Windows Analysis Report
https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8

Overview

General Information

Sample URL:	https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8
Analysis ID:	1562619
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML body contains low number of good links

HTML title does not match URL

Stores files to the Windows start menu directory

Submit button contains javascript call

Classification

Signatures

HTML body contains low number of good links

Source: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8	HTTP Parser: Number of links: 0
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: Number of links: 0

HTML title does not match URL

Source: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8	HTTP Parser: Title: Sharing Link Validation does not match URL
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: Title: Sharing Link Validation does not match URL

Submit button contains javascript call

Source: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8	HTTP Parser: On click: javascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("btnSubmitPassword", "", true, "", "", false, true))
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: On click: javascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("btnSubmitPassword", "", true, "", "", false, true))
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: On click: javascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("btnSubmitPassword", "", true, "", "", false, true))
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: On click: javascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("btnSubmitPassword", "", true, "", "", false, true))
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: On click: javascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("btnSubmitPassword", "", true, "", "", false, true))
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: On click: javascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("btnSubmitPassword", "", true, "", "", false, true))
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: On click: javascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("btnSubmitPassword", "", true, "", "", false, true))
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: On click: javascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("btnSubmitPassword", "", true, "", "", false, true))

Source: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8	HTTP Parser: <input type="password" .../> found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: <input type="password" .../> found

Source: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8	HTTP Parser: No <meta name="author".. found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: No <meta name="author".. found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: No <meta name="author".. found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: No <meta name="author".. found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: No <meta name="author".. found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: No <meta name="author".. found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: No <meta name="author".. found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: No <meta name="author".. found

Source: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8	HTTP Parser: No <meta name="copyright".. found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: No <meta name="copyright".. found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: No <meta name="copyright".. found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: No <meta name="copyright".. found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: No <meta name="copyright".. found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: No <meta name="copyright".. found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: No <meta name="copyright".. found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 2.21.147.10:443 -> 192.168.2.8:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.8:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.21.147.10:443 -> 192.168.2.8:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.8:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.8:49758 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200

