IOC Report
https://nam02.safelinks.protection.outlook.com/ap/w-59584e83/?url=https%3A%2F%2F1drv.ms%2Fw%2Fs!ApJMur_0fkFiauB5KRDwZI_JJUk&data=05%7C02%7Cbrisal%40wismedcu.org%7Cd19591619e0349dbdc5008dce2793fb1%7Cd13dc42b9a704728b7c03aa3e8e89773%7C0%7C1%7C638634257662559231%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAw

loading gif

Files

File Path
Type
Category
Malicious
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 14:11:20 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 14:11:20 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 07:56:51 2023, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 14:11:20 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 14:11:20 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 14:11:20 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
dropped
Chrome Cache Entry: 258
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
Chrome Cache Entry: 259
ASCII text, with very long lines (2224), with no line terminators
dropped
Chrome Cache Entry: 260
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 261
HTML document, ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 262
ASCII text, with very long lines (65536), with no line terminators
dropped
Chrome Cache Entry: 263
HTML document, ASCII text, with very long lines (546), with CRLF line terminators
downloaded
Chrome Cache Entry: 264
Unicode text, UTF-8 text, with very long lines (65502)
dropped
Chrome Cache Entry: 265
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 141866
dropped
Chrome Cache Entry: 266
HTML document, ASCII text, with very long lines (2624), with CRLF line terminators
downloaded
Chrome Cache Entry: 267
ASCII text, with very long lines (675)
downloaded
Chrome Cache Entry: 268
HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
downloaded
Chrome Cache Entry: 269
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 270
GIF image data, version 89a, 352 x 3
dropped
Chrome Cache Entry: 271
Unicode text, UTF-8 text, with very long lines (48867)
dropped
Chrome Cache Entry: 272
ASCII text
dropped
Chrome Cache Entry: 273
Web Open Font Format, TrueType, length 6784, version 3.30147
downloaded
Chrome Cache Entry: 274
XML 1.0 document, ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 275
PNG image data, 19 x 19, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 276
JSON data
downloaded
Chrome Cache Entry: 277
ASCII text, with very long lines (20946), with CRLF line terminators
downloaded
Chrome Cache Entry: 278
PNG image data, 19 x 19, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 279
JSON data
dropped
Chrome Cache Entry: 280
ASCII text, with very long lines (43338), with no line terminators
dropped
Chrome Cache Entry: 281
JSON data
downloaded
Chrome Cache Entry: 282
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 283
JSON data
downloaded
Chrome Cache Entry: 284
Unicode text, UTF-8 text, with very long lines (14657), with no line terminators
dropped
Chrome Cache Entry: 285
Unicode text, UTF-8 (with BOM) text, with very long lines (65326), with CRLF line terminators
dropped
Chrome Cache Entry: 286
XML 1.0 document, ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 287
XML 1.0 document, ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 288
PNG image data, 222 x 204, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 289
XML 1.0 document, ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 290
HTML document, ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 291
Unicode text, UTF-8 text, with very long lines (17397), with no line terminators
downloaded
Chrome Cache Entry: 292
Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
dropped
Chrome Cache Entry: 293
JSON data
downloaded
Chrome Cache Entry: 294
ASCII text, with very long lines (5962)
dropped
Chrome Cache Entry: 295
ASCII text, with no line terminators
dropped
Chrome Cache Entry: 296
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 297
ASCII text, with very long lines (65439)
downloaded
Chrome Cache Entry: 298
ASCII text, with very long lines (65437)
downloaded
Chrome Cache Entry: 299
ASCII text, with very long lines (32038)
dropped
Chrome Cache Entry: 300
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 301
ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 302
ASCII text, with very long lines (5809)
dropped
Chrome Cache Entry: 303
ASCII text, with no line terminators
dropped
Chrome Cache Entry: 304
Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
downloaded
Chrome Cache Entry: 305
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 306
ASCII text, with very long lines (65536), with no line terminators
dropped
Chrome Cache Entry: 307
HTML document, ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 308
GIF image data, version 89a, 352 x 3
downloaded
Chrome Cache Entry: 309
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 310
JSON data
downloaded
Chrome Cache Entry: 311
ASCII text, with very long lines (611)
downloaded
Chrome Cache Entry: 312
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 313
JSON data
dropped
Chrome Cache Entry: 314
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 315
JSON data
dropped
Chrome Cache Entry: 316
ASCII text, with CRLF line terminators
dropped
Chrome Cache Entry: 317
HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
downloaded
Chrome Cache Entry: 318
PNG image data, 296 x 302, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 319
ASCII text, with very long lines (64616)
dropped
Chrome Cache Entry: 320
Unicode text, UTF-8 text, with very long lines (65035), with no line terminators
downloaded
Chrome Cache Entry: 321
ASCII text, with very long lines (64817)
dropped
Chrome Cache Entry: 322
JSON data
dropped
Chrome Cache Entry: 323
ASCII text, with very long lines (62133), with no line terminators
downloaded
Chrome Cache Entry: 324
ASCII text, with no line terminators
dropped
Chrome Cache Entry: 325
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
Chrome Cache Entry: 326
ASCII text, with very long lines (620)
downloaded
Chrome Cache Entry: 327
ASCII text, with very long lines (5809)
downloaded
Chrome Cache Entry: 328
GIF image data, version 89a, 352 x 3
