Windows Analysis Report
http://pensionforyou-nl.my.salesforce.com

Overview

General Information

Sample URL:	http://pensionforyou-nl.my.salesforce.com
Analysis ID:	1427885

Detection

Score:	3
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Form action URLs do not match main URL

HTML body contains low number of good links

HTML page contains hidden URLs or javascript code

HTML title does not match URL

No HTML title found

Stores files to the Windows start menu directory

Classification

Signatures

Form action URLs do not match main URL

Source: https://pensionforyou-nl.my.salesforce.com/saml/authn-request.jsp?saml_request_id=_2CAAAAY-AaNWCMDAwMDAwMDAwMDAwMDAwAAAA-Ll1Zo-SYIXsQ20wOF1KFTcsY6A69-PUXWYm396_rRQunD4dbJYbOS3gl7VfOUJozBKXvYqrluWf-8LAKBmVfDqFB9xcqpHA77ul1LunuP_feHwiJSOEJliGCe3rcyCC5S70ZHwMPqcc2re3ZE-xgY9n_snAvBhSlbbJwDW3bwdeR9ZAywNzHX6X-_gpbKntk67bmKFkCGopJLNFos09FPEF-jWi6-BwR8KHMh-zlCj9L2-V5uaJ2O0d5GzQc3EZEw&saml_acs=https%3A%2F%2Fpensionforyou-nl.my.salesforce.com%3Fso%3D00D1t000000x74q&saml_binding_type=HttpPost&Issuer=https%3A%2F%2Fpensionforyou-nl.my.salesforce.com&samlSsoConfig=0LE1v0000004T0D&RelayState=%2F

HTTP Parser: Form action: https://login.microsoftonline.com/a91e3dd4-d85d-48e2-a591-3017cb57b4b8/saml2 salesforce microsoftonline

HTML body contains low number of good links

Source: https://pensionforyou-nl.my.salesforce.com/saml/authn-request.jsp?saml_request_id=_2CAAAAY-AaNWCMDAwMDAwMDAwMDAwMDAwAAAA-Ll1Zo-SYIXsQ20wOF1KFTcsY6A69-PUXWYm396_rRQunD4dbJYbOS3gl7VfOUJozBKXvYqrluWf-8LAKBmVfDqFB9xcqpHA77ul1LunuP_feHwiJSOEJliGCe3rcyCC5S70ZHwMPqcc2re3ZE-xgY9n_snAvBhSlbbJwDW3bwdeR9ZAywNzHX6X-_gpbKntk67bmKFkCGopJLNFos09FPEF-jWi6-BwR8KHMh-zlCj9L2-V5uaJ2O0d5GzQc3EZEw&saml_acs=https%3A%2F%2Fpensionforyou-nl.my.salesforce.com%3Fso%3D00D1t000000x74q&saml_binding_type=HttpPost&Issuer=https%3A%2F%2Fpensionforyou-nl.my.salesforce.com&samlSsoConfig=0LE1v0000004T0D&RelayState=%2F	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/a91e3dd4-d85d-48e2-a591-3017cb57b4b8/saml2	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/a91e3dd4-d85d-48e2-a591-3017cb57b4b8/saml2?sso_reload=true	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638490239417255002.NjgzN2M5ZDAtZGVlNS00MzY1LTllOWUtZTM0MTk0MTRmM2MwYjg1MGIxNjItMjg5Ny00ZDNhLTk5YzgtMTg1YjAzOWRlZDM5&ui_locales=en-US&mkt=en-US&client-request-id=106ee258-69e3-49e3-8164-0efe825641d9&state=59iXsgFSPFqC-6vNR16c5jknV-Oe3CJbkTQ_ZhddvYEOnnmbtJonkqV0yRQScw_SsPip8Jdws1gW4JIz86V5eWK1Vb6FpKjxFlcieSDYw3QcmDhArJODc91jkq0YrgTLcKpWBAQeJv1GfrfYZ7mTK5PHr84bi6yFnQHTqAAle9bYqCKY4-XFxUNSBTwSDIvjkfo_2DGpAUEBX-UgBPuDwtwo9hZCr13SgSQKoikHH_GZzFQQFtnRLeYNmzEaPd1z-Y-A6hCQbcswnMdU1UMQeQ&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0	HTTP Parser: Number of links: 0

HTML page contains hidden URLs or javascript code

HTTP Parser: Base64 decoded: <?xml version="1.0" encoding="UTF-8"?><saml2p:AuthnRequest xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://pensionforyou-nl.my.salesforce.com?so=00D1t000000x74q" Destination="https://login.microsoftonline.com/a91e3...

HTML title does not match URL

Source: https://login.microsoftonline.com/a91e3dd4-d85d-48e2-a591-3017cb57b4b8/saml2	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.microsoftonline.com/a91e3dd4-d85d-48e2-a591-3017cb57b4b8/saml2?sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL
Source: https://www.office.com/	HTTP Parser: Title: Login \| Microsoft 365 does not match URL
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638490239417255002.NjgzN2M5ZDAtZGVlNS00MzY1LTllOWUtZTM0MTk0MTRmM2MwYjg1MGIxNjItMjg5Ny00ZDNhLTk5YzgtMTg1YjAzOWRlZDM5&ui_locales=en-US&mkt=en-US&client-request-id=106ee258-69e3-49e3-8164-0efe825641d9&state=59iXsgFSPFqC-6vNR16c5jknV-Oe3CJbkTQ_ZhddvYEOnnmbtJonkqV0yRQScw_SsPip8Jdws1gW4JIz86V5eWK1Vb6FpKjxFlcieSDYw3QcmDhArJODc91jkq0YrgTLcKpWBAQeJv1GfrfYZ7mTK5PHr84bi6yFnQHTqAAle9bYqCKY4-XFxUNSBTwSDIvjkfo_2DGpAUEBX-UgBPuDwtwo9hZCr13SgSQKoikHH_GZzFQQFtnRLeYNmzEaPd1z-Y-A6hCQbcswnMdU1UMQeQ&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0	HTTP Parser: Title: Sign in to your account does not match URL

No HTML title found

HTTP Parser: HTML title missing

Source: https://login.microsoftonline.com/a91e3dd4-d85d-48e2-a591-3017cb57b4b8/saml2?sso_reload=true	HTTP Parser: <input type="password" .../> found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638490239417255002.NjgzN2M5ZDAtZGVlNS00MzY1LTllOWUtZTM0MTk0MTRmM2MwYjg1MGIxNjItMjg5Ny00ZDNhLTk5YzgtMTg1YjAzOWRlZDM5&ui_locales=en-US&mkt=en-US&client-request-id=106ee258-69e3-49e3-8164-0efe825641d9&state=59iXsgFSPFqC-6vNR16c5jknV-Oe3CJbkTQ_ZhddvYEOnnmbtJonkqV0yRQScw_SsPip8Jdws1gW4JIz86V5eWK1Vb6FpKjxFlcieSDYw3QcmDhArJODc91jkq0YrgTLcKpWBAQeJv1GfrfYZ7mTK5PHr84bi6yFnQHTqAAle9bYqCKY4-XFxUNSBTwSDIvjkfo_2DGpAUEBX-UgBPuDwtwo9hZCr13SgSQKoikHH_GZzFQQFtnRLeYNmzEaPd1z-Y-A6hCQbcswnMdU1UMQeQ&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0	HTTP Parser: <input type="password" .../> found