Source: global traffic	HTTP traffic detected: GET /:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8 HTTP/1.1Host: calepa.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=ZAHpYD7HrvcFTKGABsbqF--DQjFLYE7Mo3rK8OBBI2u6w7s7humLZ09tdCjGHyxR_bgWawWV-LqkCrntcFA2HYzPdD4xKgHlgA-5jyj187Q1&t=638637567397700854 HTTP/1.1Host: calepa.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=Fxj7tDzfFBtuQUh-y9Bvxljhd9cicCneshZQyDEy9BVcB54sxO3QIoOi9Mbz-LAHjmDAqH3Z7QIf7hKWZVcS6TgI-DXJ_XD8G_FMNX5yT1P957XoptmpY76aRU-fcz6hFhXR1mH1-5W-Xwqw9vf7hqratjB-0P96f1WgBTtgS6c1&t=64bd211b HTTP/1.1Host: calepa.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=wjbtE3J2qiHDuNe9i7RdUUtGbHaa61reE4mS-T6zcss00Yr114B6as2Gt9sNJ04q2lYPx-CenalEutYfZ-p1qTtapkC0MJAIH4skk28Kf0cYaIdse7KSdn34U4zP-l0DAhut5Cb5o1wTXhgoJdLYjDXNkcgi_0qL5X7FmQDWulwRIsHr-HmjKjFr-NDtFEf80&t=ffffffffb201fd3f HTTP/1.1Host: calepa.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=3Bn9wIJiWX4vpUj7ujgHOIhaKnfATsuGE9nGuh2AdMT4ndXMSZGP4_JyOW56tt9-0eGT8d9mgwWOpXjhRdxJgFHNvEjrN7Nkn-6A3w4OgScP5fPw2c5b9Jir8rTcj05Lq1sUCWKv2nK38JBJF8kBiWr9RfE8FWCYdOiszn8vIwTFbmtpbr3u_vg4Vy6IoBDT0&t=ffffffffb201fd3f HTTP/1.1Host: calepa.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=ZAHpYD7HrvcFTKGABsbqF--DQjFLYE7Mo3rK8OBBI2u6w7s7humLZ09tdCjGHyxR_bgWawWV-LqkCrntcFA2HYzPdD4xKgHlgA-5jyj187Q1&t=638637567397700854 HTTP/1.1Host: calepa.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=kK3a4DNZlzcm8k+&MD=yhm7Bfyd HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=Fxj7tDzfFBtuQUh-y9Bvxljhd9cicCneshZQyDEy9BVcB54sxO3QIoOi9Mbz-LAHjmDAqH3Z7QIf7hKWZVcS6TgI-DXJ_XD8G_FMNX5yT1P957XoptmpY76aRU-fcz6hFhXR1mH1-5W-Xwqw9vf7hqratjB-0P96f1WgBTtgS6c1&t=64bd211b HTTP/1.1Host: calepa.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/microsoft-logo.png HTTP/1.1Host: calepa.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=3Bn9wIJiWX4vpUj7ujgHOIhaKnfATsuGE9nGuh2AdMT4ndXMSZGP4_JyOW56tt9-0eGT8d9mgwWOpXjhRdxJgFHNvEjrN7Nkn-6A3w4OgScP5fPw2c5b9Jir8rTcj05Lq1sUCWKv2nK38JBJF8kBiWr9RfE8FWCYdOiszn8vIwTFbmtpbr3u_vg4Vy6IoBDT0&t=ffffffffb201fd3f HTTP/1.1Host: calepa.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/microsoft-logo.png HTTP/1.1Host: calepa.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/favicon.ico?rev=47 HTTP/1.1Host: calepa.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/favicon.ico?rev=47 HTTP/1.1Host: calepa.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=wjbtE3J2qiHDuNe9i7RdUUtGbHaa61reE4mS-T6zcss00Yr114B6as2Gt9sNJ04q2lYPx-CenalEutYfZ-p1qTtapkC0MJAIH4skk28Kf0cYaIdse7KSdn34U4zP-l0DAhut5Cb5o1wTXhgoJdLYjDXNkcgi_0qL5X7FmQDWulwRIsHr-HmjKjFr-NDtFEf80&t=ffffffffb201fd3f HTTP/1.1Host: calepa.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=wjbtE3J2qiHDuNe9i7RdUUtGbHaa61reE4mS-T6zcss00Yr114B6as2Gt9sNJ04q2lYPx-CenalEutYfZ-p1qTtapkC0MJAIH4skk28Kf0cYaIdse7KSdn34U4zP-l0DAhut5Cb5o1wTXhgoJdLYjDXNkcgi_0qL5X7FmQDWulwRIsHr-HmjKjFr-NDtFEf80&t=ffffffffb201fd3f HTTP/1.1Host: calepa.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=kK3a4DNZlzcm8k+&MD=yhm7Bfyd HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: calepa.sharepoint.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: m365cdn.nel.measure.office.net