dropped
Chrome Cache Entry: 329
ASCII text, with very long lines (595)
downloaded
Chrome Cache Entry: 330
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
Chrome Cache Entry: 331
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
Chrome Cache Entry: 332
XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with very long lines (579), with CRLF line terminators
downloaded
Chrome Cache Entry: 333
JSON data
downloaded
Chrome Cache Entry: 334
PNG image data, 19 x 19, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 335
ASCII text, with very long lines (65470)
dropped
Chrome Cache Entry: 336
ASCII text, with very long lines (30298)
dropped
Chrome Cache Entry: 337
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 338
ASCII text, with very long lines (49368)
dropped
Chrome Cache Entry: 339
Unicode text, UTF-8 text, with very long lines (65452)
downloaded
Chrome Cache Entry: 340
PNG image data, 82 x 258, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 341
Unicode text, UTF-8 text, with very long lines (65497)
downloaded
Chrome Cache Entry: 342
Unicode text, UTF-8 text, with very long lines (65500)
downloaded
Chrome Cache Entry: 343
XML 1.0 document, ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 344
XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with very long lines (579), with CRLF line terminators
dropped
Chrome Cache Entry: 345
XML 1.0 document, ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 346
MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
downloaded
Chrome Cache Entry: 347
ASCII text, with very long lines (49368)
downloaded
Chrome Cache Entry: 348
HTML document, ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 349
Unicode text, UTF-8 text, with very long lines (65502)
downloaded
Chrome Cache Entry: 350
ASCII text, with very long lines (64612)
dropped
Chrome Cache Entry: 351
ASCII text, with no line terminators
dropped
Chrome Cache Entry: 352
HTML document, ASCII text, with CRLF line terminators
dropped
Chrome Cache Entry: 353
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
Chrome Cache Entry: 354
PNG image data, 296 x 302, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 355
ASCII text, with very long lines (45193)
dropped
Chrome Cache Entry: 356
ASCII text, with very long lines (65437)
dropped
Chrome Cache Entry: 357
ASCII text, with very long lines (63971), with CRLF line terminators
downloaded
Chrome Cache Entry: 358
ASCII text, with very long lines (351)
downloaded
Chrome Cache Entry: 359
ASCII text, with very long lines (11652), with no line terminators
dropped
Chrome Cache Entry: 360
ASCII text, with very long lines (30298)
dropped
Chrome Cache Entry: 361
ASCII text, with very long lines (24231)
downloaded
Chrome Cache Entry: 362
ASCII text, with very long lines (65536), with no line terminators
dropped
Chrome Cache Entry: 363
MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
dropped
Chrome Cache Entry: 364
ASCII text, with very long lines (65468)
dropped
Chrome Cache Entry: 365
Unicode text, UTF-8 text, with very long lines (24333)
downloaded
Chrome Cache Entry: 366
ASCII text, with very long lines (58232)
dropped
Chrome Cache Entry: 367
Unicode text, UTF-8 text, with very long lines (65308), with no line terminators
downloaded
Chrome Cache Entry: 368
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
Chrome Cache Entry: 369
Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
downloaded
Chrome Cache Entry: 370
HTML document, ASCII text, with very long lines (1327), with CRLF line terminators
downloaded
Chrome Cache Entry: 371
ASCII text, with very long lines (11667), with no line terminators
dropped
Chrome Cache Entry: 372
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 373
ASCII text, with very long lines (64612)
downloaded
Chrome Cache Entry: 374
ASCII text, with very long lines (5650)
dropped
Chrome Cache Entry: 375
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
downloaded
Chrome Cache Entry: 376
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
dropped
Chrome Cache Entry: 377
ASCII text, with no line terminators
dropped
Chrome Cache Entry: 378
ASCII text, with very long lines (42914)
downloaded
Chrome Cache Entry: 379
ASCII text, with very long lines (65536), with no line terminators
dropped
Chrome Cache Entry: 380
ASCII text, with very long lines (35773), with CRLF line terminators
downloaded
Chrome Cache Entry: 381
JSON data
dropped
Chrome Cache Entry: 382
ASCII text, with very long lines (55865)
downloaded
Chrome Cache Entry: 383
C source, ASCII text, with very long lines (501)
dropped
Chrome Cache Entry: 384
ASCII text, with very long lines (5962)
downloaded
Chrome Cache Entry: 385
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
Chrome Cache Entry: 386
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 387
ASCII text, with very long lines (24231)
dropped
Chrome Cache Entry: 388
ASCII text, with very long lines (65346)
downloaded
Chrome Cache Entry: 389
ASCII text, with very long lines (58232)
downloaded
Chrome Cache Entry: 390
Unicode text, UTF-8 text, with very long lines (14657), with no line terminators
downloaded
Chrome Cache Entry: 391
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 392
ASCII text, with very long lines (65443)
downloaded
Chrome Cache Entry: 393
ASCII text, with very long lines (64705)
dropped
Chrome Cache Entry: 394
C source, ASCII text, with very long lines (501)
downloaded
Chrome Cache Entry: 395
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
Chrome Cache Entry: 396
ASCII text, with very long lines (2763)
downloaded
Chrome Cache Entry: 397
XML 1.0 document, ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 398
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 399
ASCII text, with very long lines (65466)
dropped
Chrome Cache Entry: 400
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 401
ASCII text, with no line terminators
dropped
Chrome Cache Entry: 402
ASCII text, with very long lines (738)
downloaded
Chrome Cache Entry: 403
ASCII text, with very long lines (65536), with no line terminators
dropped
Chrome Cache Entry: 404
JSON data
dropped
Chrome Cache Entry: 405
