Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Chrome Cache Entry: 121
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
|
dropped
|
||
|
Chrome Cache Entry: 122
|
HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 123
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
|
downloaded
|
||
|
Chrome Cache Entry: 124
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
|
dropped
|
||
|
Chrome Cache Entry: 125
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
|
downloaded
|
||
|
Chrome Cache Entry: 126
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 142367
|
dropped
|
||
|
Chrome Cache Entry: 127
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57443
|
dropped
|
||
|
Chrome Cache Entry: 128
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
|
dropped
|
||
|
Chrome Cache Entry: 129
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 449972
|
dropped
|
||
|
Chrome Cache Entry: 130
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 449972
|
downloaded
|
||
|
Chrome Cache Entry: 131
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
|
downloaded
|
||
|
Chrome Cache Entry: 132
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
|
downloaded
|
||
|
Chrome Cache Entry: 133
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57443
|
downloaded
|
||
|
Chrome Cache Entry: 134
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 142367
|
downloaded
|
||
|
Chrome Cache Entry: 135
|
ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 136
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
|
dropped
|
||
|
Chrome Cache Entry: 137
|
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
|
downloaded
|
||
|
Chrome Cache Entry: 138
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113378
|
downloaded
|
||
|
Chrome Cache Entry: 139
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
|
downloaded
|
||
|
Chrome Cache Entry: 140
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
|
dropped
|
||
|
Chrome Cache Entry: 141
|
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
|
dropped
|
There are 12 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US
--service-sandbox-type=none --mojo-platform-channel-handle=2400 --field-trial-handle=2360,i,7249046679917272764,12291900713218930923,262144
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
/prefetch:8
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://86325.afasinsite.nl/enquete-woon-werk-mobiliteit-prs?SbId=5nryg-lqwgvcmv7qmhl2m73v70"
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://86325.afasinsite.nl/enquete-woon-werk-mobiliteit-prs?SbId=5nryg-lqwgvcmv7qmhl2m73v70
|
|||
|
https://sts.afasonline.com/connect/authorize?client_id=%7B2FB700A6-5A95-491A-BA1A-2382EA584B7B%7D&response_type=code%20id_token&scope=openid&redirect_uri=https%3A%2F%2F86325.afasinsite.nl%2Fstslogin&state=%2Fenquete-woon-werk-mobiliteit-prs%3FSbId%3D5nryg-lqwgvcmv7qmhl2m73v70&nonce=yj7q6FYI-2IlywRjD6TJIHMTMmylJwdWSayX-mBjt7I1&response_mode=form_post&ui_locales=nl
|