Source: unknown

HTTP traffic detected: POST /sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg HTTP/1.1Host: calepa.sharepoint.comConnection: keep-aliveContent-Length: 1295Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1Origin: https://calepa.sharepoint.comContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_104.2.dr, chromecache_110.2.dr	String found in binary or memory: http://github.com/jrburke/requirejs
Source: chromecache_88.2.dr	String found in binary or memory: https://calepa.sharepoint.com/sites/UP/_layouts/15/images/folder.png
Source: chromecache_92.2.dr, chromecache_99.2.dr	String found in binary or memory: https://reactjs.org/docs/error-decoder.html?invariant=
Source: chromecache_108.2.dr, chromecache_93.2.dr, chromecache_95.2.dr, chromecache_102.2.dr, chromecache_100.2.dr, chromecache_87.2.dr, chromecache_107.2.dr, chromecache_88.2.dr	String found in binary or memory: https://res-1-gcc.cdn.office.net/files/odsp-web-prod_2024-11-08.003/
Source: chromecache_108.2.dr, chromecache_93.2.dr, chromecache_95.2.dr, chromecache_102.2.dr, chromecache_100.2.dr, chromecache_87.2.dr, chromecache_107.2.dr, chromecache_88.2.dr	String found in binary or memory: https://res-2-gcc.cdn.office.net
Source: chromecache_108.2.dr, chromecache_93.2.dr, chromecache_95.2.dr, chromecache_102.2.dr, chromecache_100.2.dr, chromecache_87.2.dr, chromecache_107.2.dr, chromecache_88.2.dr	String found in binary or memory: https://res-2-gcc.cdn.office.net/bld/_layouts/15/16.0.25423.12016/require.js
Source: chromecache_108.2.dr, chromecache_93.2.dr, chromecache_95.2.dr, chromecache_102.2.dr, chromecache_100.2.dr, chromecache_87.2.dr, chromecache_107.2.dr, chromecache_88.2.dr	String found in binary or memory: https://res-2-gcc.cdn.office.net/files/odsp-web-prod_2024-11-08.003/
Source: chromecache_108.2.dr, chromecache_93.2.dr, chromecache_95.2.dr, chromecache_102.2.dr, chromecache_100.2.dr, chromecache_87.2.dr, chromecache_107.2.dr, chromecache_88.2.dr	String found in binary or memory: https://spoprod-a.akamaihd.net/files/odsp-common-library-prod_2019-02-15_20190219.002/require.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443

Source: unknown	HTTPS traffic detected: 2.21.147.10:443 -> 192.168.2.8:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.8:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.21.147.10:443 -> 192.168.2.8:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.8:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.8:49758 version: TLS 1.2

Source: classification engine

Classification label: clean2.win@16/50@13/5

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1932,i,6279707170055968014,1770641071044784253,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1932,i,6279707170055968014,1770641071044784253,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.138.10	dual-spo-0005.spo-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.136.10	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.181.68	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.8

Contacted Domains

Name	IP	Active
dual-spo-0005.spo-msedge.net	13.107.138.10	true
www.google.com	142.250.181.68	true
calepa.sharepoint.com	unknown	unknown
m365cdn.nel.measure.office.net	unknown	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://calepa.sharepoint.com/_layouts/15/images/favicon.ico?rev=47	false	Avira URL Cloud: safe	unknown
https://calepa.sharepoint.com/ScriptResource.axd?d=Fxj7tDzfFBtuQUh-y9Bvxljhd9cicCneshZQyDEy9BVcB54sxO3QIoOi9Mbz-LAHjmDAqH3Z7QIf7hKWZVcS6TgI-DXJ_XD8G_FMNX5yT1P957XoptmpY76aRU-fcz6hFhXR1mH1-5W-Xwqw9vf7hqratjB-0P96f1WgBTtgS6c1&t=64bd211b	false	Avira URL Cloud: safe	unknown
https://calepa.sharepoint.com/ScriptResource.axd?d=wjbtE3J2qiHDuNe9i7RdUUtGbHaa61reE4mS-T6zcss00Yr114B6as2Gt9sNJ04q2lYPx-CenalEutYfZ-p1qTtapkC0MJAIH4skk28Kf0cYaIdse7KSdn34U4zP-l0DAhut5Cb5o1wTXhgoJdLYjDXNkcgi_0qL5X7FmQDWulwRIsHr-HmjKjFr-NDtFEf80&t=ffffffffb201fd3f	false	Avira URL Cloud: safe	unknown
https://calepa.sharepoint.com/ScriptResource.axd?d=3Bn9wIJiWX4vpUj7ujgHOIhaKnfATsuGE9nGuh2AdMT4ndXMSZGP4_JyOW56tt9-0eGT8d9mgwWOpXjhRdxJgFHNvEjrN7Nkn-6A3w4OgScP5fPw2c5b9Jir8rTcj05Lq1sUCWKv2nK38JBJF8kBiWr9RfE8FWCYdOiszn8vIwTFbmtpbr3u_vg4Vy6IoBDT0&t=ffffffffb201fd3f	false	Avira URL Cloud: safe	unknown
https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8	false		unknown
https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	false		unknown
https://calepa.sharepoint.com/WebResource.axd?d=ZAHpYD7HrvcFTKGABsbqF--DQjFLYE7Mo3rK8OBBI2u6w7s7humLZ09tdCjGHyxR_bgWawWV-LqkCrntcFA2HYzPdD4xKgHlgA-5jyj187Q1&t=638637567397700854	false	Avira URL Cloud: safe	unknown
https://calepa.sharepoint.com/_layouts/15/images/microsoft-logo.png	false	Avira URL Cloud: safe	unknown