Unicode text, UTF-8 text, with very long lines (58774), with NEL line terminators
downloaded
Chrome Cache Entry: 406
Unicode text, UTF-8 text, with very long lines (24333)
dropped
Chrome Cache Entry: 407
Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
dropped
Chrome Cache Entry: 408
JSON data
downloaded
Chrome Cache Entry: 409
Unicode text, UTF-8 text, with very long lines (17397), with no line terminators
dropped
Chrome Cache Entry: 410
Unicode text, UTF-8 text, with very long lines (65452)
dropped
Chrome Cache Entry: 411
ASCII text, with very long lines (32038)
downloaded
Chrome Cache Entry: 412
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 413
ASCII text, with no line terminators
dropped
Chrome Cache Entry: 414
GIF image data, version 89a, 352 x 3
downloaded
Chrome Cache Entry: 415
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
Chrome Cache Entry: 416
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
Chrome Cache Entry: 417
Unicode text, UTF-8 (with BOM) text, with very long lines (65326), with CRLF line terminators
downloaded
Chrome Cache Entry: 418
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
Chrome Cache Entry: 419
JSON data
dropped
Chrome Cache Entry: 420
ASCII text, with very long lines (2821)
downloaded
Chrome Cache Entry: 421
PNG image data, 102 x 102, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 422
HTML document, ASCII text, with CRLF line terminators
dropped
Chrome Cache Entry: 423
JSON data
dropped
Chrome Cache Entry: 424
Unicode text, UTF-8 text, with very long lines (54995)
downloaded
Chrome Cache Entry: 425
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
Chrome Cache Entry: 426
C source, ASCII text, with very long lines (638)
downloaded
Chrome Cache Entry: 427
XML 1.0 document, ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 428
ASCII text, with very long lines (13735), with no line terminators
downloaded
Chrome Cache Entry: 429
ASCII text, with very long lines (46689), with no line terminators
dropped
Chrome Cache Entry: 431
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 141866
downloaded
Chrome Cache Entry: 432
ASCII text, with very long lines (65468)
downloaded
Chrome Cache Entry: 433
ASCII text, with very long lines (49535)
downloaded
Chrome Cache Entry: 434
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
Chrome Cache Entry: 435
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 436
ASCII text, with very long lines (45193)
downloaded
Chrome Cache Entry: 437
PNG image data, 19 x 19, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 438
ASCII text, with very long lines (65536), with no line terminators
dropped
Chrome Cache Entry: 439
HTML document, ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 440
ASCII text, with very long lines (1025)
downloaded
Chrome Cache Entry: 441
ASCII text, with very long lines (620)
dropped
Chrome Cache Entry: 442
JSON data
downloaded
Chrome Cache Entry: 443
ASCII text, with no line terminators
dropped
Chrome Cache Entry: 444
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 445
ASCII text, with very long lines (65443)
dropped
Chrome Cache Entry: 446
JSON data
dropped
Chrome Cache Entry: 447
ASCII text, with very long lines (65346)
dropped
Chrome Cache Entry: 448
ASCII text, with very long lines (55865)
dropped
Chrome Cache Entry: 449
HTML document, ASCII text, with CRLF line terminators
dropped
Chrome Cache Entry: 450
ASCII text, with very long lines (45797)
downloaded
Chrome Cache Entry: 451
XML 1.0 document, ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 452
ASCII text, with very long lines (64616)
downloaded
Chrome Cache Entry: 453
HTML document, ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 454
XML 1.0 document, ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 455
Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
dropped
Chrome Cache Entry: 456
ASCII text, with very long lines (65476)
downloaded
Chrome Cache Entry: 457
ASCII text, with very long lines (738)
dropped
Chrome Cache Entry: 458
Unicode text, UTF-8 text, with very long lines (48867)
downloaded
Chrome Cache Entry: 459
Web Open Font Format, TrueType, length 2944, version 4.30147
downloaded
Chrome Cache Entry: 460
JSON data
dropped
Chrome Cache Entry: 461
JSON data
dropped
Chrome Cache Entry: 462
Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
dropped
Chrome Cache Entry: 463
JSON data
dropped
Chrome Cache Entry: 464
ASCII text, with very long lines (595)
downloaded
Chrome Cache Entry: 465
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 466
JSON data
dropped
Chrome Cache Entry: 467
ASCII text, with very long lines (65536), with no line terminators
dropped
Chrome Cache Entry: 468
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 469
ASCII text, with very long lines (351)
dropped
Chrome Cache Entry: 470
PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 471
Unicode text, UTF-8 text, with very long lines (58774), with NEL line terminators
dropped
Chrome Cache Entry: 472
Unicode text, UTF-8 text, with very long lines (12695)
downloaded
Chrome Cache Entry: 473
Unicode text, UTF-8 text, with very long lines (32009)
dropped
Chrome Cache Entry: 474
XML 1.0 document, ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 475
ASCII text, with very long lines (65466)
downloaded
Chrome Cache Entry: 476
ASCII text, with very long lines (1025)
dropped
Chrome Cache Entry: 477
ASCII text, with very long lines (62133), with no line terminators
dropped
Chrome Cache Entry: 478
HTML document, ASCII text, with CRLF line terminators
dropped
Chrome Cache Entry: 479
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 480
ASCII text
downloaded
Chrome Cache Entry: 481
XML 1.0 document, ASCII text
dropped
Chrome Cache Entry: 482
ASCII text, with very long lines (49535)
dropped
Chrome Cache Entry: 483
JSON data
dropped
Chrome Cache Entry: 484
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 485
ASCII text, with very long lines (45797)
dropped
Chrome Cache Entry: 486
XML 1.0 document, ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 487
ASCII text, with very long lines (43338), with no line terminators
downloaded
Chrome Cache Entry: 488
JSON data
downloaded
