Edit tour

Windows Analysis Report
Essity Invoice 47926407 .HTML

Overview

General Information

Sample Name:	Essity Invoice 47926407 .HTML
Analysis ID:	1277220
MD5:	c7660cbc6ddf68be8b367fca5e589c80
SHA1:	238688839a3d1b84ec775421c5e0a59802affa73
SHA256:	e402f08f1241a3ff924c5d596c4e00af7b052bab33ca1d5af2c01ec57a65d1f1
Infos:

Detection

HTMLPhisher

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected HtmlPhish54

HTML IFrame injector detected

HTML document with suspicious name

Phishing site detected (based on image similarity)

HTML body contains low number of good links

HTML title does not match URL

IP address seen in connection with other malware

Connects to many different domains

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5240 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Essity Invoice 47926407 .HTML MD5: 0FEC2748F363150DC54C1CAFFB1A9408)

chrome.exe (PID: 4840 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1792 --field-trial-handle=1808,i,10674562601973243761,4294456091636027661,131072 /prefetch:8 MD5: 0FEC2748F363150DC54C1CAFFB1A9408)

chrome.exe (PID: 6064 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3676 --field-trial-handle=1808,i,10674562601973243761,4294456091636027661,131072 /prefetch:8 MD5: 0FEC2748F363150DC54C1CAFFB1A9408)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Yara detected HtmlPhish54

Source: Yara match

File source: 0.0.pages.csv, type: HTML

HTML IFrame injector detected

Source: file:///C:/Users/user/Desktop/Essity%20Invoice%2047926407%20.HTML

HTTP Parser: New IFrame, src: https://crimsonfrenchfoods.cloud?sign=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2NyaW1zb25mcmVuY2hmb29kcy5jbG91ZCIsImRvbWFpbiI6ImNyaW1zb25mcmVuY2hmb29kcy5jbG91ZCIsImtleSI6IjlnRHRBd2xtSVpDMCIsInFyYyI6InplbG1pcmEuc2VzdGlub3ZhQGVzc2l0eS5jb20iLCJpYXQiOjE2ODk5MjA0NzgsImV4cCI6MTY4OTkyMDU5OH0.Ld2o-93Q7ZokJ0eu6SSQiH_ZN3IF-6NFrew7uM4UJvc

Phishing site detected (based on image similarity)

Source: file:///C:/Users/user/Desktop/Essity%20Invoice%2047926407%20.HTML

Matcher: Found strong image similarity, brand: MICROSOFT

Source: https://corp.sts.essity.com/adfs/ls/?login_hint=zelmira.sestinova%40essity.com&mkt=en-US&client-request-id=e532f910-8440-4e88-bc58-53e06299abae&username=zelmira.sestinova%40essity.com&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAAhZI9jNt0GIfj5C5co0KPgtAhGDIwICCOP_-OT6qonTiJndjJOU4cZ4nsxInt81diJ449g-iCVHVAukosDAxXxMCAEGKA9Vg6Vp0QEkslpIqpbORgrlje3_vqfbbfUzoCMIrBKIx8UMBg5PQ9ggIkQZBGBcdmoELQBlKp4SaooHMa378wCsz09e3S8fHf2B93P7kn_TQe_GZcPPr2EipbcRxGp9VqkiRwsFjYMxOeBV7V1f257S-32A8Q9BiCHuTfzUzXs9c6HJlRbPvBVr9rRpEdp9f4w_yh6VeGg8t8BHCKxmgawSkKEACAGgprmEZojuT0VD6WVNkVbQTZp9dVuVRqcbHUEnciJluSY3mip6GSwuOaJ5I9RYx718ye11TB6SpLctJgYs3TUtFZJj216YjqcPc0f6vHbGILux7B2s7Mv_I3FsHam4ZBFD8sfJFvVUbuahanYyE40zNpHoG-6qtUq81OBVmU6mcSH808ySPotJakrIfYAWP02xnL4U7W77bq6Tm263Z6zMoQ4kTpKt3GcOUzQnMjkQO7xjQddtxJ55llgB3B8TY-lZCgmdLbkdTWWEdl00YfgJj0SFlH0MWAX5L16cD2-FUtQP3QzTgnpTWLzDJBBJpsc3wN4zugn43TFMfazJTAQmOHNLaThMTIdjjbjJYig47U_sSud5puigucL_YVi-rOF0EAkgqxE86H1nmaTNx-Rd24XtjDw7UcmS2tw_KjU...

HTTP Parser: Number of links: 0

HTTP Parser: Title: Sign In does not match URL

HTTP Parser: <input type="password" .../> found

HTTP Parser: No <meta name="author".. found

Source: Essity Invoice 47926407 .HTML	HTTP Parser: No favicon
Source: https://crimsonfrenchfoods.cloud/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&ste=bgnoktc.uguvkpqxc%40guukva.eqo	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/Essity%20Invoice%2047926407%20.HTML	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/Essity%20Invoice%2047926407%20.HTML	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/Essity%20Invoice%2047926407%20.HTML	HTTP Parser: No favicon
Source: https://corp.sts.essity.com/adfs/ls/?login_hint=zelmira.sestinova%40essity.com&mkt=en-US&client-request-id=e532f910-8440-4e88-bc58-53e06299abae&username=zelmira.sestinova%40essity.com&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAAhZI9jNt0GIfj5C5co0KPgtAhGDIwICCOP_-OT6qonTiJndjJOU4cZ4nsxInt81diJ449g-iCVHVAukosDAxXxMCAEGKA9Vg6Vp0QEkslpIqpbORgrlje3_vqfbbfUzoCMIrBKIx8UMBg5PQ9ggIkQZBGBcdmoELQBlKp4SaooHMa378wCsz09e3S8fHf2B93P7kn_TQe_GZcPPr2EipbcRxGp9VqkiRwsFjYMxOeBV7V1f257S-32A8Q9BiCHuTfzUzXs9c6HJlRbPvBVr9rRpEdp9f4w_yh6VeGg8t8BHCKxmgawSkKEACAGgprmEZojuT0VD6WVNkVbQTZp9dVuVRqcbHUEnciJluSY3mip6GSwuOaJ5I9RYx718ye11TB6SpLctJgYs3TUtFZJj216YjqcPc0f6vHbGILux7B2s7Mv_I3FsHam4ZBFD8sfJFvVUbuahanYyE40zNpHoG-6qtUq81OBVmU6mcSH808ySPotJakrIfYAWP02xnL4U7W77bq6Tm263Z6zMoQ4kTpKt3GcOUzQnMjkQO7xjQddtxJ55llgB3B8TY-lZCgmdLbkdTWWEdl00YfgJj0SFlH0MWAX5L16cD2-FUtQP3QzTgnpTWLzDJBBJpsc3wN4zugn43TFMfazJTAQmOHNLaThMTIdjjbjJYig47U_sSud5puigucL_YVi-rOF0EAkgqxE86H1nmaTNx-Rd24XtjDw7UcmS2tw_KjU...	HTTP Parser: No favicon

HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\GoogleUpdater

Jump to behavior

Source: Joe Sandbox View

IP Address: 199.232.16.157 199.232.16.157

Source: unknown

Network traffic detected: DNS query count 34

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49686 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49692 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49687 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49697
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49694
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49693
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49692
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 49689 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49689
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49687
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49686
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49684
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49683
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49683 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49684 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901