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 17:29:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	A6663527A3791FA749F784A4B7405D4B	664582ADAFC1833F589E1651591B4299CA4DCC7A	E368FC3260D7A83F3C2D1AF9C266B4A7D12070392DA38FB57CF3ED18A81D299C
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 17:29:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	9C7A5D4F570F1BC4DAC60D5264CC6D04	B4BB541E1C02012424113F2233937921AD7F7E06	47A9F7663A013B1A3E35A8AB2D646E1CFC934BCBD7BC507FC647ED08B85B1DBE
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 07:00:51 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	CA12DB3C29903C4455F31C5467EC5B36	28DFFDB753E420A60C7DC413A5E3FA63837BAF73	A4B1BCDCD54475DDED2F98DE6D3B6C2EA4F20A73C665103F7C24021A19244922
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 17:29:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	CE86D1BB41DF5D87A927AEA9E6C2725A	5CBFBD54A579056485A1E5FA1F59EA4CF7BD991B	223247ED0FD79AC910E11FA41878A316E5A882B1D7CDD865569C7A5077310C05
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 17:29:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	045F692094523E91F4BE1BDC44859F5E	C54DDB939236E3388D57972220B34B7A438023EA	5F0858A8F27A7CF919263E8A447A767A96794DFA4286512C0C97F08A43895B2A
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 17:29:40 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	0967BCD5F8AF4061E5CCFE8F09FF8B64	A3DCA4D84DA55911952E2EEAF9AA6AB1F4AB7BD9	82B39A78A3D88A5B00AE68D3F7003818FAB8C917125AA709A0F4F69CD56663F2
Chrome Cache Entry: 100	HTML document, ASCII text, with very long lines (30522), with CRLF, LF line terminators	FC44E5615A10C55689EAF5438A45EA6D	1F02CC2C5619371A195C814DCE2AB7365F615C3E	3F7BFE4364510D810F7CF792A87D0BBAA4FE988D077DEC8A04174E8180CD91EA
Chrome Cache Entry: 101	PNG image data, 226 x 48, 8-bit/color RGBA, non-interlaced	EF884BDEDEF280DF97A4C5604058D8DB	6F04244B51AD2409659E267D308B97E09CE9062B	825DE044D5AC6442A094FF95099F9F67E9249A8110A2FBD57128285776632ADB
Chrome Cache Entry: 102	HTML document, ASCII text, with very long lines (30522), with CRLF, LF line terminators	FDF23BF5F5ED73922290BF3D87E22196	AC97EE3DDAB63D9A2A9539873DE86181075B88C3	49978BB3F7CE6D411B15C96E4E3E3DBB34AEDA2D6EAD7D034C40C9A0097D2C75
Chrome Cache Entry: 103	ASCII text, with no line terminators	FAE6EAA6F130A3B0665C92D5D06F2F1A	108CEEC1D2BC00DA89256F9CAB4203EE8C8E4E77	0576C2A34B1AD9552F87B4E72FEE6A8EDCDA6CC0A99156112D5658B16152ACFB
Chrome Cache Entry: 104	ASCII text, with very long lines (17444)	6EFDDF589864D2E146A55C01C6764A35	EFA8BBA46CB97877EEC5430C43F0AC32585B6B2F	2D92F0CE8491D2F9A27EA16D261A15089C4A9BE879D1EEDCB6F4A3859E7F1999
Chrome Cache Entry: 105	ASCII text, with CRLF line terminators	B3D7A123BE5203A1A3F0F10233ED373F	F4C61F321D8F79A805B356C6EC94090C0D96215C	EF9453F74B2617D43DCEF4242CF5845101FCFB57289C81BCEB20042B0023A192
Chrome Cache Entry: 106	PNG image data, 226 x 48, 8-bit/color RGBA, non-interlaced	EF884BDEDEF280DF97A4C5604058D8DB	6F04244B51AD2409659E267D308B97E09CE9062B	825DE044D5AC6442A094FF95099F9F67E9249A8110A2FBD57128285776632ADB
Chrome Cache Entry: 107	HTML document, ASCII text, with very long lines (30522), with CRLF, LF line terminators	48373BAF09D03CA8A99F17A592C24A09	23B2E5D757B0CBF79E456721D38D4D72C56A98BB	8A950A62AE881F558D1513E92C4FC4AF913C4EA10B947606798A6AE1A093EC2D
Chrome Cache Entry: 108	HTML document, ASCII text, with very long lines (30522), with CRLF, LF line terminators	FE7AFD74E361218FB03A4EEF0B7EBC52	3CFB3403075AA1CD7616B3C6B0991971FFA28CA4	859734864DDEF8C328ADA8E1FE0D36299D9A574BB8D52885269A7922BC8874CE
