Edit tour
Windows
Analysis Report
RE Leander - Lighting and Control Devices Submittal.msg
Overview
General Information
| Sample name: | RE Leander - Lighting and Control Devices Submittal.msg |
| Analysis ID: | 1544659 |
| MD5: | 655e4981b189d744500607d6d6c50b67 |
| SHA1: | 1a08e7ec4556e86f9fcf5e6f3f12f946c1209be1 |
| SHA256: | 6a381f857a36abbc651469b99f8ebf10f71a0b7dec47f72f1348aba672098923 |
| Infos: |  |
 | |
Detection
| Score: | 23 |
| Range: | 0 - 100 |
| Whitelisted: | false |
| Confidence: | 60% |
Signatures
HTML page contains hidden URLs
HTML body contains low number of good links
HTML page contains hidden javascript code
HTML title does not match URL
Queries the volume information (name, serial number etc) of a device
Sigma detected: Office Autorun Keys Modification
Stores files to the Windows start menu directory
Stores large binary data to the registry
Classification
- System is w10x64_ra
OUTLOOK.EXE (PID: 6732 cmdline: "C:\Progra m Files (x 86)\Micros oft Office \Root\Offi ce16\OUTLO OK.EXE" /f "C:\Users \user\Desk top\RE Lea nder - Lig hting and Control De vices Subm ittal.msg" MD5: 91A5292942864110ED734005B7E005C0) 
ai.exe (PID: 6904 cmdline: "C:\Progra m Files (x 86)\Micros oft Office \root\vfs\ ProgramFil esCommonX6 4\Microsof t Shared\O ffice16\ai .exe" "18D DC3D9-60B1 -4CC8-A052 -101385A51 363" "75FE 8FA7-E046- 4BFD-82F3- FC3C528AFC 7D" "6732" "C:\Progr am Files ( x86)\Micro soft Offic e\Root\Off ice16\OUTL OOK.EXE" " WordCombin edFloatieL reOnline.o nnx" MD5: EC652BEDD90E089D9406AFED89A8A8BD) 
chrome.exe (PID: 4800 cmdline: "C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --st art-maximi zed --sing le-argumen t https:// link.edgep ilot.com/s /c6c5d4e5/ oz5uFPEm10 aK_RBwkmVv zQ?u=https ://aro3651 50672-my.s harepoint. com/:b:/g/ personal/r dhamija_gi gnac-assoc iates_com/ EVNHaSacx5 JNmFtGs0SX CbIBgI50GJ jSp_v8M3rn dVz0Qg MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4) - chrome.exe (PID: 3168 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --ty pe=utility --utility -sub-type= network.mo jom.Networ kService - -lang=en-U S --servic e-sandbox- type=none --mojo-pla tform-chan nel-handle =2152 --fi eld-trial- handle=189 2,i,111239 6780658771 2953,17279 4441452832 6139,26214 4 --disabl e-features =Optimizat ionGuideMo delDownloa ding,Optim izationHin ts,Optimiz ationHints Fetching,O ptimizatio nTargetPre diction /p refetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4) - chrome.exe (PID: 6352 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --st art-maximi zed --sing le-argumen t https:// link.edgep ilot.com/s /12f296c1/ mkNEkUsCaU yhM6_YKKlY ig?u=https ://gignaca rchitects. sharefile. com/public /share/web -sd99ebbc5 c56741ceb9 6a1e5404c1 7f68 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4) - chrome.exe (PID: 6944 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --ty pe=utility --utility -sub-type= network.mo jom.Networ kService - -lang=en-U S --servic e-sandbox- type=none --mojo-pla tform-chan nel-handle =1628 --fi eld-trial- handle=200 4,i,436372 3415511824 311,158446 0236719385 9722,26214 4 --disabl e-features =Optimizat ionGuideMo delDownloa ding,Optim izationHin ts,Optimiz ationHints Fetching,O ptimizatio nTargetPre diction /p refetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
- cleanup
⊘No yara matches
| Source: | Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): | ||
⊘No Suricata rule has matched
Click to jump to signature section
Show All Signature Results
Phishing |   |
|---|
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Classification label: | ||
| Source: | File created: | ||
| Source: | File created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Key value queried: | ||
| Source: | Window found: | ||
| Source: | Window detected: | ||
| Source: | Key opened: | ||
| Source: | File created: | ||
| Source: | File created: | ||
| Source: | File created: | ||
| Source: | File created: | ||
| Source: | File created: | ||
| Source: | File created: | ||
| Source: | File created: | ||
| Source: | Key value created or modified: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | File Volume queried: | ||
| Source: | Process information queried: | ||
| Source: | Queries volume information: | ||
| Source: | Key value queried: | ||
| Reconnaissance | Resource Development | Initial Access | Execution | Persistence | Privilege Escalation | Defense Evasion | Credential Access | Discovery | Lateral Movement | Collection | Command and Control | Exfiltration | Impact |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Gather Victim Identity Information | Acquire Infrastructure | Valid Accounts | Windows Management Instrumentation | 1 DLL Side-Loading | 1 Process Injection | 1 Masquerading | OS Credential Dumping | 1 Process Discovery | Remote Services | Data from Local System | 2 Encrypted Channel | Exfiltration Over Other Network Medium | Abuse Accessibility Features |
| Credentials | Domains | Default Accounts | Scheduled Task/Job | 1 Registry Run Keys / Startup Folder | 1 DLL Side-Loading | 1 Modify Registry | LSASS Memory | 13 System Information Discovery | Remote Desktop Protocol | Data from Removable Media | 1 Non-Application Layer Protocol | Exfiltration Over Bluetooth | Network Denial of Service |
| Email Addresses | DNS Server | Domain Accounts | At | Logon Script (Windows) | 1 Registry Run Keys / Startup Folder | 1 Process Injection | Security Account Manager | Query Registry | SMB/Windows Admin Shares | Data from Network Shared Drive | 2 Application Layer Protocol | Automated Exfiltration | Data Encrypted for Impact |
| Employee Names | Virtual Private Server | Local Accounts | Cron | Login Hook | Login Hook | 1 DLL Side-Loading | NTDS | System Network Configuration Discovery | Distributed Component Object Model | Input Capture | Protocol Impersonation | Traffic Duplication | Data Destruction |
This section contains all screenshots as thumbnails, including those not shown in the slideshow.
⊘No Antivirus matches
⊘No Antivirus matches
⊘No Antivirus matches
⊘No Antivirus matches
⊘No Antivirus matches
| Name | IP | Active | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|---|---|
| link.edgepilot.com | 199.30.234.133 | true | false | unknown | |
| dual-spo-0005.spo-msedge.net | 13.107.136.10 | true | false | unknown | |
| gignacarchitects.sf-api.com | 76.223.1.166 | true | false | unknown | |
| gignacarchitects.sharefile.com | 13.248.193.251 | true | true | unknown | |
| 0093b71e39a6.us-east-1.sdk.awswaf.com | 13.32.121.66 | true | false | unknown | |
| maxcdn.bootstrapcdn.com | 104.18.11.207 | true | false | unknown | |
| s-part-0017.t-0009.t-msedge.net | 13.107.246.45 | true | false | unknown | |
| piletfeed-cdn.sharefile.io | 3.165.190.39 | true | false | unknown | |
| 0093b71e39a6.11de9b12.us-east-1.token.awswaf.com | 18.173.205.42 | true | false | unknown | |
| 51.138.111.34.bc.googleusercontent.com | 34.111.138.51 | true | false | unknown | |
| code.jquery.com | 151.101.66.137 | true | false | unknown | |
| o49063.ingest.sentry.io | 34.120.195.249 | true | false | unknown | |
| sni1gl.wpc.omegacdn.net | 152.199.21.175 | true | false | unknown | |
| www.google.com | 142.250.185.228 | true | false | unknown | |
| app.launchdarkly.com | unknown | unknown | false | unknown | |
| aadcdn.msftauth.net | unknown | unknown | false | unknown | |
| aro365150672-my.sharepoint.com | unknown | unknown | true | unknown | |
| citrix-sharefile-content.customer.pendo.io | unknown | unknown | false | unknown | |
| identity.nel.measure.office.net | unknown | unknown | false | unknown | |
| login.microsoftonline.com | unknown | unknown | false | unknown |
| Name | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|
| true | unknown | ||
| true | unknown | ||
| false | unknown | ||
| true | unknown | ||
| false | unknown |
- No. of IPs < 25%
- 25% < No. of IPs < 50%
- 50% < No. of IPs < 75%
- 75% < No. of IPs
| IP | Domain | Country | Flag | ASN | ASN Name | Malicious |
|---|---|---|---|---|---|---|
| 199.30.234.133 | link.edgepilot.com | United States | 13380 | ASN-CUSTUS | false | |
| 142.250.186.67 | unknown | United States | 15169 | GOOGLEUS | false | |
| 142.250.185.228 | www.google.com | United States | 15169 | GOOGLEUS | false | |
| 13.107.136.10 | dual-spo-0005.spo-msedge.net | United States | 8068 | MICROSOFT-CORP-MSN-AS-BLOCKUS | false | |
| 40.126.32.140 | unknown | United States | 8075 | MICROSOFT-CORP-MSN-AS-BLOCKUS | false | |
| 52.109.89.18 | unknown | United States | 8075 | MICROSOFT-CORP-MSN-AS-BLOCKUS | false | |
| 173.194.76.84 | unknown | United States | 15169 | GOOGLEUS | false | |
| 2.19.126.89 | unknown | European Union | 16625 | AKAMAI-ASUS | false | |
| 151.101.130.217 | unknown | United States | 54113 | FASTLYUS | false | |
| 20.42.65.88 | unknown | United States | 8075 | MICROSOFT-CORP-MSN-AS-BLOCKUS | false | |
| 13.248.193.251 | gignacarchitects.sharefile.com | United States | 16509 | AMAZON-02US | true | |
| 52.109.68.129 | unknown | United States | 8075 | MICROSOFT-CORP-MSN-AS-BLOCKUS | false | |
| 13.32.121.66 | 0093b71e39a6.us-east-1.sdk.awswaf.com | United States | 16509 | AMAZON-02US | false | |
| 151.101.194.217 | unknown | United States | 54113 | FASTLYUS | false | |
| 2.19.126.160 | unknown | European Union | 16625 | AKAMAI-ASUS | false | |
| 151.101.66.137 | code.jquery.com | United States | 54113 | FASTLYUS | false | |
| 52.111.243.41 | unknown | United States | 8075 | MICROSOFT-CORP-MSN-AS-BLOCKUS | false | |
| 216.58.212.170 | unknown | United States | 15169 | GOOGLEUS | false | |
| 52.113.194.132 | unknown | United States | 8068 | MICROSOFT-CORP-MSN-AS-BLOCKUS | false | |
| 1.1.1.1 | unknown | Australia | 13335 | CLOUDFLARENETUS | false | |
| 142.250.186.163 | unknown | United States | 15169 | GOOGLEUS | false | |
| 18.173.205.42 | 0093b71e39a6.11de9b12.us-east-1.token.awswaf.com | United States | 3 | MIT-GATEWAYSUS | false | |
| 3.165.190.39 | piletfeed-cdn.sharefile.io | United States | 16509 | AMAZON-02US | false | |
| 142.250.185.238 | unknown | United States | 15169 | GOOGLEUS | false | |
| 104.18.11.207 | maxcdn.bootstrapcdn.com | United States | 13335 | CLOUDFLARENETUS | false | |
| 151.101.2.137 | unknown | United States | 54113 | FASTLYUS | false | |
| 34.111.138.51 | 51.138.111.34.bc.googleusercontent.com | United States | 15169 | GOOGLEUS | false | |
| 40.126.31.73 | unknown | United States | 8075 | MICROSOFT-CORP-MSN-AS-BLOCKUS | false | |
| 239.255.255.250 | unknown | Reserved | unknown | unknown | false | |
| 13.224.189.90 | unknown | United States | 16509 | AMAZON-02US | false | |
| 152.199.21.175 | sni1gl.wpc.omegacdn.net | United States | 15133 | EDGECASTUS | false | |
| 184.28.90.27 | unknown | United States | 16625 | AKAMAI-ASUS | false | |
| 76.223.1.166 | gignacarchitects.sf-api.com | United States | 16509 | AMAZON-02US | false | |
| 34.120.195.249 | o49063.ingest.sentry.io | United States | 15169 | GOOGLEUS | false |
| IP |
|---|
| 192.168.2.16 |
| 192.168.2.6 |
| Joe Sandbox version: | 41.0.0 Charoite |
| Analysis ID: | 1544659 |
| Start date and time: | 2024-10-29 16:08:04 +01:00 |
| Joe Sandbox product: | CloudBasic |
| Overall analysis duration: | |
| Hypervisor based Inspection enabled: | false |
| Report type: | full |
| Cookbook file name: | defaultwindowsinteractivecookbook.jbs |
| Analysis system description: | Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01 |
| Number of analysed new started processes analysed: | 17 |
| Number of new started drivers analysed: | 0 |
| Number of existing processes analysed: | 0 |
| Number of existing drivers analysed: | 0 |
| Number of injected processes analysed: | 0 |
| Technologies: |
|
| Analysis Mode: | stream |
| Analysis stop reason: | Timeout |
| Sample name: | RE Leander - Lighting and Control Devices Submittal.msg |
| Detection: | SUS |
| Classification: | sus23.phis.winMSG@26/85@56/237 |
| Cookbook Comments: |
|
- Exclude process from analysis (whitelisted): dllhost.exe, SgrmBroker.exe, svchost.exe
- Excluded IPs from analysis (whitelisted): 184.28.90.27, 52.109.89.18, 52.113.194.132, 52.109.68.129, 2.19.126.160, 2.19.126.151, 52.111.243.41, 52.111.243.40, 52.111.243.42, 52.111.243.43, 20.42.65.88
- Excluded domains from analysis (whitelisted): omex.cdn.office.net, slscr.update.microsoft.com, weu-azsc-config.officeapps.live.com, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, eur.roaming1.live.com.akadns.net, ecs-office.s-0005.s-msedge.net, roaming.officeapps.live.com, login.live.com, e16604.g.akamaiedge.net, frc-azsc-000.roaming.officeapps.live.com, officeclient.microsoft.com, prod.fs.microsoft.com.akadns.net, a1864.dscd.akamai.net, ecs.office.com, self-events-data.trafficmanager.net, fs.microsoft.com, prod.configsvc1.live.com.akadns.net, self.events.data.microsoft.com, osiprod-frc-buff-azsc-000.francecentral.cloudapp.azure.com, onedscolprdeus08.eastus.cloudapp.azure.com, prod.roaming1.live.com.akadns.net, s-0005-office.config.skype.com, fe3cr.delivery.mp.microsoft.com, prod1.naturallanguageeditorservice.osi.office.net.akadns.net, nleditor.osi.office.net, prod-eu-resolver.naturallanguageeditorservice.osi.office.net.akadns.net, s-0005.s-msedge.net, con
- Not all processes where analyzed, report is missing behavior information
- Report size getting too big, too many NtQueryAttributesFile calls found.
