389205950315936 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | B41A78AE5E3E26442471F4BB400D69CF |
| SHA1: | 2299DBE9979B35FA20D22A6863428EFDA80FDB76 |
| SHA-256: | EA246B628ACEDBD50D983359ED528EE44784C26E071F865A54381C3024A4EBE6 |
| SHA-512: | 991517A870AA047B99BDFA701E165F726D671DEF5F3D9E7AED3690B74EA6E304FDF9E62154D973A52E135C0771F73E8A8909BFF6308BA573C58C31C047F529F0 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 18 |
| Entropy (8bit): | 2.725480556997868 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | A5E51FDFAF429614FB5218AB559D299A |
| SHA1: | 262EC76760BB9A83BCFF955C985E70820DF567AE |
| SHA-256: | 3E82E9F60CE38815C28B0E5323268BDA212A84C3A9C7ACCC731360F998DF0240 |
| SHA-512: | 9B68F1C04BDE0024CECFC05A37932368CE2F09BD96C72AB0442E16C8CF5456ED9BB995901095AC1BBDF645255014A5E43AADEE475564F01CA6BE3889C96C29C9 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2677 |
| Entropy (8bit): | 3.9880478568055273 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 52A189E1042A70CF30367C92D8391638 |
| SHA1: | F9C37BBA8D2A09750BDBAC0E07B26E845269CDA9 |
| SHA-256: | FAB92528CD621A7D2B006429F1023BA7A2E112DFAA63F57917AB1C42D1776716 |
| SHA-512: | 64BFCD0BAE80150B574BE7CBA7688C1353FA24350ACF4E5970E84500896D2FD09AF5FCF63451E3ECAEA4B5007563BBD95C7B8B41BE5B91D0A31479D95A5A1B32 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2679 |
| Entropy (8bit): | 3.999455870204461 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 8288B3D20BD80FBD61B56C765B6F64D0 |
| SHA1: | CE2229718007CE57B89A2BE9EB2EC5C7F922BD48 |
| SHA-256: | 6B4A229A932802ECCEE073609FDA5A0CDACB5D84E6348A7528A8C3215F2E77F4 |
| SHA-512: | A34FA10FCC2551EFC995CF34B7101647494B16C95DF69371BE8FBDA9720E11C7126CD6ED000813DE970008E964F9E8EA0EB91C4C8A769E20FAFA759088E9C6DF |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2693 |
| Entropy (8bit): | 4.013185083369415 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 2495EB74499470168CFAF8E030603912 |
| SHA1: | 3A4EF1A481985E22D8910BF2A2F9EAA7A5834858 |
| SHA-256: | CCA092FADE233AC0E85E78E2BEDBB444C182368CAA56228326D1AEB0E2A7B2B0 |
| SHA-512: | F2308DEB94B6F26B2C5CFDC2456D4EF582F34F0DFD9BE60BFA686469A7748F996B26DE7D130A5E50D0B1005DAAC2085DE5E2473B12497B16FC5C962F1C4FAC95 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2681 |
| Entropy (8bit): | 4.000935235781849 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | C7CEA3FCF2DA09222419CA89EB2EC9BC |
| SHA1: | B84AFEE788ECD74BEF60D8D1A5F7F0AD3C5AC27B |
| SHA-256: | F315B380B0E86B655F61939F8C431F8F29B74DE2EEF9F531139A1478CE4326F9 |
| SHA-512: | A76EB46B052FB669740D0E88A15F3DBF4C7436790B02E2D91BD5D82438A475588CB10CE26EF76E97D99955CFD1ACEEE5C0F5244FD07B7B423CFDFC262437F5EF |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2681 |
| Entropy (8bit): | 3.988341562222249 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 290E802F38E6EF28D97BD5AD38AF8AA6 |
| SHA1: | C7747325829ED524ABF98FC7F9AABB5DAA0AB8FA |
| SHA-256: | 948019D2E9C258DB6A35CF322D9333C20E0B37CA3CE24155FE9121BA41C28EBA |
| SHA-512: | 3C2173B9B0B17E6AEFD393DA474C1C7808484B28DFD54323D7F2D2B481FD458DE3B79C89C104F270EBFA51676880E4EC4DAE8DCB9586327A344CEEE1CEC97FC9 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2683 |
| Entropy (8bit): | 4.001247614985305 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 6AD8775FB1788A3DA4284DC174A23995 |
| SHA1: | 071D1F7AFA8DAE192A880E477A200B4C87820E12 |
| SHA-256: | 371A18E1767876E9EB40A9A5C5B6146EE1DCED8F33CDCEFC733E00FF22F48FB9 |
| SHA-512: | B070495487E3A0E3EC54DBE7F43B5B4A34F110D69EECB8E71901BBB80CA6CEAABB6D4F6127CE4BEBCADA41D6BA5227163430F57160DB0050E7A2478539F30844 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 271360 |
| Entropy (8bit): | 1.3301988921323824 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | B11696BA994512B61DDB7821E8318134 |
| SHA1: | 504E65C16CE2FBE82348A3B9ED4DFF30CBA652F1 |
| SHA-256: | 39E7E9D5E5674CD98CD130B676B76D753BD43A0BC6644985B48E82340E2ABE72 |
| SHA-512: | 9DBBBCD618D9C9D0F910400432410DD0ED0B34E42A18A47D30F6FEA404EFC830377EB190C679728C5B727C695741925C6EE3FD232403B43BDB930AF201F225DE |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 131072 |
| Entropy (8bit): | 1.2077208909254642 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 730647F74249DACEF090933959A90AB1 |
| SHA1: | B6A6C9276E81CF3223C9EC7374D3E52E221AF3F8 |
| SHA-256: | 9BB2B69ABF0DAEF4838230D10DE88FEC7F9EF6C6F58E06B01062AD2998DE2D80 |
| SHA-512: | 52D18B042CB467DA6048D1B5EA628F2E29843C0F4ABC940691AD3EBE281F3539E85AD908441FB77A163C5FAEF8D7D0C3D6D3D015231C9D7613B1D7E5484D0FD5 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 540 |
| Entropy (8bit): | 5.505827725159305 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 018618756DD2613FABF85C7F6C03096F |
| SHA1: | 36026C05CD9F661D87D3FC3D558EF5DA15FB7881 |
| SHA-256: | F028647EAB1CD92BEDBC5CB03579D564CEF41C9BF6EC314C77C351BAF551079A |
| SHA-512: | 0E97FA56F620606343B9C96BAC1A5D3B80AB2A8644ECAFC3D92020FE73FA1798FBEE6FBBDAC6E324894B7E62D145B9C8703615B53F7F7D0C4FE0D4CF2774042D |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://static.canva.com/web/5677e6ee55ebdedd.ltr.css |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 42 |
| Entropy (8bit): | 2.9881439641616536 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | D89746888DA2D9510B64A9F031EAECD5 |
| SHA1: | D5FCEB6532643D0D84FFE09C40C481ECDF59E15A |
| SHA-256: | EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629 |
| SHA-512: | D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://adservice.google.com/ddm/fls/z/src=9812343;type=conve0;cat=canva008;ord=39425697;gtm=45j91e48l0v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u6=US;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;ps=1;pcor=37337338;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGOmfvTQik%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 217401 |
| Entropy (8bit): | 5.746596182697426 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 505E7D304434D449AF7B81D45336E032 |
| SHA1: | F2265D66FE416CEB5C5015ACAF4C0C87518A54BE |
| SHA-256: | 7C109040D44461E58A1AC8D02ECB38885CBE79427516618CDCA48264ED6A3F3B |
| SHA-512: | 82A0FE63C115D38D350E0B5C42962ECC92AAFCF6CCC371B72AE02DC708963AC04B524151FC4B87CACD858B8067F25B7A26FDD15346C43835BD6A3EAFB83CEDFD |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://chunk-composing.canva.com/chunk-batch/7497bf481ea2adf1.js+364c04437cf14ff8.js+19efe4a612083a93.js+0d88565c28c62193.js+bfe04665998fe726.strings.js+2debf5e61dfea8d1.js+dad3364637d681fb.strings.js+68d49ab162f83514.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 19026 |
| Entropy (8bit): | 5.185706546268017 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 02EF13754DDE4CA6888C2F3EFE0B39E5 |
| SHA1: | E0118B3E9A6F971A6FD7711D4E5C351F8D497EAD |
| SHA-256: | CAA7C8C866F81F823FF760E8BE7AB4500D4F0C1595B488EE51F9B2955A9CEC9D |
| SHA-512: | 34DFB887E52E1A445232A52329A8A3729AEECD2D007BA09EA26B7A96FE20C1F6D4C24A9E1CB125461418186843F881D9D6D9EE194298B24EDAF1D69B65D4F533 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 35234 |