Chrome Cache Entry: 109	MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel	0B60F3C9E4DA6E807E808DA7360F24F2	9AFC7ABB910DE855EFB426206E547574A1E074B7	ADDEEDEEEF393B6B1BE5BBB099B656DCD797334FF972C495CCB09CFCB1A78341
Chrome Cache Entry: 110	ASCII text, with very long lines (17444)	6EFDDF589864D2E146A55C01C6764A35	EFA8BBA46CB97877EEC5430C43F0AC32585B6B2F	2D92F0CE8491D2F9A27EA16D261A15089C4A9BE879D1EEDCB6F4A3859E7F1999
Chrome Cache Entry: 111	ASCII text, with very long lines (39257), with CRLF line terminators	DA9DC1C32E89C02FC1E9EEB7E5AAB91E	3EFB110EFA6068CE6B586A67F87DA5125310BC30	398CDF1B27EF247E5BC77805F266BB441E60355463FC3D1776F41AAE58B08CF1
Chrome Cache Entry: 112	MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel	0B60F3C9E4DA6E807E808DA7360F24F2	9AFC7ABB910DE855EFB426206E547574A1E074B7	ADDEEDEEEF393B6B1BE5BBB099B656DCD797334FF972C495CCB09CFCB1A78341
Chrome Cache Entry: 87	HTML document, ASCII text, with very long lines (30522), with CRLF, LF line terminators	45429258D424AA4A591EA8118583FE8E	A0E078544F8391FEAB5CD39DBC1BF1F34141FB9B	6CE36FFD1FA01E9043D0EE999292821A793DE22421C7E04BA936CBF367E136F9
Chrome Cache Entry: 88	HTML document, ASCII text, with very long lines (30522), with CRLF, LF line terminators	B3E12D46A166D4D7A399B026C36B0B12	DD2BC12AC819E869E213B3A3C10FD5F552E2E2B0	47FEAE71426FA21B7450598D3F74ED71B618B59AB9DAAA037564DFB7A3C987CE
Chrome Cache Entry: 89	ASCII text, with very long lines (65329), with CRLF line terminators	C89EAA5B28DF1E17376BE71D71649173	2B34DF4C66BB57DE5A24A2EF0896271DFCA4F4CD	66B804E7A96A87C11E1DD74EA04AC2285DF5AD9043F48046C3E5000114D39B1C
Chrome Cache Entry: 90	XML 1.0 document, Unicode text, UTF-8 (with BOM) text	3EABED4CCF9ACBBDC9C4BEA4054A8E74	0EE4D1B610D1790D13CCDEED2BD9E2D3047BB68F	F80C50F8490BCB363BA73FC5F7AF59E37368E52AAB75EFAD1798A2DCEFF6D183
Chrome Cache Entry: 91	ASCII text, with CRLF line terminators	B3D7A123BE5203A1A3F0F10233ED373F	F4C61F321D8F79A805B356C6EC94090C0D96215C	EF9453F74B2617D43DCEF4242CF5845101FCFB57289C81BCEB20042B0023A192
Chrome Cache Entry: 92	ASCII text, with very long lines (37337)	B4E27A4D39B598172647E0C174AAF21D	9B63229B34814F26075818D55061867B6C794CE9	3CDE5E08B570B55AF3C82C6A9D089376373A9E094AF594ECB6DA5E05EB48DC8E
Chrome Cache Entry: 93	HTML document, ASCII text, with very long lines (30522), with CRLF, LF line terminators	1A36D7606C1F2272CC2AC440B56B2856	D695CA529651C324B8C9233A4762B3EF9AB79EAA	FCE15B405D736CE95B497847C808459B23332B11B36ED74D1D95F9CAC4A4AE03
Chrome Cache Entry: 94	ASCII text, with very long lines (39257), with CRLF line terminators	DA9DC1C32E89C02FC1E9EEB7E5AAB91E	3EFB110EFA6068CE6B586A67F87DA5125310BC30	398CDF1B27EF247E5BC77805F266BB441E60355463FC3D1776F41AAE58B08CF1
Chrome Cache Entry: 95	HTML document, ASCII text, with very long lines (30522), with CRLF, LF line terminators	E59078310F120F72CDB3D892789FC28E	7371FDBB8685251721E75DC07B50F6C069B39C2A	9E8887FA0DE9A7740428633AF18228BB8ACD5DF5F05D9EA10E891EC7F61134CA
Chrome Cache Entry: 96	ASCII text, with CRLF line terminators	90EA7274F19755002360945D54C2A0D7	647B5D8BF7D119A2C97895363A07A0C6EB8CD284	40732E9DCFA704CF615E4691BB07AECFD1CC5E063220A46E4A7FF6560C77F5DB
Chrome Cache Entry: 97	ASCII text, with CRLF line terminators	90EA7274F19755002360945D54C2A0D7	647B5D8BF7D119A2C97895363A07A0C6EB8CD284	40732E9DCFA704CF615E4691BB07AECFD1CC5E063220A46E4A7FF6560C77F5DB
Chrome Cache Entry: 98	ASCII text, with very long lines (65329), with CRLF line terminators	C89EAA5B28DF1E17376BE71D71649173	2B34DF4C66BB57DE5A24A2EF0896271DFCA4F4CD	66B804E7A96A87C11E1DD74EA04AC2285DF5AD9043F48046C3E5000114D39B1C
Chrome Cache Entry: 99	ASCII text, with very long lines (37337)	B4E27A4D39B598172647E0C174AAF21D	9B63229B34814F26075818D55061867B6C794CE9	3CDE5E08B570B55AF3C82C6A9D089376373A9E094AF594ECB6DA5E05EB48DC8E