Chrome Cache Entry: 489
ASCII text, with very long lines (42914)
dropped
Chrome Cache Entry: 490
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 491
ASCII text, with no line terminators
dropped
Chrome Cache Entry: 492
JSON data
downloaded
Chrome Cache Entry: 493
ASCII text, with very long lines (30298)
downloaded
Chrome Cache Entry: 494
JSON data
dropped
Chrome Cache Entry: 495
ASCII text, with very long lines (2821)
dropped
Chrome Cache Entry: 496
JSON data
downloaded
Chrome Cache Entry: 497
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 498
Unicode text, UTF-8 text, with very long lines (65497)
dropped
Chrome Cache Entry: 499
XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
downloaded
Chrome Cache Entry: 500
ASCII text, with very long lines (595)
dropped
Chrome Cache Entry: 501
HTML document, ASCII text, with CRLF line terminators
dropped
Chrome Cache Entry: 502
ASCII text, with no line terminators
dropped
Chrome Cache Entry: 503
JSON data
dropped
Chrome Cache Entry: 504
ASCII text, with no line terminators
dropped
Chrome Cache Entry: 505
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 506
ASCII text, with very long lines (14782)
downloaded
Chrome Cache Entry: 507
Unicode text, UTF-8 text, with very long lines (11251), with no line terminators
dropped
Chrome Cache Entry: 508
PNG image data, 102 x 102, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 509
ASCII text, with very long lines (11667), with no line terminators
downloaded
Chrome Cache Entry: 510
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 511
ASCII text, with very long lines (2224), with no line terminators
downloaded
Chrome Cache Entry: 512
JSON data
downloaded
Chrome Cache Entry: 513
ASCII text, with very long lines (30298)
downloaded
Chrome Cache Entry: 514
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 515
HTML document, ASCII text, with CRLF line terminators
dropped
Chrome Cache Entry: 516
ASCII text, with no line terminators
dropped
Chrome Cache Entry: 517
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
dropped
Chrome Cache Entry: 518
XML 1.0 document, ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 519
ASCII text, with very long lines (59507)
dropped
Chrome Cache Entry: 520
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
Chrome Cache Entry: 521
ASCII text, with very long lines (65536), with no line terminators
dropped
Chrome Cache Entry: 522
Unicode text, UTF-8 text, with very long lines (65500)
dropped
Chrome Cache Entry: 523
XML 1.0 document, ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 524
ASCII text, with very long lines (10296)
dropped
Chrome Cache Entry: 525
XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with very long lines (579), with CRLF line terminators
downloaded
Chrome Cache Entry: 526
ASCII text, with very long lines (65470)
downloaded
Chrome Cache Entry: 527
XML 1.0 document, ASCII text
downloaded
Chrome Cache Entry: 528
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 529
PNG image data, 222 x 204, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 530
C source, ASCII text, with very long lines (593)
downloaded
Chrome Cache Entry: 531
HTML document, Unicode text, UTF-8 text, with very long lines (23182), with CRLF line terminators
downloaded
Chrome Cache Entry: 532
ASCII text, with very long lines (595)
dropped
Chrome Cache Entry: 533
JSON data
downloaded
Chrome Cache Entry: 534
ASCII text, with very long lines (675)
dropped
Chrome Cache Entry: 535
PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 536
ASCII text, with very long lines (65536), with no line terminators
dropped
Chrome Cache Entry: 537
JSON data
downloaded
Chrome Cache Entry: 538
GIF image data, version 89a, 24 x 24
downloaded
Chrome Cache Entry: 539
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 540
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 541
XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
dropped
Chrome Cache Entry: 542
HTML document, ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 543
C source, ASCII text, with very long lines (593)
dropped
Chrome Cache Entry: 544
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 545
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 546
Unicode text, UTF-8 text, with very long lines (12695)
dropped
Chrome Cache Entry: 547
ASCII text, with very long lines (22314), with no line terminators
downloaded
Chrome Cache Entry: 548
ASCII text, with very long lines (61177)
downloaded
Chrome Cache Entry: 549
ASCII text, with very long lines (46689), with no line terminators
downloaded
Chrome Cache Entry: 550
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
downloaded
Chrome Cache Entry: 551
ASCII text, with very long lines (11652), with no line terminators
downloaded
Chrome Cache Entry: 552
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 553
Unicode text, UTF-8 text, with very long lines (65308), with no line terminators
dropped
Chrome Cache Entry: 554
XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with very long lines (579), with CRLF line terminators
dropped
Chrome Cache Entry: 555
ASCII text, with very long lines (65536), with no line terminators
dropped
Chrome Cache Entry: 556
Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
downloaded
Chrome Cache Entry: 557
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 558
ASCII text, with very long lines (65476)
dropped
Chrome Cache Entry: 559
ASCII text, with very long lines (40413), with no line terminators
downloaded
Chrome Cache Entry: 560
ASCII text, with very long lines (64817)
downloaded
Chrome Cache Entry: 561
ASCII text, with very long lines (59507)
downloaded
Chrome Cache Entry: 562
ASCII text, with very long lines (10296)
downloaded
Chrome Cache Entry: 563
Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
downloaded
Chrome Cache Entry: 564
ASCII text, with very long lines (65536), with no line terminators
dropped
Chrome Cache Entry: 565
Unicode text, UTF-8 text, with very long lines (32009)
downloaded
Chrome Cache Entry: 566
JSON data
downloaded
Chrome Cache Entry: 567
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 568
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 569