- Report size getting too big, too many NtQueryValueKey calls found.
- VT rate limit hit for: RE Leander - Lighting and Control Devices Submittal.msg
| Input | Output |
|---|---|
| URL: Model: claude-3-5-sonnet-latest | {
"explanation": [
"This appears to be a legitimate business email thread between architecture/engineering firms discussing document sharing",
"The email addresses and domains match legitimate companies (MS2 Consulting Engineers and Gignac Architects)",
"The conversation flow is natural with appropriate business context about sharing lighting submittal documents"
],
"phishing": false,
"confidence": 9
} |
{
"date": "Mon, 28 Oct 2024 14:23:48 +0100",
"subject": "RE: Leander - Lighting and Control Devices Submittal",
"communications": [
"Thank you I got it\n\nGidget R. Rosemond\nTechnical Secretary\n\nMS2 Consulting Engineers\n8200 W Interstate 10, Suite 312\nSan Antonio, TX 78230\nOffice: 210-736-4265\n[cid:image001.png@01DB2912.B5B1A530]\nwww.MS2-inc.com<https://link.edgepilot.com/s/0f9ef154/NJX5AYObG0_RqDaxWmgWHw?u=http://www.ms2-inc.com/>\n\n\n\n",
"From: Rohini Dhamija <rdhamija@gignac-associates.com>\nSent: Monday, October 28, 2024 8:12 AM\nTo: Gidget Rosemond <grosemond@ms2-inc.com>\nSubject: Re: Leander - Lighting and Control Devices Submittal\n\nHere you go Gidget\n\nSharefile link\n\nhttps://gignacarchitects.sharefile.com/public/share/web-sd99ebbc5c56741ceb96a1e5404c17f68<https://link.edgepilot.com/s/12f296c1/mkNEkUsCaUyhM6_YKKlYig?u=https://gignacarchitects.sharefile.com/public/share/web-sd99ebbc5c56741ceb96a1e5404c17f68>\n\nI sent you the sharefile notification as well.\n\nLet me know.\n\n\nR O H I N I D H A M I J A\n3 6 1 . 8 8 4 . 2 6 6 1 | r d h a m i j a @ g i g n a c - a s s o c i a t e s . c o m\n[cid:image002.png@01DB2912.B5B1A530]\nG I G N A C A R C H I T E C T S\nC O R P U S C H R I S T I | M C A L L E N | H A R L I N G E N | D A L L A S\nwww.GIGNACARCHITECTS.com<https://link.edgepilot.com/s/ade9b597/HQxofOzvWEyNyAE96HbHug?u=http://www.gignacarchitects.com/>\n\n\n\n________________________________\n",
"From: Gidget Rosemond <grosemond@ms2-inc.com<mailto:grosemond@ms2-inc.com>>\nSent: Monday, October 28, 2024 8:06 AM\nTo: Rohini Dhamija <rdhamija@gignac-associates.com<mailto:rdhamija@gignac-associates.com>>\nSubject: RE: Leander - Lighting and Control Devices Submittal\n\n\nThis is what I am getting:\n\n\n\nThat didn't work\n\nWe're sorry, but grosemond@ms2-inc.com<mailto:grosemond@ms2-inc.com> can't be found in the aro365150672-my.sharepoint.com directory. Please try again later, while we try to automatically fix this for you.\n\nHere are a few ideas:\n\n[cid:image003.gif@01DB2912.B5B1A530]\n\nClick here to sign in with a different account to this site.\nThis will sign you out of all other Office 365 services that you're signed into at this time.\n\n[cid:image003.gif@01DB2912.B5B1A530]\n\nIf you're using this account on another site and don't want to sign out, start your browser in Private Browsing mode for this site (show me how)<https://link.edgepilot.com/s/2b2e1abb/KtvhvhqXjkKjRyYXtt4Wpg?u=https://go.microsoft.com/fwlink/?LinkId=282736>.\n\n\n\n\n\nIs there anyway you can just send me the PDF.\n\n\n\nThank you\n\n\n\nGidget R. Rosemond\n\nTechnical Secretary\n\n\n\nMS2 Consulting Engineers\n\n8200 W Interstate 10, Suite 312\n\nSan Antonio, TX 78230\n\nOffice: 210-736-4265\n\n[cid:image001.png@01DB2912.B5B1A530]\n\n<https://link.edgepilot.com/s/b771c850/2sRH6keKCk6dCgG_rak-Xg?u=http://www.ms2-inc.com/>www.MS2-inc.com<https://link.edgepilot.com/s/0f9ef154/NJX5AYObG0_RqDaxWmgWHw?u=http://www.ms2-inc.com/>\n\n\n\n\n\n\n\n",
"From: Rohini Dhamija <rdhamija@gignac-associates.com<mailto:rdhamija@gignac-associates.com>>\nSent: Monday, October 28, 2024 8:02 AM\nTo: Gidget Rosemond <grosemond@ms2-inc.com<mailto:grosemond@ms2-inc.com>>; Apolonio Esquivel <aesquivel@gignac-associates.com<mailto:aesquivel@gignac-associates.com>>\nSubject: Re: Leander - Lighting and Control Devices Submittal\n\n\n\nGood morning Gidget,\n\n\n\nPlease see link below\n\n\n\n[https://res.public.onecdn.static.microsoft/assets/mail/file-icon/png/pdf_16x16.png]SBM-260923-01A Lighting and Control Devices PD_compressed.pdf<https://link.edgepilot.com/s/86987e6b/eoCDpZj3VUe0XJud0aJ5dA?u=https://aro365150672-my.sharepoint.com/:b:/g/personal/rdhamija_gignac-associates_com/EdWD_te5iP9It7yMckMinMYB8bGfSGNWIoW2BXu2VqVfaQ>\n\n\n\n\n\nLet me know if you have trouble with this link. I will send a sharefile instead of this one drive.\n\n\n\nHave an awesome week.\n\n\n\nR O H I N I D H A M I J A\n\n3 6 1 . 8 8 4 . 2 6 6 1 | r d h a m i j a @ g i g n a c - a s s o c i a t e s . c o m\n\n[cid:image002.png@01DB2912.B5B1A530]\n\nG I G N A C A R C H I T E C T S\n\nC O R P U S C H R I S T I | M C A L L E N | H A R L I N G E N | D A L L A S\n\n<https://link.edgepilot.com/s/ce74dfd0/yerjqLmRl0WeANjx62uNAA?u=http://www.gignacarchitects.com/>www.GIGNACARCHITECTS.com<https://link.edgepilot.com/s/ade9b597/HQxofOzvWEyNyAE96HbHug?u=http://www.gignacarchitects.com/>\n\n\n\n________________________________\n\n",
"From: Gidget Rosemond <grosemond@ms2-inc.com<mailto:grosemond@ms2-inc.com>>\nSent: Monday, October 28, 2024 7:31 AM\nTo: Rohini Dhamija <rdhamija@gignac-associates.com<mailto:rdhamija@gignac-associates.com>>; Apolonio Esquivel <aesquivel@gignac-associates.com<mailto:aesquivel@gignac-associates.com>>\nSubject: RE: Leander - Lighting and Control Devices Submittal\n\n\n\nCan you please resend the link. It is giving me an error message.\n\n\n\nThank you\n\n\n\nGidget R. Rosemond\n\nTechnical Secretary\n\n\n\nMS2 Consulting Engineers\n\n8200 W Interstate 10, Suite 312\n\nSan Antonio, TX 78230\n\nOffice: 210-736-4265\n\n[cid:image001.png@01DB2912.B5B1A530]\n\n<https://link.edgepilot.com/s/b771c850/2sRH6keKCk6dCgG_rak-Xg?u=http://www.ms2-inc.com/>www.MS2-inc.com<https://link.edgepilot.com/s/0f9ef154/NJX5AYObG0_RqDaxWmgWHw?u=http://www.ms2-inc.com/>\n\n\n\n\n\n\n\n",
"From: Rohini Dhamija <rdhamija@gignac-associates.com<mailto:rdhamija@gignac-associates.com>>\nSent: Friday, October 25, 2024 3:36 PM\nTo: Victor Olivares <VOlivares@ms2-inc.com<mailto:VOlivares@ms2-inc.com>>; Gidget Rosemond <grosemond@ms2-inc.com<mailto:grosemond@ms2-inc.com>>\nCc: Apolonio Esquivel <aesquivel@gignac-associates.com<mailto:aesquivel@gignac-associates.com>>\nSubject: Leander - Lighting and Control Devices Submittal\n\n\n\nGood afternoon Victor, Gidget\n\n\n\nPlease find link below to the Lighting submittal for leander.\n\n\n\n[https://res.public.onecdn.static.microsoft/assets/mail/file-icon/png/pdf_16x16.png]SBM-260923-01A Lighting and Control Devices PD.pdf<https://link.edgepilot.com/s/c6c5d4e5/oz5uFPEm10aK_RBwkmVvzQ?u=https://aro365150672-my.sharepoint.com/:b:/g/personal/rdhamija_gignac-associates_com/EVNHaSacx5JNmFtGs0SXCbIBgI50GJjSp_v8M3rndVz0Qg>\n\n\n\nAlso, see attached email from the subcontractor with respect to the VE\n\n\n\nThank you\n\n\n\nR O H I N I D H A M I J A\n\n3 6 1 . 8 8 4 . 2 6 6 1 | r d h a m i j a @ g i g n a c - a s s o c i a t e s . c o m\n\n[cid:image002.png@01DB2912.B5B1A530]\n\nG I G N A C A R C H I T E C T S\n\nC O R P U S C H R I S T I | M C A L L E N | H A R L I N G E N | D A L L A S\n\n<https://link.edgepilot.com/s/ce74dfd0/yerjqLmRl0WeANjx62uNAA?u=http://www.gignacarchitects.com/>www.GIGNACARCHITECTS.com<https://link.edgepilot.com/s/ade9b597/HQxofOzvWEyNyAE96HbHug?u=http://www.gignacarchitects.com/>\n\n\n\n\nLinks contained in this email have been replaced. If you click on a link in the email above, the link will be analyzed for known threats. If a known threat is found, you will not be able to proceed to the destination. If suspicious content is detected, you will see a warning.\n\n\nLinks contained in this email have been replaced. If you click on a link in the email above, the link will be analyzed for known threats. If a known threat is found, you will not be able to proceed to the destination. If suspicious content is detected, you will see a warning.\n\n\nLinks contained in this email have been replaced. If you click on a link in the email above, the link will be analyzed for known threats. If a known threat is found, you will not be able to proceed to the destination. If suspicious content is detected, you will see a warning.\n"
],
"from": "Gidget Rosemond <grosemond@ms2-inc.com>",
"to": "Rohini Dhamija <rdhamija@gignac-associates.com>",
"attachements": [
"image001.png",
"image002.png",
"image003.gif"
]
} | |
| URL: Email Model: claude-3-haiku-20240307 | ```json
{
"contains_trigger_text": true,
"trigger_text": "Click here to view document",
"prominent_button_name": "Sharefile link",
"text_input_field_labels": "unknown",
"pdf_icon_visible": false,
"has_visible_captcha": false,
"has_urgent_text": false,
"has_visible_qrcode": false
} |
 | |
| URL: Email Model: claude-3-haiku-20240307 | ```json
{
"brands": [
"MS2 CONSULTING ENGINEERS",
"GIGNAC ARCHITECTS"
]
} |
| |
| URL: https://link.edgepilot.com/s/c6c5d4e5/oz5uFPEm10aK_RBwkmVvzQ?u=https://aro365150672-my.sharepoint.com/:b:/g/personal/rdhamija_gignac-associates_com/EVNHaSacx5JNmFtGs0SXCbIBgI50GJjSp_v8M3rndVz0Qg Model: claude-3-haiku-20240307 | ```json
{
"contains_trigger_text": true,
"trigger_text": "Select this button if you are not automatically redirected.",
"prominent_button_name": "Select this button if you are not automatically redirected.",
"text_input_field_labels": "unknown",
"pdf_icon_visible": false,
"has_visible_captcha": false,
