IOC Report
Daiichi-sankyo Enrollment Employee Benefit.pdf

loading gif

Files

File Path
Type
Category
Malicious
Daiichi-sankyo Enrollment Employee Benefit.pdf
PDF document, version 1.7, 0 pages
initial sample
 malicious
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG
ASCII text
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG
ASCII text
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\93f89256-53c9-46aa-95e7-d01e005136b6.tmp
JSON data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)
JSON data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State~RF41909b.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\fdc416e8-a9a2-4189-956a-91126ae7cf5f.tmp
JSON data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG
ASCII text
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-240419150809Z-189.bmp
PC bitmap, Windows 3.x format, 117 x -152 x 32, cbSize 71190, bits offset 54
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.4668
PostScript document text
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst (copy)
PostScript document text
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat
data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Sign_LHP_Banner
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Upsell_Cards
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\Edit_InApp_Aug2020
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING
data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents
SQLite 3.x database, last written using SQLite version 3040000, file counter 19, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 19
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal
SQLite Rollback Journal
dropped
C:\Users\user\AppData\Local\Temp\MSI8739.LOG
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-04-19 17-08-06-262.log
ASCII text, with very long lines (393)
dropped
C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log
ASCII text, with very long lines (393), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\acrocef_low\57ff5e29-49b1-4dcb-853a-0785b8f2d6e9.tmp
gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538
dropped
C:\Users\user\AppData\Local\Temp\acrocef_low\d0b9338b-0292-47be-9d83-9673442e51ca.tmp
gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57837
dropped
C:\Users\user\AppData\Local\Temp\acrocef_low\d13f605e-b36d-4a1e-adcc-307fa5a9dd80.tmp
gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022
dropped
C:\Users\user\AppData\Local\Temp\acrocef_low\ea5c5377-ea4c-4f0b-b12a-6e734ebf91ee.tmp
gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 42290
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 14:08:09 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 14:08:09 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 14:08:09 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 14:08:09 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 14:08:09 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
Chrome Cache Entry: 187
ASCII text, with very long lines (32065)
downloaded
Chrome Cache Entry: 188
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 189
ASCII text, with very long lines (42414)
downloaded
Chrome Cache Entry: 190
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 191
ASCII text, with very long lines (7043), with no line terminators
downloaded
Chrome Cache Entry: 192
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 193
PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
downloaded
Chrome Cache Entry: 194
PNG image data, 55 x 46, 8-bit/color RGB, non-interlaced
downloaded
Chrome Cache Entry: 195
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 196
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 197
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 198
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 199
HTML document, ASCII text
downloaded
Chrome Cache Entry: 200
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 201
ASCII text, with very long lines (50758)
downloaded
Chrome Cache Entry: 202
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 203
PNG image data, 45 x 56, 8-bit/color RGB, non-interlaced
dropped
Chrome Cache Entry: 204
ASCII text, with very long lines (3379)
downloaded
Chrome Cache Entry: 205
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 206
PNG image data, 45 x 56, 8-bit/color RGB, non-interlaced
downloaded
Chrome Cache Entry: 207
PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
dropped
Chrome Cache Entry: 208
PNG image data, 55 x 46, 8-bit/color RGB, non-interlaced
dropped
Chrome Cache Entry: 209
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 210
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 211
ASCII text, with very long lines (65447)
downloaded
Chrome Cache Entry: 212
HTML document, ASCII text, with very long lines (4020)
downloaded
There are 66 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
"C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Daiichi-sankyo Enrollment Employee Benefit.pdf"
C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2120 --field-trial-handle=1640,i,12208739452210900171,7377553342865857032,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://cce-signviadocs.com/
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 --field-trial-handle=2356,i,10481889836188868553,946926718042027499,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8