HTML body contains low number of good links

Source: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8	HTTP Parser: Number of links: 0
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: Number of links: 0

HTML title does not match URL

Source: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8	HTTP Parser: Title: Sharing Link Validation does not match URL
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: Title: Sharing Link Validation does not match URL

Submit button contains javascript call

Source: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8	HTTP Parser: On click: javascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("btnSubmitPassword", "", true, "", "", false, true))
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: On click: javascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("btnSubmitPassword", "", true, "", "", false, true))
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: On click: javascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("btnSubmitPassword", "", true, "", "", false, true))
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: On click: javascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("btnSubmitPassword", "", true, "", "", false, true))
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: On click: javascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("btnSubmitPassword", "", true, "", "", false, true))
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: On click: javascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("btnSubmitPassword", "", true, "", "", false, true))
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: On click: javascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("btnSubmitPassword", "", true, "", "", false, true))
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: On click: javascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("btnSubmitPassword", "", true, "", "", false, true))

Source: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8	HTTP Parser: <input type="password" .../> found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: <input type="password" .../> found

Source: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8	HTTP Parser: No <meta name="author".. found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: No <meta name="author".. found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: No <meta name="author".. found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: No <meta name="author".. found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: No <meta name="author".. found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: No <meta name="author".. found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: No <meta name="author".. found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: No <meta name="author".. found