"has_urgent_text": false,
"has_visible_qrcode": false
} |
 | |
| URL: Model: claude-3-5-sonnet-latest | {
"typosquatting": false,
"unusual_query_string": true,
"suspicious_tld": false,
"ip_in_url": false,
"long_subdomain": true,
"malicious_keywords": false,
"encoded_characters": true,
"redirection": true,
"contains_email_address": false,
"known_domain": true,
"brand_spoofing_attempt": false,
"third_party_hosting": true
} |
URL: URL: https://link.edgepilot.com/s/c6c5d4e5/oz5uFPEm10aK_RBwkmVvzQ?u=https://aro365150672-my.sharepoint.com/:b:/g/personal/rdhamija_gignac-associates_com/EVNHaSacx5JNmFtGs0SXCbIBgI50GJjSp_v8M3rndVz0Qg | |
| URL: https://link.edgepilot.com/s/c6c5d4e5/oz5uFPEm10aK_RBwkmVvzQ?u=https://aro365150672-my.sharepoint.com/:b:/g/personal/rdhamija_gignac-associates_com/EVNHaSacx5JNmFtGs0SXCbIBgI50GJjSp_v8M3rndVz0Qg Model: claude-3-haiku-20240307 | ```json
{
"brands": []
} |
| |
| URL: Model: claude-3-5-sonnet-latest | {
"typosquatting": false,
"unusual_query_string": false,
"suspicious_tld": false,
"ip_in_url": false,
"long_subdomain": false,
"malicious_keywords": false,
"encoded_characters": true,
"redirection": true,
"contains_email_address": false,
"known_domain": true,
"brand_spoofing_attempt": false,
"third_party_hosting": false
} |
URL: URL: https://login.microsoftonline.com/8e0de89c-298f-4cee-a7bd-0c3a67bd030b/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=F2323C8FF525C2A7526302954E043B41CE166CC903330A89%2D7371B92DB53EFB3713F428DD35FD600BD9A89A2E528BCF9D9E03AE85AFCD407D&redirect%5Furi=https%3A%2F%2Faro365150672%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=03b05ea1%2Dc09d%2D6000%2Dbd7a%2D8ac0579730a2 | |
| URL: https://login.microsoftonline.com/8e0de89c-298f-4cee-a7bd-0c3a67bd030b/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D0000000 Model: claude-3-haiku-20240307 | ```json
{
"contains_trigger_text": true,
"trigger_text": "Sign in",
"prominent_button_name": "Next",
"text_input_field_labels": [
"Email, phone, or Skype"
],
"pdf_icon_visible": false,
"has_visible_captcha": false,
"has_urgent_text": false,
"has_visible_qrcode": false
} |
 | |
| URL: Model: claude-3-5-sonnet-latest | {
"typosquatting": false,
"unusual_query_string": false,
"suspicious_tld": false,
"ip_in_url": false,
"long_subdomain": false,
"malicious_keywords": false,
"encoded_characters": true,
"redirection": true,
"contains_email_address": false,
"known_domain": true,
"brand_spoofing_attempt": false,
"third_party_hosting": false
} |
URL: URL: https://login.microsoftonline.com/8e0de89c-298f-4cee-a7bd-0c3a67bd030b/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=F2323C8FF525C2A7526302954E043B41CE166CC903330A89%2D7371B92DB53EFB3713F428DD35FD600BD9A89A2E528BCF9D9E03AE85AFCD407D&redirect%5Furi=https%3A%2F%2Faro365150672%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=03b05ea1%2Dc09d%2D6000%2Dbd7a%2D8ac0579730a2&sso_reload=true | |
| URL: https://login.microsoftonline.com/8e0de89c-298f-4cee-a7bd-0c3a67bd030b/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D0000000 Model: claude-3-haiku-20240307 | ```json
{
"brands": [
"Microsoft"
]
} |
| |
| URL: Model: claude-3-5-sonnet-latest | {
"typosquatting": false,
"unusual_query_string": true,
"suspicious_tld": false,
"ip_in_url": false,
"long_subdomain": false,
"malicious_keywords": false,
"encoded_characters": true,
"redirection": true,
"contains_email_address": false,
"known_domain": false,
"brand_spoofing_attempt": false,
"third_party_hosting": true
} |
URL: URL: https://link.edgepilot.com/s/12f296c1/mkNEkUsCaUyhM6_YKKlYig?u=https://gignacarchitects.sharefile.com/public/share/web-sd99ebbc5c56741ceb96a1e5404c17f68 | |
| URL: Model: claude-3-5-sonnet-latest | {
"typosquatting": false,
"unusual_query_string": false,
"suspicious_tld": false,
"ip_in_url": false,
"long_subdomain": false,
"malicious_keywords": false,
"encoded_characters": false,
"redirection": false,
"contains_email_address": false,
"known_domain": true,
"brand_spoofing_attempt": false,
"third_party_hosting": true
} |
URL: URL: https://gignacarchitects.sharefile.com/public/share/web-sd99ebbc5c56741ceb96a1e5404c17f68 | |
| URL: Model: claude-3-5-sonnet-latest | {
"typosquatting": false,
"unusual_query_string": false,
"suspicious_tld": false,
"ip_in_url": false,
"long_subdomain": false,
"malicious_keywords": false,
"encoded_characters": false,
"redirection": false,
"contains_email_address": false,
"known_domain": false,
"brand_spoofing_attempt": false,
"third_party_hosting": false
} |
URL: URL: https://edgepilot.com |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1869 |
| Entropy (8bit): | 5.086835744352688 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | E137E4BCA98E7E28D53FADCDE2DAE5BA |
| SHA1: | 6E4FDECA55164ED2CBE1CC1E79C35D9A153C4A63 |
| SHA-256: | A6EE4D9DC27535C991A2267428C2232609FDA8A5A6F697E4FBAE55C68896CAFA |
| SHA-512: | 7E176B0A916C4EA4D4C06C994674120121F8D0CB4BCAD3F4A712BD453668CEF942FC3E0F8ACBCF82ACC9093C8AC1994926C3198E61A88304ECC4312ACD8596D3 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 521377 |
| Entropy (8bit): | 4.9084889265453135 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | C37972CBD8748E2CA6DA205839B16444 |
| SHA1: | 9834B46ACF560146DD7EE9086DB6019FBAC13B4E |
| SHA-256: | D4CFBB0E8B9D3E36ECE921B9B51BD37EF1D3195A9CFA1C4586AEA200EB3434A7 |
| SHA-512: | 02B4D134F84122B6EE9A304D79745A003E71803C354FB01BAF986BD15E3BA57BA5EF167CC444ED67B9BA5964FF5922C50E2E92A8A09862059852ECD9CEF1A900 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
C:\Users\user\AppData\Local\Microsoft\FontCache\4\PreviewFont\flat_officeFontsPreview_4_40.ttf
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 773040 |
| Entropy (8bit): | 6.55939673749297 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 4296A064B917926682E7EED650D4A745 |
| SHA1: | 3953A6AA9100F652A6CA533C2E05895E52343718 |
| SHA-256: | E04E41C74D6C78213BA1588BACEE64B42C0EDECE85224C474A714F39960D8083 |
| SHA-512: | A25388DDCE58D9F06716C0F0BDF2AEFA7F68EBCA7171077533AF4A9BE99A08E3DCD8DFE1A278B7AA5DE65DA9F32501B4B0B0ECAB51F9AF0F12A3A8A75363FF2C |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
C:\Users\user\AppData\Local\Microsoft\Office\16.0\AddInClassifierCache\OfficeSharedEntities.bin
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 322260 |
| Entropy (8bit): | 4.000299760592446 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | CC90D669144261B198DEAD45AA266572 |
| SHA1: | EF164048A8BC8BD3A015CF63E78BDAC720071305 |
| SHA-256: | 89C701EEFF939A44F28921FD85365ECD87041935DCD0FE0BAF04957DA12C9899 |
| SHA-512: | 16F8A8A6DCBAEAEFB88C7CFF910BCCC71B76A723CF808B810F500E28E543112C2FAE2491D4D209569BD810490EDFF564A2B084709B02963BCAF6FDF1AEEC59AC |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
C:\Users\user\AppData\Local\Microsoft\Office\16.0\AddInClassifierCache\OfficeSharedEntitiesUpdated.bin
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | modified |
| Size (bytes): | 10 |
| Entropy (8bit): | 2.721928094887362 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 7B5AD13733ED84A345CAB492D98C19A7 |
| SHA1: | 53AD14F2F8BE7B64E620F7F4621C2CACEF7B058F |
| SHA-256: | 53D361CFECC59A06ED622B10062FFC7C2B5E5947D2A4A29EDC3389611C640EEA |
| SHA-512: | A38A98A4759F672670F3F4F464D485E76BF597B621DB8FAA9F7707B6D583DB2C8A27834C6F18A354F4217A1C7F49552319A0EC45EA8742EF4F12CFE31552BB48 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\5DFC7745-70C5-4A54-A0F3-28C40CC2BDE7
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 180288 |
| Entropy (8bit): | 5.291008329384788 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | BD870E4C5F3A75EE3F83272310153761 |
| SHA1: | B2F3D2570C6BC2C13A51DAA6B037FF5EA7C19455 |
| SHA-256: | 56E73864EB7391CA529CA640F9C7C30A468015249D7FE29F7EE6D88144F09EA3 |
| SHA-512: | 04C4E2EDBBD58CBF7DBB9F96C258FB29D501062C29C2F1B56818A718C7511EDDAACAB66041FCEE4EBF722243825E3C42361781983080870BD912C57DCB1F3D74 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 4096 |
| Entropy (8bit): | 0.09216609452072291 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | F138A66469C10D5761C6CBB36F2163C3 |
| SHA1: | EEA136206474280549586923B7A4A3C6D5DB1E25 |
| SHA-256: | C712D6C7A60F170A0C6C5EC768D962C58B1F59A2D417E98C7C528A037C427AB6 |
| SHA-512: | 9D25F943B6137DD2981EE75D57BAF3A9E0EE27EEA2DF19591D580F02EC8520D837B8E419A8B1EB7197614A3C6D8793C56EBC848C38295ADA23C31273DAA302D9 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 4616 |
| Entropy (8bit): | 0.1370048545379396 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 5AF755BFA0410BB06949BA7953F56E04 |
| SHA1: | AE0DCC26EAD6181C0CB6693D76C61CB9F5E6AF8B |
| SHA-256: | 429669638A7F57980107949BB2F924F1F1A7D0EB32AFF2BFD83E2B0A41A12F19 |
| SHA-512: | 8FEBC0A9EEDC7050EC5961CD9E324F15D8680B029289D253C00556BC75C01C945A94272BB092D9E3BCE4D2A1B5D33D5103602BF8C9E6F1ED9320E864B960EE66 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 32768 |
| Entropy (8bit): | 0.04458434447999482 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | DA463BC13029D09CFE444BDD0C8E21B9 |
| SHA1: | 14FAB63D55CC881ABD0E3D267B60B2A39D61E60B |
| SHA-256: | 25A31E89B5423E1E83C1F71062EAB3926A129D12390B9A953A17BF0448BE0D52 |
| SHA-512: | 98EE4287F83E898320FA820189430529304A8BF71BE1A3F6F85CC15C819AB67A3199EB27A98C7AE1715129459DD56C6A0D7E815E1754235C7166A3EFF8E4DAF5 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 45352 |
| Entropy (8bit): | 0.3944493166365068 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | DCBABDC5E1DBFE787111C01A93C664DD |
