Joe Sandbox Cloud Basic Analysis Report

Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
https://appddd08.z19.web.core.windows.net/Win0security-helpline07/index.html?ph0n=1-844-492-0415

Overview

General Information

Sample URL:https://appddd08.z19.web.core.windows.net/Win0security-helpline07/index.html?ph0n=1-844-492-0415
Analysis ID:1428468
Infos:

Detection

TechSupportScam
Score:64
Range:0 - 100
Whitelisted:false
Confidence:100%

Signatures

Antivirus / Scanner detection for submitted sample
Phishing site detected (based on favicon image match)
Yara detected TechSupportScam

Classification

Process Tree

  • System is w10x64
  • chrome.exe (PID: 3340 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
    • chrome.exe (PID: 5236 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 --field-trial-handle=1968,i,1316399962579613010,6648906634988723991,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
  • chrome.exe (PID: 6388 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://appddd08.z19.web.core.windows.net/Win0security-helpline07/index.html?ph0n=1-844-492-0415" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
  • cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

Dropped Files

SourceRuleDescriptionAuthorStrings
dropped/chromecache_98JoeSecurity_TechSupportScamYara detected TechSupportScamJoe Security

    HTML

    SourceRuleDescriptionAuthorStrings
    0.0.pages.csvJoeSecurity_TechSupportScamYara detected TechSupportScamJoe Security

      Sigma Signatures

      ⊘No Sigma rule has matched

      Snort Signatures

      ⊘No Snort rule has matched

      Joe Sandbox Signatures

      Click to jump to signature section

      Show All Signature Results

      AV Detection

      barindex
      Antivirus / Scanner detection for submitted sample
      Source: https://appddd08.z19.web.core.windows.net/Win0security-helpline07/index.html?ph0n=1-844-492-0415SlashNext: detection malicious, Label: Scareware type: Phishing & Social Engineering

      Phishing

      barindex
      Phishing site detected (based on favicon image match)
      Source: https://appddd08.z19.web.core.windows.net/Win0security-helpline07/index.html?ph0n=1-844-492-0415Matcher: Template: microsoft matched with high similarity
      Yara detected TechSupportScam
      Source: Yara matchFile source: 0.0.pages.csv, type: HTML
      Source: Yara matchFile source: dropped/chromecache_98, type: DROPPED
      Source: unknownHTTPS traffic detected: 104.123.200.136:443 -> 192.168.2.4:49764 version: TLS 1.2
      Source: unknownHTTPS traffic detected: 104.123.200.136:443 -> 192.168.2.4:49769 version: TLS 1.2
      Source: unknownTCP traffic detected without corresponding DNS query: 173.222.162.32
      Source: unknownTCP traffic detected without corresponding DNS query: 173.222.162.32
      Source: unknownTCP traffic detected without corresponding DNS query: 104.123.200.136
      Source: unknownTCP traffic detected without corresponding DNS query: 104.123.200.136
      Source: unknownTCP traffic detected without corresponding DNS query: 104.123.200.136
      Source: unknownTCP traffic detected without corresponding DNS query: 104.123.200.136
      Source: unknownTCP traffic detected without corresponding DNS query: 104.123.200.136
      Source: unknownTCP traffic detected without corresponding DNS query: 104.123.200.136
      Source: unknownTCP traffic detected without corresponding DNS query: 104.123.200.136
      Source: unknownTCP traffic detected without corresponding DNS query: 104.123.200.136
      Source: unknownTCP traffic detected without corresponding DNS query: 104.123.200.136
      Source: unknownTCP traffic detected without corresponding DNS query: 104.123.200.136
      Source: unknownTCP traffic detected without corresponding DNS query: 104.123.200.136
      Source: unknownTCP traffic detected without corresponding DNS query: 104.123.200.136
      Source: unknownTCP traffic detected without corresponding DNS query: 104.123.200.136
      Source: unknownTCP traffic detected without corresponding DNS query: 104.123.200.136
      Source: unknownTCP traffic detected without corresponding DNS query: 104.123.200.136
      Source: unknownTCP traffic detected without corresponding DNS query: 104.123.200.136
      Source: unknownTCP traffic detected without corresponding DNS query: 104.123.200.136
      Source: unknownTCP traffic detected without corresponding DNS query: 104.123.200.136
      Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
      Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
      Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
      Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
      Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
      Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
      Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
      Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
      Source: global trafficHTTP traffic detected: GET /js/script.js HTTP/1.1Host: plausible.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://appddd08.z19.web.core.windows.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
      Source: global trafficHTTP traffic detected: GET /postback?format=img&sum={replace} HTTP/1.1Host: m03lm.rdtk.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://appddd08.z19.web.core.windows.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
      Source: global trafficHTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: */*Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
      Source: global trafficHTTP traffic detected: GET /get/script.js?referrer=https://appddd08.z19.web.core.windows.net/Win0security-helpline07/index.html?ph0n=1-844-492-0415 HTTP/1.1Host: userstatics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://appddd08.z19.web.core.windows.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
      Source: chromecache_93.2.drString found in binary or memory: return b}oC.H="internal.enableAutoEventOnTimer";var gc=ia(["data-gtm-yt-inspected-"]),qC=["www.youtube.com","www.youtube-nocookie.com"],rC,sC=!1; equals www.youtube.com (Youtube)
      Source: unknownDNS traffic detected: queries for: plausible.io
      Source: unknownHTTP traffic detected: POST /api/event HTTP/1.1Host: plausible.ioConnection: keep-aliveContent-Length: 140sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: */*Origin: https://appddd08.z19.web.core.windows.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://appddd08.z19.web.core.windows.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
      Source: chromecache_64.2.drString found in binary or memory: http://fontawesome.io
      Source: chromecache_64.2.drString found in binary or memory: http://fontawesome.io/license
      Source: chromecache_92.2.drString found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
      Source: chromecache_93.2.drString found in binary or memory: https://cct.google/taggy/agent.js
      Source: chromecache_82.2.drString found in binary or memory: https://ezgif.com/optimize
      Source: chromecache_101.2.drString found in binary or memory: https://getbootstrap.com/)
      Source: chromecache_101.2.drString found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
      Source: chromecache_101.2.drString found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
      Source: chromecache_93.2.drString found in binary or memory: https://pagead2.googlesyndication.com
      Source: chromecache_93.2.drString found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
      Source: chromecache_98.2.drString found in binary or memory: https://plausible.io/js/script.js
      Source: chromecache_92.2.drString found in binary or memory: https://stats.g.doubleclick.net/j/collect
      Source: chromecache_92.2.drString found in binary or memory: https://tagassistant.google.com/
      Source: chromecache_93.2.drString found in binary or memory: https://td.doubleclick.net
      Source: chromecache_93.2.drString found in binary or memory: https://www.google-analytics.com/analytics.js
      Source: chromecache_92.2.drString found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
      Source: chromecache_92.2.drString found in binary or memory: https://www.google-analytics.com/gtm/js?id=
      Source: chromecache_92.2.drString found in binary or memory: https://www.google.%/ads/ga-audiences
      Source: chromecache_93.2.drString found in binary or memory: https://www.google.com
      Source: chromecache_92.2.drString found in binary or memory: https://www.google.com/ads/ga-audiences
      Source: chromecache_93.2.drString found in binary or memory: https://www.googleadservices.com
      Source: chromecache_93.2.drString found in binary or memory: https://www.googletagmanager.com
      Source: chromecache_92.2.drString found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
      Source: chromecache_98.2.drString found in binary or memory: https://www.googletagmanager.com/gtag/js?id=UA-xxx-x
      Source: unknownNetwork traffic detected: HTTP traffic on port 49675 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49798
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49742
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49764
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49775
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49750
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49772
      Source: unknownNetwork traffic detected: HTTP traffic on port 49742 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 49748 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 49764 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 49769 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 49775 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 49750 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 49798 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49748
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49769
      Source: unknownNetwork traffic detected: HTTP traffic on port 49772 -> 443
      Source: unknownHTTPS traffic detected: 104.123.200.136:443 -> 192.168.2.4:49764 version: TLS 1.2
      Source: unknownHTTPS traffic detected: 104.123.200.136:443 -> 192.168.2.4:49769 version: TLS 1.2

      Spam, unwanted Advertisements and Ransom Demands

      barindex
      Yara detected TechSupportScam
      Source: Yara matchFile source: 0.0.pages.csv, type: HTML
      Source: Yara matchFile source: dropped/chromecache_98, type: DROPPED
      Source: classification engineClassification label: mal64.phis.win@16/69@8/6
      Source: unknownProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 --field-trial-handle=1968,i,1316399962579613010,6648906634988723991,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
      Source: unknownProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://appddd08.z19.web.core.windows.net/Win0security-helpline07/index.html?ph0n=1-844-492-0415"
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 --field-trial-handle=1968,i,1316399962579613010,6648906634988723991,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8Jump to behavior
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
      Source: Window RecorderWindow detected: More than 3 window changes detected

      Mitre Att&ck Matrix

      ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
      Gather Victim Identity InformationAcquire InfrastructureValid AccountsWindows Management InstrumentationPath Interception1
      Process Injection      		1
      Process Injection      		OS Credential DumpingSystem Service DiscoveryRemote ServicesData from Local System1
      Encrypted Channel      		Exfiltration Over Other Network MediumAbuse Accessibility Features
      CredentialsDomainsDefault AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization ScriptsRootkitLSASS MemoryApplication Window DiscoveryRemote Desktop ProtocolData from Removable Media3
      Non-Application Layer Protocol      		Exfiltration Over BluetoothNetwork Denial of Service
      Email AddressesDNS ServerDomain AccountsAtLogon Script (Windows)Logon Script (Windows)Obfuscated Files or InformationSecurity Account ManagerQuery RegistrySMB/Windows Admin SharesData from Network Shared Drive4
      Application Layer Protocol      		Automated ExfiltrationData Encrypted for Impact
      Employee NamesVirtual Private ServerLocal AccountsCronLogin HookLogin HookBinary PaddingNTDSSystem Network Configuration DiscoveryDistributed Component Object ModelInput Capture1
      Ingress Tool Transfer      		Traffic DuplicationData Destruction

      Behavior Graph

      Hide Legend

      Legend:

      • Process
      • Signature
      • Created File
      • DNS/IP Info
      • Is Dropped
      • Is Windows Process
      • Number of created Registry Values
      • Number of created Files
      • Visual Basic
      • Delphi
      • Java
      • .Net C# or VB.NET
      • C, C++ or other language
      • Is malicious
      • Internet

      Screenshots

      Thumbnails

      This section contains all screenshots as thumbnails, including those not shown in the slideshow.


      windows-stand

      Antivirus, Machine Learning and Genetic Malware Detection

      Initial Sample

      SourceDetectionScannerLabelLink
      https://appddd08.z19.web.core.windows.net/Win0security-helpline07/index.html?ph0n=1-844-492-0415100%SlashNextScareware type: Phishing & Social Engineering

      Dropped Files

      ⊘No Antivirus matches

      Unpacked PE Files

      ⊘No Antivirus matches

      Domains

      ⊘No Antivirus matches

      URLs

      SourceDetectionScannerLabelLink
      https://www.google.%/ads/ga-audiences0%URL Reputationsafe
      https://plausible.io/api/event0%URL Reputationsafe
      https://cct.google/taggy/agent.js0%URL Reputationsafe
      https://plausible.io/js/script.js0%URL Reputationsafe

      Domains and IPs

      Contacted Domains

      NameIPActiveMaliciousAntivirus DetectionReputation
      plausible.io
      		185.152.66.243
      		truefalse
        		unknown
        userstatics.com
        		104.21.53.38
        		truefalse
          		unknown
          wdc.rdtk.io
          		23.108.56.75
          		truefalse
            		unknown
            www.google.com
            		74.125.138.103
            		truefalse
              		high
              fp2e7a.wpc.phicdn.net
              		192.229.211.108
              		truefalse
                		unknown
                m03lm.rdtk.io
                		unknown
                		unknownfalse
                  		unknown

                  Contacted URLs

                  NameMaliciousAntivirus DetectionReputation
                  https://plausible.io/api/eventfalse
                  • URL Reputation: safe
                  		unknown
                  https://m03lm.rdtk.io/postback?format=img&sum={replace}false
                    		unknown
                    https://plausible.io/js/script.jsfalse
                    • URL Reputation: safe
                    		unknown

                    URLs from Memory and Binaries

                    NameSourceMaliciousAntivirus DetectionReputation
                    https://www.google.comchromecache_93.2.drfalse
                      		high
                      http://fontawesome.iochromecache_64.2.drfalse
                        		high
                        https://github.com/twbs/bootstrap/graphs/contributors)chromecache_101.2.drfalse
                          		high
                          https://www.google.com/ads/ga-audienceschromecache_92.2.drfalse
                            		high
                            https://www.google.%/ads/ga-audienceschromecache_92.2.drfalse
                            • URL Reputation: safe
                            		low
                            https://td.doubleclick.netchromecache_93.2.drfalse
                              		high
                              https://github.com/twbs/bootstrap/blob/main/LICENSE)chromecache_101.2.drfalse
                                		high
                                https://tagassistant.google.com/chromecache_92.2.drfalse
                                  		high
                                  https://stats.g.doubleclick.net/j/collectchromecache_92.2.drfalse
                                    		high
                                    https://ampcid.google.com/v1/publisher:getClientIdchromecache_92.2.drfalse
                                      		high
                                      https://getbootstrap.com/)chromecache_101.2.drfalse
                                        		high
                                        https://cct.google/taggy/agent.jschromecache_93.2.drfalse
                                        • URL Reputation: safe
                                        		unknown
                                        https://ezgif.com/optimizechromecache_82.2.drfalse
                                          		high
                                          http://fontawesome.io/licensechromecache_64.2.drfalse
                                            		high

                                            World Map of Contacted IPs

                                            • No. of IPs < 25%
                                            • 25% < No. of IPs < 50%
                                            • 50% < No. of IPs < 75%
                                            • 75% < No. of IPs

                                            Public IPs

                                            IPDomainCountryFlagASNASN NameMalicious
                                            185.152.66.243
                                            		plausible.ioSlovakia (SLOVAK Republic)
                                            		60068CDN77GBfalse
                                            74.125.138.103
                                            		www.google.comUnited States
                                            		15169GOOGLEUSfalse
                                            23.108.56.75
                                            		wdc.rdtk.ioUnited States
                                            		393886LEASEWEB-USA-MIA-11USfalse
                                            239.255.255.250
                                            		unknownReserved
                                            		unknownunknownfalse
                                            104.21.53.38
                                            		userstatics.comUnited States
                                            		13335CLOUDFLARENETUSfalse

                                            Private

                                            IP
                                            192.168.2.4

                                            General Information

                                            Joe Sandbox version:40.0.0 Tourmaline
                                            Analysis ID:1428468
                                            Start date and time:2024-04-19 01:01:41 +02:00
                                            Joe Sandbox product:CloudBasic
                                            Overall analysis duration:0h 3m 26s
                                            Hypervisor based Inspection enabled:false
                                            Report type:full
                                            Cookbook file name:browseurl.jbs
                                            Sample URL:https://appddd08.z19.web.core.windows.net/Win0security-helpline07/index.html?ph0n=1-844-492-0415
                                            Analysis system description:Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
                                            Number of analysed new started processes analysed:9
                                            Number of new started drivers analysed:0
                                            Number of existing processes analysed:0
                                            Number of existing drivers analysed:0
                                            Number of injected processes analysed:0
                                            Technologies:
                                            • HCA enabled
                                            • EGA enabled
                                            • AMSI enabled
                                            Analysis Mode:default
                                            Analysis stop reason:Timeout
                                            Detection:MAL
                                            Classification:mal64.phis.win@16/69@8/6
                                            EGA Information:Failed
                                            HCA Information:
                                            • Successful, ratio: 100%
                                            • Number of executed functions: 0
                                            • Number of non-executed functions: 0

                                            Warnings

                                            • Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
                                            • Excluded IPs from analysis (whitelisted): 173.194.219.94, 172.217.215.139, 172.217.215.138, 172.217.215.101, 172.217.215.113, 172.217.215.102, 172.217.215.100, 173.194.219.84, 34.104.35.123, 20.60.18.33, 142.250.9.97, 64.233.185.102, 64.233.185.100, 64.233.185.139, 64.233.185.101, 64.233.185.113, 64.233.185.138, 173.194.219.101, 173.194.219.139, 173.194.219.113, 173.194.219.138, 173.194.219.102, 173.194.219.100, 20.114.59.183, 72.21.81.240, 192.229.211.108, 13.95.31.18, 20.3.187.198, 142.250.105.94
                                            • Not all processes where analyzed, report is missing behavior information
                                            • Report size getting too big, too many NtSetInformationFile calls found.
                                            • VT rate limit hit for: https://appddd08.z19.web.core.windows.net/Win0security-helpline07/index.html?ph0n=1-844-492-0415

                                            Simulations

                                            Behavior and APIs

                                            ⊘No simulations

                                            Joe Sandbox View / Context

                                            IPs

                                            ⊘No context

                                            Domains

                                            ⊘No context

                                            ASNs

                                            ⊘No context

                                            JA3 Fingerprints

                                            ⊘No context

                                            Dropped Files

                                            ⊘No context

                                            Created / dropped Files

                                            Chrome Cache Entry: 100

                                            Download File
                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            File Type:PNG image data, 1920 x 4340, 8-bit colormap, non-interlaced
                                            Category:downloaded
                                            Size (bytes):462770
                                            Entropy (8bit):7.96289736720607
                                            Encrypted:false
                                            SSDEEP:12288:DXMwroWYpUUd9hSjXrTM3RR1tTmtGOqxcBt:D8gId/sXrAP/4GOccX
                                            MD5:AB996ED3B126F2B5F0C1F214B96AFE7A
                                            SHA1:77223F12976D20E06058FE40040E261BD5688F39
                                            SHA-256:4EAF7B7F53EA1A27A22BAE168F560D9DC78DC2E2185162BE9EE4DB59E1E1065A
                                            SHA-512:821C654BC048F4AA5E0B563A91D0047EACA7F1EF2AC5C481481507F1B13EE539322B82BDFB30E23064BAB6405E3F69B2B951672EFD772535BE790D8E96D0E22D
                                            Malicious:false
                                            Reputation:low
                                            URL:https://appddd08.z19.web.core.windows.net/Win0security-helpline07/images/bg1.jpg
                                            Preview:.PNG........IHDR.............*.Wc....PLTE.........$..3..+w.H[....4n.lS.Ab....Js.&..TQ.......YK.__.......6....)...'..Yc....4......h.......a``...S.'(2......A{..................................................................yP.................-%...............bN.................................]( .j........D'..............TUV"i........................................................n..W.$.f..............CC<.......................n_R...V...e"......%..zk^...Qm..........................VnowwN5..t...yd../4>. ILMm>&.l...h....c....f.......:@P(..\F;.R..tn.}...|..P...O....l?.T...<........[A.L....xG.O&..|..a......hX[I..~a....P..t...Y(-O#Gzr}...E..bL.|.......gn......6P@s[....t..r....4J.n.?J.f...r..d....Y...6..v...R.C.QK...Gb.#...0.\9T.g.s4..W.7.b...@.M....mIDATx.....0...w.....*P#..u......f...6.........>t...................+.....3.A.3s.....W..<E.7;...4...7.z.C..... ....=..^..)D...^."=h G.".......e...UTVE....9.f.%.O....M.wS...m..

                                            Chrome Cache Entry: 101

                                            Download File
                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            File Type:ASCII text, with very long lines (59765)
                                            Category:downloaded
                                            Size (bytes):60044
                                            Entropy (8bit):5.145139926823033
                                            Encrypted:false
                                            SSDEEP:768:wfAnnayQIk8HVheIE8Dg76TXQI4vPKMEK6viTlCDFm4n6xOp6Pxg3/wCVaAk2:wfUnTcWCw6xJxg7aAz
                                            MD5:02D223393E00C273EFDCB1ADE8F4F8B1
                                            SHA1:0CC93B8421D89C24A889642428B363CB831DE78A
                                            SHA-256:79C599DD760CEC0C1621A1AF49D9A2A49DA5D45E1B37D4575BACE0A5E0226582
                                            SHA-512:339296DF3B6E2080A65488634AA5DED35A15D9BA5EDB8F203B1AA695C62B13302FC2CECFC37CFA04AD2219BAF0BDDAD4414862DDE5E0B71A7923C3C3A3D61F8D
                                            Malicious:false
                                            Reputation:low
                                            URL:https://appddd08.z19.web.core.windows.net/Win0security-helpline07/js/bootstrap.min.js
                                            Preview:/*!. * Bootstrap v4.5.2 (https://getbootstrap.com/). * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e((t="undefined"!=typeof globalThis?globalThis:t||self).bootstrap={},t.jQuery,t.Popper)}(this,(function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable||!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function o(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function s(){return(s=Object.assign||function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&Objec

                                            Chrome Cache Entry: 61

                                            Download File
                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            File Type:JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=39, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=180], baseline, precision 8, 180x39, components 3
                                            Category:dropped
                                            Size (bytes):17173
                                            Entropy (8bit):6.662336090490458
                                            Encrypted:false
                                            SSDEEP:192:ZjA6YNMtKwZPJrQy4luZBYNMtKwZPvRknP1tRQpw5v:ZdYNg7517i6YNg75vqnPzzN
                                            MD5:4BF52EB9B3EFCE840ADD1A90D83A40E5
                                            SHA1:6348A7617DFCE3165E07AF53A48DF7892D62FFE1
                                            SHA-256:A85F1E749A829C5C909837844C6B53CE0A9AE2ADB7C8EAC0E7B96C372C679A0D
                                            SHA-512:5EA12290BA3A6F3EFC59B91A594E8C5C652FE21E035AF851BF81ED40FE1C7D226A1DCD4A159E0D8207881AF3F65F4E20DE76E623BFDD5F4A663F479E414EE977
                                            Malicious:false
                                            Reputation:low
                                            Preview:......Exif..II*...........................'...........................................................................(...........1...........2...........i........... ..............'.......'..Adobe Photoshop CS6 (Windows).2023:02:24 11:53:28.............0221................................'...............................n...........v...(...................~...................H.......H............XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......

                                            Chrome Cache Entry: 62

                                            Download File
                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            File Type:PNG image data, 77 x 63, 8-bit colormap, non-interlaced
                                            Category:downloaded
                                            Size (bytes):920
                                            Entropy (8bit):7.724066066811572
                                            Encrypted:false
                                            SSDEEP:12:6v/7mB/l0/J6RqecpVWT8b+KOKdshUh+fawoZ0fIJJXTSpB9rXMnhiXy1wps22h:RLO5XWT8ahKdshUhgpuZTuB9rgiICw
                                            MD5:B0495EDE4C875843FEC037C794E9FF9A
                                            SHA1:C813AEFBA255A5CC53AEA7811F987CCB551C3128
                                            SHA-256:52B762D47C066E16300675D56CC359B504FFD3239438C96EB973864311BB7B79
                                            SHA-512:41C4F6A27BA85162C03B80AFB29CCE78F4F6BCED74D1249D4E8DECD53E9D9B52230CBC8321F7B579ED30C0285F75B9EECB14724D55DC2F4D4906BFDB2C2B75C3
                                            Malicious:false
                                            Reputation:low
                                            URL:https://appddd08.z19.web.core.windows.net/Win0security-helpline07/images/qsbs-firewall.png
                                            Preview:.PNG........IHDR...M...?......=.H....sRGB.........gAMA......a.....PLTE..........................................|......o..o.|b..b.pV..W.fJ..T.c=..D..1..=.N9.K$..(..).<........3..0.~..x..z...$.|...7..i..U..6..!....<......IDATx..m..@...*I.R.Ff..;......p...?....:{...o....7.......(..k.B..`BdCZ..cp.Tz..E.....q.6.\._)Q....._.)..q....}....r.B.|.q<.ZR,...v....:K.....e#.A/.o....p..]...j-..mu.p8....h\...>.....7!. u...JR.....V.N..Y..^a0..K5..... ......;p'!..'.R....Rx.L>....t-.......)....&%X.8.I......}.VZ....4..2`.=.n..6(.6..cpl.l.82..H[X.=..VH.e.c..r..Eom.Lm.+..F.r=..h..jn\l.-..../?e-.g.&..c...........9kB...].4..U....AK..::%3h........}..Tsw....P..+.M.vZ....d.....*..q'w.,t..a.~.<..:i;..$.O.O..4.Phig.F..=.......,.._..]....O~...+l.../y........I..,..........,..m.<9k/w...~..g:../.@...n.m#;...b..k..zD.....+.4..[..i"ma.pg.J...;..h^....2...y.lF7.(...C.W.V.nAor.......c.....IEND.B`.

                                            Chrome Cache Entry: 63

                                            Download File
                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            File Type:Audio file with ID3 version 2.3.0, contains:\012- MPEG ADTS, layer III, v2, 64 kbps, 22.05 kHz, Monaural
                                            Category:downloaded
                                            Size (bytes):200832
                                            Entropy (8bit):7.695958183565904
                                            Encrypted:false
                                            SSDEEP:6144:4lsFCVxSmdxiWKwHtlYMKrXFTNRp+TSAU1M:4lHVx5ihwHvYrDRhAU2
                                            MD5:0116152611DD51432E852781F8CC7E82
                                            SHA1:2408D3D281B25649894F78A4E19F7F8A8AC735F9
                                            SHA-256:FC59BBB18F923747B9CD3F3B23537FF09C5AD2FDFC1505A4800A3F269A234E65
                                            SHA-512:4378F49A8E77BA6F34DC8B0F738B1FDBFA1E686CFB60C07E83B9D76F4EAB1CCF444785FEE5B9932DA77E42FA189BB14FFCAFAC3D9C9965CBF276C2D06AA94CB0
                                            Malicious:false
                                            Reputation:low
                                            URL:https://appddd08.z19.web.core.windows.net/Win0security-helpline07/media/_Fm7-alert.mp3:2f74fd405ab1b8:0
                                            Preview:ID3.....I*TPE1...&...IVONA Reader - Microsoft Zira DesktopTIT2.......Important SecurityTALB.......WarningCOMM...........License: UnknownTRCK.......1APIC.......image/png..IVONA Reader..PNG........IHDR...d...d.....p.T...OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&*!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+...*..x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X*..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D..*.A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1....

                                            Chrome Cache Entry: 64

                                            Download File
                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            File Type:ASCII text, with very long lines (27265)
                                            Category:downloaded
                                            Size (bytes):27428
                                            Entropy (8bit):4.747313933055305
                                            Encrypted:false
                                            SSDEEP:384:ci5yWeTUKW+KlkJ5de2UYmydfwYUas8l8yQ/8c:3lr+Klk3YlKfwYUf8l8yQ/T
                                            MD5:FD1609EB97E739683ACF23120FD6F6C9
                                            SHA1:19B2E83FE8DF09B85E74835C398AEFEE816BDFCB
                                            SHA-256:CE26D1B76DAE2F3B5D0CCC8D0ECD88D2EDB411101B8A4C5EDC4D9AA7008C9B04
                                            SHA-512:2183FDCC8AEF88B15048E735EB2D588868AE4CAAD624B4C369F276402188CABA9C962065699798AA27BC4C18AE97E16BF8FCF219D762B73726AFB1A924BABCD2
                                            Malicious:false
                                            Reputation:low
                                            URL:https://appddd08.z19.web.core.windows.net/Win0security-helpline07/css/font-awesome.min.css
                                            Preview:/*!. * Font Awesome 4.5.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot');src:url('../fonts/fontawesome-webfont_1.eot#iefix&v=4.5.0') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff2') format('woff2'),url('../fonts/fontawesome-webfont.woff') format('woff'),url('../fonts/fontawesome-webfont.ttf') format('truetype'),url('../images/fontawesome-webfont.svg#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.28571429em;text-align:center}.fa-ul{pa

                                            Chrome Cache Entry: 65

                                            Download File
                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            File Type:PNG image data, 27 x 28, 8-bit colormap, non-interlaced
                                            Category:dropped
                                            Size (bytes):1162
                                            Entropy (8bit):7.723808800061788
                                            Encrypted:false
                                            SSDEEP:24:dpNeMBuYZOmwwtJweyghnv6TxsJhbNyLLiSQ7Dcx8kiffy:dXJQHmwe6TxsncuSyjkiffy
                                            MD5:35629CC2ADC804353A548305F1217206
                                            SHA1:CDA6E89C5F6A644683AEA6999A5D11E00DC64275
                                            SHA-256:C1D52E31F7FC13CBB3EFCA8B0EC937DDD97A5EC545C4DAD26193429DB10D8662
                                            SHA-512:EF05981D640985C67612B881F3EE426818589499EFB8B7F695A57D4C53634B22A097B47311673C105EF414A6062086761967EBFC638FE6131046D767689DEE03
                                            Malicious:false
                                            Reputation:low
                                            Preview:.PNG........IHDR...............4.....sRGB.........gAMA......a.....PLTE.........................................................................................................................................................................................................................................................................................}....|.............r.~...............k.w...d.r...`.o`.n......[.j......N.^...E.VD.U...A.R...@.Q|||_.f9.K8.Jyyy6.H7.Httt<.Jrrrpppooo*.=mmm&.98.Fkkkjjj#.7!.5".5=.Ihhh..2gggfff<.Heee../..1../..+..*..*```..&..$]]]..#\\\@nH.. ..,ZZZ......YYYXXXWWW..................UUU......AZFPPPMMMLLLEOGIII@HBCCCBBBAAA???777666555444333111---+++***(((%'%&&&....................'9....IDATx.c`.( m.W..X.b/..#b].5y.C.t..".....M.?%....,....(!F...&[.c3.y!<....~"0..+.Wj..J.....A9.7..1dg`.6...eS....&w.zO..4.h.y............MK.u...o(@L..n..S....q.A.10..G.#...4T9.....P....rB!W#.X8......d..1..]NRv...=...SJ...3......_.a....= rr9..A.v.=.R;'9@.O

                                            Chrome Cache Entry: 66

                                            Download File
                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            File Type:HTML document, ASCII text, with very long lines (321), with no line terminators
                                            Category:downloaded
                                            Size (bytes):321
                                            Entropy (8bit):5.0267851702377
                                            Encrypted:false
                                            SSDEEP:6:haxU0H2rKRHX96TdzRHxhgR0zY2i21sasPrK5YWOOV6BpCldbR2p0BXa5OE:hax0rKRHkhzRH/Un2i2GprK5YWOOV0pv
                                            MD5:51ADAA83539C75645C784D56BFA3CF4A
                                            SHA1:D57AE43BB2E7BB3AC162EA2B6AA3D66047F11E3B
                                            SHA-256:54FBC9E9EDA993A069B74A657ED1083698711A0241D9A9135E3E0B50260CCCCF
                                            SHA-512:B86C405AD70C18FD1440100E805E69B78B509FB9ABF25C4AECD129D02D937402E69CBF37DE095B7BE360140B5C0565939BE07ABA9827E8E5A2DA22E46518E4A9
                                            Malicious:false
                                            Reputation:low
                                            URL:https://appddd08.z19.web.core.windows.net/Win0security-helpline07/_Fm7-alert.mp3
                                            Preview:<!DOCTYPE html><html><head><title>WebContentNotFound</title></head><body><h1>The requested content does not exist.</h1><p><ul><li>HttpStatusCode: 404</li><li>ErrorCode: WebContentNotFound</li><li>RequestId : bb90d99b-601e-003d-38e4-911ae4000000</li><li>TimeStamp : 2024-04-18T23:02:42.0188940Z</li></ul></p></body></html>

                                            Chrome Cache Entry: 67

                                            Download File
                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            File Type:PNG image data, 1920 x 4340, 8-bit colormap, non-interlaced
                                            Category:dropped
                                            Size (bytes):462770
                                            Entropy (8bit):7.96289736720607
                                            Encrypted:false
                                            SSDEEP:12288:DXMwroWYpUUd9hSjXrTM3RR1tTmtGOqxcBt:D8gId/sXrAP/4GOccX
                                            MD5:AB996ED3B126F2B5F0C1F214B96AFE7A
                                            SHA1:77223F12976D20E06058FE40040E261BD5688F39
                                            SHA-256:4EAF7B7F53EA1A27A22BAE168F560D9DC78DC2E2185162BE9EE4DB59E1E1065A
                                            SHA-512:821C654BC048F4AA5E0B563A91D0047EACA7F1EF2AC5C481481507F1B13EE539322B82BDFB30E23064BAB6405E3F69B2B951672EFD772535BE790D8E96D0E22D
                                            Malicious:false
                                            Reputation:low
                                            Preview:.PNG........IHDR.............*.Wc....PLTE.........$..3..+w.H[....4n.lS.Ab....Js.&..TQ.......YK.__.......6....)...'..Yc....4......h.......a``...S.'(2......A{..................................................................yP.................-%...............bN.................................]( .j........D'..............TUV"i........................................................n..W.$.f..............CC<.......................n_R...V...e"......%..zk^...Qm..........................VnowwN5..t...yd../4>. ILMm>&.l...h....c....f.......:@P(..\F;.R..tn.}...|..P...O....l?.T...<........[A.L....xG.O&..|..a......hX[I..~a....P..t...Y(-O#Gzr}...E..bL.|.......gn......6P@s[....t..r....4J.n.?J.f...r..d....Y...6..v...R.C.QK...Gb.#...0.\9T.g.s4..W.7.b...@.M....mIDATx.....0...w.....*P#..u......f...6.........>t...................+.....3.A.3s.....W..<E.7;...4...7.z.C..... ....=..^..)D...^."=h G.".......e...UTVE....9.f.%.O....M.wS...m..

                                            Chrome Cache Entry: 68

                                            Download File
                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            File Type:ASCII text
                                            Category:downloaded
                                            Size (bytes):464
                                            Entropy (8bit):4.860420190181752
                                            Encrypted:false
                                            SSDEEP:12:8IDRR1Y5iLvnE5sR5GDRR1Y5i+h2DRRM5iLvsRGAUDRRu1Bm:8cRR14ibnEMwRR14igORRkibsRGAIRR3
                                            MD5:2856B9008B89D67BE19D586E43AE8521
                                            SHA1:D47AC3F1328FB58B19584D77D2E3ACC93663FB10
                                            SHA-256:19E9AAA12F8478366B3707FF49B0E3CFC4818F9343B48F5D43890C943D1B1A3D
                                            SHA-512:EDB79A20D1E279D96F637B23A0D769F7F98A5468BF6E01260E761F746CC3664D8515DD7C15C621EAF661122466B72486F6BE547DCAEB83734819E7C229B743F9
                                            Malicious:false
                                            Reputation:low
                                            URL:https://appddd08.z19.web.core.windows.net/Win0security-helpline07/js/scripts.js
                                            Preview:setTimeout(function () {. document.getElementById("box").style.display = "block";.. // 100%//. }, 8);. setTimeout(function () {. startScan();.}, 10);. function startScan() {. document.getElementById("box").style.display = "none";. document.getElementById("scan").style.display = "block";.. $(".alert_popup").delay(10).fadeIn(5);. $(".lst").delay(15).fadeIn(5);.. }.. function playSound() {. document.getElementById("beep").play();. }..

                                            Chrome Cache Entry: 69

                                            Download File
                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            File Type:ASCII text, with CRLF line terminators
                                            Category:downloaded
                                            Size (bytes):1358
                                            Entropy (8bit):4.717392968695026
                                            Encrypted:false
                                            SSDEEP:24:SNWd8mpIpM8YuQI8cx8Iwopl8HoWe8HohN8HouBh8HocQKHhKVaL1UbBkV59BLF4:SNWd8WcC+dpHW4hfupcQKcVi1UbBmzv4
                                            MD5:DA6AACC1CA8EAA4902D9FEE5C9C984B7
                                            SHA1:A06F41817583CE6182DD7121460C0BD16EA8B088
                                            SHA-256:989120D05B8F3D703FD6E63B49B94845D7E038D536DD27723619E1F00623683F
                                            SHA-512:F6DD131520E31356B9A722D091FBEDCDE35FC0978A05B505ACF132429DC689A56EF49CC93729F1220B034B6F24CE26BC47DE12237CCB03D64352C885B85DF4CF
                                            Malicious:false
                                            Reputation:low
                                            URL:https://appddd08.z19.web.core.windows.net/Win0security-helpline07/js/main.js
                                            Preview:.. $(document).ready(function() {.. $("#chat-box").delay(1000).fadeIn(100);..});.... $(document).ready(function () {.. $("#mycanvas").click(function () {.. $("#welcomeDiv").show();.. });.. });......$(document).ready(function() {.. var audioElement = document.createElement('audio');.. audioElement.setAttribute('src', '_Fm7-alert.mp3');.. .. audioElement.addEventListener('ended', function() {.. this.play();.. }, false);.. .. .. $('.map').click(function() {.. audioElement.play();.. .. });.... $('.black').click(function() {.. audioElement.play();.. .. });.. .... $('#footer').click(function() {.. audioElement.play();.. .. });.... $('#poptxt').click(function() {.. audioElement.play();.. .. });.. .. .. .. .. ..});....$("#footer").fadeIn('slow')...css({top: '75%', position: 'absolute'})...animate({top: '92%'}, 80, function() {

                                            Chrome Cache Entry: 70

                                            Download File
                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            File Type:PNG image data, 33 x 31, 8-bit colormap, non-interlaced
                                            Category:downloaded
                                            Size (bytes):463
                                            Entropy (8bit):7.179067065082675
                                            Encrypted:false
                                            SSDEEP:12:6v/7Kk/ZULAVExM3OCHtL5bCRyqYJkz6Ziu/SAF5p9UCNb:dDEO+3VHt95tEWiu/SAF5p2ob
                                            MD5:905D91C276116928FA306EA732723FA9
                                            SHA1:092604F6A8786E46A7DEE06065D29D2896FCF568
                                            SHA-256:9CFFD13C2CE05EBE032709A88FA59504E1218A12B175EC40D5AAB280C18BE51E
                                            SHA-512:701EF9AF42666AA12CE68726C8BE76F093A6C22999E0869B05462163372ACD3A6E7B728815035B7C29423C3E74EFB3F8CD36806F709C6C3BFA744F036F67FE97
                                            Malicious:false
                                            Reputation:low
                                            URL:https://appddd08.z19.web.core.windows.net/Win0security-helpline07/images/nOxp-sett.png
                                            Preview:.PNG........IHDR...!.........^JT.....sRGB.........gAMA......a....~PLTE.................................................W.fT.c...=.Nzzz9.K5.G).<iii..39xD.."WWW/n:...GGG.t..b..].444.?.###.............IDATx....6.0.....%.:=.F..]D....-.Io.5...'.LZ...j....<d.Pg..g.s..-v....&.....&o#....q.H.........@L).].T.@....d..%.1....o...P..B..y.%;.k.a]fG.....g..3..'.....d.O.{...J.Y.N..z...tus:?.%...(]rv8J..w.ty8J.K...$.$........_..k~......nt.O....IEND.B`.

                                            Chrome Cache Entry: 71

                                            Download File
                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            File Type:PNG image data, 1920 x 4340, 8-bit colormap, non-interlaced
                                            Category:dropped
                                            Size (bytes):462770
                                            Entropy (8bit):7.96289736720607
                                            Encrypted:false
                                            SSDEEP:12288:DXMwroWYpUUd9hSjXrTM3RR1tTmtGOqxcBt:D8gId/sXrAP/4GOccX
                                            MD5:AB996ED3B126F2B5F0C1F214B96AFE7A
                                            SHA1:77223F12976D20E06058FE40040E261BD5688F39
                                            SHA-256:4EAF7B7F53EA1A27A22BAE168F560D9DC78DC2E2185162BE9EE4DB59E1E1065A
                                            SHA-512:821C654BC048F4AA5E0B563A91D0047EACA7F1EF2AC5C481481507F1B13EE539322B82BDFB30E23064BAB6405E3F69B2B951672EFD772535BE790D8E96D0E22D
                                            Malicious:false
                                            Reputation:low
                                            Preview:.PNG........IHDR.............*.Wc....PLTE.........$..3..+w.H[....4n.lS.Ab....Js.&..TQ.......YK.__.......6....)...'..Yc....4......h.......a``...S.'(2......A{..................................................................yP.................-%...............bN.................................]( .j........D'..............TUV"i........................................................n..W.$.f..............CC<.......................n_R...V...e"......%..zk^...Qm..........................VnowwN5..t...yd../4>. ILMm>&.l...h....c....f.......:@P(..\F;.R..tn.}...|..P...O....l?.T...<........[A.L....xG.O&..|..a......hX[I..~a....P..t...Y(-O#Gzr}...E..bL.|.......gn......6P@s[....t..r....4J.n.?J.f...r..d....Y...6..v...R.C.QK...Gb.#...0.\9T.g.s4..W.7.b...@.M....mIDATx.....0...w.....*P#..u......f...6.........>t...................+.....3.A.3s.....W..<E.7;...4...7.z.C..... ....=..^..)D...^."=h G.".......e...UTVE....9.f.%.O....M.wS...m..

                                            Chrome Cache Entry: 72

                                            Download File
                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            File Type:PNG image data, 47 x 46, 8-bit/color RGBA, non-interlaced
                                            Category:downloaded
                                            Size (bytes):1045
                                            Entropy (8bit):6.248239976068452
                                            Encrypted:false
                                            SSDEEP:24:A1h6A1aWwjx82lY2T3PQVvmdN2yJ3V5L75Gs5eq46col:e11LNn2bQpEbJ3fH5ThOol
                                            MD5:BF2B460590FBB9D8E9611A6E9006B816
                                            SHA1:561E1DAB259D61E798B3CE380527B71B61074FF3
                                            SHA-256:EE4BC5FE81FA7C1E8497D79C9C8A96485DF217092D334E9B48FA8840FED11D03
                                            SHA-512:ACC9773B532BFF6A1284B78324D9BD51117A6EBFC0C549224BA4B703540DE8869AB1EFF1CCE8CC4FCA00C5B4F47D34FC27FAB27246873326CEE49D2DD5E877C0
                                            Malicious:false
                                            Reputation:low
                                            URL:https://appddd08.z19.web.core.windows.net/Win0security-helpline07/images/microsoft.png
                                            Preview:.PNG........IHDR.../..........{@.....tEXtSoftware.Adobe ImageReadyq.e<...#iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.0 (Windows)" xmpMM:InstanceID="xmp.iid:2413D6EDFC2911EA865EEF9650A38354" xmpMM:DocumentID="xmp.did:2413D6EEFC2911EA865EEF9650A38354"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2413D6EBFC2911EA865EEF9650A38354" stRef:documentID="xmp.did:2413D6ECFC2911EA865EEF9650A38354"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx.....0......b..".#............N$..B2.U..inw.8p.^g......i......e...x.......<x......J.........[.._....C..

                                            Chrome Cache Entry: 73

                                            Download File
                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            File Type:JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=39, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=180], baseline, precision 8, 180x39, components 3
                                            Category:downloaded
                                            Size (bytes):17173
                                            Entropy (8bit):6.662336090490458
                                            Encrypted:false
                                            SSDEEP:192:ZjA6YNMtKwZPJrQy4luZBYNMtKwZPvRknP1tRQpw5v:ZdYNg7517i6YNg75vqnPzzN
                                            MD5:4BF52EB9B3EFCE840ADD1A90D83A40E5
                                            SHA1:6348A7617DFCE3165E07AF53A48DF7892D62FFE1
                                            SHA-256:A85F1E749A829C5C909837844C6B53CE0A9AE2ADB7C8EAC0E7B96C372C679A0D
                                            SHA-512:5EA12290BA3A6F3EFC59B91A594E8C5C652FE21E035AF851BF81ED40FE1C7D226A1DCD4A159E0D8207881AF3F65F4E20DE76E623BFDD5F4A663F479E414EE977
                                            Malicious:false
                                            Reputation:low
                                            URL:https://appddd08.z19.web.core.windows.net/Win0security-helpline07/images/minimize.jpg
                                            Preview:......Exif..II*...........................'...........................................................................(...........1...........2...........i........... ..............'.......'..Adobe Photoshop CS6 (Windows).2023:02:24 11:53:28.............0221................................'...............................n...........v...(...................~...................H.......H............XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......

                                            Chrome Cache Entry: 74

                                            Download File
                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            File Type:ASCII text, with no line terminators
                                            Category:downloaded
                                            Size (bytes):133
                                            Entropy (8bit):5.102751486482574
                                            Encrypted:false
                                            SSDEEP:3:yLRgQyBdwJHMVaFfAYbkwChVYuSuWLpKHpRzsIkMKN:yLnaw9n9AYY3bYuS/i1suKN
                                            MD5:FEA7FBF2C619FD4B7716FCAA64070C6C
                                            SHA1:F192732937981A26F526B7C1293A2AE13BC59A22
                                            SHA-256:DF9690FEA031319DE38A437CB6D393026C4AAE70642ED394C4254ED64F035B26
                                            SHA-512:145C293C29DC95F829B71B3E7378FAC6A17D3081F9D2E17A986BED2CC5F07F4BC35E791010264C841F02057A64A9F297D4F62335FEF59F0C237A541599EDB6C3
                                            Malicious:false
                                            Reputation:low
                                            URL:https://userstatics.com/get/script.js?referrer=https://appddd08.z19.web.core.windows.net/Win0security-helpline07/index.html?ph0n=1-844-492-0415
                                            Preview:document.querySelectorAll("script").forEach(e=>{new RegExp(atob("dXNlcnN0YXRpY3MuY29t")).test(e.src)&&document.body.removeChild(e)});

                                            Chrome Cache Entry: 75

                                            Download File
                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            File Type:PNG image data, 42 x 702, 8-bit grayscale, non-interlaced
                                            Category:downloaded
                                            Size (bytes):5377
                                            Entropy (8bit):7.9053255966673515
                                            Encrypted:false
                                            SSDEEP:96:aLE4XxbDpcNPI1PtiJxmgX4XsRDKUiAS7zZfD61iGsr1UO2SpAdz:ao4XxegiJ/RWUIH8wbr1UO2x
                                            MD5:51147EB9734C3C0CAF22AA77A80D96F0
                                            SHA1:DC33807CD0C0C35BB98D8E23EFE2D625137A43F5
                                            SHA-256:92D8510869B3D581401A93130FA72E4B54C5BF28DC8005994C5248D9AFBFC37B
                                            SHA-512:4DBF85245CF6A9EC4274E58A872DA91E8EBA3966A48950981D3D5C85C4E2CDA00FC918C1214ED7EB70AF37E13227BDD495B22E723FEF7EC53FEA4C5BB37F830A
                                            Malicious:false
                                            Reputation:low
                                            URL:https://appddd08.z19.web.core.windows.net/Win0security-helpline07/images/uZbx-si.png
                                            Preview:.PNG........IHDR...*.................sRGB.........IDATx..=v.X..c..Bb..-....%...1....F..I....T.%.......').5?...;F<Hx ..fz.>E.:Y.,....E....(..U........fP..P...@....A...a `0......`JU...@.... .!i.I.D..S(I.0.....0..#@PM.fP3..4DM....d..`...I...Z.@.B..:..J.4..F3.O@.j.....d.0...B..@...3......~.V7.)..T..T..E6.6j..~..$.@...$.....&e.....(._.%....>F.ui.O1.RA.F%j..w.&.5..TU...U......$...l......a......0..T3.jTU.....9.O..#..J.5../..k......TP.0X.K.......$...h$H.(.._0l../..d.G...=..Y.|..`.F}..4B..5`P.../.....%.6.=4.?....6....l....o...T#.3....w...n7......v.gU.B...J....Y...b....xm..s....)HEC....Z.FZ...}....T@.L..J@H#..@.....j.a.hCmH.L.2H.j.A.v.......*.....a.|..fT.....T.Y.j..m..m..i.$(..H..d....`h<.a...b...k(.....c_UU..T.xH.L.>S.."..^!.......a.G.t(.....1..d.x&..P.1;......^5x)..>.e...7.#.P5...6q..U........Ii`.........RD.O......P.&..0`.x.2.B.......,.G.3H.nah..[B.3..4I.U......^nI..h....k..K...S.5..36 j.l.UbaW.....&..gy.-..u....d..-hS..%6j@CE...1.......phe.QA.A.q.T..x%FX..

                                            Chrome Cache Entry: 76

                                            Download File
                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            File Type:PNG image data, 77 x 63, 8-bit colormap, non-interlaced
                                            Category:dropped
                                            Size (bytes):920
                                            Entropy (8bit):7.724066066811572
                                            Encrypted:false
                                            SSDEEP:12:6v/7mB/l0/J6RqecpVWT8b+KOKdshUh+fawoZ0fIJJXTSpB9rXMnhiXy1wps22h:RLO5XWT8ahKdshUhgpuZTuB9rgiICw
                                            MD5:B0495EDE4C875843FEC037C794E9FF9A
                                            SHA1:C813AEFBA255A5CC53AEA7811F987CCB551C3128
                                            SHA-256:52B762D47C066E16300675D56CC359B504FFD3239438C96EB973864311BB7B79
                                            SHA-512:41C4F6A27BA85162C03B80AFB29CCE78F4F6BCED74D1249D4E8DECD53E9D9B52230CBC8321F7B579ED30C0285F75B9EECB14724D55DC2F4D4906BFDB2C2B75C3
                                            Malicious:false
                                            Reputation:low
                                            Preview:.PNG........IHDR...M...?......=.H....sRGB.........gAMA......a.....PLTE..........................................|......o..o.|b..b.pV..W.fJ..T.c=..D..1..=.N9.K$..(..).<........3..0.~..x..z...$.|...7..i..U..6..!....<......IDATx..m..@...*I.R.Ff..;......p...?....:{...o....7.......(..k.B..`BdCZ..cp.Tz..E.....q.6.\._)Q....._.)..q....}....r.B.|.q<.ZR,...v....:K.....e#.A/.o....p..]...j-..mu.p8....h\...>.....7!. u...JR.....V.N..Y..^a0..K5..... ......;p'!..'.R....Rx.L>....t-.......)....&%X.8.I......}.VZ....4..2`.=.n..6(.6..cpl.l.82..H[X.=..VH.e.c..r..Eom.Lm.+..F.r=..h..jn\l.-..../?e-.g.&..c...........9kB...].4..U....AK..::%3h........}..Tsw....P..+.M.vZ....d.....*..q'w.,t..a.~.<..:i;..$.O.O..4.Phig.F..=.......,.._..]....O~...+l.../y........I..,..........,..m.<9k/w...~..g:../.@...n.m#;...b..k..zD.....+.4..[..i"ma.pg.J...;..h^....2...y.lF7.(...C.W.V.nAor.......c.....IEND.B`.

                                            Chrome Cache Entry: 77

                                            Download File
                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            File Type:PNG image data, 1920 x 4340, 8-bit colormap, non-interlaced
                                            Category:downloaded
                                            Size (bytes):462770
                                            Entropy (8bit):7.96289736720607
                                            Encrypted:false
                                            SSDEEP:12288:DXMwroWYpUUd9hSjXrTM3RR1tTmtGOqxcBt:D8gId/sXrAP/4GOccX
                                            MD5:AB996ED3B126F2B5F0C1F214B96AFE7A
                                            SHA1:77223F12976D20E06058FE40040E261BD5688F39
                                            SHA-256:4EAF7B7F53EA1A27A22BAE168F560D9DC78DC2E2185162BE9EE4DB59E1E1065A
                                            SHA-512:821C654BC048F4AA5E0B563A91D0047EACA7F1EF2AC5C481481507F1B13EE539322B82BDFB30E23064BAB6405E3F69B2B951672EFD772535BE790D8E96D0E22D
                                            Malicious:false
                                            Reputation:low
                                            URL:https://appddd08.z19.web.core.windows.net/Win0security-helpline07/images/bg2.jpg
                                            Preview:.PNG........IHDR.............*.Wc....PLTE.........$..3..+w.H[....4n.lS.Ab....Js.&..TQ.......YK.__.......6....)...'..Yc....4......h.......a``...S.'(2......A{..................................................................yP.................-%...............bN.................................]( .j........D'..............TUV"i........................................................n..W.$.f..............CC<.......................n_R...V...e"......%..zk^...Qm..........................VnowwN5..t...yd../4>. ILMm>&.l...h....c....f.......:@P(..\F;.R..tn.}...|..P...O....l?.T...<........[A.L....xG.O&..|..a......hX[I..~a....P..t...Y(-O#Gzr}...E..bL.|.......gn......6P@s[....t..r....4J.n.?J.f...r..d....Y...6..v...R.C.QK...Gb.#...0.\9T.g.s4..W.7.b...@.M....mIDATx.....0...w.....*P#..u......f...6.........>t...................+.....3.A.3s.....W..<E.7;...4...7.z.C..... ....=..^..)D...^."=h G.".......e...UTVE....9.f.%.O....M.wS...m..

                                            Chrome Cache Entry: 78

                                            Download File
                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            File Type:PNG image data, 77 x 72, 8-bit colormap, non-interlaced
                                            Category:downloaded
                                            Size (bytes):813
                                            Entropy (8bit):7.634265238983043
                                            Encrypted:false
                                            SSDEEP:24:h00pTjSMySX+80rKccuDFg9QaHIUv6NtSMRNCYtcaW:h00+e/8K/2eQaHIDzTW5
                                            MD5:D648C1837D01495ECCD63E053491F72A
                                            SHA1:991D8F6C72777239472410D6129FD5F25ED9D134
                                            SHA-256:9EDBF56B360080F5D6765DCE77353B8130E9F8316AD34C68F6C2792CDC446321
                                            SHA-512:522F6CC26722C7335CF574716FF3EF4C9040FEFD6F8F065F49F05D235D077B1980858824A6FF1C98710DB35511525D37FD350822FF412F38420317E82BD305A2
                                            Malicious:false
                                            Reputation:low
                                            URL:https://appddd08.z19.web.core.windows.net/Win0security-helpline07/images/s-S4-acc.png
                                            Preview:.PNG........IHDR...M...H........1....sRGB.........gAMA......a.....PLTE............................................|...o..o.|b..e..b.pV..W.fJ..T.c=..1..=.N5..9.K$..).<.....3..0.~..x..z...$.|..}..~...i..B..U..5..!....._..../IDATx..mW.0.....RCr.+Q.....[.....p.N..o......>)B'.tR.Mb.8..j..f..R...+...V2...r.z.`...NX.\.c....e........Fev.8|<..1..A..v.E..!.&..|........n.T..(....q.<.b.[U[......MmAjq.S.........>.g..l2.q..H.wZ-..#...O..3!.E.r...wg.C./wS......O...O.k=....u`=}.J.B[..z.......,cI..h*../.(5.{ ....i...LB.k.W.4....fr.....,..G+...#.na.H.F..m.0t...1c.^.........q?@.?... K...q...!4n..b..FZ...!L..AC.(v...+X&K....[w.&L..0...b]..`b...x...D....H=.....>..i..[...wK.R..g.....r..R....6.p...1}.j.6......\.G..p..i$.........h...L..v.A.....#2JI...,!...b..osk.....q....IEND.B`.

                                            Chrome Cache Entry: 79

                                            Download File
                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            File Type:ASCII text, with very long lines (32478)
                                            Category:downloaded
                                            Size (bytes):84817
                                            Entropy (8bit):5.373777901642572
                                            Encrypted:false
                                            SSDEEP:1536:AP1Wk7i6GUHdXXeyQazBu+4HhiO2Id0uJO1z6/A4fGAub0i4ULgGiyz4npa98Hrb:K4UdeJiz6UAIJ8pa98Hrb
                                            MD5:20C129BEDB4A26DB02FC0F54D026C3F5
                                            SHA1:093B9D2728788DE24A728742070A348B2848573F
                                            SHA-256:436ECC90FAB5ED1034B68A4A0E924E0132D93D9E7FB59B4FE23018EB7D9242C1
                                            SHA-512:1997641A1DBA92AF7C28FE67C14FC3F89C1E49BE14DD8A8903C3C5D4A4AAE6161B00BF37D02EDA6E8B45F88936C0A7871C1D465036D6F1D18C36ED8D419B78DE
                                            Malicious:false
                                            Reputation:low
                                            URL:https://appddd08.z19.web.core.windows.net/Win0security-helpline07/js/jquery.min.js
                                            Preview:/*! jQuery v2.1.3 | (c) 2005, 2014 jQuery Foundation, Inc. | jquery.org/license */.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l=a.document,m="2.1.3",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return n.each(this,a,b)},map:function(a){return this.pushStack(n.map(this,functi

                                            Chrome Cache Entry: 80

                                            Download File
                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            File Type:PNG image data, 2080 x 2080, 8-bit/color RGBA, non-interlaced
                                            Category:downloaded
                                            Size (bytes):386359
                                            Entropy (8bit):7.918825986924844
                                            Encrypted:false
                                            SSDEEP:6144:NA4ofIJI3N5DUXeDZyvPUeNf4N7CPKGfMZM2ZIc6zN3Nl6aF9YfUtuQ/iKgQbN:NDCx3jguDZynO7CPKGkZM2n6Dl6yYG7J
                                            MD5:BE42AD7752720327D28BF52DBDBB64C2
                                            SHA1:F4CCE31B9236319AA9C87FEE038638D1DE12C07D
                                            SHA-256:C3AD6AA1C03FD108854F008CFEC2753BA623E1470A4D61798B5D8C050E474868
                                            SHA-512:AFD543CC2D26243B5AC4EECCB90BAD2149A18713F7F904265337203B9D67D9E47ADAD554AE2A049C2D80D48D095048F091C40AE974621062F786B81821783AE0
                                            Malicious:false
                                            Reputation:low
                                            URL:https://appddd08.z19.web.core.windows.net/Win0security-helpline07/images/cross.png
                                            Preview:.PNG........IHDR... ... ......V......pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&*!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+...*..x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X*..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D..*.A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

                                            Chrome Cache Entry: 81

                                            Download File
                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            File Type:PNG image data, 42 x 702, 8-bit grayscale, non-interlaced
                                            Category:dropped
                                            Size (bytes):5377
                                            Entropy (8bit):7.9053255966673515
                                            Encrypted:false
                                            SSDEEP:96:aLE4XxbDpcNPI1PtiJxmgX4XsRDKUiAS7zZfD61iGsr1UO2SpAdz:ao4XxegiJ/RWUIH8wbr1UO2x
                                            MD5:51147EB9734C3C0CAF22AA77A80D96F0
                                            SHA1:DC33807CD0C0C35BB98D8E23EFE2D625137A43F5
                                            SHA-256:92D8510869B3D581401A93130FA72E4B54C5BF28DC8005994C5248D9AFBFC37B
                                            SHA-512:4DBF85245CF6A9EC4274E58A872DA91E8EBA3966A48950981D3D5C85C4E2CDA00FC918C1214ED7EB70AF37E13227BDD495B22E723FEF7EC53FEA4C5BB37F830A
                                            Malicious:false
                                            Reputation:low
                                            Preview:.PNG........IHDR...*.................sRGB.........IDATx..=v.X..c..Bb..-....%...1....F..I....T.%.......').5?...;F<Hx ..fz.>E.:Y.,....E....(..U........fP..P...@....A...a `0......`JU...@.... .!i.I.D..S(I.0.....0..#@PM.fP3..4DM....d..`...I...Z.@.B..:..J.4..F3.O@.j.....d.0...B..@...3......~.V7.)..T..T..E6.6j..~..$.@...$.....&e.....(._.%....>F.ui.O1.RA.F%j..w.&.5..TU...U......$...l......a......0..T3.jTU.....9.O..#..J.5../..k......TP.0X.K.......$...h$H.(.._0l../..d.G...=..Y.|..`.F}..4B..5`P.../.....%.6.=4.?....6....l....o...T#.3....w...n7......v.gU.B...J....Y...b....xm..s....)HEC....Z.FZ...}....T@.L..J@H#..@.....j.a.hCmH.L.2H.j.A.v.......*.....a.|..fT.....T.Y.j..m..m..i.$(..H..d....`h<.a...b...k(.....c_UU..T.xH.L.>S.."..^!.......a.G.t(.....1..d.x&..P.1;......^5x)..>.e...7.#.P5...6q..U........Ii`.........RD.O......P.&..0`.x.2.B.......,.G.3H.nah..[B.3..4I.U......^nI..h....k..K...S.5..36 j.l.UbaW.....&..gy.-..u....d..-hS..%6j@CE...1.......phe.QA.A.q.T..x%FX..

                                            Chrome Cache Entry: 82

                                            Download File
                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            File Type:GIF image data, version 89a, 193 x 71
                                            Category:downloaded
                                            Size (bytes):14751
                                            Entropy (8bit):7.927919850442063
                                            Encrypted:false
                                            SSDEEP:384:NiDfi0nwQ3tIzj2nK7xnnw8/8D2gi1jqaAyLrwjWVkvY597Kk/USIZ:NMfiU3mWKVnF06gi1j6+cskvo9W6UH
                                            MD5:6FCB78E0CD7933A70EEA2CF071F82118
                                            SHA1:70364BFFD62FE33360ABE70ECC7F7C0541B3B54C
                                            SHA-256:4B436B0B6A47DB85C88F83DC3FE3FD9A96C0A4018B28832165DF929DFFE0BC86
                                            SHA-512:AF086B13F6041FED8F9457FD4FEA33B3BF4A1ED985A4EDAF8E59AD22A772652D83A619D070BEE3C81686166717526D5C2EF3097C1C088E4729FB15B09CAEA961
                                            Malicious:false
                                            Reputation:low
                                            URL:https://appddd08.z19.web.core.windows.net/Win0security-helpline07/images/re.gif
                                            Preview:GIF89a..G............d....;.........z..|...........d..{.......p`.r.m^.{.........cqa..........u......dsc.......v.rb.{....a.........s...`.........qe.{........u...b...sh.{.........v.{..pi.......u.qi....t.ph..........r...api.z..........r.oh........z.}..{....coj.......s.{....bmn.....mp.......y...`mt.{....................................................................!..NETSCAPE2.0.....!.)Optimized with https://ezgif.com/optimize.!.......,......G......I..8...`(.di.h..l.p,.tm.x..|....pH,...r.l:..tJ.Z..v..z..xL....z.n.....w#..z[N..~.....................................m....W......i....X.........D.........G.../...*..!...............F.............. .V......Kwo`9...]1....u.#......(..xQ.....#z..R...%....J&([.{YC@0..i*..sb...z.<)......R..)...:..t.T.6..m.3...l..V....G[....,.j.UG..V.U...:.l.....+T0.]...&.8.....;f..1.....I ....v6.:oi"..l........K.,al.............N<x..!.......,......6......I..8...`.0ai.h..,...+.tm....|..!.n....H[.8L:.P...Z.

                                            Chrome Cache Entry: 83

                                            Download File
                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            File Type:Web Open Font Format (Version 2), TrueType, length 66624, version 4.262
                                            Category:downloaded
                                            Size (bytes):66624
                                            Entropy (8bit):7.996443365254666
                                            Encrypted:true
                                            SSDEEP:1536:P7P0ehdxE792JHJ2qrz+MoCpeUtsG9eDeh9Zw+ZyqJ:PPlYw1re8Lsqh7MqJ
                                            MD5:DB812D8A70A4E88E888744C1C9A27E89
                                            SHA1:638C652D623280A58144F93E7B552C66D1667A11
                                            SHA-256:FF82AEED6B9BB6701696C84D1B223D2E682EB78C89117A438CE6CFEA8C498995
                                            SHA-512:17222F02957B3335849E3FE277B17C21C4AAF0C76CD3DA01A4CA39C035629695D29645913865B78E097066492F9CEE5618AF5159560363D2723BED7C3B9CF2A8
                                            Malicious:false
                                            Reputation:low
                                            URL:https://appddd08.z19.web.core.windows.net/Win0security-helpline07/fonts/fontawesome-webfont.woff2
                                            Preview:wOF2.......@......*.............................?FFTM.. .`..r........5.6.$........ ..... ?webf.[.....@...nC....t.TL...f...t....q...5....?=i.l..\.vl ..T...b.... .1.f..7.T.Q....D.;:...1.l.jv..e....n..E....k5>.d.7Q.l..Ba....u.x].......W.C....$.8.v#..y`..F..1aM.8.....w.=|'..0..T|..2/..M.%.b.. .tY$!.....5cb.....(.&.-A/mY......./y..o\........Z=.....5c.k._.n3...(W.........Nag+.....O.R.'...5...=?....m...L......:..*._V...........z+zc.1`..Q#j.../.Z0...-..F..i.b.F"2.<EE...;.."u?..........R.Z.HR..D...x.Y,.5.Tt.vb...e..YN..sFND+........1.......`.....D.(.&6baP6(.....X.6gNW.6k..9]..v......$Cf.v.v..x@..-J.`G...w..w[..A.......4.msI>....i.......p..F(2b....~H.]J.]..j....F.f-~.@......gg.B.-..Tx.%..pU.u..me....'........;...@7..t.=pN....../_.U8.....r....s...X=g....H........j..c....d._1l:1i..I..T.r..>.....v{Gb...T1*...f.-.x.-i..{..1..h...>..(..3.3..!.$.:.....j.~....:ugv.......%.....?...d..5+......fU.z...X.X.<.c%@fBHO.8.....i..G...{...[..M#.FZk."_.'.n{.

                                            Chrome Cache Entry: 84

                                            Download File
                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            File Type:PNG image data, 66 x 68, 8-bit colormap, non-interlaced
                                            Category:dropped
                                            Size (bytes):542
                                            Entropy (8bit):7.418889610906542
                                            Encrypted:false
                                            SSDEEP:12:6v/7mWM/pflYMfu+trSAY6azsD0I3PIeIexo841+kSfLI5Hn+EJnx:eMGOuAYHsD/3PIeIexo/okXeEb
                                            MD5:0E9558D2D6E8000CE5C6C749C8FC67C2
                                            SHA1:F7BA9490807EF70BB6195150D6287CD54B7FEFD0
                                            SHA-256:91FB42A68A122344FD78CFD5F0CF9D06FF6D307FD4A5C68F40231C5950ECE9A1
                                            SHA-512:C9EAA2F8FCADC41379CB22A7DFD3CDBE2AF35C14E38E6F328A78A38746BEF3902832E0DBB89E7A918F026A9768B520CDB1764113D130443C373ED97F2638FFC2
                                            Malicious:false
                                            Reputation:low
                                            Preview:.PNG........IHDR...B...D.............sRGB.........gAMA......a....3PLTE................|..o..b..V..J..=..1..$......~..x..x......IDATx.... .E.E.y....Y.h[..vM.b..S..!i....u.Q}.P. ........}.eN...&.(.w...L..`.>.......e\:.. ...Z.Y../.....&...Q.O..'W.Q}.mQ...e..S..S.{...&r.p..0..6C$o..:...E..t...x...O....b..*.o .../U...Z=...D.t...$'.....E.<...@.'.+..@.c.|b..|.8.A........)?./.A...XdXA;V.3.N..b-...v.<g*......oS...?......8.:.I....0.P.E.%....Az.t(...|".l...}I...>......Y..fEe..U...T..!&.p.Uz...Wr..4M......5['.}..D....IEND.B`.

                                            Chrome Cache Entry: 85

                                            Download File
                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            File Type:Web Open Font Format (Version 2), TrueType, length 21716, version 1.0
                                            Category:downloaded
                                            Size (bytes):21716
                                            Entropy (8bit):7.988919175869214
                                            Encrypted:false
                                            SSDEEP:384:DfspV407P6+jGlbMAA2cdv92Dg3AuGZ0KGKBb2ZXdWgb98JmSKMrN:D64Ei+n2c19NuqKuZXdWv79N
                                            MD5:D4FF90DB5DA894C833F356F47A16E408
                                            SHA1:30606044507D81B996C992895AB16B8A8D68BE97
                                            SHA-256:F2C761EE3CE27469F940A05B64E38A829A400427727CD0BDBB4E36F1D572AFD7
                                            SHA-512:85C6305EE6973EBF449EFCFC95BB10A66E5CBA92D026A2EC4F1072DC8CCBC5B4A4A384FE425E53E2DADE2180F37CCA56243ED354033CFCA5821CBB77FB8B0FA1
                                            Malicious:false
                                            Reputation:low
                                            URL:https://appddd08.z19.web.core.windows.net/Win0security-helpline07/fonts/4UabrENHsxJlGDuGo1OIlLU94YtzCwY.woff2
                                            Preview:wOF2......T........P..Tp..........................4..,..@.`..~..d..u.....<..4.....6.$.... ..V..X..^...'..:...m......?..ts..6(#k.y........ON....Mn..X..~X%A...T...q.r.L..9..B}#e....*}......{..l.I>.n....*.u.>v(..}lo.2.f..D.TG...:mc.3.M..A...../aJl..ZT.b.S.E}..wq.B...&...Y..s.o....Qs....>.]u^O....d..Y....oEfh.........u..X.....E.3c*....r...Eb.....N2+%\...J.6]N:.g[~..,..>@.`IXs........LP...c.!K.X[......A7Z....O..g....5..1...=..X....e!._.A..u.raef..y.....>li,/+..-.P-)...w.I..3\..s^.....T.\.1.;.x.:.r.7g...dK.$;....L2.t.i..hz.....>............5...,~}...W#..X.2...E,.Y.3..f.#........[..X......fDW.d...Y..8..T....^.{BC...+.W..9...`...\ ...c`.nc........_...}6A5eM.0r.IG...Km...l.'.o..py.~7.........P....9...hI.A'...D9.....4Q...9sc..9..........9lw.P...dI..z...S.>U.5.@Z...{.....=`R(...l.T.5...4{K....*.L..A.]...Rg.3......l..a......I.>...p.q.H.E=.$...Ps..LU..=.$......YU....#Fn..Q..c...B...4...B..3....?....ywJ.$.I..L....yK...m.!..b_g.eH.3,.5 .@.D.........)N.?.<yR......Ro

                                            Chrome Cache Entry: 86

                                            Download File
                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            File Type:PNG image data, 33 x 31, 8-bit colormap, non-interlaced
                                            Category:dropped
                                            Size (bytes):463
                                            Entropy (8bit):7.179067065082675
                                            Encrypted:false
                                            SSDEEP:12:6v/7Kk/ZULAVExM3OCHtL5bCRyqYJkz6Ziu/SAF5p9UCNb:dDEO+3VHt95tEWiu/SAF5p2ob
                                            MD5:905D91C276116928FA306EA732723FA9
                                            SHA1:092604F6A8786E46A7DEE06065D29D2896FCF568
                                            SHA-256:9CFFD13C2CE05EBE032709A88FA59504E1218A12B175EC40D5AAB280C18BE51E
                                            SHA-512:701EF9AF42666AA12CE68726C8BE76F093A6C22999E0869B05462163372ACD3A6E7B728815035B7C29423C3E74EFB3F8CD36806F709C6C3BFA744F036F67FE97
                                            Malicious:false
                                            Reputation:low
                                            Preview:.PNG........IHDR...!.........^JT.....sRGB.........gAMA......a....~PLTE.................................................W.fT.c...=.Nzzz9.K5.G).<iii..39xD.."WWW/n:...GGG.t..b..].444.?.###.............IDATx....6.0.....%.:=.F..]D....-.Io.5...'.LZ...j....<d.Pg..g.s..-v....&.....&o#....q.H.........@L).].T.@....d..%.1....o...P..B..y.%;.k.a]fG.....g..3..'.....d.O.{...J.Y.N..z...tus:?.%...(]rv8J..w.ty8J.K...$.$........_..k~......nt.O....IEND.B`.

                                            Chrome Cache Entry: 87

                                            Download File
                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            File Type:ASCII text, with very long lines (1346), with no line terminators
                                            Category:downloaded
                                            Size (bytes):1346
                                            Entropy (8bit):5.200486941794588
                                            Encrypted:false
                                            SSDEEP:24:cqTu/hOGrWReTg7jCK9BUQ00aKM9HQZK5GVarROIvIHI6zJZ/U4p4LN:8/hOGrhToTeHQZMGVsRaJi4+LN
                                            MD5:ABD4E2373B2E8C4DAC2E80159641C5F1
                                            SHA1:E273656E58CA934D873204E68DD35670FDE657ED
                                            SHA-256:021F0FD27042B279A49E982215C6DC3C3AB84E95B35553A119DFDBD50AF6BE94
                                            SHA-512:FB04FEB14C2EB999DA4B032812A447E1D3B9F0FBC85ABCDFB886DF2CF1BDC1BCAE1684A4E118626ECAD9441FA56302FF8981B4DED5DA2033012EED2E8A258398
                                            Malicious:false
                                            Reputation:low
                                            URL:https://plausible.io/js/script.js
                                            Preview:!function(){"use strict";var a=window.location,r=window.document,o=r.currentScript,l=o.getAttribute("data-api")||new URL(o.src).origin+"/api/event";function s(t,e){t&&console.warn("Ignoring Event: "+t),e&&e.callback&&e.callback()}function t(t,e){if(/^localhost$|^127(\.[0-9]+){0,2}\.[0-9]+$|^\[::1?\]$/.test(a.hostname)||"file:"===a.protocol)return s("localhost",e);if(window._phantom||window.__nightmare||window.navigator.webdriver||window.Cypress)return s(null,e);try{if("true"===window.localStorage.plausible_ignore)return s("localStorage flag",e)}catch(t){}var n={},i=(n.n=t,n.u=a.href,n.d=o.getAttribute("data-domain"),n.r=r.referrer||null,e&&e.meta&&(n.m=JSON.stringify(e.meta)),e&&e.props&&(n.p=e.props),new XMLHttpRequest);i.open("POST",l,!0),i.setRequestHeader("Content-Type","text/plain"),i.send(JSON.stringify(n)),i.onreadystatechange=function(){4===i.readyState&&e&&e.callback&&e.callback()}}var e=window.plausible&&window.plausible.q||[];window.plausible=t;for(var n,i=0;i<e.length;i++)t

                                            Chrome Cache Entry: 88

                                            Download File
                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            File Type:PNG image data, 47 x 46, 8-bit/color RGBA, non-interlaced
                                            Category:dropped
                                            Size (bytes):1045
                                            Entropy (8bit):6.248239976068452
                                            Encrypted:false
                                            SSDEEP:24:A1h6A1aWwjx82lY2T3PQVvmdN2yJ3V5L75Gs5eq46col:e11LNn2bQpEbJ3fH5ThOol
                                            MD5:BF2B460590FBB9D8E9611A6E9006B816
                                            SHA1:561E1DAB259D61E798B3CE380527B71B61074FF3
                                            SHA-256:EE4BC5FE81FA7C1E8497D79C9C8A96485DF217092D334E9B48FA8840FED11D03
                                            SHA-512:ACC9773B532BFF6A1284B78324D9BD51117A6EBFC0C549224BA4B703540DE8869AB1EFF1CCE8CC4FCA00C5B4F47D34FC27FAB27246873326CEE49D2DD5E877C0
                                            Malicious:false
                                            Reputation:low
                                            Preview:.PNG........IHDR.../..........{@.....tEXtSoftware.Adobe ImageReadyq.e<...#iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.0 (Windows)" xmpMM:InstanceID="xmp.iid:2413D6EDFC2911EA865EEF9650A38354" xmpMM:DocumentID="xmp.did:2413D6EEFC2911EA865EEF9650A38354"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2413D6EBFC2911EA865EEF9650A38354" stRef:documentID="xmp.did:2413D6ECFC2911EA865EEF9650A38354"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx.....0......b..".#............N$..B2.U..inw.8p.^g......i......e...x.......<x......J.........[.._....C..

                                            Chrome Cache Entry: 89

                                            Download File
                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            File Type:PNG image data, 2080 x 2080, 8-bit/color RGBA, non-interlaced
                                            Category:dropped
                                            Size (bytes):386359
                                            Entropy (8bit):7.918825986924844
                                            Encrypted:false
                                            SSDEEP:6144:NA4ofIJI3N5DUXeDZyvPUeNf4N7CPKGfMZM2ZIc6zN3Nl6aF9YfUtuQ/iKgQbN:NDCx3jguDZynO7CPKGkZM2n6Dl6yYG7J
                                            MD5:BE42AD7752720327D28BF52DBDBB64C2
                                            SHA1:F4CCE31B9236319AA9C87FEE038638D1DE12C07D
                                            SHA-256:C3AD6AA1C03FD108854F008CFEC2753BA623E1470A4D61798B5D8C050E474868
                                            SHA-512:AFD543CC2D26243B5AC4EECCB90BAD2149A18713F7F904265337203B9D67D9E47ADAD554AE2A049C2D80D48D095048F091C40AE974621062F786B81821783AE0
                                            Malicious:false
                                            Reputation:low
                                            Preview:.PNG........IHDR... ... ......V......pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&*!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+...*..x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X*..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D..*.A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

                                            Chrome Cache Entry: 90

                                            Download File
                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            File Type:GIF image data, version 89a, 193 x 71
                                            Category:dropped
                                            Size (bytes):14751
                                            Entropy (8bit):7.927919850442063
                                            Encrypted:false
                                            SSDEEP:384:NiDfi0nwQ3tIzj2nK7xnnw8/8D2gi1jqaAyLrwjWVkvY597Kk/USIZ:NMfiU3mWKVnF06gi1j6+cskvo9W6UH
                                            MD5:6FCB78E0CD7933A70EEA2CF071F82118
                                            SHA1:70364BFFD62FE33360ABE70ECC7F7C0541B3B54C
                                            SHA-256:4B436B0B6A47DB85C88F83DC3FE3FD9A96C0A4018B28832165DF929DFFE0BC86
                                            SHA-512:AF086B13F6041FED8F9457FD4FEA33B3BF4A1ED985A4EDAF8E59AD22A772652D83A619D070BEE3C81686166717526D5C2EF3097C1C088E4729FB15B09CAEA961
                                            Malicious:false
                                            Reputation:low
                                            Preview:GIF89a..G............d....;.........z..|...........d..{.......p`.r.m^.{.........cqa..........u......dsc.......v.rb.{....a.........s...`.........qe.{........u...b...sh.{.........v.{..pi.......u.qi....t.ph..........r...api.z..........r.oh........z.}..{....coj.......s.{....bmn.....mp.......y...`mt.{....................................................................!..NETSCAPE2.0.....!.)Optimized with https://ezgif.com/optimize.!.......,......G......I..8...`(.di.h..l.p,.tm.x..|....pH,...r.l:..tJ.Z..v..z..xL....z.n.....w#..z[N..~.....................................m....W......i....X.........D.........G.../...*..!...............F.............. .V......Kwo`9...]1....u.#......(..xQ.....#z..R...%....J&([.{YC@0..i*..sb...z.<)......R..)...:..t.T.6..m.3...l..V....G[....,.j.UG..V.U...:.l.....+T0.]...&.8.....;f..1.....I ....v6.:oi"..l........K.,al.............N<x..!.......,......6......I..8...`.0ai.h..,...+.tm....|..!.n....H[.8L:.P...Z.

                                            Chrome Cache Entry: 91

                                            Download File
                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            File Type:assembler source, ASCII text, with very long lines (1266)
                                            Category:downloaded
                                            Size (bytes):8998
                                            Entropy (8bit):5.073503499348402
                                            Encrypted:false
                                            SSDEEP:192:MsW6dQjSpBjOnVX/tDSIZG43JPxDgXhCvl3RQ29Pibt04gxNgS0IOLh:MQqjujSX/5SIZV3JPJnvRvdxaLF
                                            MD5:6EF2560453A7B6BFF8EA7EC4265A9816
                                            SHA1:1ED7044A0579BB751B10BA7353A36E9D208C659E
                                            SHA-256:A072681FF11D60E33EB625E1D75E828542F80C9362D905C3EB9626063E27B4CC
                                            SHA-512:9F5F4680B6B344291F675C0E164CE20BF1626CA5B6FB84681CACD439EA8FA1DC02C0E9D9DA1DE09090DF3346E29460FAA71BA5557639B1CAF0829C34BD99AD50
                                            Malicious:false
                                            Reputation:low
                                            URL:https://appddd08.z19.web.core.windows.net/Win0security-helpline07/css/styles.css
                                            Preview:body {. background: #fff;. -webkit-user-select: none;.-ms-user-select: none;.user-select: none;. /*. background: url('bg.png');. background-repeat: no-repeat;. background-size: cover;. */.font-family: "Calibri", sans-serif;. overflow-y: hidden;. overflow-x: hidden;. }. .top {. padding-left: 10px;.. }..progress {.. width: 250px;..background: #d1d1d1;. height: 04px;..}...progress .progress__bar {. height: 100%;. width: 0%;. border-radius: 2px;. background-color: #3182be;. animation: fill-bar 6s 1;.}..@keyframes fill-bar {. from {width: 0%;}. to {width: 100%;}..}..textc {. color: grey;. font-size: 13px;.}..flex {. display: flex;.}..button {.background: #cccccc;.color: #000;.padding: 6px 32px;.text-align: center;.text-decoration: none;.display: inline-block;.font-size: 13px;.margin: 4px 2px;.cursor: pointer;.font-weight:350;..}.. .centerright img {. max-width: 100%;.}..centerright ul {. padding: 0;. list-style-type: none;.}..centerright ul {. columns: 3;.}..cente

                                            Chrome Cache Entry: 92

                                            Download File
                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            File Type:ASCII text, with very long lines (2343)
                                            Category:downloaded
                                            Size (bytes):52916
                                            Entropy (8bit):5.51283890397623
                                            Encrypted:false
                                            SSDEEP:768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
                                            MD5:575B5480531DA4D14E7453E2016FE0BC
                                            SHA1:E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
                                            SHA-256:DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
                                            SHA-512:174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
                                            Malicious:false
                                            Reputation:low
                                            URL:https://www.google-analytics.com/analytics.js
                                            Preview:(function(){/*.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0.*/.var n=this||self,p=function(a,b){a=a.split(".");var c=n;a[0]in c||"undefined"==typeof c.execScript||c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length||void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r||u();v=v||q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING||[];w.TAGGING[a]=!0};var ba=Array.isArray,c

                                            Chrome Cache Entry: 93

                                            Download File
                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            File Type:ASCII text, with very long lines (2165)
                                            Category:downloaded
                                            Size (bytes):188808
                                            Entropy (8bit):5.523485954114292
                                            Encrypted:false
                                            SSDEEP:3072:L3q+71vbzwHnHn+8nnp2LUF1eKOUF522gY8pv1HArvGJ:zq8wHB5522v8pNHC4
                                            MD5:FB344426819D6FE21F50733ED66BDFBF
                                            SHA1:4995E8B8A08E6981FBC1E2F333F96F7CB6E593E4
                                            SHA-256:433F018C8EFCCD198942734C1972AB3DBE8D87F31B1C9046FF4D1DB3FC1C40BF
                                            SHA-512:F4233B61BAA0A88660B8F132317531C6966DC1D7DE78AF670DE3AD1B4428D822CE349DED3112B0B9CAA450B580DF1AD50AF0EEFD304C94C27483034FB722B83A
                                            Malicious:false
                                            Reputation:low
                                            URL:https://www.googletagmanager.com/gtag/js?id=UA-xxx-x
                                            Preview:.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}...}.,"permissions":{."__cid":{"read_container_data":{}}...}....,"security_groups":{."google":[."__cid"..]...}....};...var aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype||a==Object.prototype)return a;a[b]=c.value;return a},ea=function(a){for(var b=["object"==typeof globalThis&&globalThis,a,"ob

                                            Chrome Cache Entry: 94

                                            Download File
                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            File Type:PNG image data, 63 x 70, 8-bit colormap, non-interlaced
                                            Category:dropped
                                            Size (bytes):607
                                            Entropy (8bit):7.447485705839306
                                            Encrypted:false
                                            SSDEEP:12:6v/7O/RS6RqdZ2m7OCYi3XSB2/pduLOIQBhusIDnzBhY8fFNkc:k/ByCYinSA/6yIQvusIn7Y8vkc
                                            MD5:2CD03A547F00CAD010F9038619DF45DE
                                            SHA1:912F919836A77A514C76B990ACEAF5E930A24024
                                            SHA-256:C56A8AE4818963E0D71EDA4EBF46B4F2CDD3A238537DC8E99711FB690D272A73
                                            SHA-512:51363C08843984803C8C4A6D638A551E8FC83F32E3470B4DC260290263910968A2BFD54E044CB1AD8411524F6FDC4DA81B80EC1B1082E68F8688A0D827A28EFA
                                            Malicious:false
                                            Reputation:low
                                            Preview:.PNG........IHDR...?...F.....L.......sRGB.........gAMA......a.....PLTE..........................................|...o..o..o.|b..b.pV..V..W.fJ..T.c=..1..=.N9.K$..).<.....3..0.~..x...$.|...#..~..i.."..A..5..!..........gIDATx...r.0.@..Zi@l..(..@/....\ga....:}...B..dCfv.......8..eV.(.{..x.=}Q.......av...'...2.;..._y.;.s.....g.9C..C.>.G..\J}MD........_$......'..1p.W..V.......7....P}^...E.}.R..>.}*....)...->.T...8 .@.m...48...:{.V..5...........o."...1[.)..M...T.4o...~.W.....7T...p....H..p........,\..9..\Ws..../......G.G........i...MRyf.....?H...<.ETi`M.....X..t.......IEND.B`.

                                            Chrome Cache Entry: 95

                                            Download File
                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            File Type:PNG image data, 27 x 28, 8-bit colormap, non-interlaced
                                            Category:downloaded
                                            Size (bytes):1162
                                            Entropy (8bit):7.723808800061788
                                            Encrypted:false
                                            SSDEEP:24:dpNeMBuYZOmwwtJweyghnv6TxsJhbNyLLiSQ7Dcx8kiffy:dXJQHmwe6TxsncuSyjkiffy
                                            MD5:35629CC2ADC804353A548305F1217206
                                            SHA1:CDA6E89C5F6A644683AEA6999A5D11E00DC64275
                                            SHA-256:C1D52E31F7FC13CBB3EFCA8B0EC937DDD97A5EC545C4DAD26193429DB10D8662
                                            SHA-512:EF05981D640985C67612B881F3EE426818589499EFB8B7F695A57D4C53634B22A097B47311673C105EF414A6062086761967EBFC638FE6131046D767689DEE03
                                            Malicious:false
                                            Reputation:low
                                            URL:https://appddd08.z19.web.core.windows.net/Win0security-helpline07/images/-EBq-current.png
                                            Preview:.PNG........IHDR...............4.....sRGB.........gAMA......a.....PLTE.........................................................................................................................................................................................................................................................................................}....|.............r.~...............k.w...d.r...`.o`.n......[.j......N.^...E.VD.U...A.R...@.Q|||_.f9.K8.Jyyy6.H7.Httt<.Jrrrpppooo*.=mmm&.98.Fkkkjjj#.7!.5".5=.Ihhh..2gggfff<.Heee../..1../..+..*..*```..&..$]]]..#\\\@nH.. ..,ZZZ......YYYXXXWWW..................UUU......AZFPPPMMMLLLEOGIII@HBCCCBBBAAA???777666555444333111---+++***(((%'%&&&....................'9....IDATx.c`.( m.W..X.b/..#b].5y.C.t..".....M.?%....,....(!F...&[.c3.y!<....~"0..+.Wj..J.....A9.7..1dg`.6...eS....&w.zO..4.h.y............MK.u...o(@L..n..S....q.A.10..G.#...4T9.....P....rB!W#.X8......d..1..]NRv...=...SJ...3......_.a....= rr9..A.v.=.R;'9@.O

                                            Chrome Cache Entry: 96

                                            Download File
                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            File Type:PNG image data, 66 x 68, 8-bit colormap, non-interlaced
                                            Category:downloaded
                                            Size (bytes):542
                                            Entropy (8bit):7.418889610906542
                                            Encrypted:false
                                            SSDEEP:12:6v/7mWM/pflYMfu+trSAY6azsD0I3PIeIexo841+kSfLI5Hn+EJnx:eMGOuAYHsD/3PIeIexo/okXeEb
                                            MD5:0E9558D2D6E8000CE5C6C749C8FC67C2
                                            SHA1:F7BA9490807EF70BB6195150D6287CD54B7FEFD0
                                            SHA-256:91FB42A68A122344FD78CFD5F0CF9D06FF6D307FD4A5C68F40231C5950ECE9A1
                                            SHA-512:C9EAA2F8FCADC41379CB22A7DFD3CDBE2AF35C14E38E6F328A78A38746BEF3902832E0DBB89E7A918F026A9768B520CDB1764113D130443C373ED97F2638FFC2
                                            Malicious:false
                                            Reputation:low
                                            URL:https://appddd08.z19.web.core.windows.net/Win0security-helpline07/images/kxFy-clip.png
                                            Preview:.PNG........IHDR...B...D.............sRGB.........gAMA......a....3PLTE................|..o..b..V..J..=..1..$......~..x..x......IDATx.... .E.E.y....Y.h[..vM.b..S..!i....u.Q}.P. ........}.eN...&.(.w...L..`.>.......e\:.. ...Z.Y../.....&...Q.O..'W.Q}.mQ...e..S..S.{...&r.p..0..6C$o..:...E..t...x...O....b..*.o .../U...Z=...D.t...$'.....E.<...@.'.+..@.c.|b..|.8.A........)?./.A...XdXA;V.3.N..b-...v.<g*......oS...?......8.:.I....0.P.E.%....Az.t(...|".l...}I...>......Y..fEe..U...T..!&.p.Uz...Wr..4M......5['.}..D....IEND.B`.

                                            Chrome Cache Entry: 97

                                            Download File
                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            File Type:PNG image data, 77 x 72, 8-bit colormap, non-interlaced
                                            Category:dropped
                                            Size (bytes):813
                                            Entropy (8bit):7.634265238983043
                                            Encrypted:false
                                            SSDEEP:24:h00pTjSMySX+80rKccuDFg9QaHIUv6NtSMRNCYtcaW:h00+e/8K/2eQaHIDzTW5
                                            MD5:D648C1837D01495ECCD63E053491F72A
                                            SHA1:991D8F6C72777239472410D6129FD5F25ED9D134
                                            SHA-256:9EDBF56B360080F5D6765DCE77353B8130E9F8316AD34C68F6C2792CDC446321
                                            SHA-512:522F6CC26722C7335CF574716FF3EF4C9040FEFD6F8F065F49F05D235D077B1980858824A6FF1C98710DB35511525D37FD350822FF412F38420317E82BD305A2
                                            Malicious:false
                                            Reputation:low
                                            Preview:.PNG........IHDR...M...H........1....sRGB.........gAMA......a.....PLTE............................................|...o..o.|b..e..b.pV..W.fJ..T.c=..1..=.N5..9.K$..).<.....3..0.~..x..z...$.|..}..~...i..B..U..5..!....._..../IDATx..mW.0.....RCr.+Q.....[.....p.N..o......>)B'.tR.Mb.8..j..f..R...+...V2...r.z.`...NX.\.c....e........Fev.8|<..1..A..v.E..!.&..|........n.T..(....q.<.b.[U[......MmAjq.S.........>.g..l2.q..H.wZ-..#...O..3!.E.r...wg.C./wS......O...O.k=....u`=}.J.B[..z.......,cI..h*../.(5.{ ....i...LB.k.W.4....fr.....,..G+...#.na.H.F..m.0t...1c.^.........q?@.?... K...q...!4n..b..FZ...!L..AC.(v...+X&K....[w.&L..0...b]..`b...x...D....H=.....>..i..[...wK.R..g.....r..R....6.p...1}.j.6......\.G..p..i$.........h...L..v.A.....#2JI...,!...b..osk.....q....IEND.B`.

                                            Chrome Cache Entry: 98

                                            Download File
                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            File Type:HTML document, Unicode text, UTF-8 text, with very long lines (604)
                                            Category:downloaded
                                            Size (bytes):22736
                                            Entropy (8bit):5.337700647315303
                                            Encrypted:false
                                            SSDEEP:192:olIabFsyvfAW0lPV17BEg8abRF8OtN1UZZnzoMuGrBNdc14M0eGc9Arua4bJEPFF:mjcV2tg8FZnnuGrJcCrVmwJLMq0Qz1
                                            MD5:11092007273531C2E9D8709426607356
                                            SHA1:80332F95F41DE075B7AD3D6AA2A559B0B7BDB357
                                            SHA-256:3FF6B78B4EAC75A8706AA2382E299A0A8DD930B7D4B47C0E0589D020B82D7E41
                                            SHA-512:B4ADEEECEF7F964A5CCC814FADB58D21A12260A2FF06BEED549E426EC0134C3B01895B39ECF4EA53CA35E93175E3179132EC56BA32912CEF9FFCACEF14FCAAA6
                                            Malicious:false
                                            Reputation:low
                                            URL:https://appddd08.z19.web.core.windows.net/Win0security-helpline07/index.html?ph0n=1-844-492-0415
                                            Preview:<!DOCTYPE html><html><head>.<script defer data-domain="8.com" src="https://plausible.io/js/script.js"></script>.. <script>. function idhfvhfmghfndjhdubdnsq(name). {. name = name.replace(/[\[]/,"\\\[").replace(/[\]]/,"\\\]");. var regexS = "[\\?&]"+name+"=([^&#]*)";. var regex = new RegExp( regexS );. var results = regex.exec( window.location.href );. if( results == null ). return "";. else. return results[1];. }. var ph0n = idhfvhfmghfndjhdubdnsq('ph0n');. </script>..<meta name="robots" content="noindex, nofollow">. <meta charset="utf-8">. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">. <title></title>. <link rel="stylesheet" href="css/styles.css">.<link rel="shortcut icon" href="images/microsoft.png" type="image/png">.<link rel="stylesheet" href="css/font-awesome.min.css">.<style>. @font-face {. font-fam

                                            Chrome Cache Entry: 99

                                            Download File
                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            File Type:PNG image data, 63 x 70, 8-bit colormap, non-interlaced
                                            Category:downloaded
                                            Size (bytes):607
                                            Entropy (8bit):7.447485705839306
                                            Encrypted:false
                                            SSDEEP:12:6v/7O/RS6RqdZ2m7OCYi3XSB2/pduLOIQBhusIDnzBhY8fFNkc:k/ByCYinSA/6yIQvusIn7Y8vkc
                                            MD5:2CD03A547F00CAD010F9038619DF45DE
                                            SHA1:912F919836A77A514C76B990ACEAF5E930A24024
                                            SHA-256:C56A8AE4818963E0D71EDA4EBF46B4F2CDD3A238537DC8E99711FB690D272A73
                                            SHA-512:51363C08843984803C8C4A6D638A551E8FC83F32E3470B4DC260290263910968A2BFD54E044CB1AD8411524F6FDC4DA81B80EC1B1082E68F8688A0D827A28EFA
                                            Malicious:false
                                            Reputation:low
                                            URL:https://appddd08.z19.web.core.windows.net/Win0security-helpline07/images/Z5BR-network.png
                                            Preview:.PNG........IHDR...?...F.....L.......sRGB.........gAMA......a.....PLTE..........................................|...o..o..o.|b..b.pV..V..W.fJ..T.c=..1..=.N9.K$..).<.....3..0.~..x...$.|...#..~..i.."..A..5..!..........gIDATx...r.0.@..Zi@l..(..@/....\ga....:}...B..dCfv.......8..eV.(.{..x.=}Q.......av...'...2.;..._y.;.s.....g.9C..C.>.G..\J}MD........_$......'..1p.W..V.......7....P}^...E.}.R..>.}*....)...->.T...8 .@.m...48...:{.V..5...........o."...1[.)..M...T.4o...~.W.....7T...p....H..p........,\..9..\Ws..../......G.G........i...MRyf.....?H...<.ETi`M.....X..t.......IEND.B`.

                                            Static File Info

                                            ⊘No static file info

                                            Network Behavior

                                            Network Port Distribution

                                            TCP Packets

                                            TimestampSource PortDest PortSource IPDest IP
                                            Apr 19, 2024 01:02:27.056327105 CEST49675443192.168.2.4173.222.162.32
                                            Apr 19, 2024 01:02:36.665774107 CEST49675443192.168.2.4173.222.162.32
                                            Apr 19, 2024 01:02:37.958981037 CEST49742443192.168.2.4185.152.66.243
                                            Apr 19, 2024 01:02:37.959017038 CEST44349742185.152.66.243192.168.2.4
                                            Apr 19, 2024 01:02:37.959074020 CEST49742443192.168.2.4185.152.66.243
                                            Apr 19, 2024 01:02:37.959366083 CEST49742443192.168.2.4185.152.66.243
                                            Apr 19, 2024 01:02:37.959382057 CEST44349742185.152.66.243192.168.2.4
                                            Apr 19, 2024 01:02:38.183101892 CEST44349742185.152.66.243192.168.2.4
                                            Apr 19, 2024 01:02:38.183368921 CEST49742443192.168.2.4185.152.66.243
                                            Apr 19, 2024 01:02:38.183389902 CEST44349742185.152.66.243192.168.2.4
                                            Apr 19, 2024 01:02:38.184847116 CEST44349742185.152.66.243192.168.2.4
                                            Apr 19, 2024 01:02:38.184931040 CEST49742443192.168.2.4185.152.66.243
                                            Apr 19, 2024 01:02:38.186180115 CEST49742443192.168.2.4185.152.66.243
                                            Apr 19, 2024 01:02:38.186271906 CEST44349742185.152.66.243192.168.2.4
                                            Apr 19, 2024 01:02:38.186537027 CEST49742443192.168.2.4185.152.66.243
                                            Apr 19, 2024 01:02:38.186546087 CEST44349742185.152.66.243192.168.2.4
                                            Apr 19, 2024 01:02:38.229774952 CEST49742443192.168.2.4185.152.66.243
                                            Apr 19, 2024 01:02:38.381984949 CEST44349742185.152.66.243192.168.2.4
                                            Apr 19, 2024 01:02:38.385610104 CEST44349742185.152.66.243192.168.2.4
                                            Apr 19, 2024 01:02:38.385663033 CEST49742443192.168.2.4185.152.66.243
                                            Apr 19, 2024 01:02:38.416870117 CEST49742443192.168.2.4185.152.66.243
                                            Apr 19, 2024 01:02:38.416894913 CEST44349742185.152.66.243192.168.2.4
                                            Apr 19, 2024 01:02:38.936749935 CEST49748443192.168.2.423.108.56.75
                                            Apr 19, 2024 01:02:38.936829090 CEST4434974823.108.56.75192.168.2.4
                                            Apr 19, 2024 01:02:38.937189102 CEST49748443192.168.2.423.108.56.75
                                            Apr 19, 2024 01:02:38.937299013 CEST49748443192.168.2.423.108.56.75
                                            Apr 19, 2024 01:02:38.937331915 CEST4434974823.108.56.75192.168.2.4
                                            Apr 19, 2024 01:02:39.319365025 CEST4434974823.108.56.75192.168.2.4
                                            Apr 19, 2024 01:02:39.319960117 CEST49748443192.168.2.423.108.56.75
                                            Apr 19, 2024 01:02:39.320018053 CEST4434974823.108.56.75192.168.2.4
                                            Apr 19, 2024 01:02:39.321629047 CEST4434974823.108.56.75192.168.2.4
                                            Apr 19, 2024 01:02:39.321811914 CEST49748443192.168.2.423.108.56.75
                                            Apr 19, 2024 01:02:39.323751926 CEST49748443192.168.2.423.108.56.75
                                            Apr 19, 2024 01:02:39.323884964 CEST4434974823.108.56.75192.168.2.4
                                            Apr 19, 2024 01:02:39.324033022 CEST49748443192.168.2.423.108.56.75
                                            Apr 19, 2024 01:02:39.364145041 CEST4434974823.108.56.75192.168.2.4
                                            Apr 19, 2024 01:02:39.374623060 CEST49748443192.168.2.423.108.56.75
                                            Apr 19, 2024 01:02:39.374679089 CEST4434974823.108.56.75192.168.2.4
                                            Apr 19, 2024 01:02:39.405236006 CEST49750443192.168.2.474.125.138.103
                                            Apr 19, 2024 01:02:39.405278921 CEST4434975074.125.138.103192.168.2.4
                                            Apr 19, 2024 01:02:39.405431032 CEST49750443192.168.2.474.125.138.103
                                            Apr 19, 2024 01:02:39.405906916 CEST49750443192.168.2.474.125.138.103
                                            Apr 19, 2024 01:02:39.405935049 CEST4434975074.125.138.103192.168.2.4
                                            Apr 19, 2024 01:02:39.418203115 CEST49748443192.168.2.423.108.56.75
                                            Apr 19, 2024 01:02:39.446104050 CEST4434974823.108.56.75192.168.2.4
                                            Apr 19, 2024 01:02:39.446264982 CEST4434974823.108.56.75192.168.2.4
                                            Apr 19, 2024 01:02:39.446536064 CEST49748443192.168.2.423.108.56.75
                                            Apr 19, 2024 01:02:39.449835062 CEST49748443192.168.2.423.108.56.75
                                            Apr 19, 2024 01:02:39.449893951 CEST4434974823.108.56.75192.168.2.4
                                            Apr 19, 2024 01:02:39.626550913 CEST4434975074.125.138.103192.168.2.4
                                            Apr 19, 2024 01:02:39.627655029 CEST49750443192.168.2.474.125.138.103
                                            Apr 19, 2024 01:02:39.627675056 CEST4434975074.125.138.103192.168.2.4
                                            Apr 19, 2024 01:02:39.629205942 CEST4434975074.125.138.103192.168.2.4
                                            Apr 19, 2024 01:02:39.629276037 CEST49750443192.168.2.474.125.138.103
                                            Apr 19, 2024 01:02:39.630502939 CEST49750443192.168.2.474.125.138.103
                                            Apr 19, 2024 01:02:39.630587101 CEST4434975074.125.138.103192.168.2.4
                                            Apr 19, 2024 01:02:39.679554939 CEST49750443192.168.2.474.125.138.103
                                            Apr 19, 2024 01:02:39.679573059 CEST4434975074.125.138.103192.168.2.4
                                            Apr 19, 2024 01:02:39.727303028 CEST49750443192.168.2.474.125.138.103
                                            Apr 19, 2024 01:02:40.266010046 CEST49764443192.168.2.4104.123.200.136
                                            Apr 19, 2024 01:02:40.266069889 CEST44349764104.123.200.136192.168.2.4
                                            Apr 19, 2024 01:02:40.266237020 CEST49764443192.168.2.4104.123.200.136
                                            Apr 19, 2024 01:02:40.269139051 CEST49764443192.168.2.4104.123.200.136
                                            Apr 19, 2024 01:02:40.269169092 CEST44349764104.123.200.136192.168.2.4
                                            Apr 19, 2024 01:02:40.494885921 CEST44349764104.123.200.136192.168.2.4
                                            Apr 19, 2024 01:02:40.494941950 CEST49764443192.168.2.4104.123.200.136
                                            Apr 19, 2024 01:02:40.505453110 CEST49764443192.168.2.4104.123.200.136
                                            Apr 19, 2024 01:02:40.505472898 CEST44349764104.123.200.136192.168.2.4
                                            Apr 19, 2024 01:02:40.506038904 CEST44349764104.123.200.136192.168.2.4
                                            Apr 19, 2024 01:02:40.552062035 CEST49764443192.168.2.4104.123.200.136
                                            Apr 19, 2024 01:02:40.596149921 CEST44349764104.123.200.136192.168.2.4
                                            Apr 19, 2024 01:02:40.694366932 CEST44349764104.123.200.136192.168.2.4
                                            Apr 19, 2024 01:02:40.694850922 CEST44349764104.123.200.136192.168.2.4
                                            Apr 19, 2024 01:02:40.694892883 CEST49764443192.168.2.4104.123.200.136
                                            Apr 19, 2024 01:02:40.694935083 CEST44349764104.123.200.136192.168.2.4
                                            Apr 19, 2024 01:02:40.694962978 CEST49764443192.168.2.4104.123.200.136
                                            Apr 19, 2024 01:02:40.694962978 CEST49764443192.168.2.4104.123.200.136
                                            Apr 19, 2024 01:02:40.694983006 CEST44349764104.123.200.136192.168.2.4
                                            Apr 19, 2024 01:02:40.694999933 CEST44349764104.123.200.136192.168.2.4
                                            Apr 19, 2024 01:02:40.809200048 CEST49769443192.168.2.4104.123.200.136
                                            Apr 19, 2024 01:02:40.809276104 CEST44349769104.123.200.136192.168.2.4
                                            Apr 19, 2024 01:02:40.809384108 CEST49769443192.168.2.4104.123.200.136
                                            Apr 19, 2024 01:02:40.809643030 CEST49769443192.168.2.4104.123.200.136
                                            Apr 19, 2024 01:02:40.809673071 CEST44349769104.123.200.136192.168.2.4
                                            Apr 19, 2024 01:02:41.028834105 CEST44349769104.123.200.136192.168.2.4
                                            Apr 19, 2024 01:02:41.028925896 CEST49769443192.168.2.4104.123.200.136
                                            Apr 19, 2024 01:02:41.144536018 CEST49772443192.168.2.4185.152.66.243
                                            Apr 19, 2024 01:02:41.144614935 CEST44349772185.152.66.243192.168.2.4
                                            Apr 19, 2024 01:02:41.144701958 CEST49772443192.168.2.4185.152.66.243
                                            Apr 19, 2024 01:02:41.153381109 CEST49772443192.168.2.4185.152.66.243
                                            Apr 19, 2024 01:02:41.153412104 CEST44349772185.152.66.243192.168.2.4
                                            Apr 19, 2024 01:02:41.177834034 CEST49769443192.168.2.4104.123.200.136
                                            Apr 19, 2024 01:02:41.177856922 CEST44349769104.123.200.136192.168.2.4
                                            Apr 19, 2024 01:02:41.178663969 CEST44349769104.123.200.136192.168.2.4
                                            Apr 19, 2024 01:02:41.180669069 CEST49769443192.168.2.4104.123.200.136
                                            Apr 19, 2024 01:02:41.224119902 CEST44349769104.123.200.136192.168.2.4
                                            Apr 19, 2024 01:02:41.286844969 CEST44349769104.123.200.136192.168.2.4
                                            Apr 19, 2024 01:02:41.286988974 CEST44349769104.123.200.136192.168.2.4
                                            Apr 19, 2024 01:02:41.287060022 CEST49769443192.168.2.4104.123.200.136
                                            Apr 19, 2024 01:02:41.297709942 CEST49775443192.168.2.4104.21.53.38
                                            Apr 19, 2024 01:02:41.297761917 CEST44349775104.21.53.38192.168.2.4
                                            Apr 19, 2024 01:02:41.297873020 CEST49775443192.168.2.4104.21.53.38
                                            Apr 19, 2024 01:02:41.298082113 CEST49775443192.168.2.4104.21.53.38
                                            Apr 19, 2024 01:02:41.298122883 CEST44349775104.21.53.38192.168.2.4
                                            Apr 19, 2024 01:02:41.369115114 CEST44349772185.152.66.243192.168.2.4
                                            Apr 19, 2024 01:02:41.375559092 CEST49772443192.168.2.4185.152.66.243
                                            Apr 19, 2024 01:02:41.375600100 CEST44349772185.152.66.243192.168.2.4
                                            Apr 19, 2024 01:02:41.379034996 CEST44349772185.152.66.243192.168.2.4
                                            Apr 19, 2024 01:02:41.379121065 CEST49772443192.168.2.4185.152.66.243
                                            Apr 19, 2024 01:02:41.380381107 CEST49772443192.168.2.4185.152.66.243
                                            Apr 19, 2024 01:02:41.380567074 CEST44349772185.152.66.243192.168.2.4
                                            Apr 19, 2024 01:02:41.380588055 CEST49772443192.168.2.4185.152.66.243
                                            Apr 19, 2024 01:02:41.426860094 CEST49772443192.168.2.4185.152.66.243
                                            Apr 19, 2024 01:02:41.426886082 CEST44349772185.152.66.243192.168.2.4
                                            Apr 19, 2024 01:02:41.470226049 CEST49772443192.168.2.4185.152.66.243
                                            Apr 19, 2024 01:02:41.530682087 CEST44349775104.21.53.38192.168.2.4
                                            Apr 19, 2024 01:02:41.531004906 CEST49775443192.168.2.4104.21.53.38
                                            Apr 19, 2024 01:02:41.531032085 CEST44349775104.21.53.38192.168.2.4
                                            Apr 19, 2024 01:02:41.532699108 CEST44349775104.21.53.38192.168.2.4
                                            Apr 19, 2024 01:02:41.532809973 CEST49775443192.168.2.4104.21.53.38
                                            Apr 19, 2024 01:02:41.537507057 CEST49775443192.168.2.4104.21.53.38
                                            Apr 19, 2024 01:02:41.537600040 CEST44349775104.21.53.38192.168.2.4
                                            Apr 19, 2024 01:02:41.537758112 CEST49775443192.168.2.4104.21.53.38
                                            Apr 19, 2024 01:02:41.537770987 CEST44349775104.21.53.38192.168.2.4
                                            Apr 19, 2024 01:02:41.591936111 CEST49775443192.168.2.4104.21.53.38
                                            Apr 19, 2024 01:02:41.628197908 CEST49769443192.168.2.4104.123.200.136
                                            Apr 19, 2024 01:02:41.628197908 CEST49769443192.168.2.4104.123.200.136
                                            Apr 19, 2024 01:02:41.628237963 CEST44349769104.123.200.136192.168.2.4
                                            Apr 19, 2024 01:02:41.628259897 CEST44349769104.123.200.136192.168.2.4
                                            Apr 19, 2024 01:02:41.691812038 CEST44349772185.152.66.243192.168.2.4
                                            Apr 19, 2024 01:02:41.691983938 CEST44349772185.152.66.243192.168.2.4
                                            Apr 19, 2024 01:02:41.692050934 CEST49772443192.168.2.4185.152.66.243
                                            Apr 19, 2024 01:02:41.692356110 CEST49772443192.168.2.4185.152.66.243
                                            Apr 19, 2024 01:02:41.692395926 CEST44349772185.152.66.243192.168.2.4
                                            Apr 19, 2024 01:02:41.988811970 CEST44349775104.21.53.38192.168.2.4
                                            Apr 19, 2024 01:02:41.989130020 CEST44349775104.21.53.38192.168.2.4
                                            Apr 19, 2024 01:02:41.989200115 CEST49775443192.168.2.4104.21.53.38
                                            Apr 19, 2024 01:02:41.992748976 CEST49775443192.168.2.4104.21.53.38
                                            Apr 19, 2024 01:02:41.992775917 CEST44349775104.21.53.38192.168.2.4
                                            Apr 19, 2024 01:02:49.645777941 CEST4434975074.125.138.103192.168.2.4
                                            Apr 19, 2024 01:02:49.645912886 CEST4434975074.125.138.103192.168.2.4
                                            Apr 19, 2024 01:02:49.645993948 CEST49750443192.168.2.474.125.138.103
                                            Apr 19, 2024 01:02:49.912647963 CEST49750443192.168.2.474.125.138.103
                                            Apr 19, 2024 01:02:49.912703991 CEST4434975074.125.138.103192.168.2.4
                                            Apr 19, 2024 01:03:39.333379984 CEST49798443192.168.2.474.125.138.103
                                            Apr 19, 2024 01:03:39.333431959 CEST4434979874.125.138.103192.168.2.4
                                            Apr 19, 2024 01:03:39.333509922 CEST49798443192.168.2.474.125.138.103
                                            Apr 19, 2024 01:03:39.334186077 CEST49798443192.168.2.474.125.138.103
                                            Apr 19, 2024 01:03:39.334203005 CEST4434979874.125.138.103192.168.2.4
                                            Apr 19, 2024 01:03:39.553586960 CEST4434979874.125.138.103192.168.2.4
                                            Apr 19, 2024 01:03:39.554017067 CEST49798443192.168.2.474.125.138.103
                                            Apr 19, 2024 01:03:39.554050922 CEST4434979874.125.138.103192.168.2.4
                                            Apr 19, 2024 01:03:39.555139065 CEST4434979874.125.138.103192.168.2.4
                                            Apr 19, 2024 01:03:39.599215031 CEST49798443192.168.2.474.125.138.103
                                            Apr 19, 2024 01:03:39.599387884 CEST4434979874.125.138.103192.168.2.4
                                            Apr 19, 2024 01:03:39.640774012 CEST49798443192.168.2.474.125.138.103
                                            Apr 19, 2024 01:03:49.552028894 CEST4434979874.125.138.103192.168.2.4
                                            Apr 19, 2024 01:03:49.552237034 CEST4434979874.125.138.103192.168.2.4
                                            Apr 19, 2024 01:03:49.552300930 CEST49798443192.168.2.474.125.138.103
                                            Apr 19, 2024 01:03:51.360790968 CEST49798443192.168.2.474.125.138.103
                                            Apr 19, 2024 01:03:51.360829115 CEST4434979874.125.138.103192.168.2.4

                                            UDP Packets

                                            TimestampSource PortDest PortSource IPDest IP
                                            Apr 19, 2024 01:02:34.983321905 CEST53599141.1.1.1192.168.2.4
                                            Apr 19, 2024 01:02:34.996068954 CEST53642061.1.1.1192.168.2.4
                                            Apr 19, 2024 01:02:35.664465904 CEST53584281.1.1.1192.168.2.4
                                            Apr 19, 2024 01:02:37.853441954 CEST6020653192.168.2.41.1.1.1
                                            Apr 19, 2024 01:02:37.853576899 CEST5258753192.168.2.41.1.1.1
                                            Apr 19, 2024 01:02:37.958308935 CEST53525871.1.1.1192.168.2.4
                                            Apr 19, 2024 01:02:37.958633900 CEST53602061.1.1.1192.168.2.4
                                            Apr 19, 2024 01:02:38.811008930 CEST6544253192.168.2.41.1.1.1
                                            Apr 19, 2024 01:02:38.811321020 CEST6435853192.168.2.41.1.1.1
                                            Apr 19, 2024 01:02:38.907567024 CEST53555601.1.1.1192.168.2.4
                                            Apr 19, 2024 01:02:38.918884993 CEST53654421.1.1.1192.168.2.4
                                            Apr 19, 2024 01:02:38.936166048 CEST53643581.1.1.1192.168.2.4
                                            Apr 19, 2024 01:02:39.297748089 CEST5700853192.168.2.41.1.1.1
                                            Apr 19, 2024 01:02:39.298156977 CEST6445953192.168.2.41.1.1.1
                                            Apr 19, 2024 01:02:39.402267933 CEST53570081.1.1.1192.168.2.4
                                            Apr 19, 2024 01:02:39.402749062 CEST53644591.1.1.1192.168.2.4
                                            Apr 19, 2024 01:02:39.979561090 CEST53647951.1.1.1192.168.2.4
                                            Apr 19, 2024 01:02:41.150415897 CEST6236953192.168.2.41.1.1.1
                                            Apr 19, 2024 01:02:41.150897026 CEST6467653192.168.2.41.1.1.1
                                            Apr 19, 2024 01:02:41.256198883 CEST53646761.1.1.1192.168.2.4
                                            Apr 19, 2024 01:02:41.259159088 CEST53623691.1.1.1192.168.2.4
                                            Apr 19, 2024 01:02:43.272248030 CEST53632481.1.1.1192.168.2.4
                                            Apr 19, 2024 01:02:53.406258106 CEST53580601.1.1.1192.168.2.4
                                            Apr 19, 2024 01:02:54.256650925 CEST138138192.168.2.4192.168.2.255
                                            Apr 19, 2024 01:03:12.480428934 CEST53572221.1.1.1192.168.2.4
                                            Apr 19, 2024 01:03:34.882941961 CEST53509941.1.1.1192.168.2.4
                                            Apr 19, 2024 01:03:35.644452095 CEST53606931.1.1.1192.168.2.4

                                            ICMP Packets

                                            TimestampSource IPDest IPChecksumCodeType
                                            Apr 19, 2024 01:02:39.626426935 CEST192.168.2.41.1.1.1c274(Port unreachable)Destination Unreachable

                                            DNS Queries

                                            TimestampSource IPDest IPTrans IDOP CodeNameTypeClassDNS over HTTPS
                                            Apr 19, 2024 01:02:37.853441954 CEST192.168.2.41.1.1.10x264eStandard query (0)plausible.ioA (IP address)IN (0x0001)false
                                            Apr 19, 2024 01:02:37.853576899 CEST192.168.2.41.1.1.10xc607Standard query (0)plausible.io65IN (0x0001)false
                                            Apr 19, 2024 01:02:38.811008930 CEST192.168.2.41.1.1.10xc038Standard query (0)m03lm.rdtk.ioA (IP address)IN (0x0001)false
                                            Apr 19, 2024 01:02:38.811321020 CEST192.168.2.41.1.1.10xd559Standard query (0)m03lm.rdtk.io65IN (0x0001)false
                                            Apr 19, 2024 01:02:39.297748089 CEST192.168.2.41.1.1.10x4e19Standard query (0)www.google.comA (IP address)IN (0x0001)false
                                            Apr 19, 2024 01:02:39.298156977 CEST192.168.2.41.1.1.10x8275Standard query (0)www.google.com65IN (0x0001)false
                                            Apr 19, 2024 01:02:41.150415897 CEST192.168.2.41.1.1.10x7f7fStandard query (0)userstatics.comA (IP address)IN (0x0001)false
                                            Apr 19, 2024 01:02:41.150897026 CEST192.168.2.41.1.1.10xa589Standard query (0)userstatics.com65IN (0x0001)false

                                            DNS Answers

                                            TimestampSource IPDest IPTrans IDReply CodeNameCNameAddressTypeClassDNS over HTTPS
                                            Apr 19, 2024 01:02:37.958633900 CEST1.1.1.1192.168.2.40x264eNo error (0)plausible.io185.152.66.243A (IP address)IN (0x0001)false
                                            Apr 19, 2024 01:02:38.918884993 CEST1.1.1.1192.168.2.40xc038No error (0)m03lm.rdtk.iowdc.rdtk.ioCNAME (Canonical name)IN (0x0001)false
                                            Apr 19, 2024 01:02:38.918884993 CEST1.1.1.1192.168.2.40xc038No error (0)wdc.rdtk.io23.108.56.75A (IP address)IN (0x0001)false
                                            Apr 19, 2024 01:02:38.936166048 CEST1.1.1.1192.168.2.40xd559No error (0)m03lm.rdtk.iowdc.rdtk.ioCNAME (Canonical name)IN (0x0001)false
                                            Apr 19, 2024 01:02:39.402267933 CEST1.1.1.1192.168.2.40x4e19No error (0)www.google.com74.125.138.103A (IP address)IN (0x0001)false
                                            Apr 19, 2024 01:02:39.402267933 CEST1.1.1.1192.168.2.40x4e19No error (0)www.google.com74.125.138.104A (IP address)IN (0x0001)false
                                            Apr 19, 2024 01:02:39.402267933 CEST1.1.1.1192.168.2.40x4e19No error (0)www.google.com74.125.138.105A (IP address)IN (0x0001)false
                                            Apr 19, 2024 01:02:39.402267933 CEST1.1.1.1192.168.2.40x4e19No error (0)www.google.com74.125.138.106A (IP address)IN (0x0001)false
                                            Apr 19, 2024 01:02:39.402267933 CEST1.1.1.1192.168.2.40x4e19No error (0)www.google.com74.125.138.99A (IP address)IN (0x0001)false
                                            Apr 19, 2024 01:02:39.402267933 CEST1.1.1.1192.168.2.40x4e19No error (0)www.google.com74.125.138.147A (IP address)IN (0x0001)false
                                            Apr 19, 2024 01:02:39.402749062 CEST1.1.1.1192.168.2.40x8275No error (0)www.google.com65IN (0x0001)false
                                            Apr 19, 2024 01:02:41.256198883 CEST1.1.1.1192.168.2.40xa589No error (0)userstatics.com65IN (0x0001)false
                                            Apr 19, 2024 01:02:41.259159088 CEST1.1.1.1192.168.2.40x7f7fNo error (0)userstatics.com104.21.53.38A (IP address)IN (0x0001)false
                                            Apr 19, 2024 01:02:41.259159088 CEST1.1.1.1192.168.2.40x7f7fNo error (0)userstatics.com172.67.208.186A (IP address)IN (0x0001)false
                                            Apr 19, 2024 01:02:51.971498966 CEST1.1.1.1192.168.2.40x7bc6No error (0)fp2e7a.wpc.2be4.phicdn.netfp2e7a.wpc.phicdn.netCNAME (Canonical name)IN (0x0001)false
                                            Apr 19, 2024 01:02:51.971498966 CEST1.1.1.1192.168.2.40x7bc6No error (0)fp2e7a.wpc.phicdn.net192.229.211.108A (IP address)IN (0x0001)false
                                            Apr 19, 2024 01:03:04.517235041 CEST1.1.1.1192.168.2.40x4761No error (0)fp2e7a.wpc.2be4.phicdn.netfp2e7a.wpc.phicdn.netCNAME (Canonical name)IN (0x0001)false
                                            Apr 19, 2024 01:03:04.517235041 CEST1.1.1.1192.168.2.40x4761No error (0)fp2e7a.wpc.phicdn.net192.229.211.108A (IP address)IN (0x0001)false
                                            Apr 19, 2024 01:03:27.731739044 CEST1.1.1.1192.168.2.40xc540No error (0)fp2e7a.wpc.2be4.phicdn.netfp2e7a.wpc.phicdn.netCNAME (Canonical name)IN (0x0001)false
                                            Apr 19, 2024 01:03:27.731739044 CEST1.1.1.1192.168.2.40xc540No error (0)fp2e7a.wpc.phicdn.net192.229.211.108A (IP address)IN (0x0001)false
                                            Apr 19, 2024 01:03:47.825434923 CEST1.1.1.1192.168.2.40x8344No error (0)fp2e7a.wpc.2be4.phicdn.netfp2e7a.wpc.phicdn.netCNAME (Canonical name)IN (0x0001)false
                                            Apr 19, 2024 01:03:47.825434923 CEST1.1.1.1192.168.2.40x8344No error (0)fp2e7a.wpc.phicdn.net192.229.211.108A (IP address)IN (0x0001)false

                                            HTTP Request Dependency Graph

                                            • https:
                                              • plausible.io
                                              • m03lm.rdtk.io
                                              • userstatics.com
                                            • fs.microsoft.com

                                            HTTPS Proxied Packets

                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                            0192.168.2.449742185.152.66.2434435236C:\Program Files\Google\Chrome\Application\chrome.exe
                                            TimestampBytes transferredDirectionData
                                            2024-04-18 23:02:38 UTC541OUTGET /js/script.js HTTP/1.1
                                            Host: plausible.io
                                            Connection: keep-alive
                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                            sec-ch-ua-mobile: ?0
                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                            sec-ch-ua-platform: "Windows"
                                            Accept: */*
                                            Sec-Fetch-Site: cross-site
                                            Sec-Fetch-Mode: no-cors
                                            Sec-Fetch-Dest: script
                                            Referer: https://appddd08.z19.web.core.windows.net/
                                            Accept-Encoding: gzip, deflate, br
                                            Accept-Language: en-US,en;q=0.9
                                            2024-04-18 23:02:38 UTC757INHTTP/1.1 200 OK
                                            Date: Thu, 18 Apr 2024 23:02:38 GMT
                                            Content-Type: application/javascript
                                            Content-Length: 1346
                                            Connection: close
                                            Vary: Accept-Encoding
                                            Server: BunnyCDN-GA1-911
                                            CDN-PullZone: 682664
                                            CDN-Uid: 153cb5b1-399a-48ef-b5bf-098c03770254
                                            CDN-RequestCountryCode: RO
                                            Access-Control-Allow-Origin: *
                                            Alt-Svc: h3=":443"; ma=2592000
                                            Cache-Control: public, must-revalidate, max-age=86400
                                            application: 10.0.1.2
                                            cross-origin-resource-policy: cross-origin
                                            permissions-policy: interest-cohort=()
                                            X-Content-Type-Options: nosniff
                                            CDN-ProxyVer: 1.04
                                            CDN-RequestPullSuccess: True
                                            CDN-RequestPullCode: 200
                                            CDN-CachedAt: 04/18/2024 11:51:11
                                            CDN-EdgeStorageId: 911
                                            CDN-Status: 200
                                            CDN-RequestId: 81b9ffe4d8235770a44f6f671fa93cb4
                                            CDN-Cache: HIT
                                            2024-04-18 23:02:38 UTC1346INData Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2c 72 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2c 6f 3d 72 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2c 6c 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 61 70 69 22 29 7c 7c 6e 65 77 20 55 52 4c 28 6f 2e 73 72 63 29 2e 6f 72 69 67 69 6e 2b 22 2f 61 70 69 2f 65 76 65 6e 74 22 3b 66 75 6e 63 74 69 6f 6e 20 73 28 74 2c 65 29 7b 74 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 49 67 6e 6f 72 69 6e 67 20 45 76 65 6e 74 3a 20 22 2b 74 29 2c 65 26 26 65 2e 63 61 6c 6c 62 61 63 6b 26 26 65 2e 63 61 6c 6c 62 61 63 6b 28 29 7d 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 69 66 28 2f 5e 6c 6f 63 61
                                            Data Ascii: !function(){"use strict";var a=window.location,r=window.document,o=r.currentScript,l=o.getAttribute("data-api")||new URL(o.src).origin+"/api/event";function s(t,e){t&&console.warn("Ignoring Event: "+t),e&&e.callback&&e.callback()}function t(t,e){if(/^loca


                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                            1192.168.2.44974823.108.56.754435236C:\Program Files\Google\Chrome\Application\chrome.exe
                                            TimestampBytes transferredDirectionData
                                            2024-04-18 23:02:39 UTC623OUTGET /postback?format=img&sum={replace} HTTP/1.1
                                            Host: m03lm.rdtk.io
                                            Connection: keep-alive
                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                            sec-ch-ua-mobile: ?0
                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                            sec-ch-ua-platform: "Windows"
                                            Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                                            Sec-Fetch-Site: cross-site
                                            Sec-Fetch-Mode: no-cors
                                            Sec-Fetch-Dest: image
                                            Referer: https://appddd08.z19.web.core.windows.net/
                                            Accept-Encoding: gzip, deflate, br
                                            Accept-Language: en-US,en;q=0.9
                                            2024-04-18 23:02:39 UTC158INHTTP/1.1 400 Bad Request
                                            Server: nginx/1.20.2
                                            Date: Thu, 18 Apr 2024 23:02:39 GMT
                                            Content-Type: application/json
                                            Content-Length: 73
                                            Connection: close
                                            2024-04-18 23:02:39 UTC73INData Raw: 7b 22 73 74 61 74 75 73 22 3a 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 69 6e 76 61 6c 69 64 20 61 74 74 72 69 62 75 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 73 3a 20 76 61 6c 69 64 61 74 69 6f 6e 20 65 72 72 6f 72 22 7d
                                            Data Ascii: {"status":0,"message":"invalid attribution parameters: validation error"}


                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                            2192.168.2.449764104.123.200.136443
                                            TimestampBytes transferredDirectionData
                                            2024-04-18 23:02:40 UTC161OUTHEAD /fs/windows/config.json HTTP/1.1
                                            Connection: Keep-Alive
                                            Accept: */*
                                            Accept-Encoding: identity
                                            User-Agent: Microsoft BITS/7.8
                                            Host: fs.microsoft.com
                                            2024-04-18 23:02:40 UTC467INHTTP/1.1 200 OK
                                            Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json
                                            Content-Type: application/octet-stream
                                            ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7"
                                            Last-Modified: Tue, 16 May 2017 22:58:00 GMT
                                            Server: ECAcc (lpl/EF06)
                                            X-CID: 11
                                            X-Ms-ApiVersion: Distribute 1.2
                                            X-Ms-Region: prod-neu-z1
                                            Cache-Control: public, max-age=148032
                                            Date: Thu, 18 Apr 2024 23:02:40 GMT
                                            Connection: close
                                            X-CID: 2


                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                            3192.168.2.449769104.123.200.136443
                                            TimestampBytes transferredDirectionData
                                            2024-04-18 23:02:41 UTC239OUTGET /fs/windows/config.json HTTP/1.1
                                            Connection: Keep-Alive
                                            Accept: */*
                                            Accept-Encoding: identity
                                            If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT
                                            Range: bytes=0-2147483646
                                            User-Agent: Microsoft BITS/7.8
                                            Host: fs.microsoft.com
                                            2024-04-18 23:02:41 UTC531INHTTP/1.1 200 OK
                                            Content-Type: application/octet-stream
                                            Last-Modified: Tue, 16 May 2017 22:58:00 GMT
                                            ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7"
                                            ApiVersion: Distribute 1.1
                                            Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json
                                            X-Azure-Ref: 0rcGnYgAAAAANOnx9vccHTr21ROgX9ESTU0pDRURHRTAzMDkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm
                                            Cache-Control: public, max-age=147993
                                            Date: Thu, 18 Apr 2024 23:02:41 GMT
                                            Content-Length: 55
                                            Connection: close
                                            X-CID: 2
                                            2024-04-18 23:02:41 UTC55INData Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d
                                            Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}


                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                            4192.168.2.449772185.152.66.2434435236C:\Program Files\Google\Chrome\Application\chrome.exe
                                            TimestampBytes transferredDirectionData
                                            2024-04-18 23:02:41 UTC633OUTPOST /api/event HTTP/1.1
                                            Host: plausible.io
                                            Connection: keep-alive
                                            Content-Length: 140
                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                            sec-ch-ua-platform: "Windows"
                                            sec-ch-ua-mobile: ?0
                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                            Content-Type: text/plain
                                            Accept: */*
                                            Origin: https://appddd08.z19.web.core.windows.net
                                            Sec-Fetch-Site: cross-site
                                            Sec-Fetch-Mode: cors
                                            Sec-Fetch-Dest: empty
                                            Referer: https://appddd08.z19.web.core.windows.net/
                                            Accept-Encoding: gzip, deflate, br
                                            Accept-Language: en-US,en;q=0.9
                                            2024-04-18 23:02:41 UTC140OUTData Raw: 7b 22 6e 22 3a 22 70 61 67 65 76 69 65 77 22 2c 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 61 70 70 64 64 64 30 38 2e 7a 31 39 2e 77 65 62 2e 63 6f 72 65 2e 77 69 6e 64 6f 77 73 2e 6e 65 74 2f 57 69 6e 30 73 65 63 75 72 69 74 79 2d 68 65 6c 70 6c 69 6e 65 30 37 2f 69 6e 64 65 78 2e 68 74 6d 6c 3f 70 68 30 6e 3d 31 2d 38 34 34 2d 34 39 32 2d 30 34 31 35 22 2c 22 64 22 3a 22 38 2e 63 6f 6d 22 2c 22 72 22 3a 6e 75 6c 6c 7d
                                            Data Ascii: {"n":"pageview","u":"https://appddd08.z19.web.core.windows.net/Win0security-helpline07/index.html?ph0n=1-844-492-0415","d":"8.com","r":null}
                                            2024-04-18 23:02:41 UTC703INHTTP/1.1 202 Accepted
                                            Date: Thu, 18 Apr 2024 23:02:41 GMT
                                            Content-Type: text/plain; charset=utf-8
                                            Content-Length: 2
                                            Connection: close
                                            Server: BunnyCDN-GA1-911
                                            CDN-PullZone: 682664
                                            CDN-Uid: 153cb5b1-399a-48ef-b5bf-098c03770254
                                            CDN-RequestCountryCode: RO
                                            Access-Control-Allow-Credentials: true
                                            Access-Control-Allow-Origin: *
                                            Alt-Svc: h3=":443"; ma=2592000
                                            Cache-Control: must-revalidate, max-age=0, private
                                            application: 10.0.1.5
                                            permissions-policy: interest-cohort=()
                                            X-Request-ID: F8eCOE4xsVdeMhYSy-GD
                                            CDN-ProxyVer: 1.04
                                            CDN-RequestPullSuccess: True
                                            CDN-RequestPullCode: 202
                                            CDN-CachedAt: 04/18/2024 23:02:41
                                            CDN-EdgeStorageId: 911
                                            CDN-RequestId: 99818714aa0d38f1363fe8eb6eeac82b
                                            2024-04-18 23:02:41 UTC2INData Raw: 6f 6b
                                            Data Ascii: ok


                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                            5192.168.2.449775104.21.53.384435236C:\Program Files\Google\Chrome\Application\chrome.exe
                                            TimestampBytes transferredDirectionData
                                            2024-04-18 23:02:41 UTC651OUTGET /get/script.js?referrer=https://appddd08.z19.web.core.windows.net/Win0security-helpline07/index.html?ph0n=1-844-492-0415 HTTP/1.1
                                            Host: userstatics.com
                                            Connection: keep-alive
                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                            sec-ch-ua-mobile: ?0
                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                            sec-ch-ua-platform: "Windows"
                                            Accept: */*
                                            Sec-Fetch-Site: cross-site
                                            Sec-Fetch-Mode: no-cors
                                            Sec-Fetch-Dest: script
                                            Referer: https://appddd08.z19.web.core.windows.net/
                                            Accept-Encoding: gzip, deflate, br
                                            Accept-Language: en-US,en;q=0.9
                                            2024-04-18 23:02:41 UTC809INHTTP/1.1 200 OK
                                            Date: Thu, 18 Apr 2024 23:02:41 GMT
                                            Content-Type: text/html; charset=utf-8
                                            Transfer-Encoding: chunked
                                            Connection: close
                                            X-Powered-By: PHP/8.2.1
                                            Access-Control-Allow-Origin: https://appddd08.z19.web.core.windows.net
                                            Access-Control-Allow-Methods: GET, POST
                                            Access-Control-Allow-Headers: X-Requested-With,content-type
                                            Access-Control-Allow-Credentials: true
                                            CF-Cache-Status: DYNAMIC
                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zn5pKLsqHocjbjcswQs6%2FayWYJtmBrP3Z2rBiQeR1xhCxcdvixzbFDiM07TtBJIwNET6vzrqyV8QEjCMvmNOA1wicnfqmvsoj25kDIatOrr8lLUymj0ajvefJpbRmX9mRxo%3D"}],"group":"cf-nel","max_age":604800}
                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                            Server: cloudflare
                                            CF-RAY: 876848aeadd1ad89-ATL
                                            alt-svc: h3=":443"; ma=86400
                                            2024-04-18 23:02:41 UTC139INData Raw: 38 35 0d 0a 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 73 63 72 69 70 74 22 29 2e 66 6f 72 45 61 63 68 28 65 3d 3e 7b 6e 65 77 20 52 65 67 45 78 70 28 61 74 6f 62 28 22 64 58 4e 6c 63 6e 4e 30 59 58 52 70 59 33 4d 75 59 32 39 74 22 29 29 2e 74 65 73 74 28 65 2e 73 72 63 29 26 26 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 29 7d 29 3b 0d 0a
                                            Data Ascii: 85document.querySelectorAll("script").forEach(e=>{new RegExp(atob("dXNlcnN0YXRpY3MuY29t")).test(e.src)&&document.body.removeChild(e)});
                                            2024-04-18 23:02:41 UTC5INData Raw: 30 0d 0a 0d 0a
                                            Data Ascii: 0


                                            Statistics

                                            CPU Usage

                                            Click to jump to process

                                            Memory Usage

                                            Click to jump to process

                                            Behavior

                                            Click to jump to process

                                            System Behavior

                                            General

                                            Target ID:0
                                            Start time:01:02:30
                                            Start date:19/04/2024
                                            Path:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            Wow64 process (32bit):false
                                            Commandline:"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
                                            Imagebase:0x7ff76e190000
                                            File size:3'242'272 bytes
                                            MD5 hash:45DE480806D1B5D462A7DDE4DCEFC4E4
                                            Has elevated privileges:true
                                            Has administrator privileges:true
                                            Programmed in:C, C++ or other language
                                            Reputation:low
                                            Has exited:false

                                            General

                                            Target ID:2
                                            Start time:01:02:33
                                            Start date:19/04/2024
                                            Path:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            Wow64 process (32bit):false
                                            Commandline:"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 --field-trial-handle=1968,i,1316399962579613010,6648906634988723991,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
                                            Imagebase:0x7ff76e190000
                                            File size:3'242'272 bytes
                                            MD5 hash:45DE480806D1B5D462A7DDE4DCEFC4E4
                                            Has elevated privileges:true
                                            Has administrator privileges:true
                                            Programmed in:C, C++ or other language
                                            Reputation:low
                                            Has exited:false

                                            General

                                            Target ID:3
                                            Start time:01:02:36
                                            Start date:19/04/2024
                                            Path:C:\Program Files\Google\Chrome\Application\chrome.exe
                                            Wow64 process (32bit):false
                                            Commandline:"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://appddd08.z19.web.core.windows.net/Win0security-helpline07/index.html?ph0n=1-844-492-0415"
                                            Imagebase:0x7ff76e190000
                                            File size:3'242'272 bytes
                                            MD5 hash:45DE480806D1B5D462A7DDE4DCEFC4E4
                                            Has elevated privileges:true
                                            Has administrator privileges:true
                                            Programmed in:C, C++ or other language
                                            Reputation:low
                                            Has exited:true

                                            Disassembly

                                            ⊘No disassembly