C source, ASCII text, with very long lines (638)
dropped
Chrome Cache Entry: 570
ASCII text, with very long lines (611)
dropped
Chrome Cache Entry: 571
JSON data
dropped
Chrome Cache Entry: 572
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 573
PNG image data, 82 x 258, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 574
Unicode text, UTF-8 text, with very long lines (11251), with no line terminators
downloaded
Chrome Cache Entry: 575
ASCII text, with no line terminators
dropped
Chrome Cache Entry: 576
GIF image data, version 89a, 24 x 24
dropped
Chrome Cache Entry: 577
ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 578
ASCII text, with very long lines (64748), with CRLF line terminators
downloaded
Chrome Cache Entry: 579
ASCII text, with very long lines (2763)
dropped
Chrome Cache Entry: 580
ASCII text, with very long lines (14782)
dropped
Chrome Cache Entry: 581
ASCII text, with very long lines (5650)
downloaded
There are 320 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1896,i,1843708142966522594,18117323171825081845,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://nam02.safelinks.protection.outlook.com/ap/w-59584e83/?url=https%3A%2F%2F1drv.ms%2Fw%2Fs!ApJMur_0fkFiauB5KRDwZI_JJUk&data=05%7C02%7Cbrisal%40wismedcu.org%7Cd19591619e0349dbdc5008dce2793fb1%7Cd13dc42b9a704728b7c03aa3e8e89773%7C0%7C1%7C638634257662559231%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C60000%7C%7C%7C&sdata=lnObVVsZNPxG74oH726Bor%2FJz%2BqvhF%2F6Xj2pYeY%2Fg2c%3D&reserved=0"

URLs

Name
IP
Malicious
https://nam02.safelinks.protection.outlook.com/ap/w-59584e83/?url=https%3A%2F%2F1drv.ms%2Fw%2Fs!ApJMur_0fkFiauB5KRDwZI_JJUk&data=05%7C02%7Cbrisal%40wismedcu.org%7Cd19591619e0349dbdc5008dce2793fb1%7Cd13dc42b9a704728b7c03aa3e8e89773%7C0%7C1%7C638634257662559231%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C60000%7C%7C%7C&sdata=lnObVVsZNPxG74oH726Bor%2FJz%2BqvhF%2F6Xj2pYeY%2Fg2c%3D&reserved=0
https://common.online.office.com/suite/RemoteTelemetry.ashx?usid=874c6fde-bdee-46c9-8941-b587e2a99ab2
52.108.9.12
https://fa000000125.resources.office.net
unknown
https://roaming.officeapps.partner.office365.cn/rs/v1/settings
unknown
https://www.linkedin.com
unknown
https://wedgecomponents.azurewebsites.net/
unknown
https://res-dev.cdn.officeppe.net/1js/build/31648912/wdjs/WordEditorDS.core.js.map
unknown
http://support.officeppe.com/article/444ff6f0-ef74-4a9c-9091-ffd7a9d1917a
unknown
https://esign.svc.cloud.dev.microsoft
unknown
https://support.office.com/f1/home?isAgave=true&helpid=161255
unknown
https://developer.mozilla.org/en-US/docs/HTML/Element/style
unknown
https://hubblecontent.osi.officeppe.net
unknown
https://www.office.com/template/Excel
unknown
https://login.microsoftonline-int.com
unknown
https://aka.ms/OfficeAddinOverview
unknown
https://onedrive.live.com/
unknown
https://logincdn.msftauth.net/shared/5/js/login_en_aoiK-OIF0h_hqcPcffI9dw2.js
152.199.21.175
https://res-dev.cdn.officeppe.net/1js/build/31648912/wdjs/WordEditorDS.copilotBoot.js.map
unknown
http://www.opensource.org/licenses/mit-license.php
unknown
https://res-dev.cdn.officeppe.net
unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_ELtAAt2Ya8ISGuc0PJcBKA2.js
152.199.21.175
https://nam02.safelinks.protection.outlook.com/ap/w-59584e83/?url=https%3A%2F%2F1drv.ms%2Fw%2Fs!ApJMur_0fkFiauB5KRDwZI_JJUk&data=05%7C02%7Cbrisal%40wismedcu.org%7Cd19591619e0349dbdc5008dce2793fb1%7Cd13dc42b9a704728b7c03aa3e8e89773%7C0%7C1%7C638634257662559231%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C60000%7C%7C%7C&sdata=lnObVVsZNPxG74oH726Bor%2FJz%2BqvhF%2F6Xj2pYeY%2Fg2c%3D&reserved=0
104.47.51.28
https://1drv.ms/w/s!ApJMur_0fkFiauB5KRDwZI_JJUk
13.107.42.12
https://aka.ms/wdfeedback
unknown
https://github.com/Microsoft/JSanity/issues/5
unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
152.199.21.175
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js
152.199.21.175
http://localhost:8080/main_ssr_wac.html?isAgave
unknown
https://cascades.linkedin.com
unknown
https://my.microsoftpersonalcontent.com
unknown
https://augloop-test.officeppe.com
unknown
https://word.office.com
unknown
https://login.live-int.com
unknown
https://office.com
unknown
http://stackoverflow.com/questions/2400935/browser-detection-in-javascript
unknown
https://hubblecontent.osi.microsoft.scloud
unknown
https://forms.office.com
unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
152.199.21.175
https://github.com/douglascrockford/JSON-js
unknown
https://augloop-int.officeppe.com/v2
unknown
https://res-dev.cdn.officeppe.net/1js/build/31648912/wdjs/WordEditorDS.box4.dll3.js.map
unknown
https://1drv.ms
unknown
https://aka.ms/Officeaddins
unknown
https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638639107396167286.Yjc4ZGUyOWYtMTdlZC00ZTgwLTg0NmQtYmJmMTMxY2NiYzQ4OTgwZDc5MzktYjkzZi00YTI3LWI0MzgtZDczNTdhMTc0MmM5&ui_locales=en-US&mkt=en-US&client-request-id=4582a7ff-a9ee-4f87-a89f-91992dd3a474&state=tdXmfUjfA660wXH_RV0Nl3VTt7ZL-gPUd3lemAovpPVl3F9G19RbF0Tox3uaZEGWWp3K7NCj633Udsfka28_rBzvdIAlRs9pIpEbvQMFHroIWN4sQMmoQ0gc16HkxSp_3kZmS1kx_X0wBYbuYBppqhoZvegpWW3uoIgGxYiotwTq3IznU-wgd0Crfvarc-sJg8oV0_uIn-ibeF471MM3moOSSQ3NrqXed3d_Yw407Oo0DBr1Ptgyxz7fuCXcWVs5Wyx4TKBMGtj_L8r51b75CXFfIISAUxj0u6oD3jYFzyJdkcTgHVU1clTZ8A4yOD1RTKX5B6AzxR0szsuzk2KZXQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0
https://office.com/webapps
unknown
http://www.opensource.org/licenses/mit-license.php)
unknown
https://wedge.wedge:9090/
unknown
https://consent.config.office.com/consentcheckin/v1.0/consents
unknown
https://fa000000096.resources.office.net
unknown
http://projects.nikhilk.net
unknown
https://support.office.com/f1/home?isAgave=true&helpid=126385
unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
152.199.21.175
https://hubblecontent.osi.office-int.net
unknown
https://www.onenote.com/Images/oembed_powerbi_defaultthumbnail.png
unknown
https://Office.net
unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
152.199.21.175
https://office.live.com/start/
unknown
https://wus-000.shredder.osi.officeppe.net/
unknown
https://cdn.forms.office.net/forms/images/addin/outlook-createpoll-new-32.png
unknown