| SHA1: | 5881E50C0DAE4616BF2553616FD89408027CBB7A |
| SHA-256: | 44B31A67DE843365E70DDCB9A73D8C2682FBEEA7C35EDD68171CB791FE0D2ED9 |
| SHA-512: | 30319E51C88E8CBC4C7F4A2CF0E1BC7B23CEE755AD34EE2BE43AD01562D12DF496256D9905944AF60D7F89E5B26919A836B67AC3D00CFF05AC3CCE4823EEE3DE |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 26359 |
| Entropy (8bit): | 7.876325808649776 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 2E0658B591424D8C6A3288461AC6AB72 |
| SHA1: | BAA1925A2731AF1D5434A4EE3B2D66B903FACCE5 |
| SHA-256: | C89DE6C1D5F3505DE18B4E979B07DC42E9A837744CA1DB759E55D05D6A2D20F7 |
| SHA-512: | 4506B21E213BB0E51477E8A3F22FEA8A38B2CBEC1CB95F0081DC59FB40DBB054268E8DD7F16A49532B5E74837472B67BEE6F24AD9EC9775A9489B685A320E52E |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 10305 |
| Entropy (8bit): | 7.898508391032606 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | A00E69C9FB03071D3D174BCF822CC7E9 |
| SHA1: | 8BD4E17B58C0C5182745E0CAD57C7620B1BA6FBC |
| SHA-256: | 88C14F538A175165FA7675CDD43159867A8DAA7F21AA3FE91C77D74B555EB4F1 |
| SHA-512: | E90B277E891145EB1CF7C1DEF6864F9CD006DAD0F8C50B8B6AE9416A71294A358690C9777254B670B7377181F322802F1F016417EEBBDA5495C6E0C72107CCF7 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1648 |
| Entropy (8bit): | 7.1118899277200756 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | F31144BFE98229DD0363CEB2178F897E |
| SHA1: | 2588391F4778BA41D50EBDA1D3F201837DEE94E6 |
| SHA-256: | C6F2EC9E0316C2C8EFD02BFBF97D486C33B2EBE163E5BCD88212FC0959016E47 |
| SHA-512: | 7BC29B9717AA6896800ADF0EC8E5C82E4812EE0158EFEBCE0C8AC41AA498B7CD3B20EBCB50230B2D2686918ADB11C773529E5696584752BB0DAAE1649EB1BD66 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{E5877F66-3095-45FD-903B-D22613AE2BAC}.tmp
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 45276 |
| Entropy (8bit): | 3.792985279818962 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | F3C0D00120C820A0EC662DD4DD4A5856 |
| SHA1: | 08955A2BCAFA376411F53C3A7582195F07B62879 |
| SHA-256: | FA71C7A9DFFC1C40F109AAE76BA8DBD57477B44056C3F9D809760396D16EFD09 |
| SHA-512: | 7036D4FF18BD9AD728BFDD0279067C35DC999BC7742B581D86A76EEE84E9E7FA21D238CCB8E588F50C4C2ACF895CC59E1308744FDB003C55A5F7373F83FE5748 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1730214520869190700_0B9EFBB9-2D21-4782-8B91-EA1B2CAD7970.log
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 20971520 |
| Entropy (8bit): | 0.015202463739323694 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | F7BF2DCDFFBC35FADA97465DAA0AEF62 |
| SHA1: | C9245E7A3B9AAE8DCF7138076930C5654BB18CEA |
| SHA-256: | 12635240193F31DCEBA5C7AA8114AA6FA9B96D1DFD2B649798BA7DE92CF2CC24 |
| SHA-512: | 0FCC0FFECDE4142E32419EA5267D3A95CE4A707F6403312BF4C50251BCCE4B941F8A28E9E271ED946B9353EE5F8C80B61D730CFE6AA165F9D878B6C4C0A11EC8 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1730214520870788400_0B9EFBB9-2D21-4782-8B91-EA1B2CAD7970.log
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 20971520 |
| Entropy (8bit): | 0.0 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 8F4E33F3DC3E414FF94E5FB6905CBA8C |
| SHA1: | 9674344C90C2F0646F0B78026E127C9B86E3AD77 |
| SHA-256: | CD52D81E25F372E6FA4DB2C0DFCEB59862C1969CAB17096DA352B34950C973CC |
| SHA-512: | 7FB91E868F3923BBD043725818EF3A5D8D08EBF1059A18AC0FE07040D32EEBA517DA11515E6A4AFAEB29BCC5E0F1543BA2C595B0FE8E6167DDC5E6793EDEF5BB |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
C:\Users\user\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_16827_20130-20241029T1108400621-6732.etl
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | modified |
| Size (bytes): | 118784 |
| Entropy (8bit): | 4.663455855095849 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | F0FE1682CCCA76FBF766B8095FE21697 |
| SHA1: | FA81FF33172847BA9074DF0FDEA73CF317A6F190 |
| SHA-256: | E4C0B00548D954B0B51589BF93B7F11D64DDF31E3830B7C6BD82A96EF57A78CF |
| SHA-512: | F3362A6197D4B9603C5DC7144F289017435D186009005E90C4B5B5526F28CBF92B78302C2ECAD2AB6CE05E7EE1934A86E45B1D3187F59C21FA5DE48BCB1BF3C7 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 163840 |
| Entropy (8bit): | 0.47266603846256516 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | F88DA65024A7716A99F6509D85CB0320 |
| SHA1: | 90DCABFC2D8F13D00F7CA1847ACB382A43DCB4E4 |
| SHA-256: | BCC7F2495AE8A8A76FA7EBC6840C661CA83362CB263B60277A18971030CB03AF |
| SHA-512: | E1360EBD222508D23D47B450993F858CC94C156073FB952C3831F21F18CC22FE7E7462CEC4E482A95A3B3D6917089003FD919E55EFDC2551E29E9D9A1A84B314 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 30 |
| Entropy (8bit): | 1.2389205950315936 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 5047E38EB56CBE2AAD9497510AD470BD |
| SHA1: | 3199FB89F8D07ACC912C17BEEDC4BDA27DCC8178 |
| SHA-256: | AA03834773A411407AEEC3023F28A8EB24D402527691C7EA1059F36FAC89741A |
| SHA-512: | 0A871469F45E68A4D3DAEB5E4C779AB7D6C36E65AD26169624505DE7CD9BA55B6DABC0BF5063DE8CDECB7FC8E396944654B9A0BC4E3EE1299CF16D778D16A16A |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 16384 |
| Entropy (8bit): | 0.6700989209548942 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 16FF3CBC70760FD705FEF326F33DEE55 |
| SHA1: | F7AC007A595E9EB30A7100E2581BB74D547259BE |
| SHA-256: | 0F98F31D8C6D1CF202EAADBDFD6345DAFD60C6ED09A61B5C84BC151C00D260F2 |
| SHA-512: | D6421FFDFA895BF13CED93029227C112C2852CD24A5CB6161406C21DC166156BDEC196ED140F27F543D0D6C942D4233C50BCF4E67A0E88C72957814C5F8FFE87 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 14 |
| Entropy (8bit): | 2.699513850319966 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | C5A12EA2F9C2D2A79155C1BC161C350C |
| SHA1: | 75004B4B6C6C4EE37BE7C3FD7EE4AF4A531A1B1A |
| SHA-256: | 61EC0DAA23CBC92167446DADEFB919D86E592A31EBBD0AB56E64148EBF82152D |
| SHA-512: | B3D5AF7C4A9CB09D27F0522671503654D06891740C36D3089BB5CB21E46AB235B0FA3DC2585A383B9F89F5C6DAE78F49F72B0AD58E6862DE39F440C4D6FF460B |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2673 |
| Entropy (8bit): | 3.983058571442551 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | C570494EE7B7A6D7C8FD6C3260B89BA9 |
| SHA1: | C480BCD78920ED4012667DDD61AB0F9EE0841786 |
| SHA-256: | 235673340A51718FF2FB1DA6ACDBDC4BFA4168B1F811AA12D1338410C95AE04C |
| SHA-512: | 591865C6922684F13DE486708EB7F11C07D6B81ECC2476C32E33F8A23C1E0007CD3A48AD44993B106C7F456FB20F1440C8BE643FB1141EEDDB3409CF3C4AE4F3 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2675 |
| Entropy (8bit): | 3.998166320693701 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 0800F06D947AB6DDF1E29A87D5F6979D |
| SHA1: | 46780BA0F4959DD07DD85E88485EB866D3ED2C64 |
| SHA-256: | F8401AD6965AEF14495F666ED4A9BF54DCB44F18C3981784BDDC91138A89BA0E |
| SHA-512: | E79741B579F24EA8596D62C01492C161AC4EF2754EA9174B62AAA2D6A6C1BE5F528A9E14F7FD7B407BB66DFA2106F64B8CA2AA15BF047FAE246F3C4FBFB2DE85 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2689 |
| Entropy (8bit): | 4.007335213652469 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 7AF4C2161C55F60CA2B1474EE36969B7 |
| SHA1: | D1D4455814C88D56B72B39222EA7133CD4FCB9A9 |
| SHA-256: | 8087CBD91F5EE19BEA1CDFE4090672E2F089C78BCD2DDD7E2161CB651F6426D6 |
| SHA-512: | 99F190A68CBC66730AF683287C218069B4F1819F48746CFD2999F5C005505D001AC8639A48D9D8990CB5021A79D050045FEC3002218E2A54091B4CBAC15B9A6E |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2677 |
| Entropy (8bit): | 3.9958944090496042 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 3FACEA52E0F3A90C05A7A6A98DF8C0DB |
| SHA1: | 256223D951DF9A9A7674597894FF075CFAD46CFA |
| SHA-256: | 8E70F7937686D856E8F3AF69964D19618F5BDE9F6D9C0B33CE740A648A3557E7 |
| SHA-512: | 6B041D6C0E6468BD50410D82149B7D35E6A79CF0BC9BBB9F74686EEF521E14C58924C3114B95486D4946D0C3C17179AA9DB329C6F85A1C8390762619F881F74C |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2677 |
| Entropy (8bit): | 3.9844970747692052 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 9A75E87782CDBA18F49A3452DF36F39A |
| SHA1: | A09F70D61678B6C25D5A8FA373A814525461531B |
| SHA-256: | 4CAF61B73D9164185C562DE78193B631153A7F7FB85A6D9674D2FE8E473B4B0C |
| SHA-512: | 80D05E464532DFD953348690CBECCA61EEF63F25A06288CE3F91FC16C4EA4211AD41F0C4E60A8C282502DB44DD75223C7A62EBBF5FAD3469564F44FF65EA571D |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2679 |
| Entropy (8bit): | 3.991006181296644 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 21C32C4F2F3ECB74BA3466059FD18346 |
| SHA1: | B25877E8F3B1077C73594FE59AE51EF7D303A453 |
| SHA-256: | 754EF3FEE2D35D4C1F678CF441604C293662803B7C74D4100D854BEA3B3E22E0 |
| SHA-512: | FC774FA993750C387B1602F2B2950C4086BEBBB7294A5F39B19B7F42AD3D9BB4D82607573FA2607D85ABACA68C7D67AA63AAA5FEBE8A9F2D0A897E51DBBA42B4 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 271360 |
| Entropy (8bit): | 1.5231834315265922 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 63EF33E72FF889727AF615AD8472B073 |
| SHA1: | C075413B190EC3B19D83377D0C774BFC92A4DE3A |
| SHA-256: | 381A299542376135FC419E6D4EEE07DFA7ADC1C2EFFB653E9F918BE18BD1A9B5 |
| SHA-512: | 7269458B8A15661EE07B22B76EE08E30B21A0764731B3C7EE3CEA61999F09261550DE75C55782A8F01DC5CE94D424EEC464917C69F16FC16C3AFC503F5C8CAD4 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 131072 |
| Entropy (8bit): | 1.115221332696745 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 6E546BB93A630A7B4A046D1980774333 |
| SHA1: | 2BE7753C5F276A4D4086D2BA599BF8D3AD5E2185 |
| SHA-256: | 1DF3CD4E6CC0ADA85CB53C163AA422B31F5BAA2A7B508F032E48DB22223E3C95 |