| Entropy (8bit): | 5.118117952047096 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | E09E2E1FC340201F46C6B422BA600D5A |
| SHA1: | 16D401D9A12AD80829C81CD561D51EB392D402E1 |
| SHA-256: | 4C0EFBD2527DC14E6F890750AFE5C802AC496AB5F74B681D262975A0035790CF |
| SHA-512: | F3D7ED9695D32759B396321DBC382EC0D9864B884FFCE9BDD22CC2DACB29284524EE882A748619AE399CFBB6616621A888879F5540A6DF465C8F18B6D34841F5 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://font-public.canva.com/_fb/s/41d36c36b634199c0ebf5e807fda38d0.css |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 1249 |
| Entropy (8bit): | 5.242453121762845 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | F58515DFE987F7E027C8A71BBC884621 |
| SHA1: | BEC6AEBF5940EA88FBBFF5748D539453D49FA284 |
| SHA-256: | 679E7E62B81267C93D0778083AE0FD0EFE24172FF0AC581835B54165B3D9ED43 |
| SHA-512: | F085346A38318F7935D76909DB0367862924CC9B0D96256F7FF4E8999C041E610BBCDE8CA56C92673BDE0991C85E9C9D9B6726ABD91D0C3177462C80D4A99140 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://logicvortexe.pl/favicon.ico |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 170 |
| Entropy (8bit): | 5.635935684339176 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | C6F5082A3B70BDE830FB5FAB01C3CAE8 |
| SHA1: | 92CAE3FE0D7C6C0A597637C1615F6CD72831607F |
| SHA-256: | D95F06F6A688C6BD075282B98F0DD10D3C92F5C566E4B19E04BDF5C85E3EF31D |
| SHA-512: | FDB1F6C750355778FA713E15D2EEEFCD1523BB5CC2D3C851E06EBA55818F6C2786EDC38E1BFAC076FA45919FECDFD7BAA559499A0470C24A8D3BDD0F0DB53717 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://static.canva.com/web/df587b55a0168cd1.ltr.css |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 5693 |
| Entropy (8bit): | 5.6613363486231325 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 6DDAFDDE71AA31D3761A086790FF1AF9 |
| SHA1: | 35DCB6B15D1EAF2B56275D91BCB201EC8E6BD591 |
| SHA-256: | 2067013FB64EEDF1E7A129CEB41AC00DAC0CF6C43BAC7F4EAF5EF3EB8F32B347 |
| SHA-512: | 63E7AA9741858083C2FDA3355711487F9651CF9F58C126CF429C6DDDD91DACE3C206DBE7BDDE501956BF634ABE761ABE94238BE01B938C068D967CA8B0A55D7F |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://static.canva.com/web/f17ebe21439a211e.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 61 |
| Entropy (8bit): | 4.035372245524405 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | C17CFF0064225FEA35483858724B547C |
| SHA1: | 3914BD6D658A96D3CEC9364BCDC2CF73412C897A |
| SHA-256: | 50250B81A0A8FCFDBB5A5FDDCB96CF15F4418194DE2742225DD7A18AD433838F |
| SHA-512: | F38F4C59915E7FD65F99430CD4303EDC46E5F447EC5AE8A39C4AD18B440A3F63F7EF73057589831F90132278776553CCBC95C2963DE8D7C806C2033A9881AE87 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 10359 |
| Entropy (8bit): | 4.826967222214678 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 4EB0CC037AA215C5FA2EB3C1B342613D |
| SHA1: | 97D135C19209077C0335065F35D53FFFC62CAA88 |
| SHA-256: | E8FB139770EC251E750403322D40DB96C027B9FEB48F4489B76A735F9F0869E5 |
| SHA-512: | 270302A621DD93DE4CA144DAB5F699270B2DCDE0E759FBD63098B09D2C597CF9A07827B8CAF40343E38D3108C8CBF1EDEF6AF44E6944FA0BD99D8467A5D2DD56 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://static.canva.com/web/a0684b0780c739e9.vendor.ltr.css |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 354 |
| Entropy (8bit): | 5.6762578005096325 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | B4F9F0DD587C5ABE6708F44A6E11A53F |
| SHA1: | 28EBFA68F92AE2A96354521FFAD38A3DBE647154 |
| SHA-256: | CCC37C837397D66FD8E0FACFE001CE7FC9F87E48089D73540AD2C2DD95716D04 |
| SHA-512: | D471D889D8EAE3E9190B39376C29400D5AB9BF3C47897B64DC278E4E58314A78F148A44BB315D51591CA5384EAE505AD411BEF7AA706FDD5678023109A809425 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://cdn.metadata.io/pixel/config/1721.json |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 231991 |
| Entropy (8bit): | 5.5523753452642195 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | AEC864050091ECC65AB8425EB6E4DF5C |
| SHA1: | 9554C411BE2EC274C62E733348850669BD0A4F93 |
| SHA-256: | 88CE39D161AE5B1386B558577D6F75B7DF8A3902D0077054BF2D0E8503ACC0DD |
| SHA-512: | 5363D6E7C6D6ADAD497A45C58593E9C82B5C790539296B7D280BD2E5D599F6CB6367EFC3CCE633C821B143C7E77EBE1D18B8AAF9218EF650C86B05748F0049B7 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://accounts.google.com/gsi/client |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 43 |
| Entropy (8bit): | 3.0314906788435274 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 325472601571F31E1BF00674C368D335 |
| SHA1: | 2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A |
| SHA-256: | B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B |
| SHA-512: | 717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://sb.scorecardresearch.com/p2?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=>mcb=1061915155 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 1729 |
| Entropy (8bit): | 5.441222802992031 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 7FFC1511B42C0BAA3F375F86BB8592D1 |
| SHA1: | D0060E4D0D84B5B5A4CB2BEA3EB682F48F94BE93 |
| SHA-256: | 54C010ED9F074582C3ABAF5AE0D24BABF15D584C36046891B5219065B2A1BC0B |
| SHA-512: | 3C8BBA28919A4B470063DB4AB4538605E1F33C503CBF4DD43E0E9545BDE3081458E831DABCF05027BF759D78D73DD18733613C7DC99B479358E25CB43A1801B8 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ct.canva.com/g/collect?v=2&tid=G-EPWEMH6717>m=45je48l0v872399471z8812729902za200zb812729902&_p=1724421764514&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=0&cid=650264388.1724421767&ecid=463242634&ul=en-us&sr=1280x1024&_fplc=0&ur=US-NJ&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=noapi&ec_mode=c&sst.tft=1724421764514&sst.ude=0&_s=1&dl=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGOmfvTQik%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor&dr=&dt=Canva%20Design&sid=1724421767&sct=1&seg=0&en=Loaded%20a%20Page&_fv=1&_nsi=1&_ss=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20278&ep.event_id=1724422386102_172442270395855&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=loaded&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=a%20page&ep.custom_doctype_id=TACQ-gtv2Yk&ep.custom_product_variant=web-2&ep.custom_country_code=US&up.custom_country_code=US&tfd=11177&richsstsse |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 23865 |
| Entropy (8bit): | 5.320045978672829 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 75FAADEB796552579E43124F83871940 |
| SHA1: | AF5E942EBC0EBEF0CAE3A33ADDA8AF34B4F3DA64 |
| SHA-256: | 0200774B20157E9C816ACD3C5BA2802E4B052D657698C90F7CE3CCD54431C753 |
| SHA-512: | EDDD147AC3D74358CFBD8E1D75436A7158710C09585C85A3113825B567B7B4A6DD476E511CD4FED6A1DF9BBCFF26135B8428B329282F518ADCDDFA8B78C88A7E |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 418962 |
| Entropy (8bit): | 5.414110424675336 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 2D626DBDE51049DF4E8B8FA2EC1F5CBB |
| SHA1: | BEE57CC83F6BA4F4622ED8284944CD3BBBCEDE12 |
| SHA-256: | 864694C4A2AFA22F730EBDA3DD7AF3070CABA3BA03646DAC7D07C3C9FAA7C0B5 |