Source: chromecache_311.1.dr	String found in binary or memory: <a href="https://www.facebook.com/essity"><i class="i i-facebook" aria-hidden="true"></i></a> equals www.facebook.com (Facebook)
Source: chromecache_311.1.dr	String found in binary or memory: <a href="https://www.linkedin.com/company/16240930/"><i class="i i-linkedin" aria-hidden="true"></i></a> equals www.linkedin.com (Linkedin)
Source: chromecache_311.1.dr	String found in binary or memory: <a href="https://www.youtube.com/channel/UCv5LMehTcMvdcUUpEVNTVGA"><i class="i i-youtube" aria-hidden="true"></i></a> equals www.youtube.com (Youtube)
Source: chromecache_319.1.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}};e.exports=new h(function(d,e){function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=function(){n.removeItem(m),a.cl
Source: chromecache_286.1.dr	String found in binary or memory: a.getAttribute("type")&&e.preventDefault();a.removeEventListener("beforescriptexecute",c)}))}function A(a){var c=a.src\|\|"",b=q(c);(b.categoryIds.length\|\|b.vsCatIds.length)&&(x(b.categoryIds,a,b.vsCatIds),m(b.categoryIds,b.vsCatIds)\|\|(a.removeAttribute("src"),a.setAttribute("data-src",c)))}var u=JSON.parse('[{"Tag":"https://masdpstatic.azureedge.net/essity/1.69.0-release.9/js/app.js","CategoryId":["C0003","C0004"],"Vendor":null},{"Tag":"https://www.googletagmanager.com/gtm.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://www.google-analytics.com/analytics.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://masdpstatic.azureedge.net/essity/1.85.0-release.2/js/app.js","CategoryId":["C0003","C0004"],"Vendor":null},{"Tag":"https://www.linkedin.com/px/li_sync","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://www.googleoptimize.com/optimize.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://masdpstatic.azureedge.net/essity/1.88.0-release.1/js/app.js","CategoryId":["C0003","C0004"],"Vendor":null},{"Tag":"https://masdpstatic.azureedge.net/essity/1.86.0-release.2/js/app.js","CategoryId":["C0003","C0004"],"Vendor":null},{"Tag":"https://px.ads.linkedin.com/collect","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://static.ads-twitter.com/uwt.js","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://static.ads-twitter.com","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://connect.facebook.net/signals/config/252916668616627","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://www.youtube.com/iframe_api","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://connect.facebook.net/signals/config/404682490064138","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://snap.licdn.com/li.lms-analytics/insight.min.js","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://analytics.twitter.com/i/adsct","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://s7.addthis.com/js/300/addthis_widget.js#pubid\x3dra-5c385ed8e96854b3","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://snap.licdn.com/li.lms-analytics/insight.beta.min.js","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://licensebuttons.net/l/by-nc-nd/4.0/88x31.png","CategoryId":["C0003"],"Vendor":null},{"Tag":"https://t.co/i/adsct","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://www.googletagmanager.com/gtag/js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://www.facebook.com/tr/","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://reports.essity.com/2017/annual-and-sustainability-report/layout/js/jquery.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://connect.facebook.net/signals/config/1221985607932630","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://s7.addthis.com/static/layers.fa6cd1947ce26e890d3d.js","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://reports.essity.com/2018/annual-and-sustainability-report/layout/js/jquery.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://i.creativecommons.org/l/by-nc-nd/4.0/88x31.png","CategoryId
Source: chromecache_286.1.dr	String found in binary or memory: a.getAttribute("type")&&e.preventDefault();a.removeEventListener("beforescriptexecute",c)}))}function A(a){var c=a.src\|\|"",b=q(c);(b.categoryIds.length\|\|b.vsCatIds.length)&&(x(b.categoryIds,a,b.vsCatIds),m(b.categoryIds,b.vsCatIds)\|\|(a.removeAttribute("src"),a.setAttribute("data-src",c)))}var u=JSON.parse('[{"Tag":"https://masdpstatic.azureedge.net/essity/1.69.0-release.9/js/app.js","CategoryId":["C0003","C0004"],"Vendor":null},{"Tag":"https://www.googletagmanager.com/gtm.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://www.google-analytics.com/analytics.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://masdpstatic.azureedge.net/essity/1.85.0-release.2/js/app.js","CategoryId":["C0003","C0004"],"Vendor":null},{"Tag":"https://www.linkedin.com/px/li_sync","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://www.googleoptimize.com/optimize.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://masdpstatic.azureedge.net/essity/1.88.0-release.1/js/app.js","CategoryId":["C0003","C0004"],"Vendor":null},{"Tag":"https://masdpstatic.azureedge.net/essity/1.86.0-release.2/js/app.js","CategoryId":["C0003","C0004"],"Vendor":null},{"Tag":"https://px.ads.linkedin.com/collect","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://static.ads-twitter.com/uwt.js","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://static.ads-twitter.com","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://connect.facebook.net/signals/config/252916668616627","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://www.youtube.com/iframe_api","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://connect.facebook.net/signals/config/404682490064138","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://snap.licdn.com/li.lms-analytics/insight.min.js","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://analytics.twitter.com/i/adsct","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://s7.addthis.com/js/300/addthis_widget.js#pubid\x3dra-5c385ed8e96854b3","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://snap.licdn.com/li.lms-analytics/insight.beta.min.js","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://licensebuttons.net/l/by-nc-nd/4.0/88x31.png","CategoryId":["C0003"],"Vendor":null},{"Tag":"https://t.co/i/adsct","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://www.googletagmanager.com/gtag/js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://www.facebook.com/tr/","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://reports.essity.com/2017/annual-and-sustainability-report/layout/js/jquery.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://connect.facebook.net/signals/config/1221985607932630","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://s7.addthis.com/static/layers.fa6cd1947ce26e890d3d.js","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://reports.essity.com/2018/annual-and-sustainability-report/layout/js/jquery.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://i.creativecommons.org/l/by-nc-nd/4.0/88x31.png","CategoryId
Source: chromecache_286.1.dr	String found in binary or memory: a.getAttribute("type")&&e.preventDefault();a.removeEventListener("beforescriptexecute",c)}))}function A(a){var c=a.src\|\|"",b=q(c);(b.categoryIds.length\|\|b.vsCatIds.length)&&(x(b.categoryIds,a,b.vsCatIds),m(b.categoryIds,b.vsCatIds)\|\|(a.removeAttribute("src"),a.setAttribute("data-src",c)))}var u=JSON.parse('[{"Tag":"https://masdpstatic.azureedge.net/essity/1.69.0-release.9/js/app.js","CategoryId":["C0003","C0004"],"Vendor":null},{"Tag":"https://www.googletagmanager.com/gtm.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://www.google-analytics.com/analytics.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://masdpstatic.azureedge.net/essity/1.85.0-release.2/js/app.js","CategoryId":["C0003","C0004"],"Vendor":null},{"Tag":"https://www.linkedin.com/px/li_sync","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://www.googleoptimize.com/optimize.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://masdpstatic.azureedge.net/essity/1.88.0-release.1/js/app.js","CategoryId":["C0003","C0004"],"Vendor":null},{"Tag":"https://masdpstatic.azureedge.net/essity/1.86.0-release.2/js/app.js","CategoryId":["C0003","C0004"],"Vendor":null},{"Tag":"https://px.ads.linkedin.com/collect","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://static.ads-twitter.com/uwt.js","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://static.ads-twitter.com","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://connect.facebook.net/signals/config/252916668616627","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://www.youtube.com/iframe_api","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://connect.facebook.net/signals/config/404682490064138","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://snap.licdn.com/li.lms-analytics/insight.min.js","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://analytics.twitter.com/i/adsct","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://s7.addthis.com/js/300/addthis_widget.js#pubid\x3dra-5c385ed8e96854b3","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://snap.licdn.com/li.lms-analytics/insight.beta.min.js","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://licensebuttons.net/l/by-nc-nd/4.0/88x31.png","CategoryId":["C0003"],"Vendor":null},{"Tag":"https://t.co/i/adsct","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://www.googletagmanager.com/gtag/js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://www.facebook.com/tr/","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://reports.essity.com/2017/annual-and-sustainability-report/layout/js/jquery.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://connect.facebook.net/signals/config/1221985607932630","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://s7.addthis.com/static/layers.fa6cd1947ce26e890d3d.js","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://reports.essity.com/2018/annual-and-sustainability-report/layout/js/jquery.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://i.creativecommons.org/l/by-nc-nd/4.0/88x31.png","CategoryId
Source: chromecache_286.1.dr	String found in binary or memory: a.getAttribute("type")&&e.preventDefault();a.removeEventListener("beforescriptexecute",c)}))}function A(a){var c=a.src\|\|"",b=q(c);(b.categoryIds.length\|\|b.vsCatIds.length)&&(x(b.categoryIds,a,b.vsCatIds),m(b.categoryIds,b.vsCatIds)\|\|(a.removeAttribute("src"),a.setAttribute("data-src",c)))}var u=JSON.parse('[{"Tag":"https://masdpstatic.azureedge.net/essity/1.69.0-release.9/js/app.js","CategoryId":["C0003","C0004"],"Vendor":null},{"Tag":"https://www.googletagmanager.com/gtm.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://www.google-analytics.com/analytics.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://masdpstatic.azureedge.net/essity/1.85.0-release.2/js/app.js","CategoryId":["C0003","C0004"],"Vendor":null},{"Tag":"https://www.linkedin.com/px/li_sync","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://www.googleoptimize.com/optimize.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://masdpstatic.azureedge.net/essity/1.88.0-release.1/js/app.js","CategoryId":["C0003","C0004"],"Vendor":null},{"Tag":"https://masdpstatic.azureedge.net/essity/1.86.0-release.2/js/app.js","CategoryId":["C0003","C0004"],"Vendor":null},{"Tag":"https://px.ads.linkedin.com/collect","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://static.ads-twitter.com/uwt.js","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://static.ads-twitter.com","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://connect.facebook.net/signals/config/252916668616627","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://www.youtube.com/iframe_api","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://connect.facebook.net/signals/config/404682490064138","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://snap.licdn.com/li.lms-analytics/insight.min.js","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://analytics.twitter.com/i/adsct","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://s7.addthis.com/js/300/addthis_widget.js#pubid\x3dra-5c385ed8e96854b3","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://snap.licdn.com/li.lms-analytics/insight.beta.min.js","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://licensebuttons.net/l/by-nc-nd/4.0/88x31.png","CategoryId":["C0003"],"Vendor":null},{"Tag":"https://t.co/i/adsct","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://www.googletagmanager.com/gtag/js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://www.facebook.com/tr/","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://reports.essity.com/2017/annual-and-sustainability-report/layout/js/jquery.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://connect.facebook.net/signals/config/1221985607932630","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://s7.addthis.com/static/layers.fa6cd1947ce26e890d3d.js","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://reports.essity.com/2018/annual-and-sustainability-report/layout/js/jquery.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://i.creativecommons.org/l/by-nc-nd/4.0/88x31.png","CategoryId
Source: chromecache_332.1.dr	String found in binary or memory: b,"vert.pix");break;case "PERCENT":SA(d.verticalThresholds,b,"vert.pct")}wx("sdl","init",!1)?wx("sdl","pending",!1)\|\|H(function(){return TA()}):(ux("sdl","init",!0),ux("sdl","pending",!0),H(function(){TA();if(UA()){var e=VA();rc(z,"scroll",e);rc(z,"resize",e)}else ux("sdl","init",!1)}));return b}ZA.I="internal.enableAutoEventOnScroll";var cc=ea(["data-gtm-yt-inspected-"]),$A=["www.youtube.com","www.youtube-nocookie.com"],aB,bB=!1; equals www.youtube.com (Youtube)
Source: chromecache_298.1.dr	String found in binary or memory: const YT_VIDEO_IFRAME_API = 'https://www.youtube.com/iframe_api'; equals www.youtube.com (Youtube)
Source: chromecache_229.1.dr	String found in binary or memory: function ZA(a,b){var c=this;return b}ZA.I="internal.enableAutoEventOnScroll";var cc=ea(["data-gtm-yt-inspected-"]),$A=["www.youtube.com","www.youtube-nocookie.com"],aB,bB=!1; equals www.youtube.com (Youtube)

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: privateSet-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponlyStrict-Transport-Security: max-age=31536000; includeSubDomainsP3P: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: a03e8668-8df2-4ac3-9b70-596b6f810b00x-ms-ests-server: 2.1.15811.7 - WEULR1 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+ams2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}Referrer-Policy: strict-origin-when-cross-originDate: Fri, 21 Jul 2023 06:21:25 GMTConnection: closeContent-Length: 0Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: privateSet-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponlyStrict-Transport-Security: max-age=31536000; includeSubDomainsP3P: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 8c73acf3-0846-430e-9045-9c0c31a90700x-ms-ests-server: 2.1.15811.7 - SEC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+ams2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}Referrer-Policy: strict-origin-when-cross-originDate: Fri, 21 Jul 2023 06:21:25 GMTConnection: closeContent-Length: 0Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';