| SHA-512: | 0C0C52635AB61AED019C663C99E0C58607B3616653C354FCD37ADA4AE4557C27B3AD9E2B6B9CE7C4339DDAAAF69E3BE3635007E601DF230D2B4910A326EC12FE |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 775350 |
| Entropy (8bit): | 5.700291031990132 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 67DD564568419099F49EBDED11913E6C |
| SHA1: | D6C7A69E75B7D3198A2B7C6328F5749AE4404E44 |
| SHA-256: | 29308B97856BB4C6561F2736C6034D4DE750F6AAFD63076752E699C17DB20D24 |
| SHA-512: | C709F2203DA7328E18ED1E23816D891EED082CE72AD75F47E5EA7989F1CE97EAFF0F1BEFE2E9B10F775779689F153A2C810F604E4CF25728F34DDF83A7148426 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://piletfeed-cdn.sharefile.io/sharefile-web/sharefiledev-esign-pilet/1.220.5/package/dist/index.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 3452 |
| Entropy (8bit): | 5.117912766689607 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | CB06E9A552B197D5C0EA600B431A3407 |
| SHA1: | 04E167433F2F1038C78F387F8A166BB6542C2008 |
| SHA-256: | 1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021 |
| SHA-512: | 1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://login.live.com/Me.htm?v=3 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 113378 |
| Entropy (8bit): | 5.285066693137765 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 9C837C2B6C9C441656C3C64BE6FC6401 |
| SHA1: | D44AA83093C4109DDD8FFAEA60755F05D1BFE7D3 |
| SHA-256: | 68C2994E21A564345EB3B4091DD2334C9CBDDB0AECDA45EE963C6DE2E1629B93 |
| SHA-512: | AF04835BCC621FE1793C4661FDB03EDEA16219BAA77F1198AA419F771B6B3DCDAC3DA92676568C207022251483AB79C75AB6DF2CE94924748FF9CEBF64AFF5A2 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 113286 |
| Entropy (8bit): | 5.351711706081523 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 2C38C5498D5FB32EC1F06835620A80B8 |
| SHA1: | C7C604C6A1179D6D402164B321088E118A4C8321 |
| SHA-256: | 90AEA3E25E9064E6293A290587C5EA08A52F98A8D67BFC28A904AA82DC42A8C8 |
| SHA-512: | 5402605B0916CC1C800E76CEE01A83C5F8931C4B1B0DA11E6CD262B6E51FCBBE9F8CF2E1186CA2FE68F41839D23F7B452E22E7F6DB0BBBD452154FC6CCF5B213 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://piletfeed-cdn.sharefile.io/sharefile-web/sharefiledev-audit-collector-pilet/0.20.0/package/dist/index.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 142367 |
| Entropy (8bit): | 5.430597817875451 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | CCAA31FD031C4C856EB7B986FD9F447B |
| SHA1: | 0A809EABCDB95FA04DE5F8409B3BC994ED65CBD1 |
| SHA-256: | 3D40B4129B8B4C284908636AE46D72EA053F286FB5FE45DB78351B5B2CFC1EB9 |
| SHA-512: | 4B5B2271DB5F640FEBF13A7C0BDBD630C73530000F1593046D090585D1752E239D894614E23E801BE4C6A379406B6EF521423FA27C3865C3CD4ABB0A64823780 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 167028 |
| Entropy (8bit): | 5.295519979527004 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | D415917C44EDB49D2128CF696D92474C |
| SHA1: | C97E2316EDEC31A6E56CF0C7DA7A61EDF8CDF316 |
| SHA-256: | 6ECF8E88C098C14C975873C9EDC0C842F5FC17B03B2FB52291DCE1266F23C124 |
| SHA-512: | 68D8A8DAEA2810E490FDD1A33499BCC0277971A264C436EA94D2EF55A52708D7422470370333615827D044211F5DBE26C673C5B2A0B5B9E897DB98E66F20FE55 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 1864 |
| Entropy (8bit): | 5.222032823730197 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | BC3D32A696895F78C19DF6C717586A5D |
| SHA1: | 9191CB156A30A3ED79C44C0A16C95159E8FF689D |
| SHA-256: | 0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68 |
| SHA-512: | 8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 3651 |
| Entropy (8bit): | 4.094801914706141 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | EE5C8D9FB6248C938FD0DC19370E90BD |
| SHA1: | D01A22720918B781338B5BBF9202B241A5F99EE4 |
| SHA-256: | 04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A |
| SHA-512: | C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 1310 |
| Entropy (8bit): | 5.34821857415734 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 5FD6C81E2D45BD71EF47570F15EB622A |
| SHA1: | 474672BAF3BF959B770A21ED2AD0FD6C3EAC424C |
| SHA-256: | C0F777284D7D75A641591D10D3CD99457F19F816FB3C6E2E6AB295F3EDA52E99 |
| SHA-512: | 5BF4DA717F0C50FAC0C6690F9FE176719DB74FF7A923F2B25FA52D197D71A880A8B008EB64AB4DAA8E8400FB338B1C1ED1D59DB44B3627D88F7F5194D6AC6023 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://link.edgepilot.com/favicon.ico |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 199868 |
| Entropy (8bit): | 5.41109186682965 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 114E798D503A347AAB2A537702E1593F |
| SHA1: | EDC8A8C19A54D81944F8EA870D826E06A7362161 |
| SHA-256: | 091AB89F90FE0DBAEDE5C8C9C5308C702C75D49A9CD809CECB9F001F98788C38 |
| SHA-512: | 06CE751BE294ABF4D171F9A9BA070FEBB75A29E45615125F3AD8E9D1905A8484E990CB7CD97092F2953E3FBF1596B4617933FF85C3EA74F40C5FB94237E80DC3 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://piletfeed-cdn.sharefile.io/sharefile-web/sharefiledev-task-mgt-pilet/1.7.0/package/dist/index.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 92489 |
| Entropy (8bit): | 5.301704644724007 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | C5427AFAC37FF069E0CB72A8345A1C43 |
| SHA1: | 8E701F6834119B9B6400150405B2D1B37DDF35B1 |
| SHA-256: | AD142FFBC6C4D48AAA7020993EF9CFA34FFC2B569707D71E25C9A2587562E575 |
| SHA-512: | 9A295E8309C70D508D72BEF073C473CCD38EFC3FA0855D887006EBD83BC316037802BE0CE075F8581EC1F049283570D06A0421D9095610E43B5B06DDF2D21139 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 37045 |
| Entropy (8bit): | 5.174934618594778 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 5869C96CC8F19086AEE625D670D741F9 |
| SHA1: | 430A443D74830FE9BE26EFCA431F448C1B3740F9 |
| SHA-256: | 53964478A7C634E8DAD34ECC303DD8048D00DCE4993906DE1BACF67F663486EF |
| SHA-512: | 8B3B64A1BB2F9E329F02D4CD7479065630184EBAED942EE61A9FF9E1CE34C28C0EECB854458977815CF3704A8697FA8A5D096D2761F032B74B70D51DA3E37F45 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 199512 |
| Entropy (8bit): | 5.361186797681031 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 38596D901C05CDCB1B7DB1F4D6D21BA7 |
| SHA1: | 8A86524AAEE7B7462081A6A3C6F9FBCF6174C80A |
| SHA-256: | 159C798B7CB0A3F271E179FBFF2D2862394D1F2832F248D6F71802C7F253C04E |
| SHA-512: | 3FFB8DF04864002AE61D41DCF30B55BDBB3285E0843425EDDD0BFB2258CEA89FE540123F98F5B896673C3E41A5D096123E87BB6E519FD3B8639C10438ABD9D7D |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://piletfeed-cdn.sharefile.io/sharefile-web/sharefiledev-entitlements-pilet/0.1.54/package/dist/index.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 120056 |
| Entropy (8bit): | 5.389199436611293 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 33040C25DCD11460D4FCAF829905E8BD |
| SHA1: | 9FF06962F665FF8F73E63B2334A33ADC5A8CE22A |
| SHA-256: | 044AAAC4452227A53E27DED5C4B3314735974E392E836D2D0489712B0BDD8AF7 |
| SHA-512: | 0C2E4169A77DA124DD18423441B698693526940DA0E75A1732298CDEF3F6FC532B754358880F6997A850310A6B3EA66A80BFCE56D313388645F2A1B25A9D6CF5 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://piletfeed-cdn.sharefile.io/sharefile-web/sharefiledev-view-engine-pilet/1.24.0/package/dist/index.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 77544 |
| Entropy (8bit): | 5.226997072902139 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 7B642EB641428D924027759152BD26F4 |
| SHA1: | 766963F144406D2019108B5D88F94A5442E8EF14 |
| SHA-256: | EB209A2C45816EAD1F57DD45FDDA92ECF0B25D8EE874523DE3C0ECA3E7B3C6FE |
| SHA-512: | FD7636C1A83F2105EB181341700BAD335744E995764072503F0C7A000DD01AB30E6AC7D04B9EB2C9E83E58B4EA8678BDE582F4157B482BA6FD6A56AE8589C6DF |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://piletfeed-cdn.sharefile.io/sharefile-web/sharefiledev-conversations-pilet/1.94.10/package/dist/index.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 1264534 |
| Entropy (8bit): | 5.582406148482046 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | C0B3C7F34B57F4B83ABD690EAD43636F |
| SHA1: | A9529F3DB8DB4BC3178E4DE61FBC925E3863BC5E |
| SHA-256: | 0AF67FCC3A172CF8869E3434208041A599D9A71CE21050FA52F47CB850821DA9 |
| SHA-512: | FB0366497F81998B17B693717D5EE7885DF1B988D10AC5A7129B82AF7E438A463ABDB8FBC51B4878C384ACC7B038CFA3B8AA0BE10AFD60B415FAE93E8E5F292F |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://piletfeed-cdn.sharefile.io/sharefile-web/sharefiledev-doc-gen-pilet/1.2.105/package/dist/index.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 19 |
| Entropy (8bit): | 3.6818808028034042 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 595E88012A6521AAE3E12CBEBE76EB9E |
| SHA1: | DA3968197E7BF67AA45A77515B52BA2710C5FC34 |
| SHA-256: | B16E15764B8BC06C5C3F9F19BC8B99FA48E7894AA5A6CCDAD65DA49BBF564793 |
| SHA-512: | FD13C580D15CC5E8B87D97EAD633209930E00E85C113C776088E246B47F140EFE99BDF6AB02070677445DB65410F7E62EC23C71182F9F78E9D0E1B9F7FDA0DC3 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 261475 |
| Entropy (8bit): | 5.454849456214367 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 48252B007677ADFABB0EA62C8028A30E |
| SHA1: | 09B5B74B71F55FAFF7EE55E44CF4ED5FA01162D2 |
| SHA-256: | FA747E224CA94227FD110B638E6D45E1AAAD1C38E8CDCB18FDF1035EAB8C018C |
| SHA-512: | BC054C876647F042FEFD102F7C884B7ABA0CF8528CB28FC203E0881968FADAA7CC9B664EB7D8D8BFED1783C129D49945D5A1F2511C621AE10DDA729BF7135416 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 113769 |