Source: https://pensionforyou-nl.my.salesforce.com/saml/authn-request.jsp?saml_request_id=_2CAAAAY-AaNWCMDAwMDAwMDAwMDAwMDAwAAAA-Ll1Zo-SYIXsQ20wOF1KFTcsY6A69-PUXWYm396_rRQunD4dbJYbOS3gl7VfOUJozBKXvYqrluWf-8LAKBmVfDqFB9xcqpHA77ul1LunuP_feHwiJSOEJliGCe3rcyCC5S70ZHwMPqcc2re3ZE-xgY9n_snAvBhSlbbJwDW3bwdeR9ZAywNzHX6X-_gpbKntk67bmKFkCGopJLNFos09FPEF-jWi6-BwR8KHMh-zlCj9L2-V5uaJ2O0d5GzQc3EZEw&saml_acs=https%3A%2F%2Fpensionforyou-nl.my.salesforce.com%3Fso%3D00D1t000000x74q&saml_binding_type=HttpPost&Issuer=https%3A%2F%2Fpensionforyou-nl.my.salesforce.com&samlSsoConfig=0LE1v0000004T0D&RelayState=%2F	HTTP Parser: No favicon
Source: https://login.microsoftonline.com/a91e3dd4-d85d-48e2-a591-3017cb57b4b8/saml2	HTTP Parser: No favicon

Source: https://pensionforyou-nl.my.salesforce.com/saml/authn-request.jsp?saml_request_id=_2CAAAAY-AaNWCMDAwMDAwMDAwMDAwMDAwAAAA-Ll1Zo-SYIXsQ20wOF1KFTcsY6A69-PUXWYm396_rRQunD4dbJYbOS3gl7VfOUJozBKXvYqrluWf-8LAKBmVfDqFB9xcqpHA77ul1LunuP_feHwiJSOEJliGCe3rcyCC5S70ZHwMPqcc2re3ZE-xgY9n_snAvBhSlbbJwDW3bwdeR9ZAywNzHX6X-_gpbKntk67bmKFkCGopJLNFos09FPEF-jWi6-BwR8KHMh-zlCj9L2-V5uaJ2O0d5GzQc3EZEw&saml_acs=https%3A%2F%2Fpensionforyou-nl.my.salesforce.com%3Fso%3D00D1t000000x74q&saml_binding_type=HttpPost&Issuer=https%3A%2F%2Fpensionforyou-nl.my.salesforce.com&samlSsoConfig=0LE1v0000004T0D&RelayState=%2F	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/a91e3dd4-d85d-48e2-a591-3017cb57b4b8/saml2	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/a91e3dd4-d85d-48e2-a591-3017cb57b4b8/saml2?sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/a91e3dd4-d85d-48e2-a591-3017cb57b4b8/saml2?sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://www.office.com/	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638490239417255002.NjgzN2M5ZDAtZGVlNS00MzY1LTllOWUtZTM0MTk0MTRmM2MwYjg1MGIxNjItMjg5Ny00ZDNhLTk5YzgtMTg1YjAzOWRlZDM5&ui_locales=en-US&mkt=en-US&client-request-id=106ee258-69e3-49e3-8164-0efe825641d9&state=59iXsgFSPFqC-6vNR16c5jknV-Oe3CJbkTQ_ZhddvYEOnnmbtJonkqV0yRQScw_SsPip8Jdws1gW4JIz86V5eWK1Vb6FpKjxFlcieSDYw3QcmDhArJODc91jkq0YrgTLcKpWBAQeJv1GfrfYZ7mTK5PHr84bi6yFnQHTqAAle9bYqCKY4-XFxUNSBTwSDIvjkfo_2DGpAUEBX-UgBPuDwtwo9hZCr13SgSQKoikHH_GZzFQQFtnRLeYNmzEaPd1z-Y-A6hCQbcswnMdU1UMQeQ&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638490239417255002.NjgzN2M5ZDAtZGVlNS00MzY1LTllOWUtZTM0MTk0MTRmM2MwYjg1MGIxNjItMjg5Ny00ZDNhLTk5YzgtMTg1YjAzOWRlZDM5&ui_locales=en-US&mkt=en-US&client-request-id=106ee258-69e3-49e3-8164-0efe825641d9&state=59iXsgFSPFqC-6vNR16c5jknV-Oe3CJbkTQ_ZhddvYEOnnmbtJonkqV0yRQScw_SsPip8Jdws1gW4JIz86V5eWK1Vb6FpKjxFlcieSDYw3QcmDhArJODc91jkq0YrgTLcKpWBAQeJv1GfrfYZ7mTK5PHr84bi6yFnQHTqAAle9bYqCKY4-XFxUNSBTwSDIvjkfo_2DGpAUEBX-UgBPuDwtwo9hZCr13SgSQKoikHH_GZzFQQFtnRLeYNmzEaPd1z-Y-A6hCQbcswnMdU1UMQeQ&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0	HTTP Parser: No <meta name="author".. found

Source: https://pensionforyou-nl.my.salesforce.com/saml/authn-request.jsp?saml_request_id=_2CAAAAY-AaNWCMDAwMDAwMDAwMDAwMDAwAAAA-Ll1Zo-SYIXsQ20wOF1KFTcsY6A69-PUXWYm396_rRQunD4dbJYbOS3gl7VfOUJozBKXvYqrluWf-8LAKBmVfDqFB9xcqpHA77ul1LunuP_feHwiJSOEJliGCe3rcyCC5S70ZHwMPqcc2re3ZE-xgY9n_snAvBhSlbbJwDW3bwdeR9ZAywNzHX6X-_gpbKntk67bmKFkCGopJLNFos09FPEF-jWi6-BwR8KHMh-zlCj9L2-V5uaJ2O0d5GzQc3EZEw&saml_acs=https%3A%2F%2Fpensionforyou-nl.my.salesforce.com%3Fso%3D00D1t000000x74q&saml_binding_type=HttpPost&Issuer=https%3A%2F%2Fpensionforyou-nl.my.salesforce.com&samlSsoConfig=0LE1v0000004T0D&RelayState=%2F	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/a91e3dd4-d85d-48e2-a591-3017cb57b4b8/saml2	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/a91e3dd4-d85d-48e2-a591-3017cb57b4b8/saml2?sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/a91e3dd4-d85d-48e2-a591-3017cb57b4b8/saml2?sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://www.office.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638490239417255002.NjgzN2M5ZDAtZGVlNS00MzY1LTllOWUtZTM0MTk0MTRmM2MwYjg1MGIxNjItMjg5Ny00ZDNhLTk5YzgtMTg1YjAzOWRlZDM5&ui_locales=en-US&mkt=en-US&client-request-id=106ee258-69e3-49e3-8164-0efe825641d9&state=59iXsgFSPFqC-6vNR16c5jknV-Oe3CJbkTQ_ZhddvYEOnnmbtJonkqV0yRQScw_SsPip8Jdws1gW4JIz86V5eWK1Vb6FpKjxFlcieSDYw3QcmDhArJODc91jkq0YrgTLcKpWBAQeJv1GfrfYZ7mTK5PHr84bi6yFnQHTqAAle9bYqCKY4-XFxUNSBTwSDIvjkfo_2DGpAUEBX-UgBPuDwtwo9hZCr13SgSQKoikHH_GZzFQQFtnRLeYNmzEaPd1z-Y-A6hCQbcswnMdU1UMQeQ&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638490239417255002.NjgzN2M5ZDAtZGVlNS00MzY1LTllOWUtZTM0MTk0MTRmM2MwYjg1MGIxNjItMjg5Ny00ZDNhLTk5YzgtMTg1YjAzOWRlZDM5&ui_locales=en-US&mkt=en-US&client-request-id=106ee258-69e3-49e3-8164-0efe825641d9&state=59iXsgFSPFqC-6vNR16c5jknV-Oe3CJbkTQ_ZhddvYEOnnmbtJonkqV0yRQScw_SsPip8Jdws1gW4JIz86V5eWK1Vb6FpKjxFlcieSDYw3QcmDhArJODc91jkq0YrgTLcKpWBAQeJv1GfrfYZ7mTK5PHr84bi6yFnQHTqAAle9bYqCKY4-XFxUNSBTwSDIvjkfo_2DGpAUEBX-UgBPuDwtwo9hZCr13SgSQKoikHH_GZzFQQFtnRLeYNmzEaPd1z-Y-A6hCQbcswnMdU1UMQeQ&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.55.253.34:443 -> 192.168.2.16:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.55.253.34:443 -> 192.168.2.16:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49860 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.253.34
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.253.34
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.253.34
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.253.34
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.253.34
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.253.34
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.253.34
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.253.34
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.253.34
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.253.34
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.253.34
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.253.34
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.253.34
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.253.34
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.253.34
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.253.34
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.253.34
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.253.34
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.253.34
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic

HTTP traffic detected: GET / HTTP/1.1Host: pensionforyou-nl.my.salesforce.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: unknown

DNS traffic detected: queries for: pensionforyou-nl.my.salesforce.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 23.55.253.34:443 -> 192.168.2.16:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.55.253.34:443 -> 192.168.2.16:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49860 version: TLS 1.2

Source: classification engine

Classification label: clean3.win@23/73@44/283

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://pensionforyou-nl.my.salesforce.com/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1972,i,13516749381779812854,10782635695621455846,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1972,i,13516749381779812854,10782635695621455846,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Source: Window Recorder

Window detected: More than 3 window changes detected

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Screenshots

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
40.126.29.8	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.6.156	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.41	part-0013.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
74.125.136.84	unknown	United States	15169	GOOGLEUS	false
23.49.5.143	unknown	United States	35994	AKAMAI-ASUS	false
23.192.229.198	unknown	United States	16625	AKAMAI-ASUS	false
13.107.246.69	part-0041.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
23.49.5.145	unknown	United States	35994	AKAMAI-ASUS	false
40.126.29.7	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
152.195.19.97	sni1gl.wpc.alphacdn.net	United States	15133	EDGECASTUS	false
184.25.165.167	unknown	United States	9498	BBIL-APBHARTIAirtelLtdIN	false
104.208.16.91	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.213.41	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.213.40	part-0012.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
40.126.29.14	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
34.226.36.51	st1.edge.sfdc-yfeipo.edge2.salesforce.com	United States	14618	AMAZON-AESUS	false
142.250.9.94	unknown	United States	15169	GOOGLEUS	false
40.126.28.22	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
40.126.28.20	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
172.217.215.95	unknown	United States	15169	GOOGLEUS	false
74.125.138.99	www.google.com	United States	15169	GOOGLEUS	false
74.125.138.102	unknown	United States	15169	GOOGLEUS	false
172.217.215.113	unknown	United States	15169	GOOGLEUS	false
1.1.1.1	unknown	Australia	13335	CLOUDFLARENETUS	false
13.107.246.36	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
152.199.4.44	cs1100.wpc.omegacdn.net	United States	15133	EDGECASTUS	false
13.107.213.36	part-0008.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
51.105.71.136	unknown	United Kingdom	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
40.126.28.13	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
108.177.122.94	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.16

Contacted Domains

Name	IP	Active
ooc-g2.tm-4.office.com	52.96.37.210	true
part-0013.t-0009.t-msedge.net	13.107.246.41	true
cs1100.wpc.omegacdn.net	152.199.4.44	true
part-0008.t-0009.t-msedge.net	13.107.213.36	true
part-0041.t-0009.t-msedge.net	13.107.246.69	true
sni1gl.wpc.alphacdn.net	152.195.19.97	true
www.google.com	74.125.138.99	true
cs1227.wpc.alphacdn.net	192.229.211.199	true
part-0012.t-0009.t-msedge.net	13.107.213.40	true
st1.edge.sfdc-yfeipo.edge2.salesforce.com	34.226.36.51	true
sni1gl.wpc.sigmacdn.net	152.195.19.97	true
js.monitor.azure.com	unknown	unknown
www.office.com	unknown	unknown
pensionforyou-nl.my.salesforce.com	unknown	unknown
outlook.office.com	unknown	unknown
aadcdn.msftauth.net	unknown	unknown
substrate.office.com	unknown	unknown
logincdn.msftauth.net	unknown	unknown
aadcdn.msftauthimages.net	unknown	unknown
mem.gfx.ms	unknown	unknown
passwordreset.microsoftonline.com	unknown	unknown
identity.nel.measure.office.net	unknown	unknown
login.microsoftonline.com	unknown	unknown
portal.office.com	unknown	unknown
acctcdn.msftauth.net	unknown	unknown

Contacted URLs

Name	Malicious	Reputation
https://pensionforyou-nl.my.salesforce.com/saml/authn-request.jsp?saml_request_id=_2CAAAAY-AaNWCMDAwMDAwMDAwMDAwMDAwAAAA-Ll1Zo-SYIXsQ20wOF1KFTcsY6A69-PUXWYm396_rRQunD4dbJYbOS3gl7VfOUJozBKXvYqrluWf-8LAKBmVfDqFB9xcqpHA77ul1LunuP_feHwiJSOEJliGCe3rcyCC5S70ZHwMPqcc2re3ZE-xgY9n_snAvBhSlbbJwDW3bwdeR9ZAywNzHX6X-_gpbKntk67bmKFkCGopJLNFos09FPEF-jWi6-BwR8KHMh-zlCj9L2-V5uaJ2O0d5GzQc3EZEw&saml_acs=https%3A%2F%2Fpensionforyou-nl.my.salesforce.com%3Fso%3D00D1t000000x74q&saml_binding_type=HttpPost&Issuer=https%3A%2F%2Fpensionforyou-nl.my.salesforce.com&samlSsoConfig=0LE1v0000004T0D&RelayState=%2F	false	high
https://www.office.com/	false	high
https://login.microsoftonline.com/a91e3dd4-d85d-48e2-a591-3017cb57b4b8/saml2?sso_reload=true	false	high
https://login.microsoftonline.com/a91e3dd4-d85d-48e2-a591-3017cb57b4b8/saml2	false	high
http://pensionforyou-nl.my.salesforce.com/	false	high
https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638490239417255002.NjgzN2M5ZDAtZGVlNS00MzY1LTllOWUtZTM0MTk0MTRmM2MwYjg1MGIxNjItMjg5Ny00ZDNhLTk5YzgtMTg1YjAzOWRlZDM5&ui_locales=en-US&mkt=en-US&client-request-id=106ee258-69e3-49e3-8164-0efe825641d9&state=59iXsgFSPFqC-6vNR16c5jknV-Oe3CJbkTQ_ZhddvYEOnnmbtJonkqV0yRQScw_SsPip8Jdws1gW4JIz86V5eWK1Vb6FpKjxFlcieSDYw3QcmDhArJODc91jkq0YrgTLcKpWBAQeJv1GfrfYZ7mTK5PHr84bi6yFnQHTqAAle9bYqCKY4-XFxUNSBTwSDIvjkfo_2DGpAUEBX-UgBPuDwtwo9hZCr13SgSQKoikHH_GZzFQQFtnRLeYNmzEaPd1z-Y-A6hCQbcswnMdU1UMQeQ&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0	false	high