185.46.182.12
|
||
|
https://login.microsoftonline.com
|
unknown
|
||
|
https://86325.afasinsite.nl/enquete-woon-werk-mobiliteit-prs?SbId=5nryg-lqwgvcmv7qmhl2m73v70
|
185.46.182.62
|
||
|
https://login.windows-ppe.net
|
unknown
|
||
|
https://login.microsoftonline.com/282036a5-5ccf-49fb-9fda-cebaaadf95c5/oauth2/v2.0/authorize?client_id=52d759a9-8d77-4c5e-aabc-9e067522ed03&response_type=code&scope=openid%20profile&redirect_uri=https%3A%2F%2Fsts.afasonline.com%2Fsignin-oidc&state=Q2ZESjhFMDRZRWhPMEh0QmdGcGtqTDlFTzdYVjYtVGZMQ3lMWml2am1SeG5yOFJGRFRPNmRiZnpJZmVtejdiamd0RnVmenNVbW1rQlhuMEdjTXVjdTdmZlJ0VTF3d0drNnlmOGlFeVRYSWk5VXdTeV9Kc3FvRFlITmdrTkRnWkN1T2RFbjhBdGU3TnlVUlJvREJndEQxVHFoNk1raUg3RUJnV200U245dW91QnlpX3R6Vjk1bTBSbE96SjV0TDNJTVp5bWlqdzdCamttenBWdmhyNXU4MktNMmRnWVRNU3BUTmZZSnR2ekxoUFBqcjliRnBmSVBSaGRKYTJpX1NmcWtIc0gzc3Bja29QcURkVE8yRVJfUWsxeE5MMUpTYzM2OEJxUnZieEZRRmkxS0RaRA%3D%3D&nonce=24ee4d7aca1e2ae178d146d23ff0dd7b2544131a35064c2c47b38a8c4d182729&response_mode=query&ui_locales=nl
|
|||
|
https://login.microsoftonline.com/282036a5-5ccf-49fb-9fda-cebaaadf95c5/oauth2/v2.0/authorize?client_id=52d759a9-8d77-4c5e-aabc-9e067522ed03&response_type=code&scope=openid%20profile&redirect_uri=https%3A%2F%2Fsts.afasonline.com%2Fsignin-oidc&state=Q2ZESjhFMDRZRWhPMEh0QmdGcGtqTDlFTzdYVjYtVGZMQ3lMWml2am1SeG5yOFJGRFRPNmRiZnpJZmVtejdiamd0RnVmenNVbW1rQlhuMEdjTXVjdTdmZlJ0VTF3d0drNnlmOGlFeVRYSWk5VXdTeV9Kc3FvRFlITmdrTkRnWkN1T2RFbjhBdGU3TnlVUlJvREJndEQxVHFoNk1raUg3RUJnV200U245dW91QnlpX3R6Vjk1bTBSbE96SjV0TDNJTVp5bWlqdzdCamttenBWdmhyNXU4MktNMmRnWVRNU3BUTmZZSnR2ekxoUFBqcjliRnBmSVBSaGRKYTJpX1NmcWtIc0gzc3Bja29QcURkVE8yRVJfUWsxeE5MMUpTYzM2OEJxUnZieEZRRmkxS0RaRA%3D%3D&nonce=24ee4d7aca1e2ae178d146d23ff0dd7b2544131a35064c2c47b38a8c4d182729&response_mode=query&ui_locales=nl&sso_reload=true
|
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
86325.afasinsite.nl
|
185.46.182.62
|
||
|
s-part-0017.t-0009.fb-t-msedge.net
|
13.107.253.45
|
||
|
s-part-0017.t-0009.t-msedge.net
|
13.107.246.45
|
||
|
sni1gl.wpc.omegacdn.net
|
152.199.21.175
|
||
|
www.google.com
|
172.217.18.4
|
||
|
fp2e7a.wpc.phicdn.net
|
192.229.221.95
|
||
|
sts.afasonline.com
|
185.46.182.12
|
||
|
identity.nel.measure.office.net
|
unknown
|
||
|
aadcdn.msftauth.net
|
unknown
|
||
|
login.microsoftonline.com
|
unknown
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
185.46.182.62
|
86325.afasinsite.nl
|
Netherlands
|
||
|
13.107.246.45
|
s-part-0017.t-0009.t-msedge.net
|
United States
|
||
|
172.217.18.4
|
www.google.com
|
United States
|
||
|
13.107.253.45
|
s-part-0017.t-0009.fb-t-msedge.net
|
United States
|
||
|
192.168.2.4
|
unknown
|
unknown
|
||
|
216.58.206.36
|
unknown
|
United States
|
||
|
239.255.255.250
|
unknown
|
Reserved
|
||
|
185.46.182.12
|
sts.afasonline.com
|
Netherlands
|