| Entropy (8bit): | 5.492540089333064 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | C6C029BA88D52E5312FEC69603A00340 |
| SHA1: | 079011F6F0662C11AE907C773EFE8E0C9338EAD0 |
| SHA-256: | DDD0BB1C19B3D2D045BFCDE85D2020BBA57854C887A6691B66DBA3DA1BB3AFBE |
| SHA-512: | 7DF09CD949A43D53D62D9013718158966508DEC2338491FFB38DC33D2EB85FF5C699792AE578975DA0E4F03CC7EA03774624208D06924EEA4C2EAC92E6E22C60 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 1099135 |
| Entropy (8bit): | 5.139151858449958 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | AD1E6258EB8E7E2067F46D2ABD18CF20 |
| SHA1: | 98B21502E3DB0C2273D578F1B9EC1BFB1D0832F1 |
| SHA-256: | 87B41C98333FB4BD72D936A2C8B59D8CB71E604F70DC3F574EBC362F00906C31 |
| SHA-512: | 0D4123075F0E12777FF81B7723978148C4FAC45B1BC84AB24A055004BC83D2AD47B89BE91AD8B5818A83C8104E435733A6189E686A80C7F4313FDC48A23BA64C |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://0093b71e39a6.11de9b12.us-east-1.token.awswaf.com/0093b71e39a6/478ed03bbf12/challenge.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 133361 |
| Entropy (8bit): | 5.385645967304008 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 9ED43B72B16055C52552CB1BD7CAA86C |
| SHA1: | 45463B84D9B09AA80E5B5DDBE8B62CCBB7799528 |
| SHA-256: | 20D9355AA5469AAA70754E9781549CEE10F9A5D6D67DB5E06B0A3816B0AE80B7 |
| SHA-512: | 3DBBB0915F06F524D6EBE3A8D9FF6BF48DA5D0E0E877191F48F2203A7AD4EBA031BC893C437CB6F8B4C5CB89F125EAD7BCECD9F64E049014416A1A8E55DA5BDB |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 463080 |
| Entropy (8bit): | 5.533244118000855 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | B4C879D3598119E0E769C9A0E8A15BF0 |
| SHA1: | 71033E9E99D02BEE24EACC78F53B732D015A5180 |
| SHA-256: | 76DC987A272ADD4B49B7320E0BE515E771B22F08F29E6B6C434AC31EB60634BD |
| SHA-512: | 541C1A7EEB290C4C126A5C8DB3D3019D0B9291E7A20875B3537463A8F71B6E6EC25031B1FA96FCE5DF74B5B756DF04E149D6A8848B1E06EE9B18CCAA3DC42451 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 1482911 |
| Entropy (8bit): | 5.889391822283771 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 514D63F3F284BF031A2EFD85CF5D7027 |
| SHA1: | 3D7C7E1E045BF01305076602C5688F73D5EFBE5C |
| SHA-256: | B1B12A07462EBB7E15E1FDDAD206153D52DB55A5ADAAC6C12D273E522BEEACCC |
| SHA-512: | E50CC0BFE8D98F3287E10C3C8F7A74F284CFA370FB1D019E4CA87B67CD7AC3BFE4C77F27D00DBFD4D69BCE1F08EAD139793779D5B6EAEEAFBBDC1271D51C5780 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://piletfeed-cdn.sharefile.io/sharefile-web/sharefiledev-workflows-pilet/0.120.9/package/dist/index.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 355264 |
| Entropy (8bit): | 5.467504857512104 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | CD405D48FDFD34CB6BE76832783F37FC |
| SHA1: | FDBDB25E7AD92F6FD62795628245DE63889260C8 |
| SHA-256: | 87B9B8A9111F396AAD39CFBD33812CC9DB2F5F0C2B27C103E3D9F54F4A68A092 |
| SHA-512: | 27D0C4BB8D4DC7DCF685F6CB44281F9DC5FCD5B71C9428ED173522C933C59051CE209FEF9104E96F0C48E700F15F13F4459C81721B23982872C6DA0386B25223 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://piletfeed-cdn.sharefile.io/sharefile-web/sharefiledev-client-dashboard/0.181.0/package/dist/index.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 131500 |
| Entropy (8bit): | 5.345244687137005 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 275AF639A62E1F77EA95FD60B6EA5296 |
| SHA1: | ADE0AB5543F039088DF130177EDD0D0898B7E4D7 |
| SHA-256: | 58D80FF423BA00AFBEE0537681FA3C525030C84159056C280B4FD11A84556E53 |
| SHA-512: | F04AB97484B008372C702EED51D3B049C2828380C925571D2356891B37EC0A9DA552711370F0D725747F1C3DFDFD47B941ACBA1243E5897BAD57AE65C5EDA502 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://piletfeed-cdn.sharefile.io/sharefile-web/sharefiledev-storage-plugin-pilet/1.2.0/package/dist/index.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 819 |
| Entropy (8bit): | 4.7468253845545645 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 959F46F67438369C413F903156848BD0 |
| SHA1: | 0DAF348389DA6CE4DCC2CBE71E0589C26F6BBDAB |
| SHA-256: | 8C52987FBC48500C2A81BD52F81D44324E31E7ECADBEBD111A02F912BE232CFD |
| SHA-512: | D3385ABE556BB749AAEDF1400A66BF7FBBE5A57562CB0A0D133BA0399320C3FB4DE2860339287D1CF04AC04A10DBA5D7A230E2633C6B24BD3EE836E5178F6594 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://link.edgepilot.com/css/app.css?v=1 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 121200 |
| Entropy (8bit): | 5.0982146191887106 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | EC3BB52A00E176A7181D454DFFAEA219 |
| SHA1: | 6527D8BF3E1E9368BAB8C7B60F56BC01FA3AFD68 |
| SHA-256: | F75E846CC83BD11432F4B1E21A45F31BC85283D11D372F7B19ACCD1BF6A2635C |
| SHA-512: | E8C5DAF01EAE68ED7C1E277A6E544C7AD108A0FA877FB531D6D9F2210769B7DA88E4E002C7B0BE3B72154EBF7CBF01A795C8342CE2DAD368BD6351E956195F8B |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1036348 |
| Entropy (8bit): | 5.817151661206228 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | EF6C50332B5E5E567F6A99C5D5F87E56 |
| SHA1: | A34CB792FCA2BBFBC571A44F9C985087551A2DCC |
| SHA-256: | EEB76B0472A03DA11EC3081F315D44D8D47387040B8252C5944343A1F9A7D52A |
| SHA-512: | 7C05821AF219393764D7F6B1D207288B4CD1F1536704A03EE3D30C0E1E396B2E7DB8859ACE6A16A57FB2F4CEF7EE89843ED99ED88E2A3B1448AC617EF92C4AD0 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 225101 |
| Entropy (8bit): | 5.408121493868668 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 17F623A8A7BE369C0194D4F492D9DCBF |
| SHA1: | 2BB9D23EA232DDC8C1DCB4613EBEE202CC27D5E0 |
| SHA-256: | B92A0D95FDC24ADD33A8F3984DEA9346029DD88A0ABF81BBC27B65850E517166 |
| SHA-512: | FD80FCB01D0D8B1131CAFE7DB216B615EC7E77525F13ACFACF02CB93A98893BB5280C1AC27984018A7CBEA24DC899B1CD4D868C8B0609C00076A6260D79672FA |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1592 |
| Entropy (8bit): | 4.205005284721148 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 4E48046CE74F4B89D45037C90576BFAC |
| SHA1: | 4A41B3B51ED787F7B33294202DA72220C7CD2C32 |
| SHA-256: | 8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93 |
| SHA-512: | B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 188870 |
| Entropy (8bit): | 5.316783423719702 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 3EB98FC30E286B34AE6A699333C2B13C |
| SHA1: | 77C23C14692750726264F041C4A4A5AE8500F342 |
| SHA-256: | A32F71A5A80553B0D31399E96A2288F045B600E289446F601D032909AB5B6614 |
| SHA-512: | A1D7564C6D92A10087C813DC68FAA3C4B031B5BD97FB435B4C7470B8FF73218A6D74B24F5AA6786F0A98FF1C8BF2457728358BADE24037FCFF4732B2ED2E21AC |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://piletfeed-cdn.sharefile.io/sharefile-web/sharefiledev-publisher-pilet/0.17.11/package/dist/index.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1099135 |
| Entropy (8bit): | 5.139089463221325 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | DAA625E701A448D22851BDC9C02F8FD4 |
| SHA1: | 61E93275A97FC91C5AFD2D7394A0CDCE3A69E24C |
| SHA-256: | 73CD7B955AF5BFFFEBE2C2AE7B8F97FDB5223D6208AA25798740CC17DD2A0237 |
| SHA-512: | 840ED60CC0AC907CA68DED88CCD958C2A3FA5D2921F652D615E2F6BBB9A6D3B988FE248ABC297807DBB820C5357561C1B5D6E3E151D1DB4F1072809ACB1FC0DE |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 36 |
| Entropy (8bit): | 4.503258334775644 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 06B313E93DD76909460FBFC0CD98CB6B |
| SHA1: | C4F9B2BBD840A4328F85F54873C434336A193888 |
| SHA-256: | B4532478707B495D0BB1C21C314AEF959DD1A5E0F66E52DAD5FC332C8B697CBA |
| SHA-512: | EFD7E8195D9C126883C71FED3EFEDE55916848B784F8434ED2677DF5004436F7EDE9F80277CB4675C4DEB8F243B2705A3806B412FAA8842E039E9DC467C11645 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmCAmly1gHbXRIFDdFbUVISBQ1Xevf9?alt=proto |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 904512 |
| Entropy (8bit): | 5.71994782288608 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 4BCA71B5E96BA1017D2F126850C99835 |
| SHA1: | E48A42C801197D142912941554398979EEE0A639 |
| SHA-256: | 6B98719775F73C629E39427EDF4D3A67506C6AF5E7ED2C9C80F630A1EE0ED03E |
| SHA-512: | 9524339F39E746523AC7931388045BB5DDDDDD7D7E777543236188B95C78E4FEF1A493045C8BD6E48BC52B55017B3EE44B6A6E7577235AF6FA8C101D277F273B |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://piletfeed-cdn.sharefile.io/sharefile-web/sharefiledev-threatalert-mgt-pilet/1.14.0/package/dist/index.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 406986 |
| Entropy (8bit): | 5.31836569617146 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | E40761677762EAB0692F86B259C7D744 |
| SHA1: | 34A9B50CEC6E1163CEEFCD4D394DB6524C89A854 |
| SHA-256: | DA4A8DF0C326292B5BEE9C732B3C962FD67AAF2F99D850F1BF65068D573C5619 |
| SHA-512: | 04FA1D6074AD24E3ABAB53D1DE116A6B39B4BE3DFABC082427F1C5A169E50527561F160CC133C2AC4AEDC4E7AC404572F60E531A4618111EA74D138B2B0DD034 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 98732 |
| Entropy (8bit): | 5.344399340470534 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | CDCA5117242386D7CABB8C5CDEE3F9A1 |
| SHA1: | E79CED8986A52C729CBBD2C876D0DC25C0FFD33D |
| SHA-256: | 579901D2E27F2ED03F94DE3602CF3A15EDB7C307E6D0E325E663A8A75C81B036 |
| SHA-512: | 961A123E53AFFD196AF2F61AFF83A72DCC7EE36B98680ABB1EEE796FBE1409EC767B5E49652D9663EA10BF6C59EDB7A1B16E79CDB2D4D6A3F0E0337FE40D8666 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://piletfeed-cdn.sharefile.io/sharefile-web/sharefiledev-billing-pilet/0.1.121/package/dist/index.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 694747 |