URLs

Name
IP
Malicious
https://cce-signviadocs.com/d740c10c7b9cf800d441f265844201e16622897d355dbLOGd740c10c7b9cf800d441f265844201e16622897d355dc
malicious
https://cce-signviadocs.com/jq/e8fe38f51de39c86ce2e821d0a5b4b766622897d85b58
104.21.39.39
https://cce-signviadocs.com/
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/876dcf098b47674b/1713539296236/d077f5541ae8607dc99f4fa3c069ac7cbcf54eb65048249bc64d5cbd7e0a61ee/Hs44xINdXZdOoTI
104.17.3.184
https://cce-signviadocs.com/boot/e8fe38f51de39c86ce2e821d0a5b4b766622897d85b5b
104.21.39.39
https://cce-signviadocs.com/1
104.21.39.39
https://code.jquery.com/jquery-3.6.0.min.js
151.101.2.137
https://cce-signviadocs.com/ASSETS/img/sig-op.svg
104.21.39.39
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/456223059:1713535937:oBUKpgYqVFGPpoGO8IZLKMstZiz-5SDizo-IXSig_p4/876dcf098b47674b/0faa9bcb52a3587
104.17.3.184
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/ogu60/0x4AAAAAAAXlzGo6orctdP7m/auto/normal
104.17.3.184
https://cce-signviadocs.com/captcha/logo.svg
104.21.39.39
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/876dd227cb467ba2/1713539422980/4ea7fd2a956c5048a930546a443b9c7c24f123e986f1b0168ca030ea769c0130/7I9fhAYzHGADAXo
104.17.3.184
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/876dd227cb467ba2/1713539422982/yFvaVB2g636-4Yo
104.17.3.184
https://cce-signviadocs.com/o/e8fe38f51de39c86ce2e821d0a5b4b766622897f332f9
104.21.39.39
https://getbootstrap.com/)
unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/z0pm4/0x4AAAAAAAXlzGo6orctdP7m/auto/normal
https://cce-signviadocs.com/CAPQTdXazduWWJmOGRMQlNS
104.21.39.39
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/792408913:1713535996:x9y6wPNervpWVfZAXRJzEV25alUZv2h6JxH_2n6yyM8/876dcefd6b1f456b/c3c565dd08e39a9
104.17.3.184
https://cce-signviadocs.com/js/e8fe38f51de39c86ce2e821d0a5b4b766622897d85b5c
104.21.39.39
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=876dd227cb467ba2
104.17.3.184
https://cce-signviadocs.com/APP-e8fe38f51de39c86ce2e821d0a5b4b766622897f33229/e8fe38f51de39c86ce2e821d0a5b4b766622897f3322a
104.21.39.39
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=876dcf098b47674b
104.17.3.184
https://cce-signviadocs.com/favicon.ico
104.21.39.39
https://cce-signviadocs.com/ASSETS/img/m_.svg
104.21.39.39
https://github.com/twbs/bootstrap/graphs/contributors)
unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/876dcf098b47674b/1713539296236/fMQLotTMd0s1BsZ
104.17.3.184
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
104.17.3.184
https://cce-signviadocs.com/x/e8fe38f51de39c86ce2e821d0a5b4b766622897f3322f
104.21.39.39
https://github.com/twbs/bootstrap/blob/master/LICENSE)
unknown
https://cce-signviadocs.com/cdn-cgi/challenge-platform/h/b/rc/876dd227cb467ba2
104.21.39.39
https://a.nel.cloudflare.com/report/v4?s=4oMPjjHiLu0y%2BDD7VGWajrX1npACnHc1rbrxk2tUG1xhdrjcUZe3JFxIAr3IymQRA811BDQw8kKhntkkeO5fAEsp7rjebOyhVSd%2FxHi5wdwPJUGd5Bnl6OvBRB1Llq6qe%2F6VYpUl
35.190.80.1
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1223683563:1713535988:zNc8BrwVOnTudJ76RDKyxQ536s-ec_SOgZ1Wff_9wCY/876dd227cb467ba2/f9fa31d20682394
104.17.3.184
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=876dcefd6b1f456b
104.17.3.184
https://cce-signviadocs.com/captcha/style.css
104.21.39.39
There are 24 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
cce-signviadocs.com
104.21.39.39
a.nel.cloudflare.com
35.190.80.1
code.jquery.com
151.101.2.137
challenges.cloudflare.com
104.17.2.184
www.google.com
142.250.105.99

IPs

IP
Domain
Country
Malicious
142.250.105.99
www.google.com
United States
184.31.48.185
unknown
United States
104.17.3.184
unknown
United States
192.168.2.5
unknown
unknown
151.101.2.137
code.jquery.com
United States
239.255.255.250
unknown
Reserved
104.21.39.39
cce-signviadocs.com
United States
35.190.80.1
a.nel.cloudflare.com
United States
104.17.2.184
challenges.cloudflare.com
United States

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
aFS
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
tDIText
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
tFileName
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
tFileSource
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
sFileAncestors
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
sDI
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
sDate
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
uFileSize
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
uPageCount
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
sAssetId
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
bisSharedFile
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c2
aFS
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c2
tDIText
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c2
tFileName
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c2
sFileAncestors
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c2
sDI
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c2
sDate
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c2
uFileSize
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c2
uPageCount
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c2
bisSharedFile
There are 10 hidden registries, click here to show them.

DOM / HTML

URL
Malicious
https://cce-signviadocs.com/d740c10c7b9cf800d441f265844201e16622897d355dbLOGd740c10c7b9cf800d441f265844201e16622897d355dc
 malicious
https://cce-signviadocs.com/
https://cce-signviadocs.com/
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/z0pm4/0x4AAAAAAAXlzGo6orctdP7m/auto/normal
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/z0pm4/0x4AAAAAAAXlzGo6orctdP7m/auto/normal
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/z0pm4/0x4AAAAAAAXlzGo6orctdP7m/auto/normal
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/z0pm4/0x4AAAAAAAXlzGo6orctdP7m/auto/normal
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/z0pm4/0x4AAAAAAAXlzGo6orctdP7m/auto/normal
https://cce-signviadocs.com/d740c10c7b9cf800d441f265844201e16622897d355dbLOGd740c10c7b9cf800d441f265844201e16622897d355dc