Source: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8	HTTP Parser: No <meta name="copyright".. found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: No <meta name="copyright".. found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: No <meta name="copyright".. found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: No <meta name="copyright".. found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: No <meta name="copyright".. found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: No <meta name="copyright".. found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: No <meta name="copyright".. found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 2.21.147.10:443 -> 192.168.2.8:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.8:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.21.147.10:443 -> 192.168.2.8:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.8:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.8:49758 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200

Source: global traffic	HTTP traffic detected: GET /:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8 HTTP/1.1Host: calepa.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=ZAHpYD7HrvcFTKGABsbqF--DQjFLYE7Mo3rK8OBBI2u6w7s7humLZ09tdCjGHyxR_bgWawWV-LqkCrntcFA2HYzPdD4xKgHlgA-5jyj187Q1&t=638637567397700854 HTTP/1.1Host: calepa.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=Fxj7tDzfFBtuQUh-y9Bvxljhd9cicCneshZQyDEy9BVcB54sxO3QIoOi9Mbz-LAHjmDAqH3Z7QIf7hKWZVcS6TgI-DXJ_XD8G_FMNX5yT1P957XoptmpY76aRU-fcz6hFhXR1mH1-5W-Xwqw9vf7hqratjB-0P96f1WgBTtgS6c1&t=64bd211b HTTP/1.1Host: calepa.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=wjbtE3J2qiHDuNe9i7RdUUtGbHaa61reE4mS-T6zcss00Yr114B6as2Gt9sNJ04q2lYPx-CenalEutYfZ-p1qTtapkC0MJAIH4skk28Kf0cYaIdse7KSdn34U4zP-l0DAhut5Cb5o1wTXhgoJdLYjDXNkcgi_0qL5X7FmQDWulwRIsHr-HmjKjFr-NDtFEf80&t=ffffffffb201fd3f HTTP/1.1Host: calepa.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=3Bn9wIJiWX4vpUj7ujgHOIhaKnfATsuGE9nGuh2AdMT4ndXMSZGP4_JyOW56tt9-0eGT8d9mgwWOpXjhRdxJgFHNvEjrN7Nkn-6A3w4OgScP5fPw2c5b9Jir8rTcj05Lq1sUCWKv2nK38JBJF8kBiWr9RfE8FWCYdOiszn8vIwTFbmtpbr3u_vg4Vy6IoBDT0&t=ffffffffb201fd3f HTTP/1.1Host: calepa.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=ZAHpYD7HrvcFTKGABsbqF--DQjFLYE7Mo3rK8OBBI2u6w7s7humLZ09tdCjGHyxR_bgWawWV-LqkCrntcFA2HYzPdD4xKgHlgA-5jyj187Q1&t=638637567397700854 HTTP/1.1Host: calepa.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=kK3a4DNZlzcm8k+&MD=yhm7Bfyd HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=Fxj7tDzfFBtuQUh-y9Bvxljhd9cicCneshZQyDEy9BVcB54sxO3QIoOi9Mbz-LAHjmDAqH3Z7QIf7hKWZVcS6TgI-DXJ_XD8G_FMNX5yT1P957XoptmpY76aRU-fcz6hFhXR1mH1-5W-Xwqw9vf7hqratjB-0P96f1WgBTtgS6c1&t=64bd211b HTTP/1.1Host: calepa.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/microsoft-logo.png HTTP/1.1Host: calepa.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=3Bn9wIJiWX4vpUj7ujgHOIhaKnfATsuGE9nGuh2AdMT4ndXMSZGP4_JyOW56tt9-0eGT8d9mgwWOpXjhRdxJgFHNvEjrN7Nkn-6A3w4OgScP5fPw2c5b9Jir8rTcj05Lq1sUCWKv2nK38JBJF8kBiWr9RfE8FWCYdOiszn8vIwTFbmtpbr3u_vg4Vy6IoBDT0&t=ffffffffb201fd3f HTTP/1.1Host: calepa.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/microsoft-logo.png HTTP/1.1Host: calepa.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/favicon.ico?rev=47 HTTP/1.1Host: calepa.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/favicon.ico?rev=47 HTTP/1.1Host: calepa.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=wjbtE3J2qiHDuNe9i7RdUUtGbHaa61reE4mS-T6zcss00Yr114B6as2Gt9sNJ04q2lYPx-CenalEutYfZ-p1qTtapkC0MJAIH4skk28Kf0cYaIdse7KSdn34U4zP-l0DAhut5Cb5o1wTXhgoJdLYjDXNkcgi_0qL5X7FmQDWulwRIsHr-HmjKjFr-NDtFEf80&t=ffffffffb201fd3f HTTP/1.1Host: calepa.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=wjbtE3J2qiHDuNe9i7RdUUtGbHaa61reE4mS-T6zcss00Yr114B6as2Gt9sNJ04q2lYPx-CenalEutYfZ-p1qTtapkC0MJAIH4skk28Kf0cYaIdse7KSdn34U4zP-l0DAhut5Cb5o1wTXhgoJdLYjDXNkcgi_0qL5X7FmQDWulwRIsHr-HmjKjFr-NDtFEf80&t=ffffffffb201fd3f HTTP/1.1Host: calepa.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=kK3a4DNZlzcm8k+&MD=yhm7Bfyd HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: calepa.sharepoint.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: m365cdn.nel.measure.office.net