| Entropy (8bit): | 5.968637255720328 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 30F6FF4CC9B4CB4A5FC2BA1C682CCE69 |
| SHA1: | 95DC0821774F314043A6ABEC663BDB1CE6E31C34 |
| SHA-256: | 6B435B612F427B879177B34777497EFA3FBE15FB075541CAFAD9B000A6911D8E |
| SHA-512: | F083DD24DA79446238A7061B03930DB29366C8F8061791833E442E0852481695A405C4A36AA3E25AE516D39B465FB2E63966866E24B6A9AE8FAA869F81CB4600 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://piletfeed-cdn.sharefile.io/sharefile-web/sharefiledev-templates-pilet/0.110.3/package/dist/index.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 1492 |
| Entropy (8bit): | 5.158827164846835 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | F17CADE455C1E9DF4641950A02B898EC |
| SHA1: | 416716233F1A8EA7201A7DC0F218178516CC0E37 |
| SHA-256: | 06D24BF97F48A83E5D0AA3C508620BA5BEC38AD6959626CD1BA631D1C9520914 |
| SHA-512: | D2D557FAE36537BE89518AF4A0608FAFB4B92CAEA3CED070C2AA693EB51E606D865932823C56D90423DB8217353C9166FC77732201364AFA3F76D7DA5731C56A |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://piletfeed-cdn.sharefile.io/sharefile-web/sharefiledev-dynamic-forms-pilet/1.31.0/package/dist/main.css |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 636552 |
| Entropy (8bit): | 5.522591624289252 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | FA4A01AFB66CFCB3D038114EA3A75CA7 |
| SHA1: | 232758611DCD454B457AFFF3ACAAFF84347CC9CD |
| SHA-256: | 54F92E21B8BC4258314DF0A816700DDE22456B914D35A6AB6A522EA1767C577B |
| SHA-512: | 38D02C94FF4C52E3F8D9CF32B1D8EEF75770FEEEDD46A66CAFF35C34D44CEE19A915F807F6E5B0A8E60DB4C03038B94CE8112E83F19D9552D31AE36698744A8E |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://piletfeed-cdn.sharefile.io/sharefile-web/sharefiledev-integrations-pilet/0.0.175/package/dist/index.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 178957 |
| Entropy (8bit): | 5.329232951768454 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 826DA847895415A16E1D242AFD0F2BA7 |
| SHA1: | 77C1F5AF0C7C230640B74C163313BE93427F3B51 |
| SHA-256: | 8E68E217EEC68E833BE390E850C8E9DB8FE30FEA29AFEC22F2FF00CA3E80C25D |
| SHA-512: | 85E1368585DF066AF2BAC194AE9E1D611E7B973535659D83CB490273C294DEDBB180DC3DB5718225B5C660BD9A92DD3B4B8F999FA197EA6B48CF85F74B903F78 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 197483 |
| Entropy (8bit): | 5.368235778531096 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 22848DD2F996EF7B688FBC1CA0D957A1 |
| SHA1: | 8C9D056B71B327AD7EF79611468E910A480F5B4E |
| SHA-256: | C99418F90B1EBAEFF643C88B8528779D2AE882E1ED7560FD27FEA12FAC29C457 |
| SHA-512: | E193D93E98131767E8F2B6F3AA66B976DEB68A054644F7126257BEB675881918D149CB9921D7266C6D00E3C8253201E95979E7F740E8A3ACF6BD013A61D61C1B |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 221391 |
| Entropy (8bit): | 5.505848799267894 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | B5D95B131A56925ED34B1CF110473319 |
| SHA1: | 92E638C9042CEA3E57F02C110ABF2F76B69E7EE2 |
| SHA-256: | D0AE89E960445A175B51BB797B1EBC7E144A775C377900CF4EAB1B239104A206 |
| SHA-512: | 9AC8D18DB3AFEBCB0E034154D91311411B0831C1BDE1E1DB8384B843E797B170E9880AB04E6E68AE9629E1159A2FE6E5C106E8AE145C9A9337C805B03CBE71B4 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://piletfeed-cdn.sharefile.io/sharefile-web/sharefiledev-user-actions-pilet/1.15.0/package/dist/index.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 2631 |
| Entropy (8bit): | 5.351339270258419 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 5AF927625E6EC5FA132F224E2F2BDBB9 |
| SHA1: | 8EDC8CA3EF2A2A9BD7F74B2F1FF8F2076D01C090 |
| SHA-256: | A31C70D51A2D4FD1DC1BAA818EC0E6D936EE415F364C661EB789EAEC1A46BEC8 |
| SHA-512: | 4C56AF64A3AD8F44C070138B11834A4C4C4D7A0FD83C7880FDE9D82E1C621849A3CA0C17FB77F10630F08B10BB4FC0D2553FAB947AA457FD8ED4DF41C0D45E1B |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://link.edgepilot.com/s/c6c5d4e5/oz5uFPEm10aK_RBwkmVvzQ?u=https://aro365150672-my.sharepoint.com/:b:/g/personal/rdhamija_gignac-associates_com/EVNHaSacx5JNmFtGs0SXCbIBgI50GJjSp_v8M3rndVz0Qg |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 449972 |
| Entropy (8bit): | 5.4486277762255035 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 2330EDFA5D02BA27B4818454A04935E7 |
| SHA1: | 405CDD0091FA7D25CE504F71086F488A6193BBD2 |
| SHA-256: | 6379D57694ECB499626F889744FB47D1979DDE32C9F95BCAF48E318642A8C292 |
| SHA-512: | 895E0ABAFD9444621E421EEEA49C722DFC4590765F7E76C1CFD38ADFA9430F03BBFEA23A37FDF8D8536DBA54ACDF315EF40224FB3D77836531016A341BC9B3D7 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_IzDt-l0Cuie0gYRUoEk15w2.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 17174 |
| Entropy (8bit): | 2.9129715116732746 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 12E3DAC858061D088023B2BD48E2FA96 |
| SHA1: | E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5 |
| SHA-256: | 90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21 |
| SHA-512: | C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 172013 |
| Entropy (8bit): | 5.431081569709545 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 1B4BEF66080AA287B1D9E5454FB07741 |
| SHA1: | 621C5DBABD3ED48B1FA2064891EA257CAE258DB1 |
| SHA-256: | 484C55D3B30B3EC6E1A967A348DAE66E5BF17DF6AEF6ABBF90D6BD824CBCA983 |
| SHA-512: | A5AC1F4515BF497CF8E3C07795001F247B3A092A8AB3E755D884075A99C731E5782E303011E6BAB28596BE0637CF775E713FFA1B1DD34016A63364E1595D80DE |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 2590 |
| Entropy (8bit): | 5.326455340471443 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | F3D4403ED51271F74C9CA939DF2BD46A |
| SHA1: | 2928C9802B43F45A7FFBECF8EDBB33D70229AF3A |
| SHA-256: | A8C77EB91F8759642DEBAB71D26C58546E1E6BABF0C90DC2D08E8A95E26BC781 |
| SHA-512: | 77793BFDE5CF91B47F766183BED8E330001C47AA9DDBFACB5D2EB319D113D86EA1343B7FB31BBFACC2ADCD236CCEDA15EBB5A29F6FA47E2E1DC6858B6C45C3D0 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://link.edgepilot.com/s/12f296c1/mkNEkUsCaUyhM6_YKKlYig?u=https://gignacarchitects.sharefile.com/public/share/web-sd99ebbc5c56741ceb96a1e5404c17f68 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 86659 |
| Entropy (8bit): | 5.36781915816204 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | C9F5AEECA3AD37BF2AA006139B935F0A |
| SHA1: | 1055018C28AB41087EF9CCEFE411606893DABEA2 |
| SHA-256: | 87083882CC6015984EB0411A99D3981817F5DC5C90BA24F0940420C5548D82DE |
| SHA-512: | DCFF2B5C2B8625D3593A7531FF4DDCD633939CC9F7ACFEB79C18A9E6038FDAA99487960075502F159D44F902D965B0B5AED32B41BFA66A1DC07D85B5D5152B58 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://code.jquery.com/jquery-3.2.1.min.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 509377 |
| Entropy (8bit): | 5.331730273171785 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 2FB4684AF0B434A8ECBDA2FC0688B883 |
| SHA1: | 736F13F532FC6EF6CB086A0A8A49DC27C730DE74 |
| SHA-256: | BF0B3D04738F5A0E05AF0361C9FC376155F1AE9B629BC610DDA2161CD8A747D9 |
| SHA-512: | 7A266E32B28F06771B12BF0B51AB891AD461F58ED22168FBACD9726C6F647DE409B1150535A92B883E004553E2C8E959F72CBA980A17B45781294836F3FAEBBB |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://citrix-sharefile-content.customer.pendo.io/agent/static/74b07336-7560-45fc-7cd1-95032a784d52/pendo.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 823484 |
| Entropy (8bit): | 5.445433279908095 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 28551A66F6A4E79041914B0A94D857C9 |
| SHA1: | A5954E7DD7C627649A4E7F9AD153E0D906A8519E |
| SHA-256: | 5D69F3E8774704033A214DB0563A0337ADC675BCFCC3F796197D28F8F42FF547 |
| SHA-512: | 844A3BB644D61E0A3100017B09269B895DD46F3B7557E1B17BF2B71120BD00AE06B27D0AF1AA354E7AE3F316F3743279D2BCF7601AD19EFC0A2D3EFA3F366BB9 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://piletfeed-cdn.sharefile.io/sharefile-web/sharefiledev-fileviewer-pilet/1.32.0/package/dist/index.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 55384 |
| Entropy (8bit): | 5.402007343018523 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | D7FA53958E5BA828FEBE01A45075469E |
| SHA1: | 1AE6A7607029209F55A13F68B5CFDF1CCA95082B |
| SHA-256: | 44C772C0BDD957C95564D589FA388D7622B0CF17C20B2CAF21760E4FC66E0DC4 |
| SHA-512: | 25462206E25766922831E0A667FF295F063E202EFE4B21271059CEC70F50AE241B9F205D58EAAE0CF6BAE3832B4D54154BD8695CD91B40ECD7EF4CD92187EA60 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://piletfeed-cdn.sharefile.io/sharefile-web/sharefiledev-review-approval-pilet/0.27.6/package/dist/index.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 6490 |
| Entropy (8bit): | 5.257387004754639 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | FAE76DAE7784930E96292B65FEEDBC0D |
| SHA1: | AFFD25E6159BE1645F1FFE8CE4BAFBF8D9710C3C |
| SHA-256: | 69B7DBF013D733F4E7A1313102219E1D58DFA5F7D95D2ED590B88D935C8B1E84 |
| SHA-512: | 6B345E391AAB93D802A5B11FEF39EB86814027124CE7A9E45CBC63007316285900B095455DF21B73F542E8C60FC38E3ADF38B01DAF35CC70E98F118C719D6A30 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 57443 |
| Entropy (8bit): | 5.372940573746363 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | D580777BB3A28B94F6F1D18EE17AEDA3 |
| SHA1: | E78833A2DB1AA97DA3F4A1994E6AF1F0D74D7CC7 |
| SHA-256: | 81188E8A76162C79DB4A5C10AC933C9E874C5B9EAE10E47956AD9DF704E01B28 |
| SHA-512: | E3F5FFE3E7E54A7D640DF3BC06D336C9F936635D2594159B3EA5EDAEFBA6D6774060A532E0CBE0664FDC65806BD53E9BFC19C11F7946A5E157A9EC935C564378 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 308129 |
| Entropy (8bit): | 5.532445628001004 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | AAA88D2636DFEB090B5625DA19C6583B |
| SHA1: | 4B2A69A4DBE262EE61A895E662E6FAAB8975747F |
| SHA-256: | 24100E38A4398127141377D9B7FABCD8EB2F35BF68062306D6F3828133EA7E7B |
| SHA-512: | 18D0372BC9EB2DAE1664688FE7FFF3B8D9EA987070A6D4C68F9E2036D4DF1A9119766F1CED2070F21744201EFADE8119E1E8885A28AD847BD09E53508678963D |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://piletfeed-cdn.sharefile.io/sharefile-web/sharefiledev-projects-pilet/2.1.15/package/dist/index.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 124348 |
| Entropy (8bit): | 5.387460323033051 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 4E4E4FD0B0580EF04C25C9DB829E370F |
| SHA1: | 4867DE5753E3320EF0A1AB5FE3E9CD1E4EFBF2F4 |
| SHA-256: | F699158E6689E3633E4553562FE73AE320E42781263E5E50906725B2E988D8BF |
| SHA-512: | 1D138579D2E563CE7454147700B13EA52CB487A716B39DA4A4C9E9508F567353DB7149F2F297050DD729A598A275F0014BEEB52EC7CB6844A3C856930B5B1BB4 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://piletfeed-cdn.sharefile.io/sharefile-web/sharefiledev-task-aggregator-pilet/1.0.23/package/dist/index.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 91744 |
| Entropy (8bit): | 5.35315025267453 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | EC10A08ABEEA396244C7C88FFAA5ECF7 |
| SHA1: | 29EA05BFC2B2A754AE77DF48FEBAC23A79352C48 |
| SHA-256: | E4126A1DD61B9AB0EB21038540041710DDCBDCD5E03C0D7C302F74E25EF34B8E |
| SHA-512: | 23B746B157D1DD8A2896FEDD3A86CDF13A755353FF7F9BB87A339CBE194B844B0EAEE32F038F73254BB355BEA29D02052496B28D0FB29EECA85B2CA29D343B1A |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://piletfeed-cdn.sharefile.io/sharefile-web/sharefiledev-user-act-hist-pilet/1.7.0/package/dist/index.js |
| Preview: |
| File type: | |
| Entropy (8bit): | 5.7430908062727015 |
| TrID: |
|
| File name: | RE Leander - Lighting and Control Devices Submittal.msg |
| File size: | 195'072 bytes |
| MD5: | 655e4981b189d744500607d6d6c50b67 |
| SHA1: | 1a08e7ec4556e86f9fcf5e6f3f12f946c1209be1 |
| SHA256: | 6a381f857a36abbc651469b99f8ebf10f71a0b7dec47f72f1348aba672098923 |
| SHA512: | 109ef4a6619ea805609f321597406e451796b453456220b3727ac02538fd1e8a874a671f1e8c18052a8e32a090b4a874af875f9076434dee8493a413c0ceca00 |
| SSDEEP: | 3072:M1+UhtyKen+XoGHkmqgM7pxJMVn03O5Qu1vdQHpl1HpOKdcPy:MhtyKTq7TFkvMdcPy |
| TLSH: | B714D52536FA0605F1B79FB544F252938936FD96AE34CA8F21D0334F06B2D51A861B3B |
| File Content Preview: | ........................>...................................................................................................................................................................................................................................... |
| Subject: | RE: Leander - Lighting and Control Devices Submittal |
| From: | Gidget Rosemond <grosemond@ms2-inc.com> |
| To: | Rohini Dhamija <rdhamija@gignac-associates.com> |
| Cc: | |
| BCC: | |
| Date: | Mon, 28 Oct 2024 14:23:48 +0100 |
| Communications: |
|
| Attachments: |
|
| Key | Value |
|---|---|
| Received | from SN4PR0601MB3710.namprd06.prod.outlook.com |
| (2603 | 10b6:a03:2e2::15) with Microsoft SMTP Server (version=TLS1_2, |
| HTTPS; Mon, 28 Oct 2024 13 | 24:17 +0000 |
| ARC-Seal | i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; |
| ARC-Message-Signature | i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; |
| h=From | Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; |
| ARC-Authentication-Results | i=1; mx.microsoft.com 1; spf=pass |
| by CH2PPF7F2DA00C1.namprd07.prod.outlook.com (2603 | 10b6:61f:fc00::27b) with |
| 2024 13 | 23:48 +0000 |
| Transport; Mon, 28 Oct 2024 13 | 24:01 +0000 |
| Authentication-Results | spf=fail (sender IP is 8.31.233.230) |
| Received-SPF | Fail (protection.outlook.com: domain of ms2-inc.com does not |
| 15.20.8114.16 via Frontend Transport; Mon, 28 Oct 2024 13 | 24:00 +0000 |
| X-Note | Link Protection: 18 link(s) wrapped |
| with ESMTP id 321659792 for rdhamija@gignac-associates.com; Mon, 28 Oct 2024 09 | 23:59 -0400 |
| X-Note-AR-ScanTimeLocal | 10/28/2024 9:24:22 AM |
| X-Note-AR-Scan | None - PIPE |
| with PIPE id 60659537; Mon, 28 Oct 2024 09 | 24:29 -0400 |
| X-Resubmit | 1028132424894-60659518-251388 |
| with PIPE id 60659518; Mon, 28 Oct 2024 09 | 24:24 -0400 |
| with ESMTPS id 60659511 for rdhamija@gignac-associates.com; Mon, 28 Oct 2024 09 | 24:22 -0400 |
| DKIM-Signature | v=1; a=rsa-sha256; c=relaxed/relaxed; |
| ([fe80 | :e063:fcd9:ecf4:f34a%2]) with mapi id 15.20.8069.016; Mon, 28 Oct 2024 |
| 13 | 23:48 +0000 |
| From | Gidget Rosemond <grosemond@ms2-inc.com> |
| To | Rohini Dhamija <rdhamija@gignac-associates.com> |
| Subject | RE: Leander - Lighting and Control Devices Submittal |
| Thread-Topic | Leander - Lighting and Control Devices Submittal |
| Thread-Index | AQHbJxy3jFYhzsWtAEay33HeYxjuDbKcHCkQgAAHNPuAAAJgsIAAAOxvgAAETrA= |
| Date | Mon, 28 Oct 2024 13:23:48 +0000 |
| Message-ID | <SN4PR0601MB3710BF69177A0A838147E2C3B44A2@SN4PR0601MB3710.namprd06.prod.outlook.com> |
| References | <BY5PR07MB80522BE509B4926C582CF2FE8A4F2@BY5PR07MB8052.namprd07.prod.outlook.com> |
| In-Reply-To | <BY5PR07MB8052B599C8B7170BA670EA0D8A4A2@BY5PR07MB8052.namprd07.prod.outlook.com> |
| Accept-Language | en-US |
| X-MS-Has-Attach | yes |
| X-MS-TNEF-Correlator | msip_labels: |
| Authentication-Results-Original | dkim=none (message not signed) |
| x-ms-traffictypediagnostic | SN4PR0601MB3710:EE_|SJ0PR06MB7289:EE_|CH2PEPF00000143:EE_|CH2PPF7F2DA00C1:EE_|BY5PR07MB8052:EE_ |
| X-MS-Office365-Filtering-Correlation-Id | af93b45d-ef71-4354-2831-08dcf753c913 |
| x-ms-exchange-senderadcheck | 1 |
| x-ms-exchange-antispam-relay | 0 |
| X-Microsoft-Antispam-Untrusted | BCL:0;ARA:13230040|69100299015|366016|376014|1800799024|8096899003|38070700018; |
| X-Microsoft-Antispam-Message-Info-Original | =?us-ascii?Q?ebd3lvnqkvz8RYu2jvXx3wI9ALjix7zK9/VyAV0NhlmFKsldt59dkac5fJFy?= |
| X-Forefront-Antispam-Report-Untrusted | CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:SN4PR0601MB3710.namprd06.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(69100299015)(366016)(376014)(1800799024)(8096899003)(38070700018);DIR:OUT;SFP:1102; |
| X-MS-Exchange-Transport-CrossTenantHeadersStamped | CH2PPF7F2DA00C1 |
| Content-Language | en-US |
| Content-Type | multipart/related; |
| X-Policy | gignac-associates.com |
| X-Primary | rdhamija@gignac-associates.com |
| X-Note-Sender | grosemond@ms2-inc.com |
| X-Note-Envelope-Recip | FAILURE,DELAY, <rdhamija@gignac-associates.com> |
| X-Virus-Scan | V- |
| X-Note-SnifferID | 0 |
| X-GBUdb-Analysis | 0, 40.107.223.114, Ugly c=0.331706 p=-0.12 Source Normal |
| X-Signature-Violations | 0-0-0-32767-c |
| X-Note-419 | 0 ms. Fail:0 Chk:1460 of 1460 total |
| X-Warn | REDIRECTHOLE Contains questionable phrase |
| X-Country-Path | United States of America->LOCAL |
| X-Note-Sending-IP | 40.107.223.114 |
| X-Note-Reverse-DNS | ail-dm6nam11on2114.outbound.protection.outlook.com |
| X-Note-Return-Path | grosemond@ms2-inc.com |
| Return-Path | grosemond@ms2-inc.com |
| X-MS-Exchange-Organization-ExpirationStartTime | 28 Oct 2024 13:24:00.7589 |
| X-MS-Exchange-Organization-ExpirationStartTimeReason | OriginalSubmit |
| X-MS-Exchange-Organization-ExpirationInterval | 1:00:00:00.0000000 |
| X-MS-Exchange-Organization-ExpirationIntervalReason | OriginalSubmit |
| X-MS-Exchange-Organization-Network-Message-Id | af93b45d-ef71-4354-2831-08dcf753c913 |
| X-EOPAttributedMessage | 0 |
| X-EOPTenantAttributedMessage | 8e0de89c-298f-4cee-a7bd-0c3a67bd030b:0 |
| X-MS-Exchange-Organization-MessageDirectionality | Incoming |
| X-MS-Exchange-Transport-CrossTenantHeadersStripped | CH2PEPF00000143.namprd02.prod.outlook.com |
| X-MS-PublicTrafficType | |
| X-MS-Exchange-Organization-AuthSource | CH2PEPF00000143.namprd02.prod.outlook.com |
| X-MS-Exchange-Organization-AuthAs | Anonymous |
| X-MS-Office365-Filtering-Correlation-Id-Prvs | 2cc4ceda-5569-4c2a-ad8f-08dcf753c1ca |
| X-MS-Exchange-AtpMessageProperties | SA|SL |
| X-MS-Exchange-Organization-SCL | -1 |
| X-Microsoft-Antispam | BCL:0;ARA:13230040|69100299015|35042699022|1032899013|8096899003|2066899003; |
| X-Forefront-Antispam-Report | CIP:8.31.233.230;CTRY:US;LANG:en;SCL:-1;SRV:;IPV:NLI;SFV:SFE;H:server555.appriver.com;PTR:stdeldal01.appriver.com;CAT:NONE;SFS:(13230040)(69100299015)(35042699022)(1032899013)(8096899003)(2066899003);DIR:INB; |
| X-MS-Exchange-CrossTenant-OriginalArrivalTime | 28 Oct 2024 13:24:00.4308 |
| X-MS-Exchange-CrossTenant-Network-Message-Id | af93b45d-ef71-4354-2831-08dcf753c913 |
| X-MS-Exchange-CrossTenant-Id | 8e0de89c-298f-4cee-a7bd-0c3a67bd030b |
| X-MS-Exchange-CrossTenant-AuthSource | CH2PEPF00000143.namprd02.prod.outlook.com |
| X-MS-Exchange-CrossTenant-AuthAs | Anonymous |
| X-MS-Exchange-CrossTenant-FromEntityHeader | Internet |
| X-MS-Exchange-Transport-EndToEndLatency | 00:00:16.9977309 |
| X-MS-Exchange-Processed-By-BccFoldering | 15.20.8093.023 |
| X-Microsoft-Antispam-Mailbox-Delivery | wl:1;pcwl:1;ucf:0;jmr:0;auth:0;dest:I;ENG:(910001)(944506478)(944626604)(920097)(811239)(255002)(410001)(930097)(140003); |
| X-Microsoft-Antispam-Message-Info | =?Windows-1252?Q?XVInxc4txgQ/iK8vZ7rKzxMmPYzI9+kAsZz0TFOO/HFOktfWHZesGK7R?= |
| MIME-Version | 1.0 |
| date | Mon, 28 Oct 2024 14:23:48 +0100 |
 | |
| Icon Hash: | c4e1928eacb280a2 |
Key Decision
Richest Path
Thread / callback creation
Lower opacity -> Library Node