https://shredder.osi.office-int.net/
unknown
https://support.office.com/article/7afcb4f3-4aa2-443a-9b08-125a5d692576
unknown
https://onedrive.live.com/redir?resid=62417EF4BFBA4C92!106&authkey=!AOB5KRDwZI_JJUk&ithint=file%2cdocx
13.107.139.11
http://support.office.com
unknown
https://linkedin.com
unknown
https://www.office.com/template/Word
unknown
https://login.windows.net
unknown
https://common.online.office.com/suite/RemoteUls.ashx?usid=874c6fde-bdee-46c9-8941-b587e2a99ab2&officeserverversion=
52.108.9.12
https://github.com/ded/bowser
unknown
https://support.office.com/images/inapp-help-icon-80.png
unknown
https://github.com/OfficeDev/office-js/blob/release/LICENSE.md
unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
152.199.21.175
https://roaming.osi.office.de/rs/v1/settings
unknown
https://logincdn.msftauth.net/shared/5/images/signin_options_4e48046ce74f4b89d450.svg
152.199.21.175
https://login.windows-ppe.net
unknown
https://logincdn.msftauth.net/16.000.30374.3/images/favicon.ico
152.199.21.175
https://localhost:3000/index_react.html
unknown
https://res-dev.cdn.officeppe.net/1js/build/31648912/wdjs/WordEditorDS.augloop.js.map
unknown
https://login.microsoftonline.com
unknown
https://nleditor.osi.officeppe.net
unknown
https://developer.mozilla.org/en-US/docs/HTML/Global_attributes
unknown
https://docufydev.crm.dynamics.com
unknown
https://orgeffc07ad.crm8.dynamics.com
unknown
https://res-dev.cdn.officeppe.net/1js/build/31648912/wdjs/WordEditorDS.uploadFromPC.js.map
unknown
https://hubblecontent.azureedge.microsoft.scloud
unknown
https://hubblecontent.osi.eaglex.ic.gov
unknown
https://www.office.com/login?ru=%2Flaunch%2F
unknown
https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638639107396167286.Yjc4ZGUyOWYtMTdlZC00ZTgwLTg0NmQtYmJmMTMxY2NiYzQ4OTgwZDc5MzktYjkzZi00YTI3LWI0MzgtZDczNTdhMTc0MmM5&ui_locales=en-US&mkt=en-US&client-request-id=4582a7ff-a9ee-4f87-a89f-91992dd3a474&state=tdXmfUjfA660wXH_RV0Nl3VTt7ZL-gPUd3lemAovpPVl3F9G19RbF0Tox3uaZEGWWp3K7NCj633Udsfka28_rBzvdIAlRs9pIpEbvQMFHroIWN4sQMmoQ0gc16HkxSp_3kZmS1kx_X0wBYbuYBppqhoZvegpWW3uoIgGxYiotwTq3IznU-wgd0Crfvarc-sJg8oV0_uIn-ibeF471MM3moOSSQ3NrqXed3d_Yw407Oo0DBr1Ptgyxz7fuCXcWVs5Wyx4TKBMGtj_L8r51b75CXFfIISAUxj0u6oD3jYFzyJdkcTgHVU1clTZ8A4yOD1RTKX5B6AzxR0szsuzk2KZXQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js
152.199.21.175
https://res-dev.cdn.officeppe.net/1js/build/31648912/wdjs/WordEditorDS.common.js.map
unknown
https://logincdn.msftauth.net/shared/5/images/2_bc3d32a696895f78c19d.svg
152.199.21.175
https://fa000000096.resources.office.net/f7024bdc-7caf-4ca8-807d-2908f09640d6/1.0.2210.23001/en-us_w
unknown
https://www.office.com/template/PowerPoint
unknown
https://augloop.office.com/v2
unknown
https://logincdn.msftauth.net/shared/5/chunks/gamepad-navigation_7b060136af316838da99.js
152.199.21.175
https://cdn.forms.office.net/forms/images/addin/outlook-createpoll-new-80.png
unknown
https://res-dev.cdn.officeppe.net/1js/build/31648912/wdjs/WordEditorDS.box4.dll1.js.map
unknown
https://logincdn.msftauth.net/shared/5/chunks/oneds-analytics-js_077217740c853b5d4fe8.js
152.199.21.175
https://forms.officeppe.com
unknown
https://raw.githubusercontent.com/jakearchibald/es6-promise/master/LICENSE
unknown
https://forms.office.com/Pages/WordPollDesignPage.aspx
unknown
https://shredder.osi.officeppe.net/
unknown
There are 90 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
s-part-0044.t-0009.fb-t-msedge.net
13.107.253.72
nam02.safelinks.eop-tm2.outlook.com
104.47.51.28
sni1gl.wpc.alphacdn.net
152.199.21.175
s-part-0017.t-0009.fb-t-msedge.net
13.107.253.45
s-part-0017.t-0009.t-msedge.net
13.107.246.45
wac-0003.wac-dc-msedge.net
52.108.10.12
fp2e7a.wpc.phicdn.net
192.229.221.95
1drv.ms
13.107.42.12
dual-spov-0006.spov-msedge.net
13.107.139.11
wac-0003.wac-msedge.net
52.108.9.12
sni1gl.wpc.omegacdn.net
152.199.21.175
www.google.com
142.250.181.228
s-part-0032.t-0009.t-msedge.net
13.107.246.60
sni1gl.wpc.sigmacdn.net
152.199.21.175
wise-backup.public.onecdn.static.microsoft
unknown
nam02.safelinks.protection.outlook.com
unknown
augloop.office.com
unknown
js.live.net
unknown
ajax.aspnetcdn.com
unknown
m365cdn.nel.measure.office.net
unknown
fa000000136.resources.office.net
unknown
fa000000110.resources.office.net
unknown
onedrive.live.com
unknown
fa000000006.resources.office.net
unknown
fa000000145.resources.office.net
unknown
fpt.live.com
unknown
fa000000051.resources.office.net
unknown
messaging.engagement.office.com
unknown
fa000000096.resources.office.net
unknown
fa000000012.resources.office.net
unknown
fa000000029.resources.office.net
unknown
fa000000116.resources.office.net
unknown
fa000000111.resources.office.net
unknown
fa000000137.resources.office.net
unknown
word.office.com
unknown
www.microsoft365.com
unknown
fa000000085.resources.office.net
unknown
aadcdn.msftauth.net
unknown
logincdn.msftauth.net
unknown
storage.live.com
unknown
wa104381125.resources.office.net
unknown
wordonline.nel.measure.office.net
unknown
fa000000002.resources.office.net
unknown
fa000000074.resources.office.net
unknown
common.online.office.com
unknown
fa000000059.resources.office.net
unknown
identity.nel.measure.office.net
unknown
westeurope-pd03.augloop.office.com
unknown
fa000000125.resources.office.net
unknown
login.microsoftonline.com
unknown
acctcdn.msftauth.net
unknown
nleditor.osi.officeppe.net
unknown
There are 42 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
13.107.246.45
s-part-0017.t-0009.t-msedge.net
United States
192.168.2.9
unknown
unknown
52.108.9.12
wac-0003.wac-msedge.net
United States
192.168.2.5
unknown
unknown
52.108.10.12
wac-0003.wac-dc-msedge.net
United States
13.107.139.11
dual-spov-0006.spov-msedge.net
United States
13.107.42.12
1drv.ms
United States
239.255.255.250
unknown
Reserved
152.199.21.175
sni1gl.wpc.alphacdn.net
United States
104.47.51.28
nam02.safelinks.eop-tm2.outlook.com
United States
13.107.246.60
s-part-0032.t-0009.t-msedge.net
United States
13.107.253.45
s-part-0017.t-0009.fb-t-msedge.net
United States
52.108.8.12
unknown
United States
142.250.181.228
www.google.com
United States
184.28.90.27
unknown
United States
There are 5 hidden IPs, click here to show them.