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 06:58:25 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	659609336917BD92FB9EC28BAEB9733B	C4BB6DE0C53C82042EA0F0124D0C63FFD186CBF3	0ABC551527E7E46850BC10BE84E6700386607E87C6F9781C920CBBCACC6BF9DD
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 06:58:25 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	7ABBB56AAC685F8D8E3B879B8E54E533	99FFA9BB9726F19DD7C0E570A9BFB2EB76E28A9C	D255F7EAD9385121A06101C7FA977DFF47AFBA00F15D4C3CC314B19D68C2E4EB
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	D6BC3E6C509279F8F5650D0A5AA94300	3089D0AEA700BD79107D052C3A678E6327CAF711	C982BE77DE358DE067FFE0A279D9E9716602DD740A14869A5430A493F59514B1
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 06:58:25 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	10269CCB1E2C8F0AED4AAD9C42181FEC	3CA9C765879DA79833092AFCCACF046D0C737A88	4721F91034FE87692B7801E57B20C737B550ECEF24E3717F686CA3F878029646
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 06:58:25 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	1CEF302A7571B25990183906619DFE67	5C27EFE0267A6A75360FD6C9B1A5E77CD21C6605	BD0A84855767F3202CC7078F00AA7C333F6F2579131FC6DD8F001F86262142E6
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 06:58:25 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	4C356C85ECD877A0F069EA4F8E3A8838	72D0C7D9E68EE45B6573AEBE03763DCC7B4B7992	F6B313D06E26B9D0E554AE424B3E7DB4AB00CA5FAF5DF6A366F0573BA60B7BAB
Chrome Cache Entry: 131	Unicode text, UTF-8 text, with very long lines (64241)	B7AF9FB8EB3F12D3BAA37641537BEDC2	A3FBB622FD4D19CDB371F0B71146DD9F2605D8A4	928ACFBA36CCD911340D2753DB52423F0C7F6FEAA72824E2A1EF6F5667ED4A71
Chrome Cache Entry: 132	HTML document, ASCII text, with very long lines (2345), with CRLF line terminators	E86EF8B6111E5FB1D1665BCDC90888C9	994BF7651CB967CD9053056AF2D69ACB74DB7F29	3410242720DE50B090D07A23AEE2DAD879B31D36F2615732962EC4CFA8A9D458
Chrome Cache Entry: 134	GIF image data, version 89a, 352 x 3	166DE53471265253AB3A456DEFE6DA23	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
Chrome Cache Entry: 138	SVG Scalable Vector Graphics image	EE5C8D9FB6248C938FD0DC19370E90BD	D01A22720918B781338B5BBF9202B241A5F99EE4	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
Chrome Cache Entry: 140	ASCII text, with very long lines (65394)	06423867592D7246B2509B064482709F	4FF499E171F2B154DCDD0AB94F843CDE151BEA4A	B797BAA552116E4BA21EAD29F41A4258E3B04DB8DA18E796CE571F05D54D59C5
Chrome Cache Entry: 141	SVG Scalable Vector Graphics image	BC3D32A696895F78C19DF6C717586A5D	9191CB156A30A3ED79C44C0A16C95159E8FF689D	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
Chrome Cache Entry: 145	ASCII text, with very long lines (6109)	A6F9515238FA78237A210B4A259529DB	1992248B6B98300DF7A95CA11DBF65E0B0AD9E5E	4B9F445BA7C3E5097F266B0FCB6A3CAA0500F2FD549F9825F07751C670F42FCD
Chrome Cache Entry: 146	PNG image data, 1944 x 605, 8-bit/color RGBA, non-interlaced	28681BB4869C6E131D17D1A710C0EF63	2D5DEDFEA72550D7520E233D63CD7C4A5E8158C6	8881250B52DB473744C4E676565E494DA739C60C7219BEE170EDD1314ECB113E
Chrome Cache Entry: 147	Web Open Font Format, TrueType, length 26288, version 0.0	D0263DC03BE4C393A90BDA733C57D6DB	8A032B6DEAB53A33234C735133B48518F8643B92	22B4DF5C33045B645CAFA45B04685F4752E471A2E933BFF5BF14324D87DEEE12
Chrome Cache Entry: 148	Web Open Font Format (Version 2), TrueType, length 12164, version 1.0	36AC9A2365173B647657AD829AE64FF0	F8966E2EE4C9CFE92B5843D8C27BB7BED98BDFC9	633894CF845287F205F1B5BD26B7667DDA186695FCE3D789306F30C5FBDB14B5
Chrome Cache Entry: 149	SVG Scalable Vector Graphics image	4E48046CE74F4B89D45037C90576BFAC	4A41B3B51ED787F7B33294202DA72220C7CD2C32	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
Chrome Cache Entry: 151	PNG image data, 286 x 41, 8-bit/color RGBA, non-interlaced	747D2C674F731EDFD2779D83C8532E24	C40A635C160D4CA763D8C86F560CB937A8E1090B	CA13C3E1EC9B3484F3E6AF002F127C03DE8E5171E76D37A5749A3CD75D098B05
Chrome Cache Entry: 152	PNG image data, 4742 x 2732, 8-bit/color RGBA, non-interlaced	288E7C77D34B03F527AE7CEE40FF431B	1D35DCAC754498FED1249D89D3B144FA7BF8E9C9	1F7D1FEC9454C08DD4410CD124B215A214EF29BCD2DB7B3BD293564814DB3831
Chrome Cache Entry: 154	PNG image data, 657 x 465, 8-bit/color RGBA, non-interlaced	2889DD4E93EB0D623EBDCA683CC580C0	26905637AF861A3912FA3146C332C619C51911ED	6F3E98554F2260D834BCD6AB038AC6285945999A23D8071DCB2FC391CBA080E1
Chrome Cache Entry: 155	GIF image data, version 89a, 352 x 3	B540A8E518037192E32C4FE58BF2DBAB	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
Chrome Cache Entry: 156	PNG image data, 1056 x 867, 8-bit/color RGBA, non-interlaced	CC7E47BD1741DED90D275A967945E218	0D3EBCDC632F65102C3B1EDB09C010BDE66DECD5	ACDC08329C303E443959983A59B283081B71A86D22D1C064A8B14F8A53BD2264
Chrome Cache Entry: 157	PNG image data, 11 x 20, 8-bit/color RGBA, non-interlaced	090A700C0F3FEEFF4460B4B77AB5C7B9	BD486094CCBAC3E703F0648495440F3F2E6F5F40	81DD42197F137D54B0833FB24AAB0C9A05AC07BD4AECEC3F79AC281BBC46B64A
Chrome Cache Entry: 158	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced	33305B0D90662F816FFF068E3688A4DB	6F30AD31DA07FAACA2D2BD67D8189F6C36E816CA	207F50299063FBB1F3B17BC02663CC5E8FB3B385E8EA29919D1AF13A7BAA6247
