Windows Analysis Report
https://www.dropbox.com/l/scl/AABodOL3qFQp8pdaVX2jHhyRCVHs7XJY-r4

Overview

General Information

Sample URL:	https://www.dropbox.com/l/scl/AABodOL3qFQp8pdaVX2jHhyRCVHs7XJY-r4
Analysis ID:	1438601

Detection

Score:	22
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

LLM detected suspicious webpage text

Found iframes

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Stores files to the Windows start menu directory

Classification

Signatures

Phishing

LLM detected suspicious webpage text

Source: https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&uri_for_logging=dropbox.com&locale_override=en&should_auto_open

LLM: Score: 7 Reasons: The text contains a request to log in or sign up, which could indicate a phishing attempt. The URL provided does not seem to be directly related to the text content, and the domain 'dropbox.com' is a common target for phishing attacks. The use of 'greater.vancouver@bcassessment.ca' as a contact email address may be an attempt to appear legitimate, but it is not a best practice to use a public email address for such purposes. Overall, the combination of these factors suggests a moderate to high risk of phishing or other malicious intent. DOM: 1.1.pages.csv

Found iframes

Source: https://www.dropbox.com/scl/fi/2rygfxoalmirlp80ayvuj/2024_08_05_knowlesconsulting_78762_.pdf?oref=e&r=ACLOe00iVfePyr2nTZGdAg5dVEW6B8HTV-nk_-ILS4VetbxY3J1dB5cM1e0MWoYsaAoOjL0J-YIbNy69aXoEfHoqwW27-5KaDPEtfJjvWLl5ZwLNxlMTCx_hQwqaeTkc7IPxSmVNdK-U1DJI_NKsmEENwPlXZterjigzHp0RadhWcz9_5An0r5B8X5Q8PX3DxEsTskSpqMfuxcbys73dyXUXVVBAP9h4Ktfht1DkB9owNQ&sm=1&dl=0	HTTP Parser: Iframe src: https://dropboxcaptcha.com
Source: https://www.dropbox.com/scl/fi/2rygfxoalmirlp80ayvuj/2024_08_05_knowlesconsulting_78762_.pdf?oref=e&r=ACLOe00iVfePyr2nTZGdAg5dVEW6B8HTV-nk_-ILS4VetbxY3J1dB5cM1e0MWoYsaAoOjL0J-YIbNy69aXoEfHoqwW27-5KaDPEtfJjvWLl5ZwLNxlMTCx_hQwqaeTkc7IPxSmVNdK-U1DJI_NKsmEENwPlXZterjigzHp0RadhWcz9_5An0r5B8X5Q8PX3DxEsTskSpqMfuxcbys73dyXUXVVBAP9h4Ktfht1DkB9owNQ&sm=1&dl=0	HTTP Parser: Iframe src: https://www.dropbox.com/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&uri_for_logging=dropbox.com&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&default_non_ccpa=true
Source: https://www.dropbox.com/scl/fi/2rygfxoalmirlp80ayvuj/2024_08_05_knowlesconsulting_78762_.pdf?oref=e&r=ACLOe00iVfePyr2nTZGdAg5dVEW6B8HTV-nk_-ILS4VetbxY3J1dB5cM1e0MWoYsaAoOjL0J-YIbNy69aXoEfHoqwW27-5KaDPEtfJjvWLl5ZwLNxlMTCx_hQwqaeTkc7IPxSmVNdK-U1DJI_NKsmEENwPlXZterjigzHp0RadhWcz9_5An0r5B8X5Q8PX3DxEsTskSpqMfuxcbys73dyXUXVVBAP9h4Ktfht1DkB9owNQ&sm=1&dl=0	HTTP Parser: Iframe src: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_750802_980424&as=X3Glee7%2BfERfmfrE228fdA&hl=en

HTML body contains low number of good links

Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_750802_980424&as=X3Glee7%2BfERfmfrE228fdA&hl=en