DOM / HTML

URL
Malicious
https://onedrive.live.com/edit?id=62417EF4BFBA4C92!106&resid=62417EF4BFBA4C92!106&ithint=file%2cdocx&authkey=!AOB5KRDwZI_JJUk&wdo=2&cid=62417ef4bfba4c92
https://onedrive.live.com/edit?id=62417EF4BFBA4C92!106&resid=62417EF4BFBA4C92!106&ithint=file%2cdocx&authkey=!AOB5KRDwZI_JJUk&wdo=2&cid=62417ef4bfba4c92
https://onedrive.live.com/edit?id=62417EF4BFBA4C92!106&resid=62417EF4BFBA4C92!106&ithint=file%2cdocx&authkey=!AOB5KRDwZI_JJUk&wdo=2&cid=62417ef4bfba4c92
https://onedrive.live.com/edit?id=62417EF4BFBA4C92!106&resid=62417EF4BFBA4C92!106&ithint=file%2cdocx&authkey=!AOB5KRDwZI_JJUk&wdo=2&cid=62417ef4bfba4c92
https://onedrive.live.com/edit?id=62417EF4BFBA4C92!106&resid=62417EF4BFBA4C92!106&ithint=file%2cdocx&authkey=!AOB5KRDwZI_JJUk&wdo=2&cid=62417ef4bfba4c92
https://onedrive.live.com/edit?id=62417EF4BFBA4C92!106&resid=62417EF4BFBA4C92!106&ithint=file%2cdocx&authkey=!AOB5KRDwZI_JJUk&wdo=2&cid=62417ef4bfba4c92
https://onedrive.live.com/edit?id=62417EF4BFBA4C92!106&resid=62417EF4BFBA4C92!106&ithint=file%2cdocx&authkey=!AOB5KRDwZI_JJUk&wdo=2&cid=62417ef4bfba4c92
https://onedrive.live.com/edit?id=62417EF4BFBA4C92!106&resid=62417EF4BFBA4C92!106&ithint=file%2cdocx&authkey=!AOB5KRDwZI_JJUk&wdo=2&cid=62417ef4bfba4c92
https://onedrive.live.com/edit?id=62417EF4BFBA4C92!106&resid=62417EF4BFBA4C92!106&ithint=file%2cdocx&authkey=!AOB5KRDwZI_JJUk&wdo=2&cid=62417ef4bfba4c92
https://onedrive.live.com/edit?id=62417EF4BFBA4C92!106&resid=62417EF4BFBA4C92!106&ithint=file%2cdocx&authkey=!AOB5KRDwZI_JJUk&wdo=2&cid=62417ef4bfba4c92
https://onedrive.live.com/edit?id=62417EF4BFBA4C92!106&resid=62417EF4BFBA4C92!106&ithint=file%2cdocx&authkey=!AOB5KRDwZI_JJUk&wdo=2&cid=62417ef4bfba4c92
https://onedrive.live.com/edit?id=62417EF4BFBA4C92!106&resid=62417EF4BFBA4C92!106&ithint=file%2cdocx&authkey=!AOB5KRDwZI_JJUk&wdo=2&cid=62417ef4bfba4c92
https://onedrive.live.com/edit?id=62417EF4BFBA4C92!106&resid=62417EF4BFBA4C92!106&ithint=file%2cdocx&authkey=!AOB5KRDwZI_JJUk&wdo=2&cid=62417ef4bfba4c92
https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638639107396167286.Yjc4ZGUyOWYtMTdlZC00ZTgwLTg0NmQtYmJmMTMxY2NiYzQ4OTgwZDc5MzktYjkzZi00YTI3LWI0MzgtZDczNTdhMTc0MmM5&ui_locales=en-US&mkt=en-US&client-request-id=4582a7ff-a9ee-4f87-a89f-91992dd3a474&state=tdXmfUjfA660wXH_RV0Nl3VTt7ZL-gPUd3lemAovpPVl3F9G19RbF0Tox3uaZEGWWp3K7NCj633Udsfka28_rBzvdIAlRs9pIpEbvQMFHroIWN4sQMmoQ0gc16HkxSp_3kZmS1kx_X0wBYbuYBppqhoZvegpWW3uoIgGxYiotwTq3IznU-wgd0Crfvarc-sJg8oV0_uIn-ibeF471MM3moOSSQ3NrqXed3d_Yw407Oo0DBr1Ptgyxz7fuCXcWVs5Wyx4TKBMGtj_L8r51b75CXFfIISAUxj0u6oD3jYFzyJdkcTgHVU1clTZ8A4yOD1RTKX5B6AzxR0szsuzk2KZXQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0
https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638639107396167286.Yjc4ZGUyOWYtMTdlZC00ZTgwLTg0NmQtYmJmMTMxY2NiYzQ4OTgwZDc5MzktYjkzZi00YTI3LWI0MzgtZDczNTdhMTc0MmM5&ui_locales=en-US&mkt=en-US&client-request-id=4582a7ff-a9ee-4f87-a89f-91992dd3a474&state=tdXmfUjfA660wXH_RV0Nl3VTt7ZL-gPUd3lemAovpPVl3F9G19RbF0Tox3uaZEGWWp3K7NCj633Udsfka28_rBzvdIAlRs9pIpEbvQMFHroIWN4sQMmoQ0gc16HkxSp_3kZmS1kx_X0wBYbuYBppqhoZvegpWW3uoIgGxYiotwTq3IznU-wgd0Crfvarc-sJg8oV0_uIn-ibeF471MM3moOSSQ3NrqXed3d_Yw407Oo0DBr1Ptgyxz7fuCXcWVs5Wyx4TKBMGtj_L8r51b75CXFfIISAUxj0u6oD3jYFzyJdkcTgHVU1clTZ8A4yOD1RTKX5B6AzxR0szsuzk2KZXQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true