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://login.microsoftonline.com/282036a5-5ccf-49fb-9fda-cebaaadf95c5/oauth2/v2.0/authorize?client_id=52d759a9-8d77-4c5e-aabc-9e067522ed03&response_type=code&scope=openid%20profile&redirect_uri=https%3A%2F%2Fsts.afasonline.com%2Fsignin-oidc&state=Q2ZESjhFMDRZRWhPMEh0QmdGcGtqTDlFTzdYVjYtVGZMQ3lMWml2am1SeG5yOFJGRFRPNmRiZnpJZmVtejdiamd0RnVmenNVbW1rQlhuMEdjTXVjdTdmZlJ0VTF3d0drNnlmOGlFeVRYSWk5VXdTeV9Kc3FvRFlITmdrTkRnWkN1T2RFbjhBdGU3TnlVUlJvREJndEQxVHFoNk1raUg3RUJnV200U245dW91QnlpX3R6Vjk1bTBSbE96SjV0TDNJTVp5bWlqdzdCamttenBWdmhyNXU4MktNMmRnWVRNU3BUTmZZSnR2ekxoUFBqcjliRnBmSVBSaGRKYTJpX1NmcWtIc0gzc3Bja29QcURkVE8yRVJfUWsxeE5MMUpTYzM2OEJxUnZieEZRRmkxS0RaRA%3D%3D&nonce=24ee4d7aca1e2ae178d146d23ff0dd7b2544131a35064c2c47b38a8c4d182729&response_mode=query&ui_locales=nl
|
||
|
https://login.microsoftonline.com/282036a5-5ccf-49fb-9fda-cebaaadf95c5/oauth2/v2.0/authorize?client_id=52d759a9-8d77-4c5e-aabc-9e067522ed03&response_type=code&scope=openid%20profile&redirect_uri=https%3A%2F%2Fsts.afasonline.com%2Fsignin-oidc&state=Q2ZESjhFMDRZRWhPMEh0QmdGcGtqTDlFTzdYVjYtVGZMQ3lMWml2am1SeG5yOFJGRFRPNmRiZnpJZmVtejdiamd0RnVmenNVbW1rQlhuMEdjTXVjdTdmZlJ0VTF3d0drNnlmOGlFeVRYSWk5VXdTeV9Kc3FvRFlITmdrTkRnWkN1T2RFbjhBdGU3TnlVUlJvREJndEQxVHFoNk1raUg3RUJnV200U245dW91QnlpX3R6Vjk1bTBSbE96SjV0TDNJTVp5bWlqdzdCamttenBWdmhyNXU4MktNMmRnWVRNU3BUTmZZSnR2ekxoUFBqcjliRnBmSVBSaGRKYTJpX1NmcWtIc0gzc3Bja29QcURkVE8yRVJfUWsxeE5MMUpTYzM2OEJxUnZieEZRRmkxS0RaRA%3D%3D&nonce=24ee4d7aca1e2ae178d146d23ff0dd7b2544131a35064c2c47b38a8c4d182729&response_mode=query&ui_locales=nl&sso_reload=true
|
||
|
https://login.microsoftonline.com/282036a5-5ccf-49fb-9fda-cebaaadf95c5/oauth2/v2.0/authorize?client_id=52d759a9-8d77-4c5e-aabc-9e067522ed03&response_type=code&scope=openid%20profile&redirect_uri=https%3A%2F%2Fsts.afasonline.com%2Fsignin-oidc&state=Q2ZESjhFMDRZRWhPMEh0QmdGcGtqTDlFTzdYVjYtVGZMQ3lMWml2am1SeG5yOFJGRFRPNmRiZnpJZmVtejdiamd0RnVmenNVbW1rQlhuMEdjTXVjdTdmZlJ0VTF3d0drNnlmOGlFeVRYSWk5VXdTeV9Kc3FvRFlITmdrTkRnWkN1T2RFbjhBdGU3TnlVUlJvREJndEQxVHFoNk1raUg3RUJnV200U245dW91QnlpX3R6Vjk1bTBSbE96SjV0TDNJTVp5bWlqdzdCamttenBWdmhyNXU4MktNMmRnWVRNU3BUTmZZSnR2ekxoUFBqcjliRnBmSVBSaGRKYTJpX1NmcWtIc0gzc3Bja29QcURkVE8yRVJfUWsxeE5MMUpTYzM2OEJxUnZieEZRRmkxS0RaRA%3D%3D&nonce=24ee4d7aca1e2ae178d146d23ff0dd7b2544131a35064c2c47b38a8c4d182729&response_mode=query&ui_locales=nl&sso_reload=true
|
||
|
https://login.microsoftonline.com/282036a5-5ccf-49fb-9fda-cebaaadf95c5/oauth2/v2.0/authorize?client_id=52d759a9-8d77-4c5e-aabc-9e067522ed03&response_type=code&scope=openid%20profile&redirect_uri=https%3A%2F%2Fsts.afasonline.com%2Fsignin-oidc&state=Q2ZESjhFMDRZRWhPMEh0QmdGcGtqTDlFTzdYVjYtVGZMQ3lMWml2am1SeG5yOFJGRFRPNmRiZnpJZmVtejdiamd0RnVmenNVbW1rQlhuMEdjTXVjdTdmZlJ0VTF3d0drNnlmOGlFeVRYSWk5VXdTeV9Kc3FvRFlITmdrTkRnWkN1T2RFbjhBdGU3TnlVUlJvREJndEQxVHFoNk1raUg3RUJnV200U245dW91QnlpX3R6Vjk1bTBSbE96SjV0TDNJTVp5bWlqdzdCamttenBWdmhyNXU4MktNMmRnWVRNU3BUTmZZSnR2ekxoUFBqcjliRnBmSVBSaGRKYTJpX1NmcWtIc0gzc3Bja29QcURkVE8yRVJfUWsxeE5MMUpTYzM2OEJxUnZieEZRRmkxS0RaRA%3D%3D&nonce=24ee4d7aca1e2ae178d146d23ff0dd7b2544131a35064c2c47b38a8c4d182729&response_mode=query&ui_locales=nl&sso_reload=true
|