Chrome Cache Entry: 159	PNG image data, 1776 x 472, 8-bit/color RGBA, non-interlaced	7828E225282257B91AFAABF588DB7C21	214A29D06CFF13E63E45FCCABDAA43470484060B	62126C9DE11EC402A4EAF3CAA6D94C1BF77D3DB15615C6A4BA6218C483995297
Chrome Cache Entry: 160	PNG image data, 658 x 467, 8-bit/color RGBA, non-interlaced	C4EC327B9E9D1FB0CE56254C891F03FE	EBA0D651E385679FB08A2AA54D25F19AB4EE4448	E0D79790DE989C7AB117D4DBA27E0964B9B7C9B496EE6F8DF2476D3A98C55EA5
Chrome Cache Entry: 161	PNG image data, 19 x 20, 8-bit/color RGBA, non-interlaced	02734A460C03D20B8C4AEA1D9A7B7DCD	0A642B81EB3E0F66D2D4CDC49339C3A60845B427	E495966DD87033EC1E3F55C58062DE559B251AAD1CABF20DD2AF44CD34675CD6
Chrome Cache Entry: 164	PNG image data, 657 x 442, 8-bit/color RGBA, non-interlaced	8D9F5D5CBA3C50EBD3B2F94D685705E1	2261DFE2845C05B21AA21FADFD5B2E19EFE7EE6F	5E4E6DDCF74CD9E1E8985666CDBA1AEB786A7560D15FEB89C1B608E0ACB1FBBD
Chrome Cache Entry: 166	ASCII text, with very long lines (656)	3AA2149E6B511D366436A58382E74DB7	791563E8B674A2C2D987F5994A690C053934C948	8911CE1836F07068D68EFB80B5B902981CFDF5F322BF3809479A06006D6D8CF1
Chrome Cache Entry: 168	PNG image data, 161 x 160, 8-bit/color RGBA, non-interlaced	2BE9B68EED69AE75FBA5ED982D0FF25D	BD6E134C0D87C52AC751555269A59796D5EABC55	8281E85E9FF70034913A38D9EAA6AF52ED98AB621300F0558E70A9BCEFF7246E
Chrome Cache Entry: 169	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced	5D315A943EDDE6D106F708567518CF48	FE0A3A55831FDA9497AD549503AC9BFF9F2502B5	9EDE85D6C2139703E1A1DFA94105F6063607BC0F2F53CFB98D30DAF90134BC51
Chrome Cache Entry: 170	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors	12E3DAC858061D088023B2BD48E2FA96	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
Chrome Cache Entry: 171	ASCII text, with very long lines (3475)	1A8877D220EBAD742634A54F633FB4AB	D19D5284DDEB6B960738D65861CEA31208D1216E	541C619F902D06E3AAA41FD63A5CC260D273EC4595BAD8A74317ABC72836F413
Chrome Cache Entry: 173	Web Open Font Format (Version 2), TrueType, length 10544, version 1.0	8E160632C48AD1E3D0E9F4334636086B	7BA2921499B2264DEE14F95801BFBCF416861D7C	57FEBFBAD63B722A38BC668E67BC7C2DC02ECA221F26DB3A9303C1BD584A1A42
Chrome Cache Entry: 175	PNG image data, 657 x 394, 8-bit/color RGBA, non-interlaced	A65339870BF74E66812E7EB4AE2E2AD0	1C69AB833C818B3B0BF97100121C7627A423A110	6D6F78635FDF119415AC27B93CBC42580BEA55AA4A031C227A911E3BD2766075
Chrome Cache Entry: 176	PNG image data, 657 x 394, 8-bit/color RGBA, non-interlaced	B91AA86D96C46C4D61F2B244ABAF89C2	1C725EA7A4EA7B4A958B4BC05B24F850479B11B2	D14D8BABD12BAD6A5EA601E537D7FBEF8642C86A0DB3751AC93E7AFF892DFA83
Chrome Cache Entry: 177	ASCII text, with very long lines (64612)	5B0E3778C74235B06DA49808DD8DF90A	AD25897B0870B81568412F55B19898E406CC11B3	7530B843A86F3155CE07CDA787A40DA87052664B09C22F3D4DB5E9238664DBE0
Chrome Cache Entry: 178	ASCII text, with very long lines (30221)	12ECFAEE51423CB4A7564931B2DA53AA	1B722B44459A66FD844E3EBEE25CCF36272D47CB	D2D7591A8E1CB0876E9DD9E77E1CB692E1F508504B6BFF95AE068E64BD66F6B7
Chrome Cache Entry: 180	PNG image data, 657 x 439, 8-bit/color RGBA, non-interlaced	F455600B671BEA74469CBD0DE2C49ABE	9FACC63AF8C238776BFC67D901CA5EF965FE12A0	9E0234933321BE89717BAD939D8D6608117CE7AD453A5F66DB97F0F4E11A6252
Chrome Cache Entry: 181	ASCII text, with very long lines (32000)	95F2F0FC50065B017596646C65E90D3E	900566D546C121942D1964250FE4D3CEC23ADF3D	898F9F6B7CF9D9E797BB187001FCEDEB9999F912C9DC1A2CF5ABD30D961CC69D
Chrome Cache Entry: 182	PNG image data, 657 x 535, 8-bit/color RGBA, non-interlaced	F237DBFF1FA2D11D1B732696F88FB568	CCBB89EC75D9B76FA6F2BFCFE2103BC2AC34F33A	27E3A326BE87A13CF13472FCB4BCED5572D73D7CB34A0E9A7E03B6512EFF4E6D
Chrome Cache Entry: 183	PNG image data, 1056 x 867, 8-bit/color RGBA, non-interlaced	B1E5C7E0C9AFF86E324CB1704C560FAD	5ABC3016D14AD3C355763847AD5ABD13DE1DCF12	DF3103EDB09B0C0B9B59508C6EADD84B458F175CE210ADEFEA57F8D83C1D5C63
Chrome Cache Entry: 184	JSON data	9E576E34B18E986347909C29AE6A82C6	532C767978DC2B55854B3CA2D2DF5B4DB221C934	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
Chrome Cache Entry: 185	Web Open Font Format (Version 2), TrueType, length 11100, version 1.0	906BA74C1F7A4FD42174E0F58FAD3C95	3631818302580F0E0DA3ED54E8488CE72B1D4B11	BB232FD09A6696CE21EC10A43B89933E12AD866DFDE30A4A6A08E08082E6557D
Chrome Cache Entry: 187	ASCII text, with very long lines (61177)	D62B4EDEB512B07ABEF4688E27ECDDE3	981A7825DA5E29938AB6FE0CBFE2DB622F7B8333	4B01A0A34CE8ED4BC8A8713BE0442D49DA6A756236B7B4424622CA3DEE820F41
Chrome Cache Entry: 189	ASCII text, with no line terminators	06B313E93DD76909460FBFC0CD98CB6B	C4F9B2BBD840A4328F85F54873C434336A193888	B4532478707B495D0BB1C21C314AEF959DD1A5E0F66E52DAD5FC332C8B697CBA
Chrome Cache Entry: 190	PNG image data, 657 x 588, 8-bit/color RGBA, non-interlaced	C12CD6BC8402C20079ECCD87115B50CC	5C8A6F635B00F83289039E8A027A4CB03CC47675	A5FBDF8AAFDBEE42005A4DCAAC5FA402A79AA8F153486A5ADE74E92085504ADF
Chrome Cache Entry: 191	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel	CCDA8DF05E9A37B3131AFD4D451B44EC	ED9D0F9C4224FBD4C768BE237B4B59F27F1B718C	92842FC6C2F66B46F69458C14621FC2ECA5D6C02D7937F9124FE8A3A9A55BC91
Chrome Cache Entry: 194	Web Open Font Format (Version 2), TrueType, length 11356, version 1.0	DAC73DC7B1EB35CD360DA41648DE072B	DA1F6A5F46B72320A55B398F5F66D5E9AA6132F1	2CD3EF7B5B677B7827BFBE5B926A283E7CA687DDB6B021FA4289630671EBD061