Source: unknown

Source: chromecache_104.2.dr, chromecache_110.2.dr	String found in binary or memory: http://github.com/jrburke/requirejs
Source: chromecache_88.2.dr	String found in binary or memory: https://calepa.sharepoint.com/sites/UP/_layouts/15/images/folder.png
Source: chromecache_92.2.dr, chromecache_99.2.dr	String found in binary or memory: https://reactjs.org/docs/error-decoder.html?invariant=
Source: chromecache_108.2.dr, chromecache_93.2.dr, chromecache_95.2.dr, chromecache_102.2.dr, chromecache_100.2.dr, chromecache_87.2.dr, chromecache_107.2.dr, chromecache_88.2.dr	String found in binary or memory: https://res-1-gcc.cdn.office.net/files/odsp-web-prod_2024-11-08.003/
Source: chromecache_108.2.dr, chromecache_93.2.dr, chromecache_95.2.dr, chromecache_102.2.dr, chromecache_100.2.dr, chromecache_87.2.dr, chromecache_107.2.dr, chromecache_88.2.dr	String found in binary or memory: https://res-2-gcc.cdn.office.net
Source: chromecache_108.2.dr, chromecache_93.2.dr, chromecache_95.2.dr, chromecache_102.2.dr, chromecache_100.2.dr, chromecache_87.2.dr, chromecache_107.2.dr, chromecache_88.2.dr	String found in binary or memory: https://res-2-gcc.cdn.office.net/bld/_layouts/15/16.0.25423.12016/require.js
Source: chromecache_108.2.dr, chromecache_93.2.dr, chromecache_95.2.dr, chromecache_102.2.dr, chromecache_100.2.dr, chromecache_87.2.dr, chromecache_107.2.dr, chromecache_88.2.dr	String found in binary or memory: https://res-2-gcc.cdn.office.net/files/odsp-web-prod_2024-11-08.003/
Source: chromecache_108.2.dr, chromecache_93.2.dr, chromecache_95.2.dr, chromecache_102.2.dr, chromecache_100.2.dr, chromecache_87.2.dr, chromecache_107.2.dr, chromecache_88.2.dr	String found in binary or memory: https://spoprod-a.akamaihd.net/files/odsp-common-library-prod_2019-02-15_20190219.002/require.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443

Source: unknown	HTTPS traffic detected: 2.21.147.10:443 -> 192.168.2.8:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.8:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.21.147.10:443 -> 192.168.2.8:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.8:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.8:49758 version: TLS 1.2

Source: classification engine

Classification label: clean2.win@16/50@13/5

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1932,i,6279707170055968014,1770641071044784253,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1932,i,6279707170055968014,1770641071044784253,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

ID:	1562619
Product:	CloudBasic
Start time:	19:28:31
Start date:	25.11.2024
Cookbook:	browseurl.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Windows Analysis Report
https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8