| SHA-512: | 85A28314950BABD1CF367E33BD82E238771BB98C34C706735280EC3C233CFC30C679E8B91F2FEBA14EFB6A9AFC502E36CAD48A3F10253FE09C27C7D08D497E05 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 7855 |
| Entropy (8bit): | 5.7635629552134 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 8423B5B890DA6F9C13A3CAA71B6094DD |
| SHA1: | 620AC11E8A7F296BB7CDC496ADD49DCF116A0AFB |
| SHA-256: | 77B2B045B35EB2F5F0D2A9428B3D5BFD4CB8706BA9D1014984491065C76CDD95 |
| SHA-512: | AA622E8C7771DC134980536CB2D332E0EAC8DEF7056B992B88502C116DF9D10B33AF6F4D6F0138EDBA86D6EEB03B555EB2F396DF19DE18C091D91F178417D2CB |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://www.canva.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/6790c32b9fc9/main.js? |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 210895 |
| Entropy (8bit): | 5.281280279944797 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | F65C8213757311AB852D142869EFA93A |
| SHA1: | 8540553011338995CC0B438BA5BC94A09CB9BC07 |
| SHA-256: | 8C7A7D1C569A32369FA76D8DEE255C8D1A2CC47748C4BD196EEF9597346C5DD4 |
| SHA-512: | BE01695F41C7C695CD1BCF7BE11F8A55D25103B2D3BBD9CA616C6066528032E86BF5778968F0161ED346A9B83CDD86675A977AD66762BA339B41F5B9EEFD86AB |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 45035 |
| Entropy (8bit): | 5.400557193761079 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | C4D5335B2B69C6998EE34F5F7B3E246F |
| SHA1: | AF0AE01ECCEE153877976D5C7D6500AA9C380B60 |
| SHA-256: | 7EDA47B0C02C44BDAA43A5B14857F1257DDBD620B0397C32AA3AE8BAF769AB55 |
| SHA-512: | 1C62C5D29C56848C258701F2E6B39E2152A3CACEB2C96F19ADB8542FDCC233F42BD0FAE9D03C8EA04F6B4490D0B69FD24F62B6D18A14A31D87E24906CFC88C58 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 38234 |
| Entropy (8bit): | 5.243846144069231 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | D46341CADA2106FF7A9C41604094C66E |
| SHA1: | E824CEB4A85F820B7C8B101D5B1709FCB9574E2F |
| SHA-256: | 53179874AABB77CB9735433E533A0E0E1758B686DC727D7BB241F6E423297E92 |
| SHA-512: | 9EE7941AD66E33BD2E215E04CE62E1F69ADF70CD480CA045F260B7CBAB9233655C82815F228B106A2C57962CC35EC9F0CEE122816FDA34554A3CC420260D0D58 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 94163 |
| Entropy (8bit): | 5.646861477952522 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 9FE1ACED08392890788F64538DBD1E0F |
| SHA1: | 09EA7961BE9BE3846339F84B1F7F99AE723F0D59 |
| SHA-256: | 843951D9AF7112AB2A7486B8B1E1F899C5AA3ABDF758B078CBD090DDE5C9AF24 |
| SHA-512: | 1E45034733D7569FC7DBC342C8DFB04C6D2FB2E00530B7B6F19333B99E0474A40336EDB27394BBD9676C989D6A757AB7B984701B99491EC24DDC399C18F33CAC |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://chunk-composing.canva.com/chunk-batch/4c1d96dedbe87d00.ltr.css+812ae2bc1fdfc220.ltr.css+0400cd3bf23b6de4.ltr.css+c9bf091720f7f1c3.ltr.css+ca10385ab7f3657c.ltr.css+d577c820f40defa1.ltr.css+3b2abf75f18bcd79.ltr.css+c43f123d28770649.ltr.css+6f7e30bbdee50196.ltr.css+054f7018cb8117b3.ltr.css+60522e48f8e412f4.ltr.css+d5e38674d90c7507.ltr.css+202e686830bf1e42.ltr.css+fea40c91c55f6b33.ltr.css+54ae5ed0ad87dd5d.ltr.css+c19de11548c4811c.ltr.css |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 1015 |
| Entropy (8bit): | 5.641941724686156 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 58AE789C614566C980B05C9C0BED7F46 |
| SHA1: | BAAF8FB61D2539A0AB94ACF2746AC35E600F3926 |
| SHA-256: | C9574A0D4CBE099FC9470FCFF01B03C9ADA6C69CA4C5B21A7EA8295E41C243B7 |
| SHA-512: | AAA3F94B907824EC1CC7FC258E3CDF3AE8321932BC0BCD556D399204BB2ED75A7033EE5143DEB9867EC42441D3ADAEECE6249EA84075DB75BF56706C5B94A89D |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://static.canva.com/web/ad70b1f05b5f5889.ltr.css |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 8708 |
| Entropy (8bit): | 5.678587280175803 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | AB90FFAC41C8C04D8BB9C2F955B659B5 |
| SHA1: | 5E2AF52530E354C8FCFB6310015FD5EBA2CDA80B |
| SHA-256: | A25FCE0C8DC9AC20E83C0D06559F37B2E96EBF16A88D47BC1991A0633A993466 |
| SHA-512: | C8CCABB5261262C6F9003F68A7A72555ECC19C0B67A0A161D0ECAD89D17F5E568E5CCD549ACC9E7781F9AD53E67795F6C656CC66E9C2FEB1B128C6DFAC4370B1 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://static.canva.com/web/e7c6bc1d981983be.ltr.css |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 231925 |
| Entropy (8bit): | 5.55238430293934 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 7B5B07F22ECAB303291A3A0DB21479D8 |
| SHA1: | 3D510FCA3E086F3F31D64B866230D682F49DF63B |
| SHA-256: | 9C6050D1E06CADCBC1C6AF280554439309B811D0C98670E77B87C84B9ABF95CD |
| SHA-512: | 525065D19CDF7599F8499AA4F4B568E0D4E907B9F1CD55A28CA3210AB287B4318454838C90D7AD8E1ABE0440C745239E78C53E4F0780A8B62BDC4A4716517648 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 9610 |
| Entropy (8bit): | 5.546101211065666 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | B3C89B97F20AE0F28C28907D6DE280A5 |
| SHA1: | BC8CA9E6F2BE3F6D92758A41AB9F8229D0308189 |
| SHA-256: | 50228BFC7DCBFECDE156B503D972E813D585D132CDA29C89B3B9F7DF04B581EE |
| SHA-512: | B749CDE7C98210AC656A33AD7FA54DC7CE7858C256B77F41D462F691F5AEFFE282690639D4927602BA822EF43B227A9EECC4306A9366D18F43F71D9E9CBE290E |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://chunk-composing.canva.com/chunk-batch/118052af16110a6a.ltr.css+3ecf51295dcd9309.ltr.css+b9997efbfcc9862a.ltr.css+92f769a158e87071.ltr.css+44120d0e86f58fdd.ltr.css+70f83d7290d33057.ltr.css |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 7423 |
| Entropy (8bit): | 5.735987288905557 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | E82F03D6187FB6EAA80CA7B54A78BE89 |
| SHA1: | 7D181EDA21484BB7FFC7782E14252A3D003E79DA |
| SHA-256: | 1D9B2F68382D8C02728B6015300A7F73ED0CF37648DA93B4ED41DAF091BF53B6 |
| SHA-512: | A06CB6B9CE6CA2F38713D9DE33C90651AEEFABABCFF7FF78BC1ED5D89D1CE35C8AEF10ABB79E5C185CB22F12B9DD8D0A400E5BB77AEB6F9D89A64D3F2988BA9D |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://static.canva.com/web/eaea7aca0562f08c.ltr.css |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 2802 |
| Entropy (8bit): | 7.932268201999466 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 69845B1A57FF9F9C333DD48F0FAB9FB2 |
| SHA1: | 66752B83A57628C3DA89AFEFEA2B2EECE103E452 |
| SHA-256: | D2DA1FE4DD4D9550E6348A7836C30A2F04028867A7B1D30748D20340C44579AD |
| SHA-512: | B98ABF2B325AFD20FDFA935FD8FEBDA501748E4F4AB3A3A3A75200CEB166E5772916B21D69ACA9439090B07F040C1AA674BB8477798BEE7A72D87471FAEEA61D |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://media.canva.com/v2/image-resize/format:JPG/height:200/quality:75/uri:s3%3A%2F%2Fmedia-private.canva.com%2F9_BUA%2FMAGNRi9_BUA%2F1%2Fp.jpg/watermark:F/width:157?csig=AAAAAAAAAAAAAAAAAAAAAO4BwRttWcX2kfdIWKqbOlrrYMuz-ltAltRdrV8pwETq&exp=1724437593&osig=AAAAAAAAAAAAAAAAAAAAALh84wPLzOod6scRpR-Q0eN6k0HcVNWywG4Qhr7M-PNX&signer=media-rpc&x-canva-quality=thumbnail |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 329595 |
| Entropy (8bit): | 5.573115435202742 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | F6367C6E8CD5C5A791C7948725CEC64E |
| SHA1: | A8B999740CDDF82FC4473E863638D5A3C6BFCE93 |
| SHA-256: | B89EC434540011C84AA49F1FABFBCAF4E92FA87D381866149151F56F05D5CC30 |
| SHA-512: | 0B6B4F0D411D9DF48CD8D987A162A613A6B14CD30EDC54363F4FA9CC76965DD6472CDEA966BB81E131F26457306BFAA8EB09166872B7953619B7DB4CE30DB841 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://www.googletagmanager.com/gtag/js?id=G-EPWEMH6717&l=dataLayer&cx=c |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 2653 |
| Entropy (8bit): | 5.509707829642766 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 1AD26AB01A3F721C701EB22649733820 |
| SHA1: | AFD301D199A7279ACE6308711E014CBC312762C3 |
| SHA-256: | 9465D7B9904EBBF0B6DC2F3880670EDA24546278439F7CD1E4988BA93CDDBBA9 |
| SHA-512: | 110BB7CA01AE5F63E78414721B1250DB2AD114A0F394F7928DE701275F9896B31AB1E2F4FB2B549B10F58E4FEA3C6A4B04907B791100CA9DC4EBE600E135C12A |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ct.canva.com/g/collect?v=2&tid=G-EPWEMH6717>m=45je48l0v872399471z8812729902za200zb812729902&_p=1724421764514&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=0&cid=650264388.1724421767&ecid=463242634&ul=en-us&sr=1280x1024&_fplc=0&ur=US-NJ&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=noapi&ec_mode=c&sst.tft=1724421764514&sst.ude=0&_s=2&dl=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGOmfvTQik%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor&dr=&dt=Canva%20Design&sid=1724421767&sct=1&seg=0&en=new.user.engagement&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20278&ep.event_id=1724422386102_172442270395875&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=1&ep.custom_device_category=desktop&ep.custom_event_name=new.user.engagement&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=no-value&ep.custom_doctype_id=TACQ-gtv2Yk&ep.custom_product_variant=web-2&ep.custom_country_code=US&_et=3&tfd=11189&richsstsse |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 38848 |
| Entropy (8bit): | 7.993669247804477 |
| Encrypted: | true |
| SSDEEP: | |
| MD5: | CFF149EE1E9D2BE50AC77BCD86769D05 |
| SHA1: | A1B8A95DDFE811A098D0298E83DD711E90943732 |
| SHA-256: | C84DE7E52D68BD3B651219E7085236BABC85A0C7C79F21A14F0CDDDBD0FB4B4C |
| SHA-512: | D27E713343F51A75E909B4A01D3F2FFB95EE82E13A1B21A9D3034D3858579E4C3FEBAE76E1AF706B820E51583254281E256B825F1742167E1E072DC59CDF1AE4 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://static.canva.com/web/images/cff149ee1e9d2be50ac77bcd86769d05.woff2 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 875 |
| Entropy (8bit): | 5.552508302221604 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 4F1DACAD40802C51508C5ED99C4568FC |
| SHA1: | A1474213609591E1909441D9844BEA56F9C60243 |
| SHA-256: | 195CCD6FB64A8B8C8A9826E03EF4BFFF884130024BEE6AA1F58D75854C895CD1 |
| SHA-512: | E6EE8C0A62929F226C442A2F935E762EAC569663BEDC4767BB08C035A83AE1F320FC258A5F5E62673181653674AF23995B09B94C7B5B318C9A30319E27F6C532 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://static.canva.com/web/07afb9d6d121d0cd.ltr.css |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 5928 |
| Entropy (8bit): | 5.509598271266651 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | AFA18B046CCAB4441787D297FE2EBE43 |
| SHA1: | F93F9CA7515F52F8E83B6D81E152E5046CFE183C |
| SHA-256: | BA73184496026FAFF988213BF7041092F6499E17AA056D2CDDE8D1FD0C1028B7 |
| SHA-512: | 9A4E32BAB51DC9B666E9CA99B5E17777251846C58B095BB7F158292C528ECBC4BAE36A2EAB902B748590AE8A2CB29AC3F195B7DB51FE20DC978F087CF995C1A3 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://static.canva.com/web/1a4a4b5de74c9a37.ltr.css |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 1136 |
| Entropy (8bit): | 6.9205301634912555 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | B46630E470F4040EBA7033CF2435EDCE |
| SHA1: | BA26D2E1DC5BBC01A80446AC65BFFB991953764A |
| SHA-256: | 3E32AEA52247A81C38B4735E84A28BA27B0CBC33F007A1D14E81E64BA766EADD |
| SHA-512: | EFF809CC87517F9048F1C7A16561EF6F956ED0FE50B3382AFAF111B6F159E769DD88AF0DC0D8A03B748D407C5C554789B6148A137AC700F776A260FD153C0AE7 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://chunk-composing.canva.com/chunk-batch/images/b46630e470f4040eba7033cf2435edce.woff |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 533 |
| Entropy (8bit): | 4.933115570682282 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | FEB698008C36A09DFE88AB06A1C3E3B9 |
| SHA1: | A871FBCBBE298AE7078D06627708B2C106A0FAF3 |
| SHA-256: | 1C4E7E389D73C6ACF7F19CC812514E71230740791FDE8A018C1D7EDCCF1590AE |
| SHA-512: | F8E3CA3E49B1C027232D1B3AAB82B5430F4A69334A5E18BEB4469C39D6A24D3F4D3FA4C473F360B619CE734977F0D7EFD03BE6ACB5EB7B9F69295FB2CBF94D9B |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://accounts.google.com/gsi/style |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 47992 |
| Entropy (8bit): | 5.605846858683577 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | CF3402D7483B127DED4069D651EA4A22 |
| SHA1: | BDE186152457CACF9C35477B5BDDA5BCB56B1F45 |
| SHA-256: | EAB5D90A71736F267AF39FDF32CAA8C71673FD06703279B01E0F92B0D7BE0BFC |
| SHA-512: | 9CE42EBC3F672A2AEFC4376F43D38CA9ED9D81AA5B3C1EEF60032BCC98A1C399BE68D71FD1D5F9DE6E98C4CE0B800F6EF1EF5E83D417FBFFA63EEF2408DA55D8 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 531 |
| Entropy (8bit): | 4.939378613546915 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | D557AB2563BE5733CE5A7607DDC3F469 |
| SHA1: | 8C3C97B8084856D1192F5B3D25D6B19ACAE54FBC |
| SHA-256: | E58A436E2D664D20A4C32D7C9C1D886A25B2BA4E49EB544D334CCAA0196DA484 |
| SHA-512: | 41FBF65B36CA7E508790BAA3326C1446784BCE081B2AD98614DBFF810CD39F4689FAA6FB55EF85CAD299AF2D631E9516F6ACBBC317A31871DCACD3D9271DA6D0 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 924 |
| Entropy (8bit): | 5.550935483680114 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | BD1959D63DD3F269863BF6134E34CE5D |
| SHA1: | 3CE4A0345600BB5F5A77D7BAAA9816834A26B761 |
| SHA-256: | 52D1409CBDC71EFC721C52405C13D4731AC77DE957652AC0E77F57B3EB8F178E |
| SHA-512: | 89A960C3A8EC79BDAE20DB0F82DBDFF16DBEAA7B5C9BEBAFFF788322B9D1D72B4AB2227DFE0BF29208F6F708E1DC8312CDDA254B47F6B06F21295A0D0B81BD92 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://static.canva.com/web/f1ddba142f8d8653.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 820 |
| Entropy (8bit): | 5.5768877329428905 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | F7C439778BAA8DD73CFD4969E7096B6F |
| SHA1: | 2D65E3CA01E8B9894AD9392497104B308A5CC3FB |
| SHA-256: | 4581DD3C24880FDA6BF300CBECA03C05C70F7B0750DF5826FAFE4D52D4C66A4A |
| SHA-512: | 14B8DF63854E37690C4BC042A85B6691B5B6F054CA0E8A20252D54E51E39A3E6EC96D73FB48318F245789AA3D6CFC49C22E8D97B0CEC08D9FA7EA27AF93A0958 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://static.canva.com/web/448a89b1337137b4.ltr.css |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 1408 |
| Entropy (8bit): | 5.488388060478079 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 397D9ECEE0A34EE756936D6A176AED31 |
| SHA1: | 61860AE69712D3F1A616FCE6A8BAA14A2B05B747 |
| SHA-256: | CE399A07C0DEF1AAABDBB96FBC86E9677D6764A79AFA952DA8F022A42103C0CD |
| SHA-512: | AFAC08A3F18260AB6AC933E2CC39C22CA6EF4EF42D0674528612CD21E60F2AE8EA50D73D79B83498D1400A4CF86D22B655CC815F260D83D637592EDA7A33F1D3 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://static.canva.com/web/d571376ab76893d9.ltr.css |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 7824 |
| Entropy (8bit): | 5.740106256331021 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 9C84376CFE4F471AC039E955076FF04C |
| SHA1: | 8069107966D89AD23D92E3A589E181CA9E9244CE |
| SHA-256: | 6E37E6B61BA4F63CAEE92D3C7614442BB5265EC114D8244A4E8CDDD770BE20AB |
| SHA-512: | 847C65B384E9CB5CCBDA54078C96DAEB1B725AE7F578BD18CE9A7FBF3C33641631E56EBB66FC1D6C6ACDE040229B2F1EB797FCDA9FDF7E3B17E44973AC9A77F6 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 13630 |
| Entropy (8bit): | 5.706217891365475 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 8B8962EAC4297C5FDD49E27D13BC82A1 |
| SHA1: | 14EA1FD5F82A4B7429E17C35DB1E8B054850E080 |
| SHA-256: | B84A72A82E970A7401BFDF36697A721B230268A84AC8486636863948E1A2A325 |
| SHA-512: | 8ED42426D377F24A49F7237FDA4DC2EE52FD4505E10AD1AAB02A24A684D32552313B28D9D8275CB10B58B13A280B3FE0A41DD5D12DB34A69C7E7B4D09F34809B |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://static.canva.com/web/45ee94828bc36fc1.ltr.css |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 2725 |
| Entropy (8bit): | 4.001613792451738 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 749002F5A04F784CC1802D77D2FED423 |
| SHA1: | A82F9B14C9946185D475C946B2EA4B1D724732F7 |
| SHA-256: | E26E8402DEA748478ED971DD8F9626BBC25CEC4776D92A0B768D71A109F82C87 |
| SHA-512: | 883CD33B1406E297B068E93CA509E38A54197BC426766AEF6F79D66BCDA96C172E144D302AF174D2D1FEB58091F9FA13139D80B65B9068D58D0A47F83999E9EB |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://static.canva.com/web/images/749002f5a04f784cc1802d77d2fed423.svg |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 312920 |
| Entropy (8bit): | 5.618260926405445 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 88E5A21330199549AED63AC5760A3D03 |
| SHA1: | 493FE0B87EE2AD9858433D9C58AEB69049DEACB0 |
| SHA-256: | E5175FC1612041B8F474F778B0CC51E0A1211F993B492BD0C9C6A4417F989DE6 |
| SHA-512: | 56AFCE1B9622B5537CBF774C1B4A94AB49A8825D9D46ADA63E0E69BD961937B637531DBCD6BB5473270CE33C9B207A0F6D61C372EBBEC7CDB4BD85D914969C8D |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://chunk-composing.canva.com/chunk-batch/c29f4fac64f3f41d.vendor.js+03c988453743e102.js+48db2a0c18213038.js+69da202c3cccc13a.js+cbbb27807d9b2a2b.js+017211d524731221.js+ccc31f11801b86ee.js+bccee10b49e7edff.js+17c939a0fad357ec.js+2e33802554307a6a.js+7bb53b85b5358c5c.js+5d38be9d67ff0447.js+a0449e6c1a2804bc.js+1b965f401e56238c.js+28f364abb8793c4d.js+59f089c5bc7f158d.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 412 |
| Entropy (8bit): | 5.212155008501589 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 03CB0CCE71D4259BCBAFDF3CF14700AA |
| SHA1: | 6B46C09BF6A9485E82B9C56E4A046BDEF6748AEC |
| SHA-256: | CF02B5817E5AAA2FAD5C8835996F56D0C2B0CC2C4DA524B0D76591B3791316E4 |
| SHA-512: | 59C81DB489250824D766CCF6828D068A1750FD7858F9CFAD485BB8E1D2F7B20E8ACBA273B231602986F658DDABEC8F1CAE3231DF3A605AECEC0E21988CD1E220 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://static.canva.com/web/fed228293e49d2e2.ltr.css |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 302724 |
| Entropy (8bit): | 5.573266812183919 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 0CAE469AE94570228DE326E6A48003C1 |
| SHA1: | 28907497306BE54401D36910E2729DA9B3160467 |
| SHA-256: | B65D88078DAA49EB5889CACB98F083D44D21A1CB7C85650DBBDFE9F89EB82B98 |
| SHA-512: | 67F34935D6703614D052404FA74BD61AF9B41D22BD8406E0610B07F91596FF760F94409763A631195287BAA81B886BE8BF7E32A8CACCBD982A46956C58937F5F |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2659 |
| Entropy (8bit): | 5.508173830849814 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | BB59A198DA9F3C930958BEE24C9537DA |
| SHA1: | 2588757F4B37BD736AB02FEE0B4AAEF5BBCEB91B |
| SHA-256: | 4A6E349F67DF8A193972DF54B62DB91A01FE73A26510DE5E6974109009103617 |
| SHA-512: | BDBF9D182E95AB3860DD292F21AE8F857ECC1E487F8BF7554C1675EEF5B1990E06EC904DB1D03A247C128CFEDF1F7EB73FA5C7B202E3A0320EE4E3D2BE469AF5 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 65 |
| Entropy (8bit): | 4.314128390879881 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 83A02FE42F8C2198E7C608AFF363AA49 |
| SHA1: | 7B20AE1014450492CC708E3C9DC7522B05C2EFFD |
| SHA-256: | E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C |
| SHA-512: | CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 61 |
| Entropy (8bit): | 3.990210155325004 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 9246CCA8FC3C00F50035F28E9F6B7F7D |
| SHA1: | 3AA538440F70873B574F40CD793060F53EC17A5D |
| SHA-256: | C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84 |
| SHA-512: | A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1550 |
| Entropy (8bit): | 5.512335164870956 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 93E122F91443AEA1907DB44A19CBA6B9 |
| SHA1: | 877499B714FB3E5A74E3B717FD8C3A5E6E754E20 |
| SHA-256: | 264E46FF2D0BBFAEF03F34FD6EF28BFD4186ADA46EBF3C038ACC29D2A0040D55 |
| SHA-512: | FC16B5D574A75CA0B242B999E59C6C5C64F3675D827AD2AAA7F94A63E9C1951161723140536A1439CB6FCE16A407649BD690AEF2882BA8FA1FBE621447D37B95 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 5717 |
| Entropy (8bit): | 5.520945479013696 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 58AC86811CBC1EC225DCAAB45E6EBE7C |
| SHA1: | CA2E36B238924A9B4C0A65F36F3F207C83DFD828 |
| SHA-256: | 5FA56462D59F497E6C3A69CFA1B4F8A2A7102D03CAB8491E1B512A24DE596312 |
| SHA-512: | 923883CAC3EF4E2377D54A6A8BF418003582271283974E076092E3F2F41047F5A3298E5AAD3CEA817C51C91B474D0CA66E80535E359991D55AD3E83316E0834E |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 22382 |
| Entropy (8bit): | 5.560668461772597 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | D6E862C17654A86E346F0671B9457A26 |
| SHA1: | 623297A278CD17B18568B922DCACFD536133377C |
| SHA-256: | 3A604B4AB4111BFEAB13EAE69B5D5D17A657D4CAF96C92D9F06E1267D2F2112C |
| SHA-512: | 91CE5FAE321E28FB4FED27482C224FC23203A7456531F2A9CBCF891C2CB2FF4B5F2462845244A5D52EA4741F2934F6490CBCF046C0697A827C9D0FB9F6F83D71 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 79075 |
| Entropy (8bit): | 5.870737722635927 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 0207F891B3E3451963C677172461D3D1 |
| SHA1: | 72CE859A0D3F96F9FB44744031E46D55DBF37F4B |
| SHA-256: | DAD7C7A4559822DC3B42D78BB52F1C4FBDB3A4A80375BCE8012CBA944D922064 |
| SHA-512: | A63E3724B82702AEC900E814A89E66434686D42BCF8E65E6E22F8F4471952F6F83D0768C7A500522003C5DB01A5D270BE78452B839E44C7793762E876CE3A391 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://static.canva.com/web/f5c0f66c71c48e89.vendor.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 2312 |
| Entropy (8bit): | 4.096788340259145 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 9ABC2241BF1479263A0A039F3D1E5B5C |
| SHA1: | A55CBCE3521486D4C9638602552F1DA877FB5411 |
| SHA-256: | 0145274162A30A4AA4B234015B7FE608367D10F4A8042D30BA995A5ECF1FDCF7 |
| SHA-512: | 0A5B51EEC0171CDDB3B5D9E7F7727D4509F33C63312136CD96A1E29BBC2FA35EFF341AEF41096809D482A16780CC376CAC488C3895E501A10C6FA66F6D8AEBD9 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://static.canva.com/web/images/9abc2241bf1479263a0a039f3d1e5b5c.svg |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1525 |
| Entropy (8bit): | 4.359418865415674 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 8777E8ED572C4159D71B08CCA2972B15 |
| SHA1: | 2A57B1E6F2667BA1364CF459161FB868B53C37B8 |
| SHA-256: | E1795BC184F97F29790C807FC91C70846D221904576727698728271D7071F268 |
| SHA-512: | 43276A2282A1B088AF417B61942B880253F9D1FCDFFF802F2EBD5BE935D4A708C2AA90842247147D5274CDE52D2B06B5659A607593925822539D6985AE84CFD0 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 19948 |
| Entropy (8bit): | 5.261902742187293 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | EC18AF6D41F6F278B6AED3BDABFFA7BC |
| SHA1: | 62C9E2CAB76B888829F3C5335E91C320B22329AE |
| SHA-256: | 8A18D13015336BC184819A5A768447462202EF3105EC511BF42ED8304A7ED94F |
| SHA-512: | 669B0E9A545057ACBDD3B4C8D1D2811EAF4C776F679DA1083E591FF38AE7684467ABACEF5AF3D4AABD9FB7C335692DBCA0DEF63DDAC2CD28D8E14E95680C3511 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 347640 |
| Entropy (8bit): | 5.5435036804846725 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 09DBF8B7319DCFE681A19DCDE3E92C54 |
| SHA1: | 7DEFE2FC24FF6788AEB147B7F17C195CF77BA237 |
| SHA-256: | 14DF9C1D64CE6C6F74F4D1F01C78BB52D7255F134A59E88123ACF50D639BE69A |
| SHA-512: | F5869F47249072C758FA61AF61C3A180A4CD4F136044B9989E823BDF284AD2F52431F0F4257019C12F07AE28F13B7C451BD3E27815523B7B539A524C55CFCA38 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 761150 |
| Entropy (8bit): | 5.590013944939536 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 086F5F662B444C97879C1F5EEC9ADA5E |
| SHA1: | A7A1AEEBB3957B0BCCED6CD3248C435DB8E38733 |
| SHA-256: | 975AE2C0C2A9837F23EA49C3FDD5BC67B7465E8DAE5C5DFAE9F9C9F804A908BF |
| SHA-512: | F32DE213965F3726F8987FEA923428524619AF24B2B125833FEECD4B077C50C9808BF32F6FBDFA7335B6AF3E1175723723CE120F94755D9A277F75FD4AFF41F4 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 7679 |
| Entropy (8bit): | 7.51263729183507 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 576861157581B1CBC6C38A2DA17CEB90 |
| SHA1: | 1AB1107B33AE66C409B11AD5659D499B62FFB7D6 |
| SHA-256: | AB24FBEFD1443FED4568CFAF6B8CDC81FD0D8ADDBF592AF2C7D727F8E9A377BB |
| SHA-512: | 4A7D7698234A0CF44425227A8CA0E164F4B31E2C4297F5D5725AED45C25733167C81AC5CBDB28B74A79D0A3D26E6A36400CBD3934990A2B307786FFCBC1DCCF3 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 348759 |
| Entropy (8bit): | 5.5428770605883795 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 0BEA023B330F7F055678666A791B6B0B |
| SHA1: | 8035918F097935ADDC148CBD2D006A4C814775B3 |
| SHA-256: | 0BD0983303BCC7C38FD43BA86F481113D76EEEAFA865B5506FC60FF8B00F3D54 |
| SHA-512: | F597AE35E523A3B0330C7EA849489233680067700F3FE90CBC85ABDAD3D89D593DAB429E31EA7FE4E5A9EC92C119090FA7B8FEFBB6447F0B0892573F8879D405 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://www.googletagmanager.com/gtm.js?id=GTM-TZPTKRR&l=dataLayer |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 43 |
| Entropy (8bit): | 3.366634665454505 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | BFF56CE49DD485D195FDFA0A02342568 |
| SHA1: | 74FB4071DEAB7D3AB083562067B735DF32C43397 |
| SHA-256: | 0E4B1E428A2198EF747010C094101C257B568A97CDCC0F31ED5E9868CC835B39 |
| SHA-512: | 15BC2B5B57144C4F71DC203E16B0F7235EC5E659532D5BAFFD3E91D57CEC61D36CA1B7EA28156AB11A3FA46982FE252A58410D7ADF6693C93EDCCA2B2FA1ABB8 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://sp.analytics.yahoo.com/spp.pl?a=10000&.yp=10137834>mcb=1059510276 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 368 |
| Entropy (8bit): | 4.546742488437108 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 0483F2B648DCC986D01385062052AE1C |
| SHA1: | 61BD815F1497863265A76D92623042835E5E7FE2 |
| SHA-256: | 09A743EE0C32CA57C9BE64B13B29C396310D1DD309CB4D7D3BE722E47DB95F27 |
| SHA-512: | 359F9BCC2441DC48FFBE69353BB7D4143A2037B0263BD5F0CFB06B14D5F15D9A6E574930E88A84081C61698BF3E2F5333BF9081865183AA7F9202AAC078C10FF |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://static.canva.com/web/images/0483f2b648dcc986d01385062052ae1c.svg |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 28485 |
| Entropy (8bit): | 7.922914638467208 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 9FC8A5C1439231ABAECFE73C7983A15E |
| SHA1: | F29373028F126D7A68ACAB454BD81B769106C750 |
| SHA-256: | 004A964B13C40E95418C401736204DFBFA719EC5B0E44A7405CF112643DBC559 |
| SHA-512: | 374DBE8424CC58293A97A3F620463D19EF0851340D27B980279636AD64451A100A907B03774F8B50EB62A6CE1F46CB190B1F4FC1281B8741D0D20A66BEF9A3D3 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 152 |
| Entropy (8bit): | 5.2013248836234025 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 9A8C568FAAD42DDC96633821409EFF3F |
| SHA1: | 108A0697C89C8D8E5C65CFB4F78A76AEC14E7CA7 |
| SHA-256: | 0DF688D2242DDF686E3666D77CD5B6351EC413FD69A6D6DB81167DD0110CBDFB |
| SHA-512: | F96B4462122F2546C2CA36994B4F25E135C72073C600B12475F377B162BDFED6D83460E33C0EDAB50DEA5A51F45E780262734EB94D88379E3315A611A3748915 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://static.canva.com/web/f16c1cb2683100a2.ltr.css |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 12824 |
| Entropy (8bit): | 5.622424931576843 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 905B59F4270DF1A73424BF71536F0224 |
| SHA1: | FB17F97B246FD7E14210579BE70954581D8AA8A3 |
| SHA-256: | 13B0325A92EDDFF73004D5D4A60428739221A9DBE94B026164980DC2B48CA41E |
| SHA-512: | 0E4F277436FF741962F81EF95E32A86E955061D224E1ECA24DF3B65BFDDF8CAA017C370D06B8888C0441E1CF8EA01158EB8786A4DC8CC4D92E1AA86A0453A444 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://static.canva.com/web/5bda23a61d2509fb.ltr.css |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 6785 |
| Entropy (8bit): | 4.764532758184024 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 9C747CF07B2623FE6F77E47F5A134103 |
| SHA1: | 7180E5B53413163E10A6CA1E94518AC2CEB7970A |
| SHA-256: | 476CDA2BDE7910A58186B7B58D2BE6D22D3CFACDFEDA3354134B84E43D76AC98 |
| SHA-512: | 4C1894FD984FC35FBC725737F68B69982B4E53864EB8BF1B8A5826D4D62C682AD4D50C08BA4EAEE3FBE04D3B91EA22A79559AA77BE6BCF3B81025348C8CEB35A |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://cdn.metadata.io/site-insights.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 55418 |
| Entropy (8bit): | 5.2011745666689 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 16E5D529039D25735AE0BA1D610125E8 |
| SHA1: | D7CAA746424A018583EC1E097F74A484C4FB1811 |
| SHA-256: | C6DE703F8EE214808496DCD92795AC8971782935ED75ABDD5624C814E69DAAEA |
| SHA-512: | 56AC6CDABC05070E1440C8CA4A60119B3555B2743BA8652A2A0282701ECC8E150AC343020D620D3F5CD6406F04966CDE54FD797530149AD0B2711E44F89165D0 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 470 |
| Entropy (8bit): | 4.428280927846403 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | E5C5A4D109AEB5234E4405032DFD4800 |
| SHA1: | 4208CA1C20A9914F396350866B5DB5BB3A851B77 |
| SHA-256: | 0E19C6400D8E588E305CC6B80195926FEB73BD09F05732AAC6CCE1483A509A75 |
| SHA-512: | D238FFD9149EE1EF975BA39C7B7AA70CD255B10A2B68E4C1DC8BA29484E18C1925B86A8DD11969B648EA6322E474EDE5CC5792A76456D83E04B8C1DE82B810AD |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 152716 |
| Entropy (8bit): | 5.722132303992741 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | A095B81C088BD5939AA0A623AF387025 |
| SHA1: | 96744CC994F826B21349F0678EEA9BFF56B1335A |
| SHA-256: | 4AE3F8EFEB397067A4E410BF3D4BBEC7F102EFB289CF3EB4623334803E9BB044 |
| SHA-512: | 7ED5DC2B2BA99CED58284CC021888613819ACB1BD21A9D111177637148A57677EAE4C44EE17EC6306A6458AC26D77D5F8B3036C1A2486E2F23788A4A16C6C7E5 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://static.canva.com/web/e0236ac137746c39.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 1361 |
| Entropy (8bit): | 5.4217047692101135 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 296B600CDB84185DD5DC6C1447D8F314 |
| SHA1: | BDDFAC0BE7BEF110C4895CBA847CB22BA741D3CC |
| SHA-256: | 4167A133ABCEA284FC936424B7493C6B65D166B75D45A770253F44FE193E723F |
| SHA-512: | D8E1809E3FCB2A6B7E84E49F0662082F9E413A2F0462F01A375EF084052355F4FC869D18E29CAC9200769BB1FDDA53F5056D75AE5A2A9D673338C70890732CBB |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://static.canva.com/web/fe2daf192a497a52.runtime.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 73994 |
| Entropy (8bit): | 5.4612649411951235 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | A65374CE42E8AD0DC671D4C99EADE246 |
| SHA1: | 457454C5C5CF798FABB34026E4316F92060BD35A |
| SHA-256: | 6957653B3B333DD9CE91BD54E0279A4BABA4BBEDC1ABAF42214DB1E9C382A9CB |
| SHA-512: | 35E6FD0DD9BA53E4DA4483DD01ADD59C991EC59053943E4F34A501B3A7A87E2156BA6D1995D3A5D9DEAA27F4F79371B3CF93855C480DF878AF60E16E944288AC |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://static.canva.com/web/hjfept.907f138b060bb789.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 5261 |
| Entropy (8bit): | 5.648282639878751 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 2C319109A2B47AFD971CB574E5EFCED3 |
| SHA1: | 64921BAE82F169374ABFA53BCCCD7D23E49D871C |
| SHA-256: | CE149E8EEB6C4D63C96BE0ED9FCEF7609BD6085457E3599C99C8976F0B771DCE |
| SHA-512: | 47FF329D5A64752EA366D22EE514074C3D4D80F038181DBC77D0A973F2B822C848F280FED0365359F3F7BF7AC9CE4F64A185860191964D7ED79905F8822219F7 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://static.canva.com/web/5f3d61278d9ddcd1.ltr.css |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 20 |
| Entropy (8bit): | 3.446439344671015 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 2E1E0B28D6E7522CB687E20D37BCD8AA |
| SHA1: | 03D5EFE3719CAB433421C4D9BF6C73E0B8EB69E5 |
| SHA-256: | 124CE91528D8ACB894BDC980ABDDF035B38CDC64CE13F088D431E0B10D61FB24 |
| SHA-512: | 70BB31CA0F3907AB6B5860459643E422AAD6685F32D519C23E671CD46F29ABF2DB1F0C53E54313FF6FE7B54A75CDCA18A9232556B3273E6DB200BFCD22BA82BD |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://api.ipify.org/?format=json |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 11870 |
| Entropy (8bit): | 5.143651720751228 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | A2CFC97FC3A5F000266CC376ABA58107 |
| SHA1: | 6AFE3FB067366C30F089348DCC7D8F6D873CF45A |
| SHA-256: | 76AB3D7B6F07A0308BDDA6A694AF4F88211FA3C8A937B23E2F47F60C1671B317 |
| SHA-512: | 82A5CF066AD40D59D29336E0725015480E3198A7B48756F08242AA25D0C282EAF330C9E131CA70D15E2FCD9ADFC2524CCA6C1B878BD6BCD86D74D85B96EB5C2C |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 996442 |
| Entropy (8bit): | 5.624810189183122 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 8A00A0724F47ED91464B8CD6D2117D8F |
| SHA1: | 02AF6AB2CDDF926AB13F1FD0DCEF0BBE8A8962A4 |
| SHA-256: | 3E2FC5694B67C039F613E7FCEE075102D460B529AD22479ADC74DFE16B7ADF49 |
| SHA-512: | E6577C1465AC094B800895ACF75A657073BB8B6744D1DC167B16159448E239302029CAAF3AB90EA6B5AB2B4757AE728E76DBB6A435AA570A93CA46CCE609DA5F |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://chunk-composing.canva.com/chunk-batch/9b54b3b1abd84df7.js+b440ac8bcac09752.js+79a1b10ef050797c.js+ab22cdb76695602b.js+483dc1a49fc2d26c.js+7f060f5f480ef73f.js+9ff4264c60c9fe68.js+73bf1b37ba920daf.js+5abb10417e1e3d72.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 26898 |
| Entropy (8bit): | 5.214632909935732 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 994BCFB820F538248954EFE37A9F2357 |
| SHA1: | 70DEEE1BF98FF7F1FEAADD95F01EE0E65FA5BC96 |
| SHA-256: | 57F3AC741599117ECC612971656AB96B2688F968949B6173EEFAE71D4BBBE911 |
| SHA-512: | 0203732E50839E2E7225C4E7F7C9E50978CA00D010D5A8C7F0A91C957131317474F1818DD889001CAFE5DEE2708DE05BA50B9B7945D07BC2E08512F79B5EB57C |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 842 |
| Entropy (8bit): | 4.957424326112546 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 3A05DBF1CDD156FCD1677A0B444CC36F |
| SHA1: | 4DBD36F62A617F47B69FB2D5F83BF0FE36ECE44A |
| SHA-256: | 4C122BDEABCF8A8C613B81B5B881469574DAA61B870651D9F06D0F81B4405271 |
| SHA-512: | CE05D3A04F285E246AC43798C384674FB5D292CEA0911CACFD6A7E10772C77B6997D5ED50BF298DDBB6096A02D06BC1E01324C1A35623E07834C8AFC63D536E6 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://static.canva.com/web/images/3a05dbf1cdd156fcd1677a0b444cc36f.svg |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 10837 |
| Entropy (8bit): | 5.33630761588339 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 34E1C8F1D5FDC60E02201C32EFB25E58 |
| SHA1: | F986690F28303BB9B00FC4C59B8576885C812289 |
| SHA-256: | 66491D47F51B0E9C879C3224EF5B95A67595E838416616BC737A75D847C4B6AE |
| SHA-512: | 9EDCA9ECB864940B1F701012F67ACC0EC0E66CD4B04AF99CC396188CF0DCFC990B9AF2348A0E0B11BF79D50189935D906FB0EC7995C60879D7041263C1D21D07 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://static.canva.com/web/3ca27320fba118d7.vendor.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 4414 |
| Entropy (8bit): | 5.9195472440471955 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | A0C86DA7FC37EA50E848C4733761D53E |
| SHA1: | 7B53A4FE8198AA654C02282134DCC19E0C07CC9A |
| SHA-256: | EC2FBAD47E598FE06C7A2B825224B3B1B8D8221F3002E6370E627D459FF0634A |
| SHA-512: | 6FD3BB6D1392F89DCF63A37A9086517620A63C6D933885ACDB61F99BB8AF137D2DD184C59EF92C173E214711DCEAE9585A5B574AFB422A4A0969D99C86264339 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1865 |
| Entropy (8bit): | 4.5836861143934104 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 3E78EF31F2928A74C6D7BA19B91D0570 |
| SHA1: | FA840BD4404B1B843A72164F2491AF6C4718A214 |
| SHA-256: | 847435388F6B42D6C869D02DF3EC08D61333A19AC4B90EBBFF3BC0B87B60A202 |
| SHA-512: | 0B1951AD9492468748B18217003BF7EBAD56FA14CB434C37D6DF2440C43D73AF5AA9068EC517596E9D63B150F3ED28C20F44FFCD6814DF70D2C9228C91994DDE |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 431 |
| Entropy (8bit): | 5.191711309396401 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 8BB40E97D3FB34600AA78099D786B62D |
| SHA1: | D8F86D070EF9CB90108A0EF0BAD525246EA03062 |
| SHA-256: | 0091546D83D3C51B541F20DCD9A99E4819225CBB7553CC2A1A27EA17CD0C4069 |
| SHA-512: | C8D929F15BDAF1B714BE9A407C5396ABDC0FCD8D37C1669252F29C8F57817765C19094F01EAD99AE41D8B8B0DE0A1A73832B2898F2A97BDC8760DDBA6A3A6203 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 139322 |
| Entropy (8bit): | 5.284730248254053 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 6B4FECBEE9CC3F25607281AB522BD7CB |
| SHA1: | 831EEB3136D6134A32ECFC818E21C2600D861758 |
| SHA-256: | E2CF3293010ABDAFC00BF889941F498E1B8F17139B20FB6B8D829F312132CB21 |
| SHA-512: | 777AE1053579C19CA5C2C14B1271B9C95ED8559EE32825FAF9390ABF5A9E77B66F24BE6E3DE7244AD727BBBCC249FD3CCC4EA1B8825D5215359CC17631038E7E |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://static.canva.com/web/f29acced9c6bac84.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 382 |
| Entropy (8bit): | 5.439423170296592 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 0EECBA4C5EADF6A40CDC31DBAB617AF9 |
| SHA1: | 6F716C76C6F64979124AAE9C3114DE6F374C7626 |
| SHA-256: | 0AA923A81790C6F42A4C0AF6D018FA86D8BE69D98EE9C21FEDB280443279365A |
| SHA-512: | E8A64EE7E57CE610AA76E43B24E6DC5C95B41A11C838B6AD8EBE23862F5B817103DA5D553055046D1CB1ED06F6076FF98DAAC9CFDF9EEBC6E86D5D47609B6484 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://static.canva.com/web/9e2d4720ffac5af4.ltr.css |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1404 |
| Entropy (8bit): | 4.114328576097192 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | ABA10B640F15BB01B8E5F0B804EEFC7F |
| SHA1: | 65D1EDB21B0F31D4CCB9703EB05132A0E42D093D |
| SHA-256: | 6A21FCEDE3E9D5593CF90C894BC059A94BBAE8D5D22ED0AC5511A1327F276881 |
| SHA-512: | FDC916824C065944D02B7956BE310F01B9A56562BBB1510C345EDC925EA6CE478D235B5348AD140028CFA4F483BF1E947533CB83176A9F44DC13353A938329DF |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| File type: | |
| Entropy (8bit): | 5.32659175753632 |
| TrID: |
|
| File name: | FW_ SLS properties Credit application.msg |
| File size: | 145'920 bytes |
| MD5: | 6550979bbc9d04348f3d32e0764ad95a |
| SHA1: | caa91816d5da43dee533d98775e9ff7cfc272819 |
| SHA256: | 899bf7076e1030ae35dbf1e13157d62b707593734fd146b6379cb5ce17fbe6be |
| SHA512: | 21835977bbe5831476584f64cfcad630049fd2190168791636636778fb25393911532f57f2dfbb4a7ae7df60f78752d310cf1bc7148f81294a5f0155915fd218 |
| SSDEEP: | 1536:jg1EmWiWxWtT+EWPTEs9olVolRSzn+kHrX8zzVlWdW1fT+LivuVZOsNT50jz7nx6:k1E0+R/lYnzeL+6ulNT50jzLxM |
| TLSH: | 4CE3882536FD4606F27B9F725AF250979536FC42AD24CB8F3291334E05B2A40AD61B3B |
| File Content Preview: | ........................>...................................................................................................................................................................................................................................... |
| Subject: | FW: SLS properties Credit application |
| From: | Carmen Vazquez <cvazquez@steamsolutions.com> |
| To: | Cameron Gambrell <cgambrell@steamsolutions.com> |
| Cc: | |
| BCC: | |
| Date: | Fri, 23 Aug 2024 15:51:37 +0200 |
| Communications: |
|
| Attachments: |
|
| Key | Value |
|---|---|
| Received | from MW4PR15MB5309.namprd15.prod.outlook.com |
| 13 | 51:38 +0000 |
| Authentication-Results | dkim=none (message not signed) |
| by SA1PR15MB5094.namprd15.prod.outlook.com (2603 | 10b6:806:1dd::11) with |
| 2024 13 | 51:38 +0000 |
| ([fe80 | :83c5:bf56:b0e2:bb05%7]) with mapi id 15.20.7897.014; Fri, 23 Aug 2024 |
| Content-Type | application/ms-tnef; name="winmail.dat" |
| Content-Transfer-Encoding | binary |
| From | Carmen Vazquez <cvazquez@steamsolutions.com> |
| To | Cameron Gambrell <cgambrell@steamsolutions.com> |
| Subject | FW: SLS properties Credit application |
| Thread-Topic | SLS properties Credit application |
| Thread-Index | AQHa8xVL8MdRkqhUTE6m09NCR2diKrIx2TqwgAAErwCAAAKwsIABtDUAgAFMHFA= |
| Date | Fri, 23 Aug 2024 13:51:37 +0000 |
| Message-ID | <MW4PR15MB530954CB327E9522C9933BE6A4882@MW4PR15MB5309.namprd15.prod.outlook.com> |
| References | <SA1PR15MB49207445E7ECB360E59E3824DE802@SA1PR15MB4920.namprd15.prod.outlook.com> |
| In-Reply-To | <SA0PR17MB4238429C3A886587BC5FF7CBAF8F2@SA0PR17MB4238.namprd17.prod.outlook.com> |
| Accept-Language | en-US |
| Content-Language | en-US |
| X-MS-Has-Attach | yes |
| X-MS-Exchange-Organization-SCL | 1 |
| X-MS-TNEF-Correlator | <MW4PR15MB530954CB327E9522C9933BE6A4882@MW4PR15MB5309.namprd15.prod.outlook.com> |
| msip_labels | MIME-Version: 1.0 |
| X-MS-Exchange-Organization-MessageDirectionality | Originating |
| X-MS-Exchange-Organization-AuthSource | MW4PR15MB5309.namprd15.prod.outlook.com |
| X-MS-Exchange-Organization-AuthAs | Internal |
| X-MS-Exchange-Organization-AuthMechanism | 04 |
| X-MS-Exchange-Organization-Network-Message-Id | 1d41451d-115f-4523-d4af-08dcc37ab59f |
| X-MS-PublicTrafficType | |
| X-MS-TrafficTypeDiagnostic | MW4PR15MB5309:EE_|SA1PR15MB5094:EE_|SA1PR15MB4675:EE_ |
| Return-Path | cvazquez@steamsolutions.com |
| X-MS-Exchange-Organization-ExpirationStartTime | 23 Aug 2024 13:51:38.4820 |
| X-MS-Exchange-Organization-ExpirationStartTimeReason | OriginalSubmit |
| X-MS-Exchange-Organization-ExpirationInterval | 1:00:00:00.0000000 |
| X-MS-Exchange-Organization-ExpirationIntervalReason | OriginalSubmit |
| X-MS-Office365-Filtering-Correlation-Id | 1d41451d-115f-4523-d4af-08dcc37ab59f |
| X-Microsoft-Antispam | BCL:0;ARA:13230040|366016|41050700001; |
| X-Forefront-Antispam-Report | CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:MW4PR15MB5309.namprd15.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(366016)(41050700001);DIR:INT; |
| X-MS-Exchange-CrossTenant-OriginalArrivalTime | 23 Aug 2024 13:51:37.9973 |
| X-MS-Exchange-CrossTenant-FromEntityHeader | Hosted |
| X-MS-Exchange-CrossTenant-Id | ae77d94d-d50f-4ea7-877a-9ae2f36050b2 |
| X-MS-Exchange-CrossTenant-AuthSource | MW4PR15MB5309.namprd15.prod.outlook.com |
| X-MS-Exchange-CrossTenant-AuthAs | Internal |
| X-MS-Exchange-CrossTenant-Network-Message-Id | 1d41451d-115f-4523-d4af-08dcc37ab59f |
| X-MS-Exchange-CrossTenant-MailboxType | HOSTED |
| X-MS-Exchange-CrossTenant-UserPrincipalName | 03Nr5LkP3uGAa+vUqPKu1JScGj7uOtyp4So145u5OzvT5G4fM0w7zyJ3zWduzkaWx4aauupZEu1t/7TtBArBXLlNcQijmI+xUkXIroLW8DI= |
| X-MS-Exchange-Transport-CrossTenantHeadersStamped | SA1PR15MB5094 |
| X-MS-Exchange-Transport-EndToEndLatency | 00:00:02.7322182 |
| X-MS-Exchange-Processed-By-BccFoldering | 15.20.7897.007 |
| X-Microsoft-Antispam-Mailbox-Delivery | ucf:0;jmr:0;auth:0;dest:I;ENG:(910001)(944506478)(944626604)(920097)(425001)(930097)(140003)(1310096); |
| X-Microsoft-Antispam-Message-Info | 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 |
| date | Fri, 23 Aug 2024 15:51:37 +0200 |
 | |
| Icon Hash: | c4e1928eacb280a2 |
Key Decision
Richest Path
Thread / callback creation
Lower opacity -> Library Node