Chrome Cache Entry: 195	ASCII text, with very long lines (64616)	8C74AB954A2C743D71C5B99C47F94C34	3FF62FDC7AD0AAA2D36EBA473DC28ECDD0F6D4E4	B449CE27BB6C0352DC780DBA81B4D323D4808DAEEE064DD934CEC65B67BE8D46
Chrome Cache Entry: 196	ASCII text, with very long lines (43896)	5252837FFA272234E1CBF2D3D83EF32C	CAA4E48A54A2B1CA09327E42F24F6031FDF21CDA	DF2E852C347ECF82F70A0C8A4B91713FBB0914D58F2CBAB01316BFE646ABEE7C
Chrome Cache Entry: 197	ASCII text, with very long lines (65536), with no line terminators	C57CC11A511063B808F4A2C7745DF8D0	CEB6E14B7520A995C7E9C3BB6F3C1DCD56CCB5EE	65628140B0930C3F9ED1A06A8F30F454245A08665047C6A95B592DFD164F4E9F
Chrome Cache Entry: 198	PNG image data, 658 x 497, 8-bit/color RGBA, non-interlaced	F143E5C2D232CDCF3FA06DA4473E0372	0DFE81FE5425E7EE37E35C1107114EA3DF7FEBCA	5F1BBCA25424C86893414DE6F44A39A9F28294679E975586A9633A90247D89FD
Chrome Cache Entry: 200	Unicode text, UTF-8 text, with very long lines (32153)	976055749170B7AF7B5F38AE857A56B2	E3D736B8BC648B97AA403A7283ED6985A6FCF6B2	190D2504B5C2EFE44DCE83474157D309A62DF8FA2B6BDF5D52B2CDDC1EB9E0D7
Chrome Cache Entry: 202	ASCII text, with very long lines (672)	295BA2CDF2ED2C2A2A75C11F84D656C3	1249B72C94F64B5D7BC379056B91912BAF0EA7E0	A3C6AF1DAE727D1EEDBEC15DF049BFB58CC28BB0D1DA66D8C6F3C0E219920FC3
Chrome Cache Entry: 203	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 17287	C55049F202E5C9D92D7A767B8FE28ABD	5C9C1B5103E11D55C5F856EFF0FCE95210031300	02D8A8C1DD472DC2FAC9CE33A3D5DB51E4B35DA1C267645AE037DA9D518F7538
Chrome Cache Entry: 204	ASCII text, with very long lines (42133)	B9C3E4320DB870036919F1EE117BDA6E	29B5A9066B5B1F1FE5AFE7EE986E80A49E86606A	A1FE019388875B696EDB373B51A51C0A8E3BAD52CD489617D042C0722BDB1E48
Chrome Cache Entry: 209	PNG image data, 1056 x 867, 8-bit/color RGBA, non-interlaced	620D899E6AAEF5DA299E7AC5237C2A7B	677BE89898106026499AE63A543F051B4F9A8DA2	A47FFC5AF116CCDCBDF40BC824310DCC08732712928EF1C1AF07AA530D66E7B4
Chrome Cache Entry: 211	Unicode text, UTF-8 text, with very long lines (31996)	D78F09B7284EE25C27265B1DF43F5395	9EDCAD1DE9A5ED59536F78C7BB1FD8A4DA81301A	E3AD812DAF7C81F8CF38FCB6B76761924D24C2FA6AF4B7CF40E125D42794CCCE
Chrome Cache Entry: 213	ASCII text, with very long lines (25694)	32E64608D9488CFF77CD7E2264F9A7C4	77EBD43B213DE901C77ED6AE118502B98909CD55	1329FD964132B17229CC68B63363A3C0E6EC87D2914AA5A29CE9BBDC344A1F54
Chrome Cache Entry: 214	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 141339	DAF955BF2112F74E4F78B2187A8D6BEF	231CE9BE42327A3BC1AA7F48C03ABA46740DC456	72D3BBFFAAD400572BF853223BFFD96DC0CC6A336CFA7F3452259BF468590A4D
Chrome Cache Entry: 216	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced	93CA1A80FFCE09717DFFCE31F46C6AD3	39E9F6103A283006234A4FBB63616298C4F99574	02AC1C1A2BF961E85B8D3B4038DC18D781C3162C441871114001D3E2A357D565
Chrome Cache Entry: 217	PNG image data, 657 x 394, 8-bit/color RGBA, non-interlaced	B66CE988DEC4C543A4575F32FA67E926	1732243CDDD2DE044800621B380A6F6324EE937F	700D7AB8B2A25B9496257865F5D4DBCFBB9A7EF4112315E7DC4A6A58F9834EE9
Chrome Cache Entry: 218	ASCII text, with very long lines (65536), with no line terminators	9CFEF48095EF01A3629E468F7FCB9790	F6D5E6001AA64FF9F6B86F63FD9A5303930A8D0C	9EB6A88D48D4185991FAC1DAB9B0AE87DF5DFF5FD244BAB77DEDAE63D2D848A6
Chrome Cache Entry: 219	PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced	9F14C20150A003D7CE4DE57C298F0FBA	DAA53CF17CC45878A1B153F3C3BF47DC9669D78F	112FEC798B78AA02E102A724B5CB1990C0F909BC1D8B7B1FA256EAB41BBC0960
Chrome Cache Entry: 220	PNG image data, 1017 x 706, 8-bit/color RGBA, non-interlaced	1B4C66938347FF70F6D2FA1173D0C09B	8766438A8E7EE0E068BABA0042B0D97C7667CAE4	B59D05AA36BA301347E8E8D711A42452E925F6875ACE1409B056AD2B759C9317
Chrome Cache Entry: 221	ASCII text, with very long lines (65536), with no line terminators	7B3A8EB2DF127E5D0870E11C116A5F8F	3A7EC51120E9EC70911C3B5554DEC5AA5FD61168	6BFD174274D9ACE1C7E8B7B66F8AE0C33D263AF788ED989561E9E43D46622482
Chrome Cache Entry: 222	SVG Scalable Vector Graphics image	A9CC2824EF3517B6C4160DCF8FF7D410	8DB9AEBAD84CA6E4225BFDD2458FF3821CC4F064	34F9DB946E89F031A80DFCA7B16B2B686469C9886441261AE70A44DA1DFA2D58
Chrome Cache Entry: 223	PNG image data, 657 x 575, 8-bit/color RGBA, non-interlaced	6F56908E42F3398E4C68764A574B2C6A	DAB99DFF2B2401D7C3AE20D1BBA5864E41908ECB	FAF8D5D4A007C272F143124965D15FAE555C5F721182D09B626D70E09E6D299B
Chrome Cache Entry: 225	ASCII text, with very long lines (14735)	82B3E71D28044021BF3BBA30A8B1B613	508FD0047F49E7965707F0B58708A59D6A62C528	49BD3382F2D2C171947474FC65B701DED717BF69A6E88505B84DA1D69B3C2F1E
Chrome Cache Entry: 227	PNG image data, 1776 x 472, 8-bit/color RGBA, non-interlaced	8F1CAF2F3B50D485BF0A6D444C4D1D03	97C09A9B47263C04CC85220ECFB7A48C6287D5F2	8F1F7DC238363395C34CD261911FA383E496669404CF2D93B6C4DA570FB86E81
Chrome Cache Entry: 229	ASCII text, with very long lines (1644), with no line terminators	F7F2466FF5C73AE1AB3C664E0B8F3244	2CA515E0E559371ADD59EB88C2F9EE5F55B6896B	452C71710AC8407DA431E133ED831FE09C6C881F23E9B0E93192FD8DC8BAB71F
Chrome Cache Entry: 230	ASCII text, with very long lines (3368)	CE38AE79F82B6E4078FC5D3214A96357	330A1F1AD00836F12E80AFE96302BCA5D33CBDC7	33E552BAC8F734B09C266F49CB57B8EA3BCDB5CA699B3299A31C50DDFD765823