Source: chromecache_288.1.dr	String found in binary or memory: http://aka.ms/ssprsetup
Source: chromecache_256.1.dr	String found in binary or memory: http://api.jqueryui.com/category/theming/
Source: chromecache_256.1.dr	String found in binary or memory: http://api.jqueryui.com/datepicker/#theming
Source: chromecache_222.1.dr	String found in binary or memory: http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_264.1.dr	String found in binary or memory: http://blog.alexmaccaw.com/css-transitions
Source: chromecache_222.1.dr	String found in binary or memory: http://bugs.jquery.com/ticket/12282#comment:15
Source: chromecache_222.1.dr	String found in binary or memory: http://bugs.jquery.com/ticket/12359
Source: chromecache_222.1.dr	String found in binary or memory: http://bugs.jquery.com/ticket/13378
Source: chromecache_355.1.dr	String found in binary or memory: http://commercialtype.com/licenseGraphik
Source: chromecache_212.1.dr	String found in binary or memory: http://commercialtype.com/licenseGraphikMedium
Source: chromecache_328.1.dr	String found in binary or memory: http://commercialtype.com/licenseGraphikSemibold
Source: chromecache_355.1.dr	String found in binary or memory: http://commercialtype.comhttp://christianschwartz.comCommercial
Source: chromecache_222.1.dr	String found in binary or memory: http://dev.w3.org/csswg/cssom/#resolved-values
Source: chromecache_222.1.dr	String found in binary or memory: http://erik.eae.net/archives/2007/07/27/18.54.15/#comment-102291
Source: chromecache_222.1.dr	String found in binary or memory: http://fluidproject.org/blog/2008/01/09/getting-setting-and-removing-tabindex-values-with-javascript
Source: chromecache_270.1.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_222.1.dr	String found in binary or memory: http://helpful.knobs-dials.com/index.php/Component_returned_failure_code:_0x80040111_(NS_ERROR_NOT_A
Source: chromecache_222.1.dr	String found in binary or memory: http://javascript.nwbox.com/IEContentLoaded/
Source: chromecache_222.1.dr	String found in binary or memory: http://jquery.com/
Source: chromecache_256.1.dr, chromecache_222.1.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_256.1.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_256.1.dr	String found in binary or memory: http://jqueryui.com/themeroller/
Source: chromecache_222.1.dr	String found in binary or memory: http://json.org/json2.js
Source: chromecache_222.1.dr	String found in binary or memory: http://jsperf.com/getall-vs-sizzle/2
Source: chromecache_242.1.dr	String found in binary or memory: http://modernjavascript.blogspot.de/2013/08/building-better-debounce.html
Source: chromecache_314.1.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: chromecache_222.1.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_264.1.dr	String found in binary or memory: http://twbs.github.com/bootstrap/javascript.html#affix
Source: chromecache_264.1.dr	String found in binary or memory: http://twbs.github.com/bootstrap/javascript.html#alerts
Source: chromecache_264.1.dr	String found in binary or memory: http://twbs.github.com/bootstrap/javascript.html#buttons
Source: chromecache_264.1.dr	String found in binary or memory: http://twbs.github.com/bootstrap/javascript.html#carousel
Source: chromecache_264.1.dr	String found in binary or memory: http://twbs.github.com/bootstrap/javascript.html#collapse
Source: chromecache_264.1.dr	String found in binary or memory: http://twbs.github.com/bootstrap/javascript.html#dropdowns
Source: chromecache_264.1.dr	String found in binary or memory: http://twbs.github.com/bootstrap/javascript.html#modals
Source: chromecache_264.1.dr	String found in binary or memory: http://twbs.github.com/bootstrap/javascript.html#popovers
Source: chromecache_264.1.dr	String found in binary or memory: http://twbs.github.com/bootstrap/javascript.html#scrollspy
Source: chromecache_264.1.dr	String found in binary or memory: http://twbs.github.com/bootstrap/javascript.html#tabs
Source: chromecache_264.1.dr	String found in binary or memory: http://twbs.github.com/bootstrap/javascript.html#tooltip
Source: chromecache_264.1.dr	String found in binary or memory: http://twbs.github.com/bootstrap/javascript.html#transitions
Source: chromecache_222.1.dr	String found in binary or memory: http://weblogs.java.net/blog/driscoll/archive/2009/09/08/eval-javascript-global-context
Source: chromecache_264.1.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_320.1.dr, chromecache_325.1.dr	String found in binary or memory: http://www.bohemiancoding.com/sketch
Source: chromecache_311.1.dr	String found in binary or memory: http://www.essity.com/
Source: chromecache_264.1.dr	String found in binary or memory: http://www.modernizr.com/)
Source: chromecache_314.1.dr	String found in binary or memory: http://www.modernizr.com/license/
Source: chromecache_311.1.dr	String found in binary or memory: http://www.torkglobal.com/
Source: chromecache_347.1.dr, chromecache_294.1.dr	String found in binary or memory: http://www.videolan.oG
Source: chromecache_288.1.dr	String found in binary or memory: https://account.activedirectory.windowsazure.com/ChangePassword.aspx?BrandContextID=O365&ruO365
Source: chromecache_288.1.dr	String found in binary or memory: https://aka.ms/mfasetup
Source: chromecache_288.1.dr	String found in binary or memory: https://aka.ms/sspr
Source: chromecache_260.1.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_286.1.dr	String found in binary or memory: https://analytics.twitter.com/i/adsct
Source: chromecache_351.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=378607
Source: chromecache_351.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=449857
Source: chromecache_351.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=470258
Source: chromecache_351.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=589347
Source: chromecache_242.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=7731
Source: chromecache_351.1.dr	String found in binary or memory: https://bugs.jquery.com/ticket/12359
Source: chromecache_351.1.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13378
Source: chromecache_351.1.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13393
Source: chromecache_351.1.dr	String found in binary or memory: https://bugs.jquery.com/ticket/4833
Source: chromecache_351.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_351.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=137337
Source: chromecache_351.1.dr, chromecache_222.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_222.1.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=491668
Source: chromecache_222.1.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=649285
Source: chromecache_351.1.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_229.1.dr, chromecache_261.1.dr, chromecache_332.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_311.1.dr	String found in binary or memory: https://cdn-ukwest.onetrust.com/consent/243652f0-45aa-4193-a147-291d1592994a/OtAutoBlock.js
Source: chromecache_311.1.dr	String found in binary or memory: https://cdn-ukwest.onetrust.com/scripttemplates/otSDKStub.js
Source: chromecache_252.1.dr, chromecache_302.1.dr	String found in binary or memory: https://cdn-ukwest.onetrust.com/vendorlist/googleData.json
Source: chromecache_252.1.dr, chromecache_302.1.dr	String found in binary or memory: https://cdn-ukwest.onetrust.com/vendorlist/iab2Data.json
Source: chromecache_252.1.dr, chromecache_302.1.dr	String found in binary or memory: https://cdn-ukwest.onetrust.com/vendorlist/iabData.json
Source: chromecache_311.1.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/select2
Source: chromecache_311.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
Source: chromecache_286.1.dr	String found in binary or memory: https://connect.facebook.net/signals/config/252916668616627
Source: chromecache_286.1.dr	String found in binary or memory: https://connect.facebook.net/signals/config/404682490064138
Source: chromecache_252.1.dr, chromecache_302.1.dr	String found in binary or memory: https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck
Source: chromecache_316.1.dr	String found in binary or memory: https://crimsonfrenchfoods.cloud?sign=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2Nya
Source: chromecache_318.1.dr	String found in binary or memory: https://developer.jwplayer.com/jw-player/docs/developer-guide/
Source: chromecache_351.1.dr, chromecache_222.1.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_222.1.dr	String found in binary or memory: https://developer.mozilla.org/en/Security/CSP)
Source: chromecache_318.1.dr	String found in binary or memory: https://developers.google.com/tag-manager/devguide
Source: chromecache_351.1.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_351.1.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#resolved-values
Source: chromecache_311.1.dr	String found in binary or memory: https://embed-cdn.flockler.com/embed-v2.js
Source: chromecache_311.1.dr	String found in binary or memory: https://essity-images.essity.com/images-c5/169/201169/optimized-w1440_jpg/lotus-300x300.jpg?w=240&am
Source: chromecache_311.1.dr	String found in binary or memory: https://essity-images.essity.com/images-c5/175/201175/optimized-w1440_jpg/nosotras-300x300.jpg?w=240
Source: chromecache_311.1.dr	String found in binary or memory: https://essity-images.essity.com/images-c5/177/201177/optimized-w1440_jpg/libresse-300x300.jpg?w=240
Source: chromecache_311.1.dr	String found in binary or memory: https://essity-images.essity.com/images-c5/179/201179/optimized-w1440_jpg/saba-300x300.jpg?w=240&amp
Source: chromecache_311.1.dr	String found in binary or memory: https://essity-images.essity.com/images-c5/181/201181/optimized-w1440_jpg/tena-300x300.jpg?w=240&amp
Source: chromecache_311.1.dr	String found in binary or memory: https://essity-images.essity.com/images-c5/186/201186/optimized-w1440_jpg/leukoplast-300x300.jpg?w=2
Source: chromecache_311.1.dr	String found in binary or memory: https://essity-images.essity.com/images-c5/187/201187/optimized-w1440_jpg/jobst-300x300.jpg?w=240&am
Source: chromecache_311.1.dr	String found in binary or memory: https://essity-images.essity.com/images-c5/225/421225/optimized-w1440_jpg/ba-webcasts-cover.jpg
Source: chromecache_311.1.dr	String found in binary or memory: https://essity-images.essity.com/images-c5/225/421225/optimized-w1440_jpg/ba-webcasts-cover.jpg?w=10
Source: chromecache_311.1.dr	String found in binary or memory: https://essity-images.essity.com/images-c5/225/421225/optimized-w1440_jpg/ba-webcasts-cover.jpg?w=11
Source: chromecache_311.1.dr	String found in binary or memory: https://essity-images.essity.com/images-c5/225/421225/optimized-w1440_jpg/ba-webcasts-cover.jpg?w=12
Source: chromecache_311.1.dr	String found in binary or memory: https://essity-images.essity.com/images-c5/225/421225/optimized-w1440_jpg/ba-webcasts-cover.jpg?w=13
Source: chromecache_311.1.dr	String found in binary or memory: https://essity-images.essity.com/images-c5/225/421225/optimized-w1440_jpg/ba-webcasts-cover.jpg?w=16
Source: chromecache_311.1.dr	String found in binary or memory: https://essity-images.essity.com/images-c5/225/421225/optimized-w1440_jpg/ba-webcasts-cover.jpg?w=24
Source: chromecache_311.1.dr	String found in binary or memory: https://essity-images.essity.com/images-c5/225/421225/optimized-w1440_jpg/ba-webcasts-cover.jpg?w=35
Source: chromecache_311.1.dr	String found in binary or memory: https://essity-images.essity.com/images-c5/225/421225/optimized-w1440_jpg/ba-webcasts-cover.jpg?w=40
Source: chromecache_311.1.dr	String found in binary or memory: https://essity-images.essity.com/images-c5/225/421225/optimized-w1440_jpg/ba-webcasts-cover.jpg?w=48
Source: chromecache_311.1.dr	String found in binary or memory: https://essity-images.essity.com/images-c5/225/421225/optimized-w1440_jpg/ba-webcasts-cover.jpg?w=62
Source: chromecache_311.1.dr	String found in binary or memory: https://essity-images.essity.com/images-c5/225/421225/optimized-w1440_jpg/ba-webcasts-cover.jpg?w=64
Source: chromecache_311.1.dr	String found in binary or memory: https://essity-images.essity.com/images-c5/225/421225/optimized-w1440_jpg/ba-webcasts-cover.jpg?w=69
Source: chromecache_311.1.dr	String found in binary or memory: https://essity-images.essity.com/images-c5/225/421225/optimized-w1440_jpg/ba-webcasts-cover.jpg?w=72
Source: chromecache_311.1.dr	String found in binary or memory: https://essity-images.essity.com/images-c5/225/421225/optimized-w1440_jpg/ba-webcasts-cover.jpg?w=83
Source: chromecache_311.1.dr	String found in binary or memory: https://essity-images.essity.com/images-c5/225/421225/optimized-w1440_jpg/ba-webcasts-cover.jpg?w=96
Source: chromecache_311.1.dr	String found in binary or memory: https://essity-images.essity.com/images-c5/267/201267/optimized-w1440_jpg/tork-300x300.jpg?w=240&amp
Source: chromecache_311.1.dr	String found in binary or memory: https://essity-images.essity.com/images-c5/268/201268/optimized-w1440_jpg/libero-300x300.jpg?w=240&a
Source: chromecache_311.1.dr	String found in binary or memory: https://essity-images.essity.com/images-c5/269/201269/optimized-w1440_jpg/vinda-300x300.jpg?w=240&am
Source: chromecache_311.1.dr	String found in binary or memory: https://essity-images.essity.com/images-c5/270/201270/optimized-w1440_jpg/zewa-300x300.jpg?w=240&amp
Source: chromecache_311.1.dr	String found in binary or memory: https://essity-images.essity.com/images-c5/328/435328/original/essity-omslag-1920x1080-en.jpg
Source: chromecache_311.1.dr	String found in binary or memory: https://essity-images.essity.com/images-c5/361/443361/optimized-w1440_jpg/womenjogging11920x1080.jpg
Source: chromecache_311.1.dr	String found in binary or memory: https://essity-images.essity.com/images-c5/449/368449/optimized-w1440_jpg/landscape-of-a-large-hay-f
Source: chromecache_311.1.dr	String found in binary or memory: https://essity-images.essity.com/images-c5/55/208055/optimized-w1440_jpg/tempo.jpg?w=240&h=10000
Source: chromecache_311.1.dr	String found in binary or memory: https://essity-images.essity.com/images-c5/552/445552/optimized-w1440_jpg/tork-easycube-cleaner-tabl
Source: chromecache_311.1.dr	String found in binary or memory: https://essity-images.essity.com/images-c5/559/328559/optimized-w1440_jpg/2020-asr-homebanner-2880x1
Source: chromecache_311.1.dr	String found in binary or memory: https://essity-images.essity.com/images-c5/811/375811/optimized-w1440_jpg/manandwomanlaughing-1920x1
Source: chromecache_311.1.dr	String found in binary or memory: https://essity-images.essity.com/images-c5/881/165881/optimized-AzureJPG4K/2017-q-1-report-1440w.jpg
Source: chromecache_311.1.dr	String found in binary or memory: https://essity-images.essity.com/images-c5/882/165882/original/2017-q-2-report-1440w.jpg
Source: chromecache_311.1.dr	String found in binary or memory: https://essity-images.essity.com/images-c5/964/434964/optimized-w1440_jpg/asr2022-cover-tena-silloue
Source: chromecache_215.1.dr	String found in binary or memory: https://flockler.com
Source: chromecache_234.1.dr	String found in binary or memory: https://framework7.io/docs/dom7.html
Source: chromecache_252.1.dr, chromecache_302.1.dr	String found in binary or memory: https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
Source: chromecache_314.1.dr	String found in binary or memory: https://github.com/dperini/css-support/blob/master/LICENSE
Source: chromecache_270.1.dr	String found in binary or memory: https://github.com/h5bp/html5-boilerplate/blob/master/src/css/main.css
Source: chromecache_351.1.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_222.1.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/764
Source: chromecache_351.1.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_351.1.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_314.1.dr	String found in binary or memory: https://github.com/kriskowal/es5-shim/blob/master/es5-shim.js
Source: chromecache_314.1.dr	String found in binary or memory: https://github.com/kriskowal/es5-shim/blob/master/es5-shim.js;
Source: chromecache_229.1.dr	String found in binary or memory: https://github.com/krux/postscribe/blob/master/LICENSE.
Source: chromecache_234.1.dr	String found in binary or memory: https://github.com/nolimits4web/ssr-window
Source: chromecache_304.1.dr	String found in binary or memory: https://github.com/select2/select2/blob/master/LICENSE.md
Source: chromecache_270.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_215.1.dr	String found in binary or memory: https://github.com/uuidjs/uuid#getrandomvalues-not-supported
Source: chromecache_351.1.dr	String found in binary or memory: https://github.com/whatwg/html/issues/2369
Source: chromecache_351.1.dr	String found in binary or memory: https://html.spec.whatwg.org/#nonce-attributes
Source: chromecache_351.1.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_351.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#category-listed
Source: chromecache_351.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
Source: chromecache_351.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
Source: chromecache_351.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
Source: chromecache_351.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
Source: chromecache_351.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
Source: chromecache_351.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#tag-name-state
Source: chromecache_351.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#tag-open-state
Source: chromecache_351.1.dr	String found in binary or memory: https://infra.spec.whatwg.org/#ascii-whitespace
Source: chromecache_351.1.dr	String found in binary or memory: https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace
Source: chromecache_351.1.dr	String found in binary or memory: https://js.foundation/
Source: chromecache_351.1.dr	String found in binary or memory: https://jsperf.com/getall-vs-sizzle/2
Source: chromecache_351.1.dr	String found in binary or memory: https://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_286.1.dr	String found in binary or memory: https://licensebuttons.net/l/by-nc-nd/4.0/88x31.png
Source: chromecache_311.1.dr	String found in binary or memory: https://masdpanalytics.azureedge.net/main-datalayer.js
Source: chromecache_286.1.dr	String found in binary or memory: https://masdpstatic.azureedge.net/essity/1.69.0-release.9/js/app.js
Source: chromecache_286.1.dr	String found in binary or memory: https://masdpstatic.azureedge.net/essity/1.85.0-release.2/js/app.js
Source: chromecache_286.1.dr	String found in binary or memory: https://masdpstatic.azureedge.net/essity/1.86.0-release.2/js/app.js
Source: chromecache_286.1.dr	String found in binary or memory: https://masdpstatic.azureedge.net/essity/1.88.0-release.1/js/app.js
Source: chromecache_311.1.dr	String found in binary or memory: https://masdpstatic.azureedge.net/essity/1.99.1-hotfix.1/css/app.css
Source: chromecache_311.1.dr	String found in binary or memory: https://masdpstatic.azureedge.net/essity/1.99.1-hotfix.1/img/essity-logo-white.svg
Source: chromecache_311.1.dr	String found in binary or memory: https://masdpstatic.azureedge.net/essity/1.99.1-hotfix.1/img/favicon.png
Source: chromecache_311.1.dr	String found in binary or memory: https://masdpstatic.azureedge.net/essity/1.99.1-hotfix.1/img/flags/de.svg
Source: chromecache_311.1.dr	String found in binary or memory: https://masdpstatic.azureedge.net/essity/1.99.1-hotfix.1/img/flags/es.svg
Source: chromecache_311.1.dr	String found in binary or memory: https://masdpstatic.azureedge.net/essity/1.99.1-hotfix.1/img/flags/fr.svg
Source: chromecache_311.1.dr	String found in binary or memory: https://masdpstatic.azureedge.net/essity/1.99.1-hotfix.1/img/flags/it.svg
Source: chromecache_311.1.dr	String found in binary or memory: https://masdpstatic.azureedge.net/essity/1.99.1-hotfix.1/img/flags/mx.svg
Source: chromecache_311.1.dr	String found in binary or memory: https://masdpstatic.azureedge.net/essity/1.99.1-hotfix.1/img/flags/nl.svg
Source: chromecache_311.1.dr	String found in binary or memory: https://masdpstatic.azureedge.net/essity/1.99.1-hotfix.1/img/flags/se.svg
Source: chromecache_311.1.dr	String found in binary or memory: https://masdpstatic.azureedge.net/essity/1.99.1-hotfix.1/img/flags/us.svg
Source: chromecache_311.1.dr	String found in binary or memory: https://masdpstatic.azureedge.net/essity/1.99.1-hotfix.1/img/icons/stock-arrow-down.svg
Source: chromecache_311.1.dr	String found in binary or memory: https://masdpstatic.azureedge.net/essity/1.99.1-hotfix.1/img/logo-essity.svg
Source: chromecache_311.1.dr	String found in binary or memory: https://masdpstatic.azureedge.net/essity/1.99.1-hotfix.1/js/main.js
Source: chromecache_311.1.dr	String found in binary or memory: https://masdpstatic.azureedge.net/essity/Essity_Annual%20and%20Sustainability%20Report%202022_0302.p
Source: chromecache_311.1.dr	String found in binary or memory: https://mediaessityprod.streaming.mediaservices.windows.net/079e2d1d-74f9-45c9-a84f-f38591cb11ad/329
Source: chromecache_311.1.dr	String found in binary or memory: https://mediaessityprod.streaming.mediaservices.windows.net/6a3934a8-d24b-41be-b2eb-ade33fbd4eb8/329
Source: chromecache_311.1.dr	String found in binary or memory: https://oss.maxcdn.com/html5shiv/3.7.3/html5shiv.min.js
Source: chromecache_311.1.dr	String found in binary or memory: https://oss.maxcdn.com/respond/1.4.2/respond.min.js
Source: chromecache_229.1.dr, chromecache_261.1.dr, chromecache_332.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_215.1.dr	String found in binary or memory: https://plugins.flockler.com/embed/$
Source: chromecache_351.1.dr	String found in binary or memory: https://promisesaplus.com/#point-48
Source: chromecache_351.1.dr	String found in binary or memory: https://promisesaplus.com/#point-54
Source: chromecache_351.1.dr	String found in binary or memory: https://promisesaplus.com/#point-57
Source: chromecache_351.1.dr	String found in binary or memory: https://promisesaplus.com/#point-59
Source: chromecache_351.1.dr	String found in binary or memory: https://promisesaplus.com/#point-61
Source: chromecache_351.1.dr	String found in binary or memory: https://promisesaplus.com/#point-64
Source: chromecache_351.1.dr	String found in binary or memory: https://promisesaplus.com/#point-75
Source: chromecache_286.1.dr	String found in binary or memory: https://px.ads.linkedin.com/collect
Source: chromecache_286.1.dr	String found in binary or memory: https://s7.addthis.com/js/300/addthis_widget.js#pubid
Source: chromecache_351.1.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_330.1.dr, chromecache_286.1.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.beta.min.js
Source: chromecache_286.1.dr, chromecache_229.1.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_330.1.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.old.min.js
Source: chromecache_318.1.dr	String found in binary or memory: https://ssl.p.jwpcdn.com/player/v/
Source: chromecache_334.1.dr, chromecache_318.1.dr, chromecache_265.1.dr	String found in binary or memory: https://ssl.p.jwpcdn.com/player/v/8.18.3/notice.txt
Source: chromecache_234.1.dr	String found in binary or memory: https://stackoverflow.com/questions/54520554/custom-element-getrootnode-closest-function-crossing-mu
Source: chromecache_286.1.dr	String found in binary or memory: https://static.ads-twitter.com
Source: chromecache_286.1.dr	String found in binary or memory: https://static.ads-twitter.com/uwt.js
Source: chromecache_332.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_332.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_260.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_234.1.dr	String found in binary or memory: https://swiperjs.com
Source: chromecache_286.1.dr	String found in binary or memory: https://t.co/i/adsct
Source: chromecache_260.1.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_229.1.dr, chromecache_261.1.dr, chromecache_332.1.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_311.1.dr	String found in binary or memory: https://twitter.com/essity
Source: chromecache_226.1.dr	String found in binary or memory: https://vanillajstoolkit.com/reference/selectors/element-matches/
Source: chromecache_311.1.dr	String found in binary or memory: https://www.essity.com
Source: chromecache_311.1.dr	String found in binary or memory: https://www.essity.com/innovation-at-essity/
Source: chromecache_245.1.dr, chromecache_346.1.dr	String found in binary or memory: https://www.essity.com/terms-and-conditions/terms-and-conditions/#UseOfCookies
Source: chromecache_311.1.dr	String found in binary or memory: https://www.essity.de
Source: chromecache_311.1.dr	String found in binary or memory: https://www.essity.es/
Source: chromecache_311.1.dr	String found in binary or memory: https://www.essity.fr
Source: chromecache_311.1.dr	String found in binary or memory: https://www.essity.it/
Source: chromecache_311.1.dr	String found in binary or memory: https://www.essity.mx
Source: chromecache_311.1.dr	String found in binary or memory: https://www.essity.nl
Source: chromecache_311.1.dr	String found in binary or memory: https://www.essity.se
Source: chromecache_311.1.dr	String found in binary or memory: https://www.essityusa.com
Source: chromecache_286.1.dr, chromecache_229.1.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_260.1.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_260.1.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_261.1.dr	String found in binary or memory: https://www.google-analytics.com/gtm/optimize-dyn.js?id=OPT-PJMNWBW
Source: chromecache_229.1.dr	String found in binary or memory: https://www.google-analytics.com/gtm/optimize.js
Source: chromecache_260.1.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_260.1.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_351.1.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?hl=
Source: chromecache_286.1.dr, chromecache_229.1.dr	String found in binary or memory: https://www.googleoptimize.com/optimize.js
Source: chromecache_229.1.dr, chromecache_261.1.dr, chromecache_332.1.dr	String found in binary or memory: https://www.googletagmanager.com/a?id=
Source: chromecache_286.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js
Source: chromecache_260.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_286.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js
Source: chromecache_311.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_311.1.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-TH9F6KQ
Source: chromecache_311.1.dr	String found in binary or memory: https://www.instagram.com/Essitycareers/
Source: chromecache_334.1.dr, chromecache_318.1.dr, chromecache_265.1.dr	String found in binary or memory: https://www.jwplayer.com/tos/
Source: chromecache_311.1.dr	String found in binary or memory: https://www.linkedin.com/company/16240930/
Source: chromecache_286.1.dr	String found in binary or memory: https://www.linkedin.com/px/li_sync
Source: chromecache_332.1.dr	String found in binary or memory: https://www.merchant-center-analytics.goog/mc/collect
Source: chromecache_311.1.dr	String found in binary or memory: https://www.tena.com/
Source: chromecache_311.1.dr	String found in binary or memory: https://www.youtube.com/channel/UCv5LMehTcMvdcUUpEVNTVGA
Source: chromecache_286.1.dr, chromecache_298.1.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+904; SOCS=CAISHAgCEhJnd3NfMjAyMjA4MDgtMF9SQzEaAmVuIAEaBgiAvOuXBg

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Essity Invoice 47926407 .HTML
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1792 --field-trial-handle=1808,i,10674562601973243761,4294456091636027661,131072 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3676 --field-trial-handle=1808,i,10674562601973243761,4294456091636027661,131072 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1792 --field-trial-handle=1808,i,10674562601973243761,4294456091636027661,131072 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3676 --field-trial-handle=1808,i,10674562601973243761,4294456091636027661,131072 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	2 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	4 Non-Application Layer Protocol	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	5 Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	3 Ingress Tool Transfer	SIM Card Swap		Carrier Billing Fraud

Source	Detection	Scanner	Label
https://swiperjs.com	0%	URL Reputation	safe
https://swiperjs.com	0%	URL Reputation	safe
https://www.essity.it/	0%	Avira URL Cloud	safe
https://crimsonfrenchfoods.cloud/?sign=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2NyaW1zb25mcmVuY2hmb29kcy5jbG91ZCIsImRvbWFpbiI6ImNyaW1zb25mcmVuY2hmb29kcy5jbG91ZCIsImtleSI6IjlnRHRBd2xtSVpDMCIsInFyYyI6InplbG1pcmEuc2VzdGlub3ZhQGVzc2l0eS5jb20iLCJpYXQiOjE2ODk5MjA0NzgsImV4cCI6MTY4OTkyMDU5OH0.Ld2o-93Q7ZokJ0eu6SSQiH_ZN3IF-6NFrew7uM4UJvc	0%	Avira URL Cloud	safe
https://promisesaplus.com/#point-59	0%	URL Reputation	safe
http://getbootstrap.com)	0%	Avira URL Cloud	safe
https://ssl.p.jwpcdn.com/player/v/	0%	Avira URL Cloud	safe
http://modernjavascript.blogspot.de/2013/08/building-better-debounce.html	0%	Avira URL Cloud	safe
https://licensebuttons.net/l/by-nc-nd/4.0/88x31.png	0%	Avira URL Cloud	safe
http://www.torkglobal.com/	0%	Avira URL Cloud	safe
https://www.google.co.uk/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-4Y7BKNV189&cid=832519195.1689952927&gtm=45je37j0&aip=1&z=1583750498	0%	Avira URL Cloud	safe
https://www.tena.com/	0%	Avira URL Cloud	safe
https://www.essity.se	0%	Avira URL Cloud	safe
https://ssl.p.jwpcdn.com/player/v/8.18.3/jwplayer.core.controls.js	0%	Avira URL Cloud	safe
https://ssl.p.jwpcdn.com/player/v/8.18.3/provider.hlsjs.js	0%	Avira URL Cloud	safe
https://www.essity.de	0%	Avira URL Cloud	safe
https://crimsonfrenchfoods.cloud/adfs/portal/logo/logo.png?id=4763FF523B7C10B9E6B3A54908F0E3460038413A696D6B1BC6D1BAD1BED7DDC5	0%	Avira URL Cloud	safe
https://xo8r4d29hgz.wearsomgmh.builders/?sign=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL3hvOHI0ZDI5aGd6LndlYXJzb21nbWguYnVpbGRlcnMiLCJkb21haW4iOiJ4bzhyNGQyOWhnei53ZWFyc29tZ21oLmJ1aWxkZXJzIiwia2V5IjoiZ0J6bVJvSldGQzkxIiwicXJjIjoiemVsbWlyYS5zZXN0aW5vdmFAZXNzaXR5LmNvbSIsImlhdCI6MTY4OTkyMDQ4NSwiZXhwIjoxNjg5OTIwNjA1fQ.sG4tGHzw8CYoTx371qiX1rDmJyXRPTofbb7MHSUxZ50	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
fastly-tls12-bam.nr-data.net	162.247.243.29	true	false	unknown
platform.twitter.map.fastly.net	199.232.16.157	true	false	unknown
belizocraftsltd.art	2.59.255.149	true	false	unknown
stats.g.doubleclick.net	108.177.127.154	true	false	high
scontent.xx.fbcdn.net	157.240.17.15	true	false	high
t.co	104.244.42.133	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
jwplayer-dualstack.map.fastly.net	151.101.2.114	true	false	unknown
www.google.com	172.217.168.4	true	false	high
star-mini.c10r.facebook.com	157.240.17.35	true	false	high
accounts.google.com	172.217.168.13	true	false	high
cdn-ukwest.onetrust.com	104.18.29.38	true	false	high
s.twitter.com	104.244.42.131	true	false	high
dhp6c9ul58mzq.cloudfront.net	65.9.95.93	true	false	high
region1.analytics.google.com	216.239.32.36	true	false	high
crimsonfrenchfoods.cloud	2.59.255.149	true	true	unknown
www.googleoptimize.com	172.217.168.14	true	false	unknown
xo8r4d29hgz.wearsomgmh.builders	2.59.255.149	true	false	unknown
corp.sts.essity.com	193.221.53.107	true	false	high
d1ni990a184w7d.cloudfront.net	65.9.95.108	true	false	high
www.google.co.uk	216.58.215.227	true	false	unknown
www.essity.com	52.142.123.60	true	false	high
clients.l.google.com	172.217.168.46	true	false	high
flockler.com	18.198.30.175	true	false	high
geolocation.onetrust.com	104.18.28.38	true	false	high
static.ads-twitter.com	unknown	unknown	false	unknown
cdn.jsdelivr.net	unknown	unknown	false	high
clients2.google.com	unknown	unknown	false	high
mediaessityprod.streaming.mediaservices.windows.net	unknown	unknown	false	high
cdn.linkedin.oribi.io	unknown	unknown	false	high
www.facebook.com	unknown	unknown	false	high
js-agent.newrelic.com	unknown	unknown	false	high
www.linkedin.com	unknown	unknown	false	high
password.essity.com	unknown	unknown	false	high
connect.facebook.net	unknown	unknown	false	high
px.ads.linkedin.com	unknown	unknown	false	high
bam.nr-data.net	unknown	unknown	false	unknown
ssl.p.jwpcdn.com	unknown	unknown	false	unknown
analytics.twitter.com	unknown	unknown	false	high
embed-cdn.flockler.com	unknown	unknown	false	high
snap.licdn.com	unknown	unknown	false	high
identity.nel.measure.office.net	unknown	unknown	false	high
fl-1.cdn.flockler.com	unknown	unknown	false	high
essity-images.essity.com	unknown	unknown	false	high

Name	Malicious	Antivirus Detection	Reputation
https://www.facebook.com/tr/?id=1221985607932630&ev=Microdata&dl=https%3A%2F%2Fwww.essity.com%2F&rl=&if=false&ts=1689952927933&cd[DataLayer]=%5B%5D&cd[Meta]=%7B%22title%22%3A%22Essity%20-%20A%20Leading%20Hygiene%20and%20Health%20Company%20%7C%20Global%20Corporate%22%2C%22meta%3Adescription%22%3A%22We%20develop%2C%20produce%20and%20sell%20products%20and%20solutions%20within%20the%20Business%20Areas%20Personal%20Care%2C%20Consumer%20Tissue%20and%20Professional%20Hygiene.%22%7D&cd[OpenGraph]=%7B%22og%3Atitle%22%3A%22Essity%20-%20A%20Leading%20Hygiene%20and%20Health%20Company%20%7C%20Global%20Corporate%22%2C%22og%3Adescription%22%3A%22We%20develop%2C%20produce%20and%20sell%20products%20and%20solutions%20within%20the%20Business%20Areas%20Personal%20Care%2C%20Consumer%20Tissue%20and%20Professional%20Hygiene.%22%2C%22og%3Aimage%22%3A%22https%3A%2F%2Fessity-images.essity.com%2Fimages-c5%2F559%2F328559%2Foptimized-w1440_jpg%2F2020-asr-homebanner-2880x1300.jpg%3Fw%3D1080%26h%3D100000%26imPolicy%3Ddynamic%22%7D&cd[Schema.org]=%5B%5D&cd[JSON-LD]=%5B%5D&sw=1280&sh=1024&v=next&r=stable&ec=2&o=30&fbp=fb.1.1689952927393.636126126&it=1689952926130&coo=false&es=automatic&tm=3&rqm=GET	false		high
https://crimsonfrenchfoods.cloud/?sign=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2NyaW1zb25mcmVuY2hmb29kcy5jbG91ZCIsImRvbWFpbiI6ImNyaW1zb25mcmVuY2hmb29kcy5jbG91ZCIsImtleSI6IjlnRHRBd2xtSVpDMCIsInFyYyI6InplbG1pcmEuc2VzdGlub3ZhQGVzc2l0eS5jb20iLCJpYXQiOjE2ODk5MjA0NzgsImV4cCI6MTY4OTkyMDU5OH0.Ld2o-93Q7ZokJ0eu6SSQiH_ZN3IF-6NFrew7uM4UJvc	false	Avira URL Cloud: safe	unknown
https://www.essity.com/assets/js/lazysizes.js	false		high
https://www.google.co.uk/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-4Y7BKNV189&cid=832519195.1689952927&gtm=45je37j0&aip=1&z=1583750498	false	Avira URL Cloud: safe	unknown
file:///C:/Users/user/Desktop/Essity%20Invoice%2047926407%20.HTML	true		low
https://embed-cdn.flockler.com/embed-v2.js	false		high
https://www.facebook.com/tr/?id=1221985607932630&ev=ViewContent&dl=https%3A%2F%2Fwww.essity.com%2F&rl=&if=false&ts=1689952927399&sw=1280&sh=1024&v=next&r=stable&ec=1&o=30&fbp=fb.1.1689952927393.636126126&cs_est=true&est_source=1268864926872153&it=1689952926130&coo=false&es=automatic&tm=3&rqm=GET	false		high
https://ssl.p.jwpcdn.com/player/v/8.18.3/jwplayer.core.controls.js	false	Avira URL Cloud: safe	unknown
https://corp.sts.essity.com/adfs/portal/logo/logo.png?id=4763FF523B7C10B9E6B3A54908F0E3460038413A696D6B1BC6D1BAD1BED7DDC5	false		high
https://www.essity.com/assets/js/5327.js	false		high
https://www.essity.com/assets/css/2369.app.css	false		high
https://cdn-ukwest.onetrust.com/logos/597906e5-2a6b-4651-8f18-c8c4df72850a/c38a2285-ffea-4c9c-8886-0736eb4f3cae/8df47db8-ddf8-4270-b38f-5fcf5b408002/Essity-logo-color.png	false		high
https://www.essity.com/assets/js/one-trust-cookies-youtube.js	false		high
https://cdn-ukwest.onetrust.com/consent/243652f0-45aa-4193-a147-291d1592994a/243652f0-45aa-4193-a147-291d1592994a.json	false		high
https://www.facebook.com/tr/?id=1221985607932630&ev=PageView&dl=https%3A%2F%2Fwww.essity.com%2F&rl=&if=false&ts=1689952927402&sw=1280&sh=1024&v=next&r=stable&ec=0&o=30&fbp=fb.1.1689952927393.636126126&cs_est=true&it=1689952926130&coo=false&rqm=GET	false		high
https://ssl.p.jwpcdn.com/player/v/8.18.3/provider.hlsjs.js	false	Avira URL Cloud: safe	unknown
https://www.essity.com/assets/js/carousel.js	false		high
https://cdn-ukwest.onetrust.com/scripttemplates/202304.1.0/assets/otFlat.json	false		high
https://cdn.linkedin.oribi.io/partner/1715802/domain/essity.com/token	false		high
https://www.essity.com/assets/js/navigation.js	false		high
https://crimsonfrenchfoods.cloud/adfs/portal/logo/logo.png?id=4763FF523B7C10B9E6B3A54908F0E3460038413A696D6B1BC6D1BAD1BED7DDC5	false	Avira URL Cloud: safe	unknown
https://cdn-ukwest.onetrust.com/consent/243652f0-45aa-4193-a147-291d1592994a/OtAutoBlock.js	false		high
https://www.essity.com/assets/js/video-player.js	false		high
https://xo8r4d29hgz.wearsomgmh.builders/?sign=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL3hvOHI0ZDI5aGd6LndlYXJzb21nbWguYnVpbGRlcnMiLCJkb21haW4iOiJ4bzhyNGQyOWhnei53ZWFyc29tZ21oLmJ1aWxkZXJzIiwia2V5IjoiZ0J6bVJvSldGQzkxIiwicXJjIjoiemVsbWlyYS5zZXN0aW5vdmFAZXNzaXR5LmNvbSIsImlhdCI6MTY4OTkyMDQ4NSwiZXhwIjoxNjg5OTIwNjA1fQ.sG4tGHzw8CYoTx371qiX1rDmJyXRPTofbb7MHSUxZ50	false	Avira URL Cloud: safe	unknown
https://cdn-ukwest.onetrust.com/scripttemplates/202304.1.0/assets/otCommonStyles.css	false		high
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard	false		high

Name	Source	Malicious	Antivirus Detection	Reputation
https://essity-images.essity.com/images-c5/269/201269/optimized-w1440_jpg/vinda-300x300.jpg?w=240&am	chromecache_311.1.dr	false		high
https://essity-images.essity.com/images-c5/270/201270/optimized-w1440_jpg/zewa-300x300.jpg?w=240&amp	chromecache_311.1.dr	false		high
https://stats.g.doubleclick.net/g/collect	chromecache_332.1.dr	false		high
https://account.activedirectory.windowsazure.com/ChangePassword.aspx?BrandContextID=O365&ruO365	chromecache_288.1.dr	false		high
https://essity-images.essity.com/images-c5/225/421225/optimized-w1440_jpg/ba-webcasts-cover.jpg?w=69	chromecache_311.1.dr	false		high
https://www.essity.it/	chromecache_311.1.dr	false	Avira URL Cloud: safe	unknown
https://essity-images.essity.com/images-c5/811/375811/optimized-w1440_jpg/manandwomanlaughing-1920x1	chromecache_311.1.dr	false		high
https://stackoverflow.com/questions/54520554/custom-element-getrootnode-closest-function-crossing-mu	chromecache_234.1.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_260.1.dr	false		high
https://oss.maxcdn.com/respond/1.4.2/respond.min.js	chromecache_311.1.dr	false		high
https://essity-images.essity.com/images-c5/225/421225/optimized-w1440_jpg/ba-webcasts-cover.jpg?w=64	chromecache_311.1.dr	false		high
https://github.com/select2/select2/blob/master/LICENSE.md	chromecache_304.1.dr	false		high
https://ssl.p.jwpcdn.com/player/v/	chromecache_318.1.dr	false	Avira URL Cloud: safe	unknown
https://essity-images.essity.com/images-c5/225/421225/optimized-w1440_jpg/ba-webcasts-cover.jpg?w=62	chromecache_311.1.dr	false		high
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	chromecache_351.1.dr	false		high
https://swiperjs.com	chromecache_234.1.dr	false	URL Reputation: safe URL Reputation: safe	unknown
https://essity-images.essity.com/images-c5/268/201268/optimized-w1440_jpg/libero-300x300.jpg?w=240&a	chromecache_311.1.dr	false		high
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	chromecache_351.1.dr	false		high
http://modernjavascript.blogspot.de/2013/08/building-better-debounce.html	chromecache_242.1.dr	false	Avira URL Cloud: safe	unknown
http://bugs.jquery.com/ticket/12282#comment:15	chromecache_222.1.dr	false		high
http://dev.w3.org/csswg/cssom/#resolved-values	chromecache_222.1.dr	false		high
http://www.essity.com/	chromecache_311.1.dr	false		high
https://licensebuttons.net/l/by-nc-nd/4.0/88x31.png	chromecache_286.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_351.1.dr	false		high
https://github.com/kriskowal/es5-shim/blob/master/es5-shim.js	chromecache_314.1.dr	false		high
http://getbootstrap.com)	chromecache_270.1.dr	false	Avira URL Cloud: safe	low
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	chromecache_351.1.dr	false		high
https://stats.g.doubleclick.net/j/collect	chromecache_260.1.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	chromecache_351.1.dr	false		high
http://www.torkglobal.com/	chromecache_311.1.dr	false	Avira URL Cloud: safe	unknown
https://essity-images.essity.com/images-c5/225/421225/optimized-w1440_jpg/ba-webcasts-cover.jpg?w=72	chromecache_311.1.dr	false		high
http://twbs.github.com/bootstrap/javascript.html#transitions	chromecache_264.1.dr	false		high
https://cdn-ukwest.onetrust.com/vendorlist/iabData.json	chromecache_252.1.dr, chromecache_302.1.dr	false		high
https://essity-images.essity.com/images-c5/328/435328/original/essity-omslag-1920x1080-en.jpg	chromecache_311.1.dr	false		high
http://bugs.jquery.com/ticket/12359	chromecache_222.1.dr	false		high
https://mediaessityprod.streaming.mediaservices.windows.net/6a3934a8-d24b-41be-b2eb-ade33fbd4eb8/329	chromecache_311.1.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=649285	chromecache_222.1.dr	false		high
http://www.modernizr.com/)	chromecache_264.1.dr	false		high
https://html.spec.whatwg.org/#nonce-attributes	chromecache_351.1.dr	false		high
https://www.tena.com/	chromecache_311.1.dr	false	Avira URL Cloud: safe	unknown
https://jsperf.com/getall-vs-sizzle/2	chromecache_351.1.dr	false		high
http://twbs.github.com/bootstrap/javascript.html#modals	chromecache_264.1.dr	false		high
https://essity-images.essity.com/images-c5/225/421225/optimized-w1440_jpg/ba-webcasts-cover.jpg?w=83	chromecache_311.1.dr	false		high
https://aka.ms/mfasetup	chromecache_288.1.dr	false		high
https://www.essity.se	chromecache_311.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_270.1.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_332.1.dr	false		high
http://twbs.github.com/bootstrap/javascript.html#carousel	chromecache_264.1.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=491668	chromecache_222.1.dr	false		high
https://bugs.jquery.com/ticket/4833	chromecache_351.1.dr	false		high
https://sizzlejs.com/	chromecache_351.1.dr	false		high
https://essity-images.essity.com/images-c5/225/421225/optimized-w1440_jpg/ba-webcasts-cover.jpg?w=96	chromecache_311.1.dr	false		high
http://twbs.github.com/bootstrap/javascript.html#affix	chromecache_264.1.dr	false		high
https://bugs.jquery.com/ticket/12359	chromecache_351.1.dr	false		high
https://www.essity.com/terms-and-conditions/terms-and-conditions/#UseOfCookies	chromecache_245.1.dr, chromecache_346.1.dr	false		high
https://essity-images.essity.com/images-c5/186/201186/optimized-w1440_jpg/leukoplast-300x300.jpg?w=2	chromecache_311.1.dr	false		high
http://jsperf.com/getall-vs-sizzle/2	chromecache_222.1.dr	false		high
https://essity-images.essity.com/images-c5/881/165881/optimized-AzureJPG4K/2017-q-1-report-1440w.jpg	chromecache_311.1.dr	false		high
https://plugins.flockler.com/embed/$	chromecache_215.1.dr	false		high
https://github.com/jquery/jquery/pull/557)	chromecache_351.1.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	chromecache_351.1.dr	false		high
https://cdn-ukwest.onetrust.com/vendorlist/iab2Data.json	chromecache_252.1.dr, chromecache_302.1.dr	false		high
https://infra.spec.whatwg.org/#ascii-whitespace	chromecache_351.1.dr	false		high
https://www.jwplayer.com/tos/	chromecache_334.1.dr, chromecache_318.1.dr, chromecache_265.1.dr	false		high
https://essity-images.essity.com/images-c5/449/368449/optimized-w1440_jpg/landscape-of-a-large-hay-f	chromecache_311.1.dr	false		high
https://essity-images.essity.com/images-c5/559/328559/optimized-w1440_jpg/2020-asr-homebanner-2880x1	chromecache_311.1.dr	false		high
https://www.essity.de	chromecache_311.1.dr	false	Avira URL Cloud: safe	unknown
http://twbs.github.com/bootstrap/javascript.html#alerts	chromecache_264.1.dr	false		high
https://developers.google.com/tag-manager/devguide	chromecache_318.1.dr	false		high
https://drafts.csswg.org/cssom/#resolved-values	chromecache_351.1.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	chromecache_351.1.dr	false		high
https://github.com/dperini/css-support/blob/master/LICENSE	chromecache_314.1.dr	false		high
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	chromecache_351.1.dr	false		high
https://promisesaplus.com/#point-59	chromecache_351.1.dr	false	URL Reputation: safe	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
199.232.16.157	platform.twitter.map.fastly.net	United States	54113	FASTLYUS	false
216.239.32.36	region1.analytics.google.com	United States	15169	GOOGLEUS	false
157.240.17.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
65.9.95.108	d1ni990a184w7d.cloudfront.net	United States	16509	AMAZON-02US	false
172.217.168.46	clients.l.google.com	United States	15169	GOOGLEUS	false
157.240.17.15	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
172.217.168.4	www.google.com	United States	15169	GOOGLEUS	false
65.9.95.93	dhp6c9ul58mzq.cloudfront.net	United States	16509	AMAZON-02US	false
2.59.255.149	belizocraftsltd.art	Germany	33657	CMCSUS	true
193.221.53.107	corp.sts.essity.com	Sweden	25252	VOLVOITSE	false
104.18.29.38	cdn-ukwest.onetrust.com	United States	13335	CLOUDFLARENETUS	false
108.177.127.154	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
216.58.215.227	www.google.co.uk	United States	15169	GOOGLEUS	false
52.142.123.60	www.essity.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.244.42.133	t.co	United States	13414	TWITTERUS	false
104.244.42.131	s.twitter.com	United States	13414	TWITTERUS	false
172.217.168.13	accounts.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.18.28.38	geolocation.onetrust.com	United States	13335	CLOUDFLARENETUS	false
18.198.30.175	flockler.com	United States	16509	AMAZON-02US	false
151.101.2.114	jwplayer-dualstack.map.fastly.net	United States	54113	FASTLYUS	false
162.247.243.29	fastly-tls12-bam.nr-data.net	United States	13335	CLOUDFLARENETUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Joe Sandbox Version:	38.0.0 Beryl
Analysis ID:	1277220
Start date and time:	2023-07-21 08:20:08 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 9m 53s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 104, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample file name:	Essity Invoice 47926407 .HTML
Detection:	MAL
Classification:	mal60.phis.winHTML@40/144@35/25
EGA Information:	Failed
HDC Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .HTML Browse: http://password.essity.com/ Browse: https://www.essity.com/

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
199.232.16.157	DOC1.doc	Get hash	malicious	Unknown	Browse
	https://a.sprig.com/RllIMTM0UHd0YWZPfnNpZDo5ZjJjYjVhMi0wMjAxLTRjNzgtYTgyYi1kMWRjNmUxOTE5NDE=	Get hash	malicious	HTMLPhisher	Browse
	https://a.sprig.com/RllIMTM0UHd0YWZPfnNpZDo5ZjJjYjVhMi0wMjAxLTRjNzgtYTgyYi1kMWRjNmUxOTE5NDE=	Get hash	malicious	HTMLPhisher	Browse
	https://a.sprig.com/RllIMTM0UHd0YWZPfnNpZDo5ZjJjYjVhMi0wMjAxLTRjNzgtYTgyYi1kMWRjNmUxOTE5NDE=	Get hash	malicious	HTMLPhisher	Browse
	https://ct.turing.com/?ti=XnKxebcpeDwvWdbRVlUADzrVRSEAbsLtZmQpeGyzdrlemfqvIS&rd=http%3A%2F%2Fhatbaemama.com/marvel/XnKxebcpeDwvWdbRVlUADzrVRSEAbsLtZmQpeGyzdrlemfqvIS/bW5ld3NvbWVAZ2NnYW1pbmcuY29t	Get hash	malicious	Unknown	Browse
	http://d1j36b15jieutsflw7ki1l2i.wegostudy.ca/cgi-sys/defaultwebpage.cgi	Get hash	malicious	Unknown	Browse
	https://r20.rs6.net/tn.jsp?f=001ABqPZsTgAd0QPuR2VS0E50OQeP9BZfdcJ2CViqeH5K9gFN_azpkgSbJrW1et6OXxNsodXqlnoxezHt-mSW3c1zxiIIbXLKzBHVJ0c8IguHCRsl7DZngEBcHslDAiYsxbwCoX1MTlkQr-daCgZ9lPQQ==&c=Cz4opkU5lt88c5sRY3GpePNOUli2ynysfjwVYIPvydnIq5UItp9Mpw==&ch=ujD1h0r-nWgmd-BWDTj2zak39QGK-CiUOk4fOrlcz2Z485cMSpF13g==&__=?i=g@biolegend.com	Get hash	malicious	Unknown	Browse
	https://app.demandgen.ptc.com/e/er?utm_campaign=Creo_Product%20Launch_E%2FD%2020.6%20test%20CASUAL_EM%201_FY23Q3_Reg_&utm_medium=email&utm_source=Eloqua&identifier=CPTCP000013166840&cl1=Creo_Product%20Launch_E%2FD%2020.6%20test%20CASUAL_EM%201_FY23Q3_Reg_&utm_content=Creo_Product%20Launch_E%2FD%2020.6%20test%20CASUAL_EM%201_FY23Q3_Reg_&s=2826&lid=33949&elqTrackId=924AD1A373967DF943DCDBEA82BFEE58&elq=09ebece834d7409b86a9e3b7afb9943e&elqaid=49780&elqat=1	Get hash	malicious	Phisher	Browse
	http://blog.coolibar.com	Get hash	malicious	Unknown	Browse
	https://ct.turing.com/?ti=80d755ebe88c2d0b5a3fea8b5a0d098df15d69737358e6e63d91ac7b806cae15168867e755bd597dc94fcbd3a48317774ada82b510d93a359319be156f67f248dc0c8dbe7559072c75413dc8d8a659ccdc0a77019d9353105df2431c1d814bfbbda3e5ca9cee5935ce6fba41caf7b357f2bfef19a0f50f5c277f9b41fd&rd=http%3A%2F%2Fexponent.co.zm/images/mentorship/js/expp/mymanatee.org/ZGFuaWVsLmdhcm5lckBteW1hbmF0ZWUub3Jn	Get hash	malicious	Unknown	Browse
	https://bs.serving-sys.com/Serving/adServer.bs?cn=brd&PluID=0&Pos=20&EyeblasterID=1086486580&clk=1&ctick=00484900&rtu=https://moderntimer.com/new/auth/sf_rand_string_lowercase6////bGljZW5zZS5ibXZAbWFpbmUuZ292%20bs.serving-sys.com	Get hash	malicious	Unknown	Browse
	https://czenyi.cn/	Get hash	malicious	Unknown	Browse
	https://fanlink.to	Get hash	malicious	Unknown	Browse
	https://www.google.com/amp/s/twincitieswebsitedesign.co%2ftask%2ftmp%2fdvdh1cp7%2fbWFyY2VsbG8uaWFjb25vQHBhcnRvdS5ubA==	Get hash	malicious	Unknown	Browse
	https://r20.rs6.net/tn.jsp?f=001u4BfJc3cZmuE8CSdaGLJE1Z3w2L3DO3UABYLi2iHESrK-MtP2oeorjpkf8dl7kiIzaa8ht-JeFG_2lt8T7sgSgxwDA2Wb_EjJEzSINY7ChyA63ieP1hhD2x9jOuhDGwFIMjukYapVIzKWmTDyO7cSw==&c=96PhPFgeS6tLjt4zRwtK_EbKpewKEwwfBb6h0NXho5zuZ20SDT4_3A==&ch=oRBm2QNpW4qpxUftbVEDR6gi6wEeUJsPR3TpUj-FNT7RozvqRCncgA==&__=?e=julie.jackson@nahan.com	Get hash	malicious	Unknown	Browse
	https://scanmail.trustwave.com/?c=22645&d=hf345JgHT0suwrpB1FY-5Idu_6GefXrUTjdNYfv7qQ&s=5&u=https%3a%2f%2fwww%2edropbox%2ecom%2fscl%2ffi%2fxx73rrgm8nbfex75gwxnu%2fSt%2e-Francis-Yacht-Club-has-shared-Document-for-your-review%2epaper%3fdl%3d0%26rlkey%3deuxcu6j7qc8hj8vmi7twq911d	Get hash	malicious	Unknown	Browse
	Remittacne.xlsx	Get hash	malicious	Unknown	Browse
	http://k1e4hf.vqyys.ellisfence.com	Get hash	malicious	Unknown	Browse
	http://news.web.sve.cc	Get hash	malicious	Unknown	Browse
	http://butterball.com.blazebakery.co/new/auth/sf_rand_string_lowercase6/YXdlYXZlckBidXR0ZXJiYWxsLmNvbQ==	Get hash	malicious	Unknown	Browse

IP
192.168.2.1
192.168.2.6

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
fastly-tls12-bam.nr-data.net	https://investordaily.us5.list-manage.com/track/click?u=b5150547bc871ea4865df93c3&id=bccc4d28c8&e=fd283ff2f0	Get hash	malicious	HTMLPhisher	Browse	162.247.243.29
	http://arstarnic.com	Get hash	malicious	Unknown	Browse	162.247.243.29
	http://inter-hess.com-records-employees.trailswag.ca/?email=YWxpYWFxaWVyYS5hem1hbkBoZXNzLmNvbQ==	Get hash	malicious	HTMLPhisher	Browse	162.247.243.29
	Essity Invoice 10903258 .HTML	Get hash	malicious	HTMLPhisher	Browse	162.247.243.29
	https://piccinlawfirm-my.sharepoint.com/:o:/g/personal/judi_ocalapersonalinjury_law/EjmaQ1mLCgFIm3mcI5q92zQB4EeZ8f2LiUyoBAP151caRA?rtime=JnOck9aG20g	Get hash	malicious	SharepointPhisher	Browse	162.247.243.29
	http://slickdeals.net/?adobeRef%5C=5647c16567561edbcf471616a0a047ff1656&sdtid%5C=47165647&sdpid%5C=1165616470&sdfid%5C=56&lno%5C=3&trd%5C=https%20go%20475a%20Sinead%20t%20%20&pv%5C=&au%5C=&u2%5C=ad01.Subscription/si2PnFe5addy9kFe5anFe5x0qFe5sbdy9i2PFe5	Get hash	malicious	Unknown	Browse	162.247.243.29
	https://ess.barracudanetworks.com/log/attachment/1688747536-110592-5420-6372-1-3aba4454209d06f4ad45d609924b8d72/SALES%20INVOICE%20%20372006.PDF	Get hash	malicious	HTMLPhisher	Browse	162.247.243.29
	https://eosmsoffice-my.sharepoint.com/:o:/g/personal/mona_titancorpus_com/ElzUPFtItmlIhBdELMjbQOEBX_ftCNEbxjl1mSO4e42K0g?e=5%3aUOCQuY&at=9	Get hash	malicious	SharepointPhisher	Browse	162.247.243.29
	https://2ernr.app.link/CY8XmUrT2Ab	Get hash	malicious	Unknown	Browse	162.247.243.29
	http://tripadvisor.no	Get hash	malicious	Unknown	Browse	162.247.243.29
	https://in.xero.com/k34DX3F1IJWpPZQRL3xv5WDWc6huYHlgDDvVuMdH?utm_source=email	Get hash	malicious	Unknown	Browse	162.247.243.29
	http://camcast.net	Get hash	malicious	Unknown	Browse	162.247.243.29
	https://johnsonsupply-my.sharepoint.com/:w:/p/kschneider/EVwXsYM_zkRAs5fkn3OTP30B9y9KbuLvtrD0KpGJB_SJ-Q?e=4%3aITx17W&at=9	Get hash	malicious	Unknown	Browse	162.247.243.29
	https://homemail021.systeme.io/onlidocfilesytrumngdssdsfgf	Get hash	malicious	Unknown	Browse	162.247.243.29
	http://www.bsc-icc.com	Get hash	malicious	Unknown	Browse	162.247.243.29
	https://in.xero.com/nZHFmpqNOlihygQczTQwi93w30JfVIpvjwIOobiD?utm_source=email	Get hash	malicious	Unknown	Browse	162.247.243.29
	https://johnsonsupply-my.sharepoint.com:443/:w:/p/kschneider/EVwXsYM_zkRAs5fkn3OTP30B9y9KbuLvtrD0KpGJB_SJ-Q?e=4%3aITx17W&at=9	Get hash	malicious	Unknown	Browse	162.247.243.29
	https://services.intralinks.com/AZ?w=14717155&br=1&p=3&urlId=1584287538	Get hash	malicious	Unknown	Browse	162.247.243.29
	http://woodsatwindrose.net	Get hash	malicious	Unknown	Browse	162.247.243.29
	http://jdem.cz/fg8555	Get hash	malicious	Unknown	Browse	162.247.243.29