https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=162&ct=1728313893&rver=7.5.2146.0&wp=MBI_SSL&wreply=https:%2F%2Fonedrive.live.com%2Fredir%3Fresid%3D62417EF4BFBA4C92%2521106%26authkey%3D%2521AOB5KRDwZI_JJUk%26page%3DView&lc=1033&id=281053&cbcxt=sky&lw=1&fl=easi2
https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=162&ct=1728313893&rver=7.5.2146.0&wp=MBI_SSL&wreply=https:%2F%2Fonedrive.live.com%2Fredir%3Fresid%3D62417EF4BFBA4C92%2521106%26authkey%3D%2521AOB5KRDwZI_JJUk%26page%3DView&lc=1033&id=281053&cbcxt=sky&lw=1&fl=easi2
https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=162&ct=1728313893&rver=7.5.2146.0&wp=MBI_SSL&wreply=https:%2F%2Fonedrive.live.com%2Fredir%3Fresid%3D62417EF4BFBA4C92%2521106%26authkey%3D%2521AOB5KRDwZI_JJUk%26page%3DView&lc=1033&id=281053&cbcxt=sky&lw=1&fl=easi2
https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638639107396167286.Yjc4ZGUyOWYtMTdlZC00ZTgwLTg0NmQtYmJmMTMxY2NiYzQ4OTgwZDc5MzktYjkzZi00YTI3LWI0MzgtZDczNTdhMTc0MmM5&ui_locales=en-US&mkt=en-US&client-request-id=4582a7ff-a9ee-4f87-a89f-91992dd3a474&state=tdXmfUjfA660wXH_RV0Nl3VTt7ZL-gPUd3lemAovpPVl3F9G19RbF0Tox3uaZEGWWp3K7NCj633Udsfka28_rBzvdIAlRs9pIpEbvQMFHroIWN4sQMmoQ0gc16HkxSp_3kZmS1kx_X0wBYbuYBppqhoZvegpWW3uoIgGxYiotwTq3IznU-wgd0Crfvarc-sJg8oV0_uIn-ibeF471MM3moOSSQ3NrqXed3d_Yw407Oo0DBr1Ptgyxz7fuCXcWVs5Wyx4TKBMGtj_L8r51b75CXFfIISAUxj0u6oD3jYFzyJdkcTgHVU1clTZ8A4yOD1RTKX5B6AzxR0szsuzk2KZXQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true
https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638639107396167286.Yjc4ZGUyOWYtMTdlZC00ZTgwLTg0NmQtYmJmMTMxY2NiYzQ4OTgwZDc5MzktYjkzZi00YTI3LWI0MzgtZDczNTdhMTc0MmM5&ui_locales=en-US&mkt=en-US&client-request-id=4582a7ff-a9ee-4f87-a89f-91992dd3a474&state=tdXmfUjfA660wXH_RV0Nl3VTt7ZL-gPUd3lemAovpPVl3F9G19RbF0Tox3uaZEGWWp3K7NCj633Udsfka28_rBzvdIAlRs9pIpEbvQMFHroIWN4sQMmoQ0gc16HkxSp_3kZmS1kx_X0wBYbuYBppqhoZvegpWW3uoIgGxYiotwTq3IznU-wgd0Crfvarc-sJg8oV0_uIn-ibeF471MM3moOSSQ3NrqXed3d_Yw407Oo0DBr1Ptgyxz7fuCXcWVs5Wyx4TKBMGtj_L8r51b75CXFfIISAUxj0u6oD3jYFzyJdkcTgHVU1clTZ8A4yOD1RTKX5B6AzxR0szsuzk2KZXQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true
https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638639107396167286.Yjc4ZGUyOWYtMTdlZC00ZTgwLTg0NmQtYmJmMTMxY2NiYzQ4OTgwZDc5MzktYjkzZi00YTI3LWI0MzgtZDczNTdhMTc0MmM5&ui_locales=en-US&mkt=en-US&client-request-id=4582a7ff-a9ee-4f87-a89f-91992dd3a474&state=tdXmfUjfA660wXH_RV0Nl3VTt7ZL-gPUd3lemAovpPVl3F9G19RbF0Tox3uaZEGWWp3K7NCj633Udsfka28_rBzvdIAlRs9pIpEbvQMFHroIWN4sQMmoQ0gc16HkxSp_3kZmS1kx_X0wBYbuYBppqhoZvegpWW3uoIgGxYiotwTq3IznU-wgd0Crfvarc-sJg8oV0_uIn-ibeF471MM3moOSSQ3NrqXed3d_Yw407Oo0DBr1Ptgyxz7fuCXcWVs5Wyx4TKBMGtj_L8r51b75CXFfIISAUxj0u6oD3jYFzyJdkcTgHVU1clTZ8A4yOD1RTKX5B6AzxR0szsuzk2KZXQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true
https://onedrive.live.com/edit?id=62417EF4BFBA4C92!106&resid=62417EF4BFBA4C92!106&ithint=file%2cdocx&authkey=!AOB5KRDwZI_JJUk&wdo=2&cid=62417ef4bfba4c92
https://onedrive.live.com/edit?id=62417EF4BFBA4C92!106&resid=62417EF4BFBA4C92!106&ithint=file%2cdocx&authkey=!AOB5KRDwZI_JJUk&wdo=2&cid=62417ef4bfba4c92
There are 13 hidden doms, click here to show them.