HTTP Parser: Number of links: 0

HTML body contains password input but no form action

Source: https://www.dropbox.com/scl/fi/2rygfxoalmirlp80ayvuj/2024_08_05_knowlesconsulting_78762_.pdf?oref=e&r=ACLOe00iVfePyr2nTZGdAg5dVEW6B8HTV-nk_-ILS4VetbxY3J1dB5cM1e0MWoYsaAoOjL0J-YIbNy69aXoEfHoqwW27-5KaDPEtfJjvWLl5ZwLNxlMTCx_hQwqaeTkc7IPxSmVNdK-U1DJI_NKsmEENwPlXZterjigzHp0RadhWcz9_5An0r5B8X5Q8PX3DxEsTskSpqMfuxcbys73dyXUXVVBAP9h4Ktfht1DkB9owNQ&sm=1&dl=0

HTTP Parser: <input type="password" .../> found but no <form action="...

HTML title does not match URL

HTTP Parser: Title: Sign up to view this shared file does not match URL

HTTP Parser: <input type="password" .../> found

Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_750802_980424&as=X3Glee7%2BfERfmfrE228fdA&hl=en	HTTP Parser: No favicon
Source: https://dropboxcaptcha.com/	HTTP Parser: No favicon

Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_750802_980424&as=X3Glee7%2BfERfmfrE228fdA&hl=en	HTTP Parser: No <meta name="author".. found
Source: https://www.dropbox.com/scl/fi/2rygfxoalmirlp80ayvuj/2024_08_05_knowlesconsulting_78762_.pdf?oref=e&r=ACLOe00iVfePyr2nTZGdAg5dVEW6B8HTV-nk_-ILS4VetbxY3J1dB5cM1e0MWoYsaAoOjL0J-YIbNy69aXoEfHoqwW27-5KaDPEtfJjvWLl5ZwLNxlMTCx_hQwqaeTkc7IPxSmVNdK-U1DJI_NKsmEENwPlXZterjigzHp0RadhWcz9_5An0r5B8X5Q8PX3DxEsTskSpqMfuxcbys73dyXUXVVBAP9h4Ktfht1DkB9owNQ&sm=1&dl=0	HTTP Parser: No <meta name="author".. found

Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_750802_980424&as=X3Glee7%2BfERfmfrE228fdA&hl=en	HTTP Parser: No <meta name="copyright".. found
Source: https://www.dropbox.com/scl/fi/2rygfxoalmirlp80ayvuj/2024_08_05_knowlesconsulting_78762_.pdf?oref=e&r=ACLOe00iVfePyr2nTZGdAg5dVEW6B8HTV-nk_-ILS4VetbxY3J1dB5cM1e0MWoYsaAoOjL0J-YIbNy69aXoEfHoqwW27-5KaDPEtfJjvWLl5ZwLNxlMTCx_hQwqaeTkc7IPxSmVNdK-U1DJI_NKsmEENwPlXZterjigzHp0RadhWcz9_5An0r5B8X5Q8PX3DxEsTskSpqMfuxcbys73dyXUXVVBAP9h4Ktfht1DkB9owNQ&sm=1&dl=0	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.16:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.192.208.109:443 -> 192.168.2.16:49861 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.192.208.109:443 -> 192.168.2.16:49865 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 27MB later: 37MB

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: www.dropbox.com
Source: global traffic	DNS traffic detected: DNS query: cfl.dropboxstatic.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: fp.dropbox.com
Source: global traffic	DNS traffic detected: DNS query: stun.fpapi.io
Source: global traffic	DNS traffic detected: DNS query: stun.l.google.com
Source: global traffic	DNS traffic detected: DNS query: dropboxcaptcha.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.16:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.192.208.109:443 -> 192.168.2.16:49861 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.192.208.109:443 -> 192.168.2.16:49865 version: TLS 1.2

Source: classification engine

Classification label: sus22.phis.win@21/118@32/68

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.dropbox.com/l/scl/AABodOL3qFQp8pdaVX2jHhyRCVHs7XJY-r4
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 --field-trial-handle=2004,i,12640136437407880739,4973871106599706493,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 --field-trial-handle=2004,i,12640136437407880739,4973871106599706493,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3080 --field-trial-handle=2004,i,12640136437407880739,4973871106599706493,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5328 --field-trial-handle=2004,i,12640136437407880739,4973871106599706493,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3080 --field-trial-handle=2004,i,12640136437407880739,4973871106599706493,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5328 --field-trial-handle=2004,i,12640136437407880739,4973871106599706493,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Screenshots

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.217.74	unknown	United States	15169	GOOGLEUS	false
172.217.14.206	unknown	United States	15169	GOOGLEUS	false
13.224.11.96	dropboxcaptcha.com	United States	16509	AMAZON-02US	false
74.125.20.84	unknown	United States	15169	GOOGLEUS	false
142.250.217.67	unknown	United States	15169	GOOGLEUS	false
142.251.33.67	unknown	United States	15169	GOOGLEUS	false
74.125.142.84	unknown	United States	15169	GOOGLEUS	false
3.163.158.106	fp.dropbox.com	United States	16509	AMAZON-02US	false
142.250.217.110	unknown	United States	15169	GOOGLEUS	false
74.125.197.84	unknown	United States	15169	GOOGLEUS	false
142.251.215.228	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.251.33.99	unknown	United States	15169	GOOGLEUS	false
142.250.69.206	play.google.com	United States	15169	GOOGLEUS	false
104.16.99.29	unknown	United States	13335	CLOUDFLARENETUS	false
162.125.1.18	www-env.dropbox-dns.com	United States	19679	DROPBOXUS	false
74.125.250.129	stun.l.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.16

Contacted Domains

Name	IP	Active
play.google.com	142.250.69.206	true
dropboxcaptcha.com	13.224.11.96	true
www-env.dropbox-dns.com	162.125.1.18	true
www.google.com	142.251.215.228	true
stun.l.google.com	74.125.250.129	true
fp.dropbox.com	3.163.158.106	true
stun.fpapi.io	unknown	unknown
www.dropbox.com	unknown	unknown
cfl.dropboxstatic.com	unknown	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.dropbox.com/scl/fi/2rygfxoalmirlp80ayvuj/2024_08_05_knowlesconsulting_78762_.pdf?dl=0&oref=e&r=ACLOe00iVfePyr2nTZGdAg5dVEW6B8HTV-nk_-ILS4VetbxY3J1dB5cM1e0MWoYsaAoOjL0J-YIbNy69aXoEfHoqwW27-5KaDPEtfJjvWLl5ZwLNxlMTCx_hQwqaeTkc7IPxSmVNdK-U1DJI_NKsmEENwPlXZterjigzHp0RadhWcz9_5An0r5B8X5Q8PX3DxEsTskSpqMfuxcbys73dyXUXVVBAP9h4Ktfht1DkB9owNQ&sm=1	false		high
https://dropboxcaptcha.com/	false	URL Reputation: safe	unknown
https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&uri_for_logging=dropbox.com&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&default_non_ccpa=true	false		high
https://www.dropbox.com/scl/fi/2rygfxoalmirlp80ayvuj/2024_08_05_knowlesconsulting_78762_.pdf?oref=e&r=ACLOe00iVfePyr2nTZGdAg5dVEW6B8HTV-nk_-ILS4VetbxY3J1dB5cM1e0MWoYsaAoOjL0J-YIbNy69aXoEfHoqwW27-5KaDPEtfJjvWLl5ZwLNxlMTCx_hQwqaeTkc7IPxSmVNdK-U1DJI_NKsmEENwPlXZterjigzHp0RadhWcz9_5An0r5B8X5Q8PX3DxEsTskSpqMfuxcbys73dyXUXVVBAP9h4Ktfht1DkB9owNQ&sm=1&dl=0	false		high

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed May 8 19:05:40 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	12030DCA6F93031BE29960D804CC867B	DDA315F55B110A65F1FA1976B16EC7E17F5203FA	E72275B3A90BC453D5BEC58718DE3D9C34AAFFA744A73D7EC2AA86E2637BD271
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed May 8 19:05:39 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	D7388630A71F6F6D54AA67D646D857B1	903D7D7377B9AB2E828BA207280E169666BB916A	AD5F794F5FD22CC80A52F9482864AE0C7B5E18B7B5C06AEF8581945082030AFE
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	C2B5F9247F5E6E945AA6EEBDAED86641	95579A2DF34E24E0A3E0F3A7AED26D26B0055EDE	953E14EA4AB07147E4F9C4BF76C620AEE793E4F15A29E0F4AE6DEC7FAD0E9A4C
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed May 8 19:05:39 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	702C265CE41C780B8B13E26E09CF2F3B	2CE4EAE2B8ABCC47A9602ACA82DD59BB6C0A4FE7	5E1BB1CA4991E9678EBAA13F454116FEA5DAA3E4BFE54D8214B37E710D3C1AAA
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed May 8 19:05:40 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	154E92859E783CEA983D23D26D683917	9B09F495CD0AAA6C71FC7D8148B92D34ADC83A4E	FA6D7070A6562C3B34AC781110A4674190B7DFB4B9CCB6A59C524188665C0AB9
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed May 8 19:05:39 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	67FCB44E722978E0132C5756ADD7AB0A	8A86B32E8A5857DEDD99DC3FE6F830C374F3EB92	6AC4BD2967363812C9062249D19894AF9648BF2C385E9ECE333DF59C64BC42C5
Chrome Cache Entry: 141	ASCII text, with very long lines (65536), with no line terminators	6E94A3261ADD129CA90FCE01FB28446A	B56FB257B87B7785E502CDB29119371F20593933	8010DCA8F8B19B5CED05B965FCBCA498D61608D873274590AF243B853AC944D4
Chrome Cache Entry: 142	ASCII text, with very long lines (65536), with no line terminators	D7A3C32094B126EA229D11DF4960ED0C	AB37565FF9EAAECB989D64CE99197486FFB28C67	973219C3D63CD492A44CE0C43D9C792DA4E82D4EE52D5884E0FE747D3DADC0CA
Chrome Cache Entry: 143	ASCII text, with very long lines (10533)	362950B0DCAE165AE0708A8C058C0C36	49B3CA75C9C46380C0D82CA9202D46F15D734E00	3FBE8294FB8046EA1DA84146C32B03CF3E3657BD7245873DBEC6CD81997CBFC3
Chrome Cache Entry: 145	ASCII text, with very long lines (52402)	2D38135994C678D7640482640774DE39	28D6E93C409A6DF7408CA134D04A788B17499828	D15AF9827C1B2B2E300C8A04FBF14717BD643FE77E36621CD3523AB432124978
Chrome Cache Entry: 146	ASCII text, with very long lines (55098)	33F6C558323AA34F2C9D7733AB0AB040	7A4466313A5126FD549DB84FB176F40CE619BC97	401E779ACA6796DBB6AB1315ACA14A53291053D8165D108217CC85F77E94075D
Chrome Cache Entry: 147	ASCII text, with very long lines (544)	61699B70CF57ABE63FDF5F4007D36EC1	6C05189CC2D08BB2A7609C002F0675C9C670D362	229BBF4D0E7488209564152C6723497F1AC3934136CA1684233D2FA88FA4146F
Chrome Cache Entry: 148	ASCII text, with very long lines (21663)	10F3FA701AF7A3CB6F9E8054D4AEBC62	A18AFB404DC5405CCBB850D4371AAB5119779302	40CF8DA6EAE259A4BC031CEDBE0844AB5B09D2A78ADE4A30B4FCB86237186CBB
Chrome Cache Entry: 150	ASCII text, with very long lines (1664)	7B2D3148F12C4A01D42C2DD49AD3779D	2D3E35CBF2E4EE9811C868E92EDF8E7F67333FDB	70AB16317A8FAF0DB136AF75759E8EE45ACD4FA8F258585A31F7329591AB5A7D
Chrome Cache Entry: 151	ASCII text, with very long lines (29775)	9469D16A2426590FCAF38AF2F176E1F2	02874BD65323666A5A7D2D21C4F3C8E0F6568538	3AEF77189B7EBACACBB68C69007020B5CFD31F1D84D20B2121D2713D432936DF
Chrome Cache Entry: 152	ASCII text, with very long lines (41609)	69A5CE8AF8C99BE372E7DFD1218E2D83	81480AAA57336FE9BB06CF704FFF2FBC3F60C3E7	8F8224756F9703F2ED7843E0F78028D27D3FFF5FC77A37E15310C159136A3BA0
Chrome Cache Entry: 153	JSON data	99914B932BD37A50B983C5E7C90AE93B	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
Chrome Cache Entry: 154	ASCII text, with very long lines (65536), with no line terminators	FD95829BCB0030B67D63235003347751	D3483EFF8A8344AD34B36B6367093C01F03DB374	4EFF6F60DBD64CB188AEE3568B60D93B732C84F13D1242DBF565A9FED64B1C77
Chrome Cache Entry: 155	ASCII text, with very long lines (3473)	5F219BE14862516C2201F9AC06E122A8	5160FF0BB9201DDE986C4B2523C37B5DC35FA7EB	4EDDDA37FD9A5B0DE0D01F81C191DCE39F378D1446442F1B8713295FDDC31142
Chrome Cache Entry: 156	ASCII text, with very long lines (362)	7D3C66659E01077F47CBDD74349E60FA	86EC17A2B340E0E3BD6B84E38CE741D0867C0B9F	B4374EBF2AD5928DC936BB92738388059F1A6DF117AA47FB33F741B8DA23F864
Chrome Cache Entry: 157	ASCII text	D6C32610BC01D28D09392E8CAE4869E6	1A248754B2853D6FFA0381BBA3C4CA65C1AF19C5	107F84EDAF1294B3B3681D48FAFE9DE85165493D55EA9C361FA08ECBD7994148
Chrome Cache Entry: 158	ASCII text, with very long lines (54939)	4D32661F45D92FB57ADCF45D1BBDE91A	0AB0B927E72BBE699FB744280396B2FFC5D68E06	FD5BAF908AC836D689B36BFCAD4A7F96D7D5509EA754CFF0206006F3E452EF13
Chrome Cache Entry: 159	ASCII text, with no line terminators	BFC7B53AC88930093FFD61A8F81342AB	B51C7861790B03AA4E46F3F3774E1E8C08D5A4F8	348D5E5AA3017E3EC4DFD83773616F234FDB924166FB0C4799111472F72EAAC3
Chrome Cache Entry: 160	ASCII text, with very long lines (2099)	F77250E0EFE74549BDB944F47C9FCB47	BB9407BB3E11799F95B829271637913AAF1177DD	B8F5E9440EA0ACE133BC11771970A4D105A24584AD118CD8D73758A58894D0CD
Chrome Cache Entry: 161	ASCII text, with very long lines (678)	4E7743D28E7438621E65C3F1D88B113D	CE64922FC2FEC1F96CEB2E47FBA6E207C18AA304	FF9CED6F87C4DF6438B23376CC69AD38FD045B4F5FDA23706B518CFDA7A32C03
Chrome Cache Entry: 162	ASCII text, with very long lines (2314)	61444FC69EEE497F28D680EE0C9157E7	D72A2EC487F48C1C8C6AAB7B316FCBB6F2ADD7BF	6E6CC053B72069322499F1716187D1C81889190DE9E22D00ADC3231A7FFF90D6
Chrome Cache Entry: 163	ASCII text, with very long lines (31230)	97366B5396C1C6CB5B58CDF6F3A65527	8FC3649AF780C883CD08F85F55C2AF49CBD5F0E4	7FEDD50BE760F82829C4C313D7003F2D4C2448A5DEDB4FD5DE7A78B458F994A3
Chrome Cache Entry: 164	ASCII text, with very long lines (21694)	2968EA53455F7060CDE6EE7B77B65BB4	12872D8072A63D0E680705FD54353967B4FF5966	22B6A22B68B4E7F934729EF432A9A9FEAABF07E64838EAE43D8C7F680975467C
Chrome Cache Entry: 165	ASCII text, with very long lines (65155)	6C0117474A7C527DC4D099D44DAE71A1	7E755D51CA5A05F8D42518F791BDA950A2F89D0B	23162DDA13C76A1FF73B9FE7F7EFFB042AA830093F19033B6C52F17716F74126
Chrome Cache Entry: 166	Web Open Font Format (Version 2), TrueType, length 43308, version 1.66	93B6F18EC99BCB7C3FA7EA570A75E240	60B9E3062FE532CBC18B897FAC542C56A03544C7	43693F7BDD6146E783FAB3F75BA0A51AA3CF9530ADBF790DBD686FC8A17AA3DB
Chrome Cache Entry: 167	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel	F25511F4158C2DFAB6AA11A07D026E4A	99F63CF1694FA5E52F43EB967462EA0D9EEF7513	C0906D540D89DBE1F09B24F17B7F35B81350E8D381C1558B075C28EA913C450D
Chrome Cache Entry: 168	ASCII text, with very long lines (1034)	1D8928849F1A83BF4D0F41B8117FBBB2	B1B89BA2534EDE7FC049E0030AB92872FEF56E89	9F3E8A540DEED5076EC7E26DEE0F3BEC6E3ECC14DDABCF45E85E91C9218240D6
Chrome Cache Entry: 169	ASCII text, with very long lines (26833)	445352A9A30919B7530491B48C469BBA	CE4B98C7312355B33EEF1C922BB47937E44B57E0	2FA86BA22DD23366074F5467B5E3CA123EF40687DE1C9B7ABEA8F0AF4C3A76BB
Chrome Cache Entry: 170	ASCII text, with very long lines (25701)	6147FC8D260EB9D681C80F3D974C713D	FDE6BE0942C18722FB467FA9AD3FF90D431966CE	DFE4ED256A5C75579163A390549BE9EE31E0ED6E6CD368880AADDA48AEA912A3
Chrome Cache Entry: 171	ASCII text, with very long lines (40469)	663336E33F549D229482EF113E727B32	B6287B77DCE10EF701E9433A8764361984965C83	876341819C810C2F49739BD39221DBE47FB0B0922FDF6598FD5418F7F5FFE485
Chrome Cache Entry: 173	ASCII text, with very long lines (2357)	CA1CDC48601B58743ECC1238D2747291	9CA3952415D0903BA0BC246C24014DAB98034881	E2F261953F0A6C83388BB7AA76E37AC028BAD9174FDA36BB8642D985C4CD3F1F
Chrome Cache Entry: 174	ASCII text, with very long lines (65536), with no line terminators	6B22E1E75067B2B392B9F285FD1DB48A	53734FDF0BC10ABC1AAFDCCDEE0900D8508F856D	8A104CA0F2BAFE38D3D7443CE3262445B3DC0AE5D43AD31254160AA310D8B9CB
Chrome Cache Entry: 175	TrueType Font data, 16 tables, 1st "GDEF", 19 names, Microsoft, language 0x409	F9ABED3D3D7E0B5A0A5A303B113C53F4	8DEA33D500E929B878CED36C5980745C0BF13DB9	2BB6585B06B56D32AA48AC85F698AEA00A96B5E32B944C9FBA5022CD90F97DCF
Chrome Cache Entry: 176	ASCII text, with very long lines (6506)	4A0F62C20280F479F751116AAF6FF004	92E3963DEE944C49A5CF1F9BCC0E668D307CCABD	B16431F6654C40FDCD3D12717AB8E23CAC760678A5DB6063D3C3DA35316451F9
Chrome Cache Entry: 177	ASCII text, with very long lines (519)	C2591593FFBD92E16276E86068DB913A	E7B7B89E0FFB6C5E1CD91BB81AA418E1E9BD77D1	64CFD9646AFC31C4E5D1E3E6753194DCE4F385B017B1227DE2248730DE2DC0C0
Chrome Cache Entry: 178	ASCII text, with very long lines (1563)	7B08E15668E6293DED274A0E43734BD4	84CC2086318F411FA109744A702B5B04271D7658	6A8AD86F86D2671FDF62C01740FDC191743F39E124EE7401857E238144329881
Chrome Cache Entry: 179	ASCII text	A3A2554444A71B125FBF14F91125D2E7	7212DDC0E5552AF5BF29C82351474F88A3C99CB8	C5D544593946BDB983EADD3A6BA179CBD317C5D98409C3DD00C1D19444FC44EB
Chrome Cache Entry: 180	ASCII text, with very long lines (65536), with no line terminators	9399F55783480DB822CF654BA10EF050	05890E089C22CBF65878D08E5D4F2B7125FD7FFD	A679E10D76F51E53F19137FEF3DD0D39973DD3CE4C693312C4D316E2059DA52C
Chrome Cache Entry: 181	ASCII text, with very long lines (3340)	5CAC1B8E630592012A06C57BC024FB61	4FEF991E81ABDFD3C9BDC989E4D60F53825B471E	DCF6334AAAFC247D674B0D49F55A8D47BE9F8FABBEEA83AD92D71C555894CBFE
Chrome Cache Entry: 182	ASCII text, with very long lines (37813)	E8610524A37C783C12736026210E54F8	B771D988771F01270E63C1CCD89135A4D6FF8C47	CF24DA1C7EFC209200ADDA31BAF434A0A846BA41B7992273B9DC1B65E2C6BC0C
Chrome Cache Entry: 183	ASCII text, with very long lines (21020)	8C17286E4DD6DA4E2BB22FAD073B0111	7691782263480837FA2084DF5A6205AC818E3B8A	65C9ACEFE5A311F07615CE0B32146665B4BC33833B4D37A5064046212E19133E
Chrome Cache Entry: 184	ASCII text, with no line terminators	513F1D1684F5F5F96983E4AFDE6A12A9	9EE5B819E26671328A7B58526C7B5885EE053F1E	BFC7DC4C0C556175F63B2D19A5BDB021D04A3160EEBFD0DAD90E4B3F019A6C5B
Chrome Cache Entry: 185	ASCII text, with very long lines (4143)	6D7F12ED56D5FAFDFB141EAAF437F237	CC722F807C215B6B90A005A8405E0C18E63564C7	229FF7E74BF376A04E7DAE2B3A8A6DA04DF25A07D5B0300FCEFDA8FC821F8FF9
Chrome Cache Entry: 186	ASCII text, with very long lines (304)	4E2CC091FAC48A36F2EB401FA6ECE06B	AC35B42D5B1FF5B592A44574459A1C6CE6DFBE44	EA511EB41E9199AEC50864F7CD7862DEF7BE3AE5C232DBC066AC353EA56FEC8D
Chrome Cache Entry: 187	ASCII text, with very long lines (729)	75ED595D4A569CF9073CD6EEE308B3B3	13F9416A70CEEA9033A496A6AA5B922B72A6FBE2	34BA9C679427ACA43C1321759FAE0373E54B68661E8D12FB59BDB1F3D93ED1E8
Chrome Cache Entry: 188	ASCII text	00E3748EF6EF9B75F69F6AC20471BC85	713BD618ADFC43F6EC695CFE3788D19708666FB1	5E49FEF385C5BDA41E5FD72F0D0FB2E76722A5C156CAC7AFDBDCD9C6B9B9648A
Chrome Cache Entry: 189	ASCII text, with very long lines (2051)	72F9A26C26C1A681AD75A7E270550788	5579A02442ADFE9980A87BF495B18260927CD146	F4024DCE9F70735047ADC3A8CF7E8AC9FD2E1D4BFF6ABFC4158A1810EDFCE45F
Chrome Cache Entry: 190	ASCII text, with very long lines (48444)	B0CB4EB39E4448E0DF5CB9CD77446747	EBAAD7C112E616BE9A68546743D37A1AB194581F	8AC43D72889B09A2D77AE610827BD1CF29B8C19B9B391ADE54985509A9E507F9
Chrome Cache Entry: 191	ASCII text, with very long lines (29772)	2DFBF4ADE2F8556B66D8A499DD045F92	E86CCF95217E71782EA8A220D673027E62EA0005	F11029681200BB7AC00092CD68FDF8D97AA51D84E63A03C8F1E6A52FF2F6BEED
Chrome Cache Entry: 192	ASCII text	98070F1CF7C37AF35E411C1EAE73D5C3	652F4EC37768D55F02BA12617D3058E3A3436761	2DD3B640A7C87526BB0B29205D1FD3253AA5B779BDCCBF8A6F4C082FE909BE90
Chrome Cache Entry: 193	ASCII text, with very long lines (3111)	F5541B0A7EEB0229008CF96B9E4A3134	E7738EFDA87F5123132E2F3DC30F9A366C2DC463	B8F6A5BE548449D00DCF973AC2BEA64FAA0AB94B080AB1240098DE56BC57FD3D
Chrome Cache Entry: 194	ASCII text	069657210BAFE54BF738CE8489298BED	ACD814731DB697E444A3AEA6B636DC608FB17E89	1860B01D5A60C2E661647C79123AD74DC04E7BDBC3CE1C5463AB7469ADA4EC89
Chrome Cache Entry: 196	ASCII text, with very long lines (3359)	832EB961DF66F2CD3D56E1149C977626	35673D068E058248F05703FA111E6263B4F9DD5F	F2C597F2E23E980916688CF060329FA7897B383DF61637ADD4774227E544D9AD
Chrome Cache Entry: 197	ASCII text, with very long lines (2545)	624A58ABBC56BF186A2B9B4806F81D38	65788803744A0BF0370CC62E86DE93EAB936F4DC	7DC049F26BC9718B320BF581588EDD1EE0AE42B9778A57D4D7981E0D417C9D93
Chrome Cache Entry: 198	ASCII text	46CAC945E491B87E2835B2D5E8EC8804	2D072C5E3A12ABD4733DD429709C8DBCB5D3D50B	5A2D87CA902230E9900DF89430987C8F17B22FF184820DD40C8C6FBE777A5FC1
Chrome Cache Entry: 199	ASCII text, with very long lines (1350)	71B10E35A1DED1CF38DF46D710F2BA23	D1BCCE83DEFBE2BB2333FB40EE3873C799EEE8E8	C6DE54373F4DE3FD28933ACD6DAB4DEE40440777F53F0BECBECB4FC907CD5C3A
Chrome Cache Entry: 200	ASCII text, with very long lines (48361)	13D8A3134422642EAB2F3A6FF8E0831A	3F621A8DF56865B0FDEE810ECFB42D33FFDD6741	5A85704777E3B72D7E4EE0FABAC5DCB4783DEF0972445D3EC891EE8B3CBB16B0
Chrome Cache Entry: 202	ASCII text	E0505D16C77C48944076811695A40E45	940C7C92448C365340D4AAD0555F6F6618336C15	390E54A95FB0E6B4A57F9A85F533C2949E6B27CE639EA9CFA8DF9B98E3DE86CC
Chrome Cache Entry: 203	ASