Windows Analysis Report
https://www.dropbox.com/l/scl/AABh_-YLozjwRD9PjSZAJABqpSvBkhkUq6s

Overview

General Information

Sample URL:	https://www.dropbox.com/l/scl/AABh_-YLozjwRD9PjSZAJABqpSvBkhkUq6s
Analysis ID:	1428811

Detection

Score:	3
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Found iframes

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Phishing site detected (based on OCR NLP Model)

Stores files to the Windows start menu directory

Classification

Signatures

Found iframes

Source: https://www.dropbox.com/scl/fi/s5uzm3l2o0qzv8dhpivcc/Marco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf?oref=e&r=ACKwiZzUpKZVN3F-cQJZm1N9HmYy0Mj0tJY4-M_u3ul-IGudOfGTgJiWnEdOKix1mKLN7VAl1yIksBxDbsYV7H8OXxKGrCsiUslO0v3bKsPzicpLLb7bg9ndz4JNC7epK0TmajfPKbCHocufjk8XUC2hrrHT7EEDwbIsT5xtjyRHFv_ZU4uedGlio7_5n4QjdYCehOCDBZzS5nlYpQOE9qZwqumEcJ270CH_-nFqAek1AQ&sm=1&dl=0	HTTP Parser: Iframe src: https://dropboxcaptcha.com
Source: https://www.dropbox.com/scl/fi/s5uzm3l2o0qzv8dhpivcc/Marco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf?oref=e&r=ACKwiZzUpKZVN3F-cQJZm1N9HmYy0Mj0tJY4-M_u3ul-IGudOfGTgJiWnEdOKix1mKLN7VAl1yIksBxDbsYV7H8OXxKGrCsiUslO0v3bKsPzicpLLb7bg9ndz4JNC7epK0TmajfPKbCHocufjk8XUC2hrrHT7EEDwbIsT5xtjyRHFv_ZU4uedGlio7_5n4QjdYCehOCDBZzS5nlYpQOE9qZwqumEcJ270CH_-nFqAek1AQ&sm=1&dl=0	HTTP Parser: Iframe src: https://www.dropbox.com/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true
Source: https://www.dropbox.com/scl/fi/s5uzm3l2o0qzv8dhpivcc/Marco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf?oref=e&r=ACKwiZzUpKZVN3F-cQJZm1N9HmYy0Mj0tJY4-M_u3ul-IGudOfGTgJiWnEdOKix1mKLN7VAl1yIksBxDbsYV7H8OXxKGrCsiUslO0v3bKsPzicpLLb7bg9ndz4JNC7epK0TmajfPKbCHocufjk8XUC2hrrHT7EEDwbIsT5xtjyRHFv_ZU4uedGlio7_5n4QjdYCehOCDBZzS5nlYpQOE9qZwqumEcJ270CH_-nFqAek1AQ&sm=1&dl=0	HTTP Parser: Iframe src: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_899122_321890&as=5CPXzvnVIYYmjHQkSNOUhA&hl=en

HTML body contains low number of good links

Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_899122_321890&as=5CPXzvnVIYYmjHQkSNOUhA&hl=en

HTTP Parser: Number of links: 0

HTML body contains password input but no form action

Source: https://www.dropbox.com/scl/fi/s5uzm3l2o0qzv8dhpivcc/Marco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf?oref=e&r=ACKwiZzUpKZVN3F-cQJZm1N9HmYy0Mj0tJY4-M_u3ul-IGudOfGTgJiWnEdOKix1mKLN7VAl1yIksBxDbsYV7H8OXxKGrCsiUslO0v3bKsPzicpLLb7bg9ndz4JNC7epK0TmajfPKbCHocufjk8XUC2hrrHT7EEDwbIsT5xtjyRHFv_ZU4uedGlio7_5n4QjdYCehOCDBZzS5nlYpQOE9qZwqumEcJ270CH_-nFqAek1AQ&sm=1&dl=0

HTTP Parser: <input type="password" .../> found but no <form action="...

HTML title does not match URL

HTTP Parser: Title: Sign up to view this shared file does not match URL

Phishing site detected (based on OCR NLP Model)

Source: Chrome DOM: 1.1

ML Model on OCR Text: Matched 95.7% probability on "To keep Marco Paoloni ha condiviso un... ell'ordinanza del tribunale.pdf secure, we All Files need to confirm your identity Log in or sign up Continue witn Google PDF Continue with Apple Email martina.norido@radiusfuelsolutions.com "

HTTP Parser: <input type="password" .../> found

Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_899122_321890&as=5CPXzvnVIYYmjHQkSNOUhA&hl=en	HTTP Parser: No favicon
Source: https://dropboxcaptcha.com/	HTTP Parser: No favicon

Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_899122_321890&as=5CPXzvnVIYYmjHQkSNOUhA&hl=en	HTTP Parser: No <meta name="author".. found
Source: https://www.dropbox.com/scl/fi/s5uzm3l2o0qzv8dhpivcc/Marco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf?oref=e&r=ACKwiZzUpKZVN3F-cQJZm1N9HmYy0Mj0tJY4-M_u3ul-IGudOfGTgJiWnEdOKix1mKLN7VAl1yIksBxDbsYV7H8OXxKGrCsiUslO0v3bKsPzicpLLb7bg9ndz4JNC7epK0TmajfPKbCHocufjk8XUC2hrrHT7EEDwbIsT5xtjyRHFv_ZU4uedGlio7_5n4QjdYCehOCDBZzS5nlYpQOE9qZwqumEcJ270CH_-nFqAek1AQ&sm=1&dl=0	HTTP Parser: No <meta name="author".. found

Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_899122_321890&as=5CPXzvnVIYYmjHQkSNOUhA&hl=en	HTTP Parser: No <meta name="copyright".. found
Source: https://www.dropbox.com/scl/fi/s5uzm3l2o0qzv8dhpivcc/Marco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf?oref=e&r=ACKwiZzUpKZVN3F-cQJZm1N9HmYy0Mj0tJY4-M_u3ul-IGudOfGTgJiWnEdOKix1mKLN7VAl1yIksBxDbsYV7H8OXxKGrCsiUslO0v3bKsPzicpLLb7bg9ndz4JNC7epK0TmajfPKbCHocufjk8XUC2hrrHT7EEDwbIsT5xtjyRHFv_ZU4uedGlio7_5n4QjdYCehOCDBZzS5nlYpQOE9qZwqumEcJ270CH_-nFqAek1AQ&sm=1&dl=0	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49883 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.16:49887 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.16:49888 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49912 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93

Source: unknown

DNS traffic detected: queries for: www.dropbox.com

Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49883 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.16:49887 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.16:49888 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49912 version: TLS 1.2

Source: classification engine

Classification label: clean3.win@22/125@36/223

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.dropbox.com/l/scl/AABh_-YLozjwRD9PjSZAJABqpSvBkhkUq6s
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=1952,i,15441435526096891022,4092633418284623240,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6068 --field-trial-handle=1952,i,15441435526096891022,4092633418284623240,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3168 --field-trial-handle=1952,i,15441435526096891022,4092633418284623240,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=1952,i,15441435526096891022,4092633418284623240,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6068 --field-trial-handle=1952,i,15441435526096891022,4092633418284623240,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3168 --field-trial-handle=1952,i,15441435526096891022,4092633418284623240,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Screenshots

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
64.233.177.84	unknown	United States	15169	GOOGLEUS	false
1.1.1.1	unknown	Australia	13335	CLOUDFLARENETUS	false
74.125.136.95	unknown	United States	15169	GOOGLEUS	false
74.125.136.84	unknown	United States	15169	GOOGLEUS	false
142.250.105.84	unknown	United States	15169	GOOGLEUS	false
64.233.176.94	unknown	United States	15169	GOOGLEUS	false
18.160.48.194	dropboxcaptcha.com	United States	3	MIT-GATEWAYSUS	false
172.253.124.104	unknown	United States	15169	GOOGLEUS	false
104.16.100.29	unknown	United States	13335	CLOUDFLARENETUS	false
162.125.9.18	www-env.dropbox-dns.com	United States	19679	DROPBOXUS	false
64.233.185.113	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
18.165.116.50	unknown	United States	3	MIT-GATEWAYSUS	false
64.233.177.101	play.google.com	United States	15169	GOOGLEUS	false
18.165.116.121	fp.dropbox.com	United States	3	MIT-GATEWAYSUS	false
64.233.185.84	unknown	United States	15169	GOOGLEUS	false
142.250.9.94	unknown	United States	15169	GOOGLEUS	false
64.233.176.147	www.google.com	United States	15169	GOOGLEUS	false
74.125.250.129	stun-anycast.l.google.com	United States	15169	GOOGLEUS	false
64.233.176.139	unknown	United States	15169	GOOGLEUS	false
64.233.185.138	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.17
192.168.2.16

Contacted Domains

Name	IP	Active
stun-anycast.l.google.com	74.125.250.129	true
play.google.com	64.233.177.101	true
dropboxcaptcha.com	18.160.48.194	true
www-env.dropbox-dns.com	162.125.9.18	true
www.google.com	64.233.176.147	true
fp.dropbox.com	18.165.116.121	true
stun.fpapi.io	unknown	unknown
www.dropbox.com	unknown	unknown
cfl.dropboxstatic.com	unknown	unknown
stun.l.google.com	unknown	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.dropbox.com/scl/fi/s5uzm3l2o0qzv8dhpivcc/Marco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf?oref=e&r=ACKwiZzUpKZVN3F-cQJZm1N9HmYy0Mj0tJY4-M_u3ul-IGudOfGTgJiWnEdOKix1mKLN7VAl1yIksBxDbsYV7H8OXxKGrCsiUslO0v3bKsPzicpLLb7bg9ndz4JNC7epK0TmajfPKbCHocufjk8XUC2hrrHT7EEDwbIsT5xtjyRHFv_ZU4uedGlio7_5n4QjdYCehOCDBZzS5nlYpQOE9qZwqumEcJ270CH_-nFqAek1AQ&sm=1&dl=0	false		high
https://www.dropbox.com/scl/fi/s5uzm3l2o0qzv8dhpivcc/Marco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf?dl=0&oref=e&r=ACKwiZzUpKZVN3F-cQJZm1N9HmYy0Mj0tJY4-M_u3ul-IGudOfGTgJiWnEdOKix1mKLN7VAl1yIksBxDbsYV7H8OXxKGrCsiUslO0v3bKsPzicpLLb7bg9ndz4JNC7epK0TmajfPKbCHocufjk8XUC2hrrHT7EEDwbIsT5xtjyRHFv_ZU4uedGlio7_5n4QjdYCehOCDBZzS5nlYpQOE9qZwqumEcJ270CH_-nFqAek1AQ&sm=1	false		high
https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true	false		high
https://dropboxcaptcha.com/	false	URL Reputation: safe	unknown

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 13:44:52 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	85A40F04948DB825FFDE180A5C214D70	7B7C8F6C39188F1D661B3776CD030362410D6DD6	74AEC846B32849A058BFFF95FA028744849EB4C8CF2CC31A61EF8957708393C7
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 13:44:52 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	C36FF05D299F337AA6F62AE83B2EC7F2	ACB178723A3F0E89B66C13999B6993DD326C0B94	77F6064E14B07158DEA4AD970B9F5459DCDBA20A17E766F5438CA2B1DBBA6A7C
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	2A9798DF6072D05F6012D09F43A5E7F1	876A291D1F684D1FCD24D70A689DA1B51311EB9E	53329A2471254EE1E72D9B0B190DDEA0A1C81484DC2B36544C6EBAB19A801A74
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 13:44:52 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	83EE731FAFED94BD2E9F07251AF811FF	A7C85183FABE9194E420EEDDB153DA3253EB59F5	6A542C8FF9371286E9AAAC5B05676421BC020B82178ED3BF81AB0A193BA7033B
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 13:44:52 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	8054D430012934E5A47F5900E7803CFB	92C5396B2352D45117C5B554E914C58683F2A99F	26BE5FAFDD13E447B0B02D8DBEE2DC8C3A8891EE0D16D24F063CFF7F0BB0779B
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 13:44:52 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	C3D79E678C63862F6F640CDB4C7C03CD	5983AF22AEB02A55BE605036D646618F80C127AA	06606017410504F05E6B3F46E9BF774F33AE3E662AE6F3EF87D1BFE86E261963
Chrome Cache Entry: 155	ASCII text, with very long lines (65536), with no line terminators	7B4AAE67846660C9E588B358EAD60A44	A047A1BAF7DFBCB89EB658F1B23189C1F5AF48E4	6EF97E5D221FD3938BC14876B7309694113033FC0D57EECA1CDC2EA165DF7C17
Chrome Cache Entry: 156	ASCII text, with very long lines (4720)	366641E9CB419315F25D1AD2BF70936B	B789F141CB7EA723E10CB6F24428B760977FB9A2	D8A348DF23957CF3F7400C5A160B6D276D7DF0F16C46B673FD722391E5583586
Chrome Cache Entry: 157	ASCII text, with very long lines (65536), with no line terminators	D7A3C32094B126EA229D11DF4960ED0C	AB37565FF9EAAECB989D64CE99197486FFB28C67	973219C3D63CD492A44CE0C43D9C792DA4E82D4EE52D5884E0FE747D3DADC0CA
Chrome Cache Entry: 158	ASCII text, with very long lines (65536), with no line terminators	E60212DF30315441390BA4E802D0D40C	4D0C94FB679C4A6673C712D23A15C627D69171C0	D0FE9C7D0F6277BF67EE2077758FC4B5DFAE8413C4257E77DB8E7CC4212D0CFF
Chrome Cache Entry: 159	ASCII text	3E904D06E56BD470498071EF9F7403BE	F99226A89C61F90A6FA6E3601E7B933DAD057A11	AC66E676723D630FDEC99090F7F476E9F933773409EEE8B4CC9157A3E3856794
Chrome Cache Entry: 160	ASCII text, with very long lines (605)	23BFE7E99565EE8F34AFD63C06F4C24B	BF08B8AD1AD73C12A7C9CB211926CE23A861DB07	9DB33292007AB6C38527B39D5663E976A305564E19B2A5A8713EA2B2C00F505D
Chrome Cache Entry: 161	ASCII text, with very long lines (3491)	5A9A1990481F6C4B0AFF64192A3D2DC8	D0EE02BA86BCE2EAAC7F9463BBEDD46068B73084	E2F54D98C3200FEC2547F0A73B5FA041D766F5C65EBFF38FA2A5A3BF2E4EC8EC
Chrome Cache Entry: 162	ASCII text, with very long lines (52402)	2D38135994C678D7640482640774DE39	28D6E93C409A6DF7408CA134D04A788B17499828	D15AF9827C1B2B2E300C8A04FBF14717BD643FE77E36621CD3523AB432124978
Chrome Cache Entry: 163	ASCII text, with very long lines (4787)	1DB6D4FD47F26888CB9787D97FC00EC0	7E0F0236E67678426A357D5CDC7F75773F5A4E44	85CC4203336C5900A1D094989172DF90925D5704EFCB314F5EB7633CDC811137
Chrome Cache Entry: 165	ASCII text, with very long lines (21663)	10F3FA701AF7A3CB6F9E8054D4AEBC62	A18AFB404DC5405CCBB850D4371AAB5119779302	40CF8DA6EAE259A4BC031CEDBE0844AB5B09D2A78ADE4A30B4FCB86237186CBB
Chrome Cache Entry: 166	ASCII text, with very long lines (1353)	4D83CD35A5B3138D895EA13588222C8F	2C86E768E75EB2F2846502D5D20C142A9912A590	90FD413CA296A562B99A32806EC8AA799455B0D252DEC24B2580FA45F621881A
Chrome Cache Entry: 167	ASCII text, with very long lines (9688)	506A9584ABD4EAA99B53D76D6BA0144B	5B6450A6339306D3F925CB188CDB6A7A0337838F	EEF1B33343539D8827847D82CCA73783B894C6CB877A5C57C184C1B72D027912
Chrome Cache Entry: 168	ASCII text, with very long lines (667)	391DF6D8943BD72729FFAE6D12FFCC1F	639C7997CD036AA108FFD006750974C3EDB421C9	D0891DBFBD95E964CB336D1006DD9ADDEAA7E3450ED687A30C445D9BA0090E22
Chrome Cache Entry: 169	ASCII text, with very long lines (55068)	4632024B2FC84AF602164A9BBAB6F0E0	A4DCC96518AB1AD29F5273F26F24F52C10EF15FA	0A3375D7FD084A72EA22ABAC8828878948C8E0BFFFF76FFADFECF9F028908626
Chrome Cache Entry: 170	JSON data	99914B932BD37A50B983C5E7C90AE93B	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
Chrome Cache Entry: 171	ASCII text, with very long lines (1052)	16689ACAEF4F6C3A7036903379D21499	789D214DBA3F828C508FA9869E0C16BC38F7457D	AC1F0921885A2805CBDE3B2A45FE69AAA4C131A6B3D25200C95FEFA8A9544B2E
Chrome Cache Entry: 172	ASCII text, with very long lines (57485)	9344C1ACA08405FF26D245EA6D33379D	ACB6C050B2830F8FC108B5174F6A138D49C9974A	8D9948E65D622C35A926726F17860B9F76A87FAD28CA7FFEEE697F6241D6A2AE
Chrome Cache Entry: 173	ASCII text, with very long lines (362)	7D3C66659E01077F47CBDD74349E60FA	86EC17A2B340E0E3BD6B84E38CE741D0867C0B9F	B4374EBF2AD5928DC936BB92738388059F1A6DF117AA47FB33F741B8DA23F864
Chrome Cache Entry: 174	ASCII text	D6C32610BC01D28D09392E8CAE4869E6	1A248754B2853D6FFA0381BBA3C4CA65C1AF19C5	107F84EDAF1294B3B3681D48FAFE9DE85165493D55EA9C361FA08ECBD7994148
Chrome Cache Entry: 175	ASCII text, with very long lines (54939)	4D32661F45D92FB57ADCF45D1BBDE91A	0AB0B927E72BBE699FB744280396B2FFC5D68E06	FD5BAF908AC836D689B36BFCAD4A7F96D7D5509EA754CFF0206006F3E452EF13
Chrome Cache Entry: 176	ASCII text, with no line terminators	ADA85F0E77FF200BBEAA3A91DC612401	9B8A1E54F05A349AFAD3350F094EF9E2AAA94EF0	25DC33CE0D90176455755F8133F90B8342DD9DFC5A6F83C14A119D5621CC6972
Chrome Cache Entry: 177	ASCII text, with very long lines (2099)	F77250E0EFE74549BDB944F47C9FCB47	BB9407BB3E11799F95B829271637913AAF1177DD	B8F5E9440EA0ACE133BC11771970A4D105A24584AD118CD8D73758A58894D0CD
Chrome Cache Entry: 178	ASCII text, with very long lines (51287)	2B78FC32690682B2275760850331C4D5	F2C36B7D5C6BB25688FA42FCAE3576BDD06CF05E	5C07793D2FF05D2894BFFB5A9EEB2674BBADE259CBB857E4E330521340F9F8AC
Chrome Cache Entry: 179	ASCII text, with very long lines (2314)	61444FC69EEE497F28D680EE0C9157E7	D72A2EC487F48C1C8C6AAB7B316FCBB6F2ADD7BF	6E6CC053B72069322499F1716187D1C81889190DE9E22D00ADC3231A7FFF90D6
Chrome Cache Entry: 180	ASCII text, with very long lines (31230)	97366B5396C1C6CB5B58CDF6F3A65527	8FC3649AF780C883CD08F85F55C2AF49CBD5F0E4	7FEDD50BE760F82829C4C313D7003F2D4C2448A5DEDB4FD5DE7A78B458F994A3
Chrome Cache Entry: 181	ASCII text, with very long lines (21694)	2968EA53455F7060CDE6EE7B77B65BB4	12872D8072A63D0E680705FD54353967B4FF5966	22B6A22B68B4E7F934729EF432A9A9FEAABF07E64838EAE43D8C7F680975467C
Chrome Cache Entry: 182	ASCII text, with very long lines (4828)	E6C7B1B5B48D9989C48C543C3EA5ABC6	2109AF7D0C10FF2D93FF2B58802C7F01B93B485F	AF3DF2BE4EA805F2A8A8C43951C7EB8BB8CA60E16AA24A3868206156B4B7667E
Chrome Cache Entry: 183	ASCII text, with very long lines (41553)	C715D5135A3F304F19BC34A3954F7937	782A003978640B50552F7D841C142512B76F1DBA	D4913CB47DA91CB6110D06E8FF9BFE439502D4494C219FF895480974A3358576
Chrome Cache Entry: 184	ASCII text, with very long lines (65155)	6C0117474A7C527DC4D099D44DAE71A1	7E755D51CA5A05F8D42518F791BDA950A2F89D0B	23162DDA13C76A1FF73B9FE7F7EFFB042AA830093F19033B6C52F17716F74126
Chrome Cache Entry: 185	C source, ASCII text, with very long lines (710)	09C0D53AF2879162B43B03734FEC35B2	BC603C2186F1808BE5A7085055F0557F7DF4866B	CDFD069A981E8373C2F2EC1FEAF286D8273F2A20A0865831DE93592F15F091E2
Chrome Cache Entry: 186	Web Open Font Format (Version 2), TrueType, length 43308, version 1.66	93B6F18EC99BCB7C3FA7EA570A75E240	60B9E3062FE532CBC18B897FAC542C56A03544C7	43693F7BDD6146E783FAB3F75BA0A51AA3CF9530ADBF790DBD686FC8A17AA3DB
Chrome Cache Entry: 187	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel	F25511F4158C2DFAB6AA11A07D026E4A	99F63CF1694FA5E52F43EB967462EA0D9EEF7513	C0906D540D89DBE1F09B24F17B7F35B81350E8D381C1558B075C28EA913C450D
Chrome Cache Entry: 188	ASCII text, with very long lines (25701)	6147FC8D260EB9D681C80F3D974C713D	FDE6BE0942C18722FB467FA9AD3FF90D431966CE	DFE4ED256A5C75579163A390549BE9EE31E0ED6E6CD368880AADDA48AEA912A3
Chrome Cache Entry: 189	C source, ASCII text, with very long lines (1803)	4ADDF5E9272BD4FE3138862368434369	B9B339BB0495D1346BCFF1180D2D9CA3CD9EB6F6	BA1EA83AACDFEC164A3161871E51026876A3BD863B46BB494C3EFFAE037B5007
Chrome Cache Entry: 190	ASCII text, with very long lines (10533)	151644207B52C049454C572377EE3E83	3BF4661205268520A40DA52C8D2E87F0F9B4BBA4	8BB9C7C60AFCCF29AE2F7CFC9A613619677105D1C698E0343287225080FADFB2
Chrome Cache Entry: 191	ASCII text, with very long lines (4934)	F89735DD18CC42E63140917E07CF2C99	FDA8163CA3BD87016D4376CF094B0AE4EFB993D5	FBF67DBB48D74A501DD35F15EF6E5E2D015DA5E07B5E556C9DA237CD8F1717B0
Chrome Cache Entry: 192	ASCII text, with very long lines (40379)	45BD73696958F0863F8B7F9265D054A9	1C943197E7CDB6AE422BF8CEFD4602B68EA38E44	C20C06F0D8A322B788147CF62C0D1DC173C36AF0B113A055BD1F503590606859
Chrome Cache Entry: 193	ASCII text, with very long lines (26312)	B81161543399CE8985A244004D3BF2BE	546775FDB5068A331F2217702DFABCF44EEA0F36	D78B91BA7FA509896508F7C3BE2A409D4F6E8C43DF1CF6904D296431FE5D2044
Chrome Cache Entry: 195	ASCII text, with very long lines (8406)	26AAC2A148655859CD7464BAAA808AE8	FAFABB4EF231C4D08C6FDE13503BC16B193CB32C	A800D6B2E4BE85662AB2E5FE5E10E46CA1EBC1AF29A27269CFBDF26CFC6325D3
Chrome Cache Entry: 196	TrueType Font data, 16 tables, 1st "GDEF", 19 names, Microsoft, language 0x409	F9ABED3D3D7E0B5A0A5A303B113C53F4	8DEA33D500E929B878CED36C5980745C0BF13DB9	2BB6585B06B56D32AA48AC85F698AEA00A96B5E32B944C9FBA5022CD90F97DCF
Chrome Cache Entry: 197	ASCII text, with very long lines (6506)	4A0F62C20280F479F751116AAF6FF004	92E3963DEE944C49A5CF1F9BCC0E668D307CCABD	B16431F6654C40FDCD3D12717AB8E23CAC760678A5DB6063D3C3DA35316451F9
Chrome Cache Entry: 199	ASCII text, with very long lines (1563)	7B08E15668E6293DED274A0E43734BD4	84CC2086318F411FA109744A702B5B04271D7658	6A8AD86F86D2671FDF62C01740FDC191743F39E124EE7401857E238144329881
Chrome Cache Entry: 200	ASCII text, with very long lines (5602)	CA16D5CAE96CA2371692E4019505C217	438924A22E5C1272240AD7CDC8523FE98A82551F	A5DF177C3AB72BAB2BDFD61E71281E3AF2553E222AE02A89548DED7DAF6753A3
Chrome Cache Entry: 201	ASCII text	A3A2554444A71B125FBF14F91125D2E7	7212DDC0E5552AF5BF29C82351474F88A3C99CB8	C5D544593946BDB983EADD3A6BA179CBD317C5D98409C3DD00C1D19444FC44EB
Chrome Cache Entry: 202	ASCII text, with very long lines (65536), with no line terminators	9399F55783480DB822CF654BA10EF050	05890E089C22CBF65878D08E5D4F2B7125FD7FFD	A679E10D76F51E53F19137FEF3DD0D39973DD3CE4C693312C4D316E2059DA52C
Chrome Cache Entry: 203	ASCII text, with very long lines (37813)	E8610524A37C783C12736026210E54F8	B771D988771F01270E63C1CCD89135A4D6FF8C47	CF24DA1C7EFC209200ADDA31BAF434A0A846BA41B7992273B9DC1B65E2C6BC0C
Chrome Cache Entry: 204	ASCII text, with no line terminators	513F1D1684F5F5F96983E4AFDE6A12A9	9EE5B819E26671328A7B58526C7B5885EE053F1E	BFC7DC4C0C556175F63B2D19A5BDB021D04A3160EEBFD0DAD90E4B3F019A6C5B
Chrome Cache Entry: 205	ASCII text, with very long lines (4143)	6D7F12ED56D5FAFDFB141EAAF437F237	CC722F807C215B6B90A005A8405E0C18E63564C7	229FF7E74BF376A04E7DAE2B3A8A6DA04DF25A07D5B0300FCEFDA8FC821F8FF9
Chrome Cache Entry: 206	ASCII text, with very long lines (304)	4E2CC091FAC48A36F2EB401FA6ECE06B	AC35B42D5B1FF5B592A44574459A1C6CE6DFBE44	EA511EB41E9199AEC50864F7CD7862DEF7BE3AE5C232DBC066AC353EA56FEC8D
Chrome Cache Entry: 207	ASCII text, with very long lines (729)	75ED595D4A569CF9073CD6EEE308B3B3	13F9416A70CEEA9033A496A6AA5B922B72A6FBE2	34BA9C679427ACA43C1321759FAE0373E54B68661E8D12FB59BDB1F3D93ED1E8
Chrome Cache Entry: 208	ASCII text	00E3748EF6EF9B75F69F6AC20471BC85	713BD618ADFC43F6EC695CFE3788D19708666FB1	5E49FEF385C5BDA41E5FD72F0D0FB2E76722A5C156CAC7AFDBDCD9C6B9B9648A
Chrome Cache Entry: 209	ASCII text, with very long lines (2051)	72F9A26C26C1A681AD75A7E270550788	5579A02442ADFE9980A87BF495B18260927CD146	F4024DCE9F70735047ADC3A8CF7E8AC9FD2E1D4BFF6ABFC4158A1810EDFCE45F
Chrome Cache Entry: 210	ASCII text, with very long lines (40817)	5A34B03CB884671743BEEBC13F7C1399	12D69902E44C7661FA1CC50AF7D2D020EAB6F3A0	1CE473D6A4749E63F8BBFE0EE1B3B591FF6A13C08E71EF01425A716758EB885B
Chrome Cache Entry: 211	Unicode text, UTF-8 text, with very long lines (12419)	1B7D50BF09D1E7435809F79E4EBD6018	65F4FE988615E501E5DF0704C958B68BC2FB7627	F33EDEA12C404010889EA01BF0A34425AC66952BC8A71EBE9690C178B2736E76
Chrome Cache Entry: 212	ASCII text, with very long lines (16982)	4015C8AEA03713850B2ED6A120A7B947	81627FB8CD488CC6652D0A5EB9B85D164EC66DC8	E2105D63158F5AB48345741B47916947BF9078522FF0A4F84737D33DE6478205
Chrome Cache Entry: 213	ASCII text	98070F1CF7C37AF35E411C1EAE73D5C3	652F4EC37768D55F02BA12617D3058E3A3436761	2DD3B640A7C87526BB0B29205D1FD3253AA5B779BDCCBF8A6F4C082FE909BE90
Chrome Cache Entry: 214	ASCII text, with very long lines (2899)	47CBF725B287A0A2AAAC064A6558F369	51566778FD7C37FA6E8446B8F29A561DF07F527E	F124D116EFC24D5997B6B5263108CAEBD265D911A4955048FEACC92122371909
Chrome Cache Entry: 215	ASCII text	069657210BAFE54BF738CE8489298BED	ACD814731DB697E444A3AEA6B636DC608FB17E89	1860B01D5A60C2E661647C79123AD74DC04E7BDBC3CE1C5463AB7469ADA4EC89
Chrome Cache Entry: 216	ASCII text, with very long lines (519)	C2591593FFBD92E16276E86068DB913A	E7B7B89E0FFB6C5E1CD91BB81AA418E1E9BD77D1	64CFD9646AFC31C4E5D1E3E6753194DCE4F385B017B1227DE2248730DE2DC0C0
Chrome Cache Entry: 217	ASCII text	4985A0F29951864A832BB9471CF2B43F	B1D80D67A0A506CBB31B459E0A155138E887EC75	4A644362AC51EC790ADA2283D0762D6F24775F815B7ADAAEFE6F7CA4F9A7AE89
Chrome Cache Entry: 218	ASCII text	46CAC945E491B87E2835B2D5E8EC8804	2D072C5E3A12ABD4733DD429709C8DBCB5D3D50B	5A2D87CA902230E9900DF89430987C8F17B22FF184820DD40C8C6FBE777A5FC1
Chrome Cache Entry: 219	ASCII text, with very long lines (65536), with no line terminators	A4B372FCE213606C7E5D983A876DD8E3	95C0386B483138618B68CCE9C457EB81167077E1	6784513A6E24666451DA4A7898026012014D5D2344FCEC510FE35F8C1D0174A8
Chrome Cache Entry: 220	ASCII text, with very long lines (8486)	2B550C403E2A5FE12C846A9C2931F7C8	D9D69852E8B9F3F66A5E2CFEF60D40664B368286	72BDE476747B0BB5613AFFF1C51476F46BA3D1D481994838690C1786A9BD025A
Chrome Cache Entry: 222	ASCII text, with very long lines (10662)	BAD44F3FF516D5115FD80389FF48F251	BA4ED3A47A79EF4D2D44543734132D029F674347	C5BE44FE054D18F7EDDD32ECA1DC6C4AADD7951694440683F0CB503FF800564A
Chrome Cache Entry: 223	ASCII text, with very long lines (9586)	53A288476541A8A0E790FC62E77B6FB9	FFB02CE6E09E61EB494BDE86E21A225F01C58EDA	FB41B7F75A350B961521693271414222486CB98B099D0D68DFF83765F412CA94
Chrome Cache Entry: 224	C source, ASCII text, with very long lines (725)	42A9D428891E55709CBCC278E1AE4005	30D29986E8567445705FF03CBD57DC82D2AB5619	2785B93267B43EF84EB328F3F50AEDECE658149CDCEED2F0B3EE5384759BE2B5
Chrome Cache Entry: 225	ASCII text, with very long lines (54939)	BE46E7384B16280D2A080395AE35A8E6	72EB29B5FD98BAEBA883A827AC6FA487CA6DC9E1	A6E41B478743E79C6745B1BAD67932358D43BC911B34519C21D984B4213C2D7F
Chrome Cache Entry: 226	ASCII text, with very long lines (2962)	4D8313A7B6900F61AE9BFE51DDF4F67B	8B528784DBBE02C32F5F844953563C9B30178600	BFF7C9A7A1D2C6B47613859610EBA689A43C53189917DB1E81B5826B21B6C957
Chrome Cache Entry: 227	ASCII text, with very long lines (8391)	CEF3AFAC3BB3869958AE9EADA3A9E2D0	E19153C14CDC86ADDA25922707DEC307D7EAEA18	557B5C5A37612D8B42057A42C52D372546C51AAD7B3C8FF89E652EFAF6DAD603
Chrome Cache Entry: 228	ASCII text, with very long lines (2334)	D7102E61F8A55FE25337F4C956CCEF24	5B45C74151E3ADB6E9AA71428347060BA2098CA3	B3B2C6C4B2857BD79700FD042D4250538368ED5D1628FF82EAC6E7391D96DA86
Chrome Cache Entry: 229	Web Open Font Format, TrueType, length 58239, version 0.0	83BB5AE3E28AFB23B4ED2EF74C272312	C79EC10C6AB82271C588B59A0DD26DC57DE54843	B1F18FD551241D3EFD5B9D114317F1D52C0C19677D3ECE876CE75249A1E067A6
Chrome Cache Entry: 230	ASCII text, with very long lines (47981)	AC75D2758BF3E040611814872A174121	CC5AF2F2D44FEF889E3779F768CFEC8713D4F386	7314EB1E0738878F2BACCF1B901FCD3E438834902A0146BC21B54D1521E62A3D
Chrome Cache Entry: 231	HTML document, ASCII text	00F53700C90A2EDF60A83C7C3B959710	270A7C333D4BDE912992993FBDB7D2EC579E9B1B	C23F75F5147BEDB59DE93A0559B52C5303702B063C8D665C27CD8F40FE329B8B
Chrome Cache Entry: 232	ASCII text, with very long lines (5082)	0E80CBB2EF9225FDC2B4DEFA7D321901	BD0862DEAD0CDAD41CC33D88856225717C6B173E	E34014DB1E6DA64AE844602B85DAFC41024F5694E49058A6F138DC7415E0AD25
Chrome Cache Entry: 233	ASCII text, with very long lines (48054)	9A4D33E9F93F1ED9DA898D73B532A9E6	1350A5CBE24B1CB428FA1033DBC9A47EA2E07151	1C3BD03F8C5D3EB2450C490C1679A36E7CD9488D127A74433BB57DD691E8F8B3
Chrome Cache Entry: 234	ASCII text, with very long lines (2845)	0E3B3B3216D852E1ADEABC8B6E7FC27B	5D2CC55D2D9738CBCBDFE2CC350ABF2A3BF0EFA0	5585BCC97733AF2B7DC9F697D3BA3B7D4AF58484C38117DECD68F75E8407ADFE
Chrome Cache Entry: 235	ASCII text, with very long lines (33947)	EB9D1E82831ED22126CDDF837D2089E3	2D3DBDABBBA3083677BBDA0004F00561F4F300AB	7F3EE892CEC382DDBB792661DEFB495C844F1D6C11103C383A60B74CA7D428E0
Chrome Cache Entry: 236	ASCII text, with very long lines (2102), with no line terminators	FFF8E4C34D574BE9AC43718EE5ACCD9E	A88F5AAC146D4726FE7A7DC60BDF6BF3236CF187	851BAAFA4D75A31942B8D7F752909C9BD63873DD2B2D9E3C5B69439FC1F645A2
Chrome Cache Entry: 237	ASCII text, with very long lines (544)	61699B70CF57ABE63FDF5F4007D36EC1	6C05189CC2D08BB2A7609C002F0675C9C670D362	229BBF4D0E7488209564152C6723497F1AC3934136CA1684233D2FA88FA4146F
Chrome Cache Entry: 238	ASCII text, with very long lines (16909)	313C3A6F8BD31B6BF355EF74CF3F819D	08A271D9551636E72D071433E8EBB0F2975D7A7E	C5FE6187E5DA574D6D694A83BE523993E62DAC5F89D165283F38EB92C830F992
Chrome Cache Entry: 239	ASCII text, with very long lines (655)	9E909F5DC4EB2917A092969CFA8C1C1B	EC5795627579E606612250BE3E30690F3A70E3CF	C174E839D663E6F9ED38C7901711B911FF058A033154BCDE3DF30208DF454C74
Chrome Cache Entry: 240	ASCII text, with very long lines (33484)	99EB0DE2B72A849BCAB77B4AB0CA030B	1273CD3F0776E5A43F00065FBFF954FF243C837F	F3560B927CD30017511D2623F2F3FF299BCAA3A09167742BC3DA3AE417D1F852
Chrome Cache Entry: 241	ASCII text, with no line terminators	9787D8E52A897B135A9229B55B793894	DC17BDE436C7037472EDDD9DD66008DA8377CA55	E44007295A1109B3EE9F07737B97B9E1EB58AA578307953F62776069F6DE3BA4
Chrome Cache Entry: 242	ASCII text, with very long lines (5341)	757A6AB0DD9C36D34560BA29F8A2E990	FA23336FD64AFC6218933D458A1FEFEDC6F56838	5A600EA33AB9E0371DB4C3BAE67E8917DF17A05B3D55B1DB58B2B33B6B81258C
Chrome Cache Entry: 243	ASCII text, with no line terminators	97951191C0BCB0B896D60CB6E85FC0DA	28F9C15BCF3AD9362AC43916127FE868F6D10D15	D28989DED4CECDAD7A6E7942F5B1A88487BCB6F6A907991C387BC9CF31CA9237
Chrome Cache Entry: 244	Unicode text, UTF-8 text, with very long lines (65529), with no line terminators	DD3A63D89A120D21CAEEF592A6D402F4	8E4FF005C1D1DF7A9A336A6F3AD8B06A5F5BA657	FC1D7B30F08DF466E74C29408525FD5DD625E2136B48FD5ADB5690DA179928E1
Chrome Cache Entry: 245	ASCII text	E9B97DB6D2E8DA79AA3E750F28E1BF56	1EDD4B6BB950948139840936828FED909BE6B8B8	A28E9054559B06E3D1520ED9058715B6511F6ADDFF73690FF35C90CB9332BE25
Chrome Cache Entry: 246	ASCII text, with very long lines (623)	B8BE0AEA05D076DD5B710F6DED7565B0	65F0CF4F7D35B7EC22F2E244A11A30E39BEF57BD	6437CDA00E26052D776AFE662A06DDF8FE9981DD79AB0F9D3F2360D694AC319E
Chrome Cache Entry: 247	ASCII text, with very long lines (1025)	20DEA3DFDE3B9352F8294408ADC604E9	C21EDD35DB63CD8852790ECE8323957643928648	0DA537469F646AEA2AB5EAFE2641AA33C329A7D17F2751B63D93D39722BFB21C
Chrome Cache Entry: 248	ASCII text, with very long lines (65536), with no line terminators	3C970BE168DB70FCD810C5F7C67AFC21	D803EC7F49E8D46870DF35E9D9000F4F1B227EC3	640917A369C435FED6F302D35E7932086D4F841AA0F50BD622EA6E565E96390A
Chrome Cache Entry: 249	ASCII text	D3216D824D821C8026C31566767B57E4	03F460961D787EAB26DDD334BF740332E1113B54	ED5175A8E6813F9CB849D8E0DAE03CDCBC8F76C8E2C6328135E9AA648F95FA70
Chrome Cache Entry: 250	ASCII text, with very long lines (1281)	68B92CF8F7C6D25796C695153614D004	718B985F5FA2A0FB44A5418FAF206B0BCBC07ABA	432741E746A4433ED39843670574A69AE8724BAB0DE5A8992510B99C34646D12
Chrome Cache Entry: 251	ASCII text, with very long lines (345)	A1782CB302D36D94A8F5904841B1F9CD	F489819205A11E879A7CBD37D906B7476040F5D9	2B1903F4A4FA1A2C629480FCDDD60D673D3CEE3BE8C13C6D198419757FB6E228
Chrome Cache Entry: 252	ASCII text, with very long lines (1641)	565B12C7B3FFC7D46032C040A23A9A66	270406F09279BD6E8A571E07DB52516F6EBDAFCC	99C4895C9154E53837084897DFDEF1602258DE6D205F58746CF0DEA9027ADD6C
Chrome Cache Entry: 253	ASCII text, with very long lines (2400)	378E23080E33101EC0F14BB272F93C71	48EDB3E9EB0E21A2C83DE0ECE2EF2FECA76B72C8	824FBE7B7A51A605872358102B842AC0DD268A638E63142EBBEA8859EDF5FB42
Chrome Cache Entry: 254	ASCII text	68C8F81D9FDD45D2F65BCEE949F4AD28	EBE2733E978AF725E227EDE139BA61E776A44ADC	D6F848FB0E9C27FF1C2DD18CF2D0096AEE107068F8D3E4B6F9087837D14BD46C
Chrome Cache Entry: 255	ASCII text	3B0BB3313BC069CCF76EC11101C435AA	3835D1E89171D4D16E7516B02F8DF3A7B2111EAE	B496879288D68FAF0C74CD134E93249132880AE2E8308930EAABA76231929623
Chrome Cache Entry: 256	ASCII text, with very long lines (30425)	69991038140966BA9AD01815DA736FB3	AC46284A7C3AB7DF07EA4CD3EB9F093538AB65D2	FC593D1C8965D82E5A2800E995F28891E02FBCA92E6CFD143799170C9145A39D
Chrome Cache Entry: 257	HTML document, Unicode text, UTF-8 text, with very long lines (1136)	FBE36EB2EECF1B90451A3A72701E49D2	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
Chrome Cache Entry: 258	ASCII text, with very long lines (12494)	0CCE36E0D631A9F9391326766FA604CC	32C7AC701C52A87238CF4F6A36AD8A8D517B9C72	090502C741FCE96E98551F7BB6CC3C89B14F55B2A2DD5F87BAF7856B5A699249
Chrome Cache Entry: 259	ASCII text, with very long lines (554)	E9CCB3DBDE79BA5FFDF9CAD4B32D59FD	3A8CD67ADC7C885BDF683F1E7F491E6A4A50679F	8F2C6777C7CCC01AB67290FA8ACD5A4C4866BE64129F39DFAEB9197DFA15E137
Chrome Cache Entry: 260	ASCII text, with very long lines (15368)	62E594328005F6A1C6E0EDBCAFA712B0	69404C43961EA5224B6DF433C9424C07679A08BD	2C79A0244A616AC9449EE94382007A3631AF38C5BE7BC6B91CC1B9F9C9F99513
Chrome Cache Entry: 261	ASCII text, with very long lines (1327)	03EA710579B2A03B4874E2AC684B72F4	1BAA6ACAAB61033E0702993D7BDD1204AA3FBE5A	67DB7A1710B395F92D3328FF8ABD8AA1C280C577B631D1F4013B975E88E986C4
Chrome Cache Entry: 262	ASCII text, with very long lines (2792)	77A115D3A09DC29A146902DD0A75A3BC	67FF8B3F8E44B4ADC666B6605B84160CD0BEEAF2	22E5825BE132E56D6A435331B14689B3C4A935C9F46808ABBDB6F6B7BC1792A8
Chrome Cache Entry: 263	Web Open Font Format (Version 2), TrueType, length 46188, version 1.66	DFC5E24CBC1B134E0C00C61E84EC999A	D3B1A8EF1D0F6F9162986479252570525719F203	B5DB3E633EC765FC01A19C06B0955D56C2503285E59D8D348D08EC34ABBFEAF3
Chrome Cache Entry: 264	ASCII text, with very long lines (24978)	CEE4D421195F1B0AD85FC8FF00E7D989	0A63D271F7312F98A6117AAC1B6CACBC81ABDD0F	CB5A487968DB52967A9E2E3E772B8E977A1B219D7941BC5F1221AD93C0A5F955
Chrome Cache Entry: 265	ASCII text, with very long lines (533), with no line terminators	FEB698008C36A09DFE88AB06A1C3E3B9	A871FBCBBE298AE7078D06627708B2C106A0FAF3	1C4E7E389D73C6ACF7F19CC812514E71230740791FDE8A018C1D7EDCCF1590AE
Chrome Cache Entry: 266	ASCII text, with very long lines (744)	FFA4A8CEE985A798CFF48D450F8436AD	0584E9A89D7DCE5DA4AC9084DC91297237BB3B94	45526D8DCBFAE6EE2E386F518184BC65B459B3F207FF8E82A89C8FBFABB249F4
Chrome Cache Entry: 267	ASCII text, with very long lines (665)	A0EF15CB4F52D5F152A361C4A4208C73	62E8A6612C09E571E1266353758F61DC379401B0	7EB159511D44A621FB5DC9FF210E67E3621EC4000806F3D9255920F8A7B3DBF6
Chrome Cache Entry: 268	ASCII text, with very long lines (3657)	24D4EF1243188608BCB4FE06409FC18E	905ADE43BFA098039C735D832BE08A98D585843D	E07EDDEB71ACD2969392459A0EF77D768AB517BB090F15ECB4C268FCA0B3BCD6
Chrome Cache Entry: 269	ASCII text, with very long lines (12980)	48E3CF3B41636EF6A51CDBC950C4EB1D	6AFCA96B7FBD0F0E467B28D5314305BF0339FAAF	071A37CB10715EAFA60E1388A4F466E8CABE50B4F90288768D73A37F6D6CD4B1
Chrome Cache Entry: 270	ASCII text, with very long lines (11110)	FF1CE802509E2FAD7F5D9E5B2C6A4569	B76A581B129BD8B4DFB72631CCC2F571158DFC8D	476D028A8E77E5C0F8B9CECF57FE68345B94AF5E54982539213CC71BE7B1CD85
Chrome Cache Entry: 271	ASCII text, with very long lines (30422)	43CC9DFF703848C5EC4DED5560DA6DD9	E9F7D74671E37EA0F7161E39518586F629D01A81	A82524C3A0208F8F53FD611D23DEAEF0A952D83614A452548D73C5FBF919D370
Chrome Cache Entry: 273	ASCII text, with very long lines (57547)	EDB1B6F279D6A33DED91AA34B23CEE63	A9C604D641C90B95124A20EAF411FD8968054E53	60C2622F549664EEF7622C8B121EB1E705B013D1943B8BF872703FA5425C5641
Chrome Cache Entry: 274	ASCII text, with very long lines (1290), with no line terminators	0D866C424BA99C756DD2588CD38BF519	584471F2D282A4B2973CDDDC6E5CF5A6FF00B317	8C54B2BEC97CF664E35560189EEE5195967E5C525DFBAD366364B2CE71EF4083
Chrome Cache Entry: 275	ASCII text, with very long lines (21020)	F3FC7E84C200E23061AFBB9EFFEC4EDA	117852AD6C4C8F33FCC7A79A5FB1FC3481E8E50D	AD461001D7C4618C5CE70C1C9AF1E0C9CF5C85AF48B19CA02E52AE35EE91760E
Chrome Cache Entry: 276	ASCII text, with very long lines (565)	6D92292A133E794F5C1FADC6361DD5AC	9F9C7C2DB732A64AB4A014E2AFDA0AA446D3A04B	DC21D296459DD21437B246D4768E05C86DAE1180277C8A5AAC07E241665CF8B5
Chrome Cache Entry: 277	Web Open Font Format (Version 2), TrueType, length 54666, version 1.0	EBEE194A9B773F166DC16096F8614AAA	9D6A893AF295C90E9E9792D7E54A80034192255B	00F90DB31F42975FCDC5FA1F70660568BE68792EC11BE2AAC36362F435A6E555
Chrome Cache Entry: 278	ASCII text	5CDC20BEC764EEDD4CB5275BF0AAF4D0	A6DF9646C37996C4F8A118621B404925EEA353EE	05E1FBE4401829DB2CA3ECB53F1F748CA2F47E7907A8D2E90D1641E0FC6CFB7C

Found iframes

Source: https://www.dropbox.com/scl/fi/s5uzm3l2o0qzv8dhpivcc/Marco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf?oref=e&r=ACKwiZzUpKZVN3F-cQJZm1N9HmYy0Mj0tJY4-M_u3ul-IGudOfGTgJiWnEdOKix1mKLN7VAl1yIksBxDbsYV7H8OXxKGrCsiUslO0v3bKsPzicpLLb7bg9ndz4JNC7epK0TmajfPKbCHocufjk8XUC2hrrHT7EEDwbIsT5xtjyRHFv_ZU4uedGlio7_5n4QjdYCehOCDBZzS5nlYpQOE9qZwqumEcJ270CH_-nFqAek1AQ&sm=1&dl=0	HTTP Parser: Iframe src: https://dropboxcaptcha.com
Source: https://www.dropbox.com/scl/fi/s5uzm3l2o0qzv8dhpivcc/Marco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf?oref=e&r=ACKwiZzUpKZVN3F-cQJZm1N9HmYy0Mj0tJY4-M_u3ul-IGudOfGTgJiWnEdOKix1mKLN7VAl1yIksBxDbsYV7H8OXxKGrCsiUslO0v3bKsPzicpLLb7bg9ndz4JNC7epK0TmajfPKbCHocufjk8XUC2hrrHT7EEDwbIsT5xtjyRHFv_ZU4uedGlio7_5n4QjdYCehOCDBZzS5nlYpQOE9qZwqumEcJ270CH_-nFqAek1AQ&sm=1&dl=0	HTTP Parser: Iframe src: https://www.dropbox.com/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true
Source: https://www.dropbox.com/scl/fi/s5uzm3l2o0qzv8dhpivcc/Marco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf?oref=e&r=ACKwiZzUpKZVN3F-cQJZm1N9HmYy0Mj0tJY4-M_u3ul-IGudOfGTgJiWnEdOKix1mKLN7VAl1yIksBxDbsYV7H8OXxKGrCsiUslO0v3bKsPzicpLLb7bg9ndz4JNC7epK0TmajfPKbCHocufjk8XUC2hrrHT7EEDwbIsT5xtjyRHFv_ZU4uedGlio7_5n4QjdYCehOCDBZzS5nlYpQOE9qZwqumEcJ270CH_-nFqAek1AQ&sm=1&dl=0	HTTP Parser: Iframe src: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_899122_321890&as=5CPXzvnVIYYmjHQkSNOUhA&hl=en

HTML body contains low number of good links

HTTP Parser: Number of links: 0

HTML body contains password input but no form action

HTTP Parser: <input type="password" .../> found but no <form action="...

HTML title does not match URL

HTTP Parser: Title: Sign up to view this shared file does not match URL

Phishing site detected (based on OCR NLP Model)

Source: Chrome DOM: 1.1

HTTP Parser: <input type="password" .../> found

Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_899122_321890&as=5CPXzvnVIYYmjHQkSNOUhA&hl=en	HTTP Parser: No favicon
Source: https://dropboxcaptcha.com/	HTTP Parser: No favicon

Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_899122_321890&as=5CPXzvnVIYYmjHQkSNOUhA&hl=en	HTTP Parser: No <meta name="author".. found
Source: https://www.dropbox.com/scl/fi/s5uzm3l2o0qzv8dhpivcc/Marco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf?oref=e&r=ACKwiZzUpKZVN3F-cQJZm1N9HmYy0Mj0tJY4-M_u3ul-IGudOfGTgJiWnEdOKix1mKLN7VAl1yIksBxDbsYV7H8OXxKGrCsiUslO0v3bKsPzicpLLb7bg9ndz4JNC7epK0TmajfPKbCHocufjk8XUC2hrrHT7EEDwbIsT5xtjyRHFv_ZU4uedGlio7_5n4QjdYCehOCDBZzS5nlYpQOE9qZwqumEcJ270CH_-nFqAek1AQ&sm=1&dl=0	HTTP Parser: No <meta name="author".. found

Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_899122_321890&as=5CPXzvnVIYYmjHQkSNOUhA&hl=en	HTTP Parser: No <meta name="copyright".. found
Source: https://www.dropbox.com/scl/fi/s5uzm3l2o0qzv8dhpivcc/Marco-Paoloni-ha-condiviso-un-documento-pdf-dell-ordinanza-del-tribunale.pdf?oref=e&r=ACKwiZzUpKZVN3F-cQJZm1N9HmYy0Mj0tJY4-M_u3ul-IGudOfGTgJiWnEdOKix1mKLN7VAl1yIksBxDbsYV7H8OXxKGrCsiUslO0v3bKsPzicpLLb7bg9ndz4JNC7epK0TmajfPKbCHocufjk8XUC2hrrHT7EEDwbIsT5xtjyRHFv_ZU4uedGlio7_5n4QjdYCehOCDBZzS5nlYpQOE9qZwqumEcJ270CH_-nFqAek1AQ&sm=1&dl=0	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49883 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.16:49887 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.16:49888 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49912 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93

Source: unknown

DNS traffic detected: queries for: www.dropbox.com

Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49883 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.16:49887 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.16:49888 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49912 version: TLS 1.2

Source: classification engine

Classification label: clean3.win@22/125@36/223

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.dropbox.com/l/scl/AABh_-YLozjwRD9PjSZAJABqpSvBkhkUq6s
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=1952,i,15441435526096891022,4092633418284623240,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6068 --field-trial-handle=1952,i,15441435526096891022,4092633418284623240,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3168 --field-trial-handle=1952,i,15441435526096891022,4092633418284623240,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=1952,i,15441435526096891022,4092633418284623240,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6068 --field-trial-handle=1952,i,15441435526096891022,4092633418284623240,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3168 --field-trial-handle=1952,i,15441435526096891022,4092633418284623240,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

ID:	1428811
Product:	CloudBasic
Start time:	16:44:25
Start date:	19.04.2024
Cookbook:	defaultwindowsinteractivecookbook.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Windows Analysis Report
https://www.dropbox.com/l/scl/AABh_-YLozjwRD9PjSZAJABqpSvBkhkUq6s

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://www.dropbox.com/l/scl/AABh_-YLozjwRD9PjSZAJABqpSvBkhkUq6s

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://www.dropbox.com/l/scl/AABh_-YLozjwRD9PjSZAJABqpSvBkhkUq6s