Form action URLs do not match main URL

HTTP Parser: Form action: https://login.microsoftonline.com/a91e3dd4-d85d-48e2-a591-3017cb57b4b8/saml2 salesforce microsoftonline

HTML body contains low number of good links

Source: https://pensionforyou-nl.my.salesforce.com/saml/authn-request.jsp?saml_request_id=_2CAAAAY-AaNWCMDAwMDAwMDAwMDAwMDAwAAAA-Ll1Zo-SYIXsQ20wOF1KFTcsY6A69-PUXWYm396_rRQunD4dbJYbOS3gl7VfOUJozBKXvYqrluWf-8LAKBmVfDqFB9xcqpHA77ul1LunuP_feHwiJSOEJliGCe3rcyCC5S70ZHwMPqcc2re3ZE-xgY9n_snAvBhSlbbJwDW3bwdeR9ZAywNzHX6X-_gpbKntk67bmKFkCGopJLNFos09FPEF-jWi6-BwR8KHMh-zlCj9L2-V5uaJ2O0d5GzQc3EZEw&saml_acs=https%3A%2F%2Fpensionforyou-nl.my.salesforce.com%3Fso%3D00D1t000000x74q&saml_binding_type=HttpPost&Issuer=https%3A%2F%2Fpensionforyou-nl.my.salesforce.com&samlSsoConfig=0LE1v0000004T0D&RelayState=%2F	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/a91e3dd4-d85d-48e2-a591-3017cb57b4b8/saml2	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/a91e3dd4-d85d-48e2-a591-3017cb57b4b8/saml2?sso_reload=true	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638490239417255002.NjgzN2M5ZDAtZGVlNS00MzY1LTllOWUtZTM0MTk0MTRmM2MwYjg1MGIxNjItMjg5Ny00ZDNhLTk5YzgtMTg1YjAzOWRlZDM5&ui_locales=en-US&mkt=en-US&client-request-id=106ee258-69e3-49e3-8164-0efe825641d9&state=59iXsgFSPFqC-6vNR16c5jknV-Oe3CJbkTQ_ZhddvYEOnnmbtJonkqV0yRQScw_SsPip8Jdws1gW4JIz86V5eWK1Vb6FpKjxFlcieSDYw3QcmDhArJODc91jkq0YrgTLcKpWBAQeJv1GfrfYZ7mTK5PHr84bi6yFnQHTqAAle9bYqCKY4-XFxUNSBTwSDIvjkfo_2DGpAUEBX-UgBPuDwtwo9hZCr13SgSQKoikHH_GZzFQQFtnRLeYNmzEaPd1z-Y-A6hCQbcswnMdU1UMQeQ&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0	HTTP Parser: Number of links: 0

HTML page contains hidden URLs or javascript code

HTML title does not match URL

Source: https://login.microsoftonline.com/a91e3dd4-d85d-48e2-a591-3017cb57b4b8/saml2	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.microsoftonline.com/a91e3dd4-d85d-48e2-a591-3017cb57b4b8/saml2?sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL
Source: https://www.office.com/	HTTP Parser: Title: Login \| Microsoft 365 does not match URL
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638490239417255002.NjgzN2M5ZDAtZGVlNS00MzY1LTllOWUtZTM0MTk0MTRmM2MwYjg1MGIxNjItMjg5Ny00ZDNhLTk5YzgtMTg1YjAzOWRlZDM5&ui_locales=en-US&mkt=en-US&client-request-id=106ee258-69e3-49e3-8164-0efe825641d9&state=59iXsgFSPFqC-6vNR16c5jknV-Oe3CJbkTQ_ZhddvYEOnnmbtJonkqV0yRQScw_SsPip8Jdws1gW4JIz86V5eWK1Vb6FpKjxFlcieSDYw3QcmDhArJODc91jkq0YrgTLcKpWBAQeJv1GfrfYZ7mTK5PHr84bi6yFnQHTqAAle9bYqCKY4-XFxUNSBTwSDIvjkfo_2DGpAUEBX-UgBPuDwtwo9hZCr13SgSQKoikHH_GZzFQQFtnRLeYNmzEaPd1z-Y-A6hCQbcswnMdU1UMQeQ&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0	HTTP Parser: Title: Sign in to your account does not match URL

No HTML title found

HTTP Parser: HTML title missing

Source: https://login.microsoftonline.com/a91e3dd4-d85d-48e2-a591-3017cb57b4b8/saml2?sso_reload=true	HTTP Parser: <input type="password" .../> found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638490239417255002.NjgzN2M5ZDAtZGVlNS00MzY1LTllOWUtZTM0MTk0MTRmM2MwYjg1MGIxNjItMjg5Ny00ZDNhLTk5YzgtMTg1YjAzOWRlZDM5&ui_locales=en-US&mkt=en-US&client-request-id=106ee258-69e3-49e3-8164-0efe825641d9&state=59iXsgFSPFqC-6vNR16c5jknV-Oe3CJbkTQ_ZhddvYEOnnmbtJonkqV0yRQScw_SsPip8Jdws1gW4JIz86V5eWK1Vb6FpKjxFlcieSDYw3QcmDhArJODc91jkq0YrgTLcKpWBAQeJv1GfrfYZ7mTK5PHr84bi6yFnQHTqAAle9bYqCKY4-XFxUNSBTwSDIvjkfo_2DGpAUEBX-UgBPuDwtwo9hZCr13SgSQKoikHH_GZzFQQFtnRLeYNmzEaPd1z-Y-A6hCQbcswnMdU1UMQeQ&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0	HTTP Parser: <input type="password" .../> found

Source: https://pensionforyou-nl.my.salesforce.com/saml/authn-request.jsp?saml_request_id=_2CAAAAY-AaNWCMDAwMDAwMDAwMDAwMDAwAAAA-Ll1Zo-SYIXsQ20wOF1KFTcsY6A69-PUXWYm396_rRQunD4dbJYbOS3gl7VfOUJozBKXvYqrluWf-8LAKBmVfDqFB9xcqpHA77ul1LunuP_feHwiJSOEJliGCe3rcyCC5S70ZHwMPqcc2re3ZE-xgY9n_snAvBhSlbbJwDW3bwdeR9ZAywNzHX6X-_gpbKntk67bmKFkCGopJLNFos09FPEF-jWi6-BwR8KHMh-zlCj9L2-V5uaJ2O0d5GzQc3EZEw&saml_acs=https%3A%2F%2Fpensionforyou-nl.my.salesforce.com%3Fso%3D00D1t000000x74q&saml_binding_type=HttpPost&Issuer=https%3A%2F%2Fpensionforyou-nl.my.salesforce.com&samlSsoConfig=0LE1v0000004T0D&RelayState=%2F	HTTP Parser: No favicon
Source: https://login.microsoftonline.com/a91e3dd4-d85d-48e2-a591-3017cb57b4b8/saml2	HTTP Parser: No favicon

Source: https://pensionforyou-nl.my.salesforce.com/saml/authn-request.jsp?saml_request_id=_2CAAAAY-AaNWCMDAwMDAwMDAwMDAwMDAwAAAA-Ll1Zo-SYIXsQ20wOF1KFTcsY6A69-PUXWYm396_rRQunD4dbJYbOS3gl7VfOUJozBKXvYqrluWf-8LAKBmVfDqFB9xcqpHA77ul1LunuP_feHwiJSOEJliGCe3rcyCC5S70ZHwMPqcc2re3ZE-xgY9n_snAvBhSlbbJwDW3bwdeR9ZAywNzHX6X-_gpbKntk67bmKFkCGopJLNFos09FPEF-jWi6-BwR8KHMh-zlCj9L2-V5uaJ2O0d5GzQc3EZEw&saml_acs=https%3A%2F%2Fpensionforyou-nl.my.salesforce.com%3Fso%3D00D1t000000x74q&saml_binding_type=HttpPost&Issuer=https%3A%2F%2Fpensionforyou-nl.my.salesforce.com&samlSsoConfig=0LE1v0000004T0D&RelayState=%2F	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/a91e3dd4-d85d-48e2-a591-3017cb57b4b8/saml2	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/a91e3dd4-d85d-48e2-a591-3017cb57b4b8/saml2?sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/a91e3dd4-d85d-48e2-a591-3017cb57b4b8/saml2?sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://www.office.com/	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638490239417255002.NjgzN2M5ZDAtZGVlNS00MzY1LTllOWUtZTM0MTk0MTRmM2MwYjg1MGIxNjItMjg5Ny00ZDNhLTk5YzgtMTg1YjAzOWRlZDM5&ui_locales=en-US&mkt=en-US&client-request-id=106ee258-69e3-49e3-8164-0efe825641d9&state=59iXsgFSPFqC-6vNR16c5jknV-Oe3CJbkTQ_ZhddvYEOnnmbtJonkqV0yRQScw_SsPip8Jdws1gW4JIz86V5eWK1Vb6FpKjxFlcieSDYw3QcmDhArJODc91jkq0YrgTLcKpWBAQeJv1GfrfYZ7mTK5PHr84bi6yFnQHTqAAle9bYqCKY4-XFxUNSBTwSDIvjkfo_2DGpAUEBX-UgBPuDwtwo9hZCr13SgSQKoikHH_GZzFQQFtnRLeYNmzEaPd1z-Y-A6hCQbcswnMdU1UMQeQ&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638490239417255002.NjgzN2M5ZDAtZGVlNS00MzY1LTllOWUtZTM0MTk0MTRmM2MwYjg1MGIxNjItMjg5Ny00ZDNhLTk5YzgtMTg1YjAzOWRlZDM5&ui_locales=en-US&mkt=en-US&client-request-id=106ee258-69e3-49e3-8164-0efe825641d9&state=59iXsgFSPFqC-6vNR16c5jknV-Oe3CJbkTQ_ZhddvYEOnnmbtJonkqV0yRQScw_SsPip8Jdws1gW4JIz86V5eWK1Vb6FpKjxFlcieSDYw3QcmDhArJODc91jkq0YrgTLcKpWBAQeJv1GfrfYZ7mTK5PHr84bi6yFnQHTqAAle9bYqCKY4-XFxUNSBTwSDIvjkfo_2DGpAUEBX-UgBPuDwtwo9hZCr13SgSQKoikHH_GZzFQQFtnRLeYNmzEaPd1z-Y-A6hCQbcswnMdU1UMQeQ&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0	HTTP Parser: No <meta name="author".. found

Source: https://pensionforyou-nl.my.salesforce.com/saml/authn-request.jsp?saml_request_id=_2CAAAAY-AaNWCMDAwMDAwMDAwMDAwMDAwAAAA-Ll1Zo-SYIXsQ20wOF1KFTcsY6A69-PUXWYm396_rRQunD4dbJYbOS3gl7VfOUJozBKXvYqrluWf-8LAKBmVfDqFB9xcqpHA77ul1LunuP_feHwiJSOEJliGCe3rcyCC5S70ZHwMPqcc2re3ZE-xgY9n_snAvBhSlbbJwDW3bwdeR9ZAywNzHX6X-_gpbKntk67bmKFkCGopJLNFos09FPEF-jWi6-BwR8KHMh-zlCj9L2-V5uaJ2O0d5GzQc3EZEw&saml_acs=https%3A%2F%2Fpensionforyou-nl.my.salesforce.com%3Fso%3D00D1t000000x74q&saml_binding_type=HttpPost&Issuer=https%3A%2F%2Fpensionforyou-nl.my.salesforce.com&samlSsoConfig=0LE1v0000004T0D&RelayState=%2F	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/a91e3dd4-d85d-48e2-a591-3017cb57b4b8/saml2	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/a91e3dd4-d85d-48e2-a591-3017cb57b4b8/saml2?sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/a91e3dd4-d85d-48e2-a591-3017cb57b4b8/saml2?sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://www.office.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638490239417255002.NjgzN2M5ZDAtZGVlNS00MzY1LTllOWUtZTM0MTk0MTRmM2MwYjg1MGIxNjItMjg5Ny00ZDNhLTk5YzgtMTg1YjAzOWRlZDM5&ui_locales=en-US&mkt=en-US&client-request-id=106ee258-69e3-49e3-8164-0efe825641d9&state=59iXsgFSPFqC-6vNR16c5jknV-Oe3CJbkTQ_ZhddvYEOnnmbtJonkqV0yRQScw_SsPip8Jdws1gW4JIz86V5eWK1Vb6FpKjxFlcieSDYw3QcmDhArJODc91jkq0YrgTLcKpWBAQeJv1GfrfYZ7mTK5PHr84bi6yFnQHTqAAle9bYqCKY4-XFxUNSBTwSDIvjkfo_2DGpAUEBX-UgBPuDwtwo9hZCr13SgSQKoikHH_GZzFQQFtnRLeYNmzEaPd1z-Y-A6hCQbcswnMdU1UMQeQ&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638490239417255002.NjgzN2M5ZDAtZGVlNS00MzY1LTllOWUtZTM0MTk0MTRmM2MwYjg1MGIxNjItMjg5Ny00ZDNhLTk5YzgtMTg1YjAzOWRlZDM5&ui_locales=en-US&mkt=en-US&client-request-id=106ee258-69e3-49e3-8164-0efe825641d9&state=59iXsgFSPFqC-6vNR16c5jknV-Oe3CJbkTQ_ZhddvYEOnnmbtJonkqV0yRQScw_SsPip8Jdws1gW4JIz86V5eWK1Vb6FpKjxFlcieSDYw3QcmDhArJODc91jkq0YrgTLcKpWBAQeJv1GfrfYZ7mTK5PHr84bi6yFnQHTqAAle9bYqCKY4-XFxUNSBTwSDIvjkfo_2DGpAUEBX-UgBPuDwtwo9hZCr13SgSQKoikHH_GZzFQQFtnRLeYNmzEaPd1z-Y-A6hCQbcswnMdU1UMQeQ&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.55.253.34:443 -> 192.168.2.16:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.55.253.34:443 -> 192.168.2.16:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49860 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.253.34
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.253.34
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.253.34
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.253.34
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.253.34
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.253.34
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.253.34
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.253.34
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.253.34
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.253.34
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.253.34
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.253.34
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.253.34
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.253.34
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.253.34
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.253.34
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.253.34
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.253.34
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.253.34
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic

Source: unknown

DNS traffic detected: queries for: pensionforyou-nl.my.salesforce.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 23.55.253.34:443 -> 192.168.2.16:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.55.253.34:443 -> 192.168.2.16:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49860 version: TLS 1.2

Source: classification engine

Classification label: clean3.win@23/73@44/283

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://pensionforyou-nl.my.salesforce.com/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1972,i,13516749381779812854,10782635695621455846,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1972,i,13516749381779812854,10782635695621455846,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Source: Window Recorder

Window detected: More than 3 window changes detected

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

ID:	1427885
Product:	CloudBasic
Start time:	09:57:54
Start date:	18.04.2024
Cookbook:	defaultwindowsinteractivecookbook.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Windows Analysis Report
http://pensionforyou-nl.my.salesforce.com

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report http://pensionforyou-nl.my.salesforce.com

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
http://pensionforyou-nl.my.salesforce.com