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
FASTLYUS	https://tos8r4ig.page.link/2qXj	Get hash	malicious	Unknown	Browse	151.101.1.44
	https://view.monday.com/4844505619-4600dc57f3b84c106fdeece3b8fcce3f?r=use1	Get hash	malicious	HTMLPhisher	Browse	151.101.1.44
	https://tinyurl.com/5yhawsbt?login=dlinfo_opc@maryland.gov&request_type=cancel_request	Get hash	malicious	Unknown	Browse	151.101.1.140
	https://admissions.awkum.edu.pk/new/auth/rdohly/y29hdgluz3nadgvubmfudgnvlmnvbq==	Get hash	malicious	Unknown	Browse	151.101.193.229
	https://clickproxy.retailrocket.net/?url=https://6vWxRHjTH.alisd.sa.com/6vWxRHjTH/cmFuai5jcnlzdGFsQHNjcmlwcHNoZWFsdGgub3Jn	Get hash	malicious	Unknown	Browse	151.101.1.140
	https://clickproxy.retailrocket.net/?url=https://VFmNUdRM2.alisd.sa.com/VFmNUdRM2/c3J1ZmZpbmlAdmlsbGFnZWZhcm1zLmNvbQ==	Get hash	malicious	Unknown	Browse	151.101.1.140
	https://clickproxy.retailrocket.net/?url=https://VFmNUdRM2.alisd.sa.com/VFmNUdRM2/c3J1ZmZpbmlAdmlsbGFnZWZhcm1zLmNvbQ==	Get hash	malicious	Unknown	Browse	151.101.1.229
	3719FinxxxAdmin.htm	Get hash	malicious	Unknown	Browse	151.101.193.229
	DOC1.doc	Get hash	malicious	Unknown	Browse	199.232.16.157
	https://clickproxy.retailrocket.net/?url=https://VCLjW3ebC.makecannabisnotmatter.com/?register=d2lsbGlhbS5saW5kc2V5QHJlZGNyb3NzLm9yZw==	Get hash	malicious	Unknown	Browse	151.101.1.140
	https://htsps-github-io.translate.goog/unsubscribe/?uid=mmcburney@relias.com&_x_tr_sl=auto&_x_tr_tl=en&_x_tr_hl=en-US&_x_tr_pto=wapp	Get hash	malicious	HTMLPhisher	Browse	185.199.111.153
	https://clickproxy.retailrocket.net/?url=https%3a%2f%2fozbeh.onecleanerperu.com%2f%3fsicko=cm9kbmv5lnntaxroqgftzxjpy2fudg93zxiuy29t	Get hash	malicious	Unknown	Browse	151.101.1.140
	https://clickproxy.retailrocket.net/?url=https://z9KtRipkI.makecannabisnotmatter.com/?register=ZHRocmVzaGVyQGNzdS5vcmc=	Get hash	malicious	HTMLPhisher	Browse	151.101.65.229
	https://420aengine.com/new/auth/hXXVE7////bHdhbGxlckBwbGF0ZWF1dGVsLmNvbQ==	Get hash	malicious	Unknown	Browse	151.101.130.6
	https://420auser.com/new/auth/hXXVE7////bHdhbGxlckBwbGF0ZWF1dGVsLmNvbQ==	Get hash	malicious	Unknown	Browse	151.101.1.140
	https://420aengine.com/new/auth/hXXVE7////bHdhbGxlckBwbGF0ZWF1dGVsLmNvbQ==	Get hash	malicious	Unknown	Browse	151.101.1.229
	http://static1.squarespace.com/static/638cb83455f20147b91df430/t/63f763e44ddd6b5cd343eae4/1677157349953/GenderSmart-CEBrief+1-Nov22.pdf	Get hash	malicious	Unknown	Browse	151.101.0.238
	http://playfootball.games	Get hash	malicious	Unknown	Browse	151.101.65.44
	http://static1.squarespace.com/static/647b1c9f4c69101459245310/t/649c24ae7df6b17bba014dde/1687954607383/gajebawufi.pdf	Get hash	malicious	Unknown	Browse	151.101.0.238
	https://jmt.jobleads.com/api/v1/link?m=ec3729a3-154b-4313-bb7c-da24f5137229&u=20323520&t=id_64&l=https%3A%2F%2Fcpec-halliburton.com%2Fnew%2Fauth%2Fmvqkix%2F%2F%2F%2Fc3V6YW5uZS5ibGFpcy5hYm91QGFzc25hdC5xYy5jYQ==	Get hash	malicious	HTMLPhisher	Browse	151.101.1.229

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	M3U playlist, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1387
Entropy (8bit):	5.158184542310398
Encrypted:	false
SSDEEP:	24:9fFfkUYBXHrHcH+HntHAHOHdHD3p+6iPsZUWfF2LHnRHXxaf:9f17YB3ryUVGkFD5ZQsSWt2LnZhq
MD5:	C2F846316FB88372480611B1164ECACD
SHA1:	958756FC8DF6D21648A42C0C72219D0F8436DA49
SHA-256:	2D0E099D298574745FE2F6299B8D3CC51E0ADFCAEE8F629098451B6C9AD5E34D
SHA-512:	6DC9E5624F0D278F2EDF298CA3FC581FDBEB224842660F5F7169252744432156704DCBE4EC2BD40DB7790CE464A16CC633D0ADD4041BAFF86B8BAB3F0904B974
Malicious:	false
Reputation:	low
URL:	"https://mediaessityprod.streaming.mediaservices.windows.net/079e2d1d-74f9-45c9-a84f-f38591cb11ad/329108_ESSI_UUID.ism/QualityLevels(4260970)/Manifest(video,format=m3u8-aapl)"
Preview:	#EXTM3U..#EXT-X-VERSION:4..#EXT-X-PLAYLIST-TYPE:VOD..#EXT-X-ALLOW-CACHE:NO..#EXT-X-MEDIA-SEQUENCE:0..#EXT-X-TARGETDURATION:7..#EXT-X-PROGRAM-DATE-TIME:1970-01-01T00:00:00Z..#EXTINF:6.000000,no-desc..Fragments(video=0,format=m3u8-aapl)..#EXTINF:6.000000,no-desc..Fragments(video=60000000,format=m3u8-aapl)..#EXTINF:6.000000,no-desc..Fragments(video=120000000,format=m3u8-aapl)..#EXTINF:6.000000,no-desc..Fragments(video=180000000,format=m3u8-aapl)..#EXTINF:6.000000,no-desc..Fragments(video=240000000,format=m3u8-aapl)..#EXTINF:6.000000,no-desc..Fragments(video=300000000,format=m3u8-aapl)..#EXTINF:6.000000,no-desc..Fragments(video=360000000,format=m3u8-aapl)..#EXTINF:6.000000,no-desc..Fragments(video=420000000,format=m3u8-aapl)..#EXTINF:6.000000,no-desc..Fragments(video=480000000,format=m3u8-aapl)..#EXTINF:4.000000,no-desc..Fragments(video=540000000,format=m3u8-aapl)..#EXTINF:5.200000,no-desc..Fragments(video=580000000,format=m3u8-aapl)..#EXTINF:6.800000,no-desc..Fragments(video=632000000,for

File type:	HTML document, ASCII text, with very long lines (56726), with CRLF line terminators
Entropy (8bit):	4.765210500645115
TrID:
File name:	Essity Invoice 47926407 .HTML
File size:	227'371 bytes
MD5:	c7660cbc6ddf68be8b367fca5e589c80
SHA1:	238688839a3d1b84ec775421c5e0a59802affa73
SHA256:	e402f08f1241a3ff924c5d596c4e00af7b052bab33ca1d5af2c01ec57a65d1f1
SHA512:	370fd8b10ae60f3d58b68d32779e6bb232263720cc79b3909f967d96505e4bf640c5d61c524e6c53aea31c7d524bcab53fffadb1041d1cc1192d1c0cac9b69ad
SSDEEP:	6144:kvEX62ika6nWlUdm2eex76QKNgQdwdV7x3b:kvi629a6nWlUU2/R6QKNgmwd/
TLSH:	8824AED42681E00755CD1E53BF5EB9EDE13AA863E9C8B20796A87B9C74BD107C2B4DC0
File Content Preview:	<html class=no-touch dir=ltr lang=en translate=no xmlns=http://www.w3.org/1999/xhtml>.. <title>Outlook</title>.. <p id="uxo" style="display:none;">zelmira.sestinova@essity.com</p>.. <body class="disableTextSelection ms-Fabric--isFocusHidden ms-font-s"

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Essity Invoice 47926407 .HTML

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 210

Chrome Cache Entry: 211

Chrome Cache Entry: 212

Chrome Cache Entry: 213

Chrome Cache Entry: 214

Chrome Cache Entry: 215

Chrome Cache Entry: 216

Chrome Cache Entry: 217

Chrome Cache Entry: 218

Chrome Cache Entry: 219

Chrome Cache Entry: 220

Chrome Cache Entry: 221

Chrome Cache Entry: 222

Chrome Cache Entry: 223

Chrome Cache Entry: 224

Chrome Cache Entry: 225

Chrome Cache Entry: 226

Chrome Cache Entry: 227

Chrome Cache Entry: 228

Chrome Cache Entry: 229

Chrome Cache Entry: 230

Chrome Cache Entry: 231

Chrome Cache Entry: 232

Chrome Cache Entry: 233

Chrome Cache Entry: 234

Chrome Cache Entry: 235

Chrome Cache Entry: 236

Chrome Cache Entry: 237

Windows Analysis Report
Essity Invoice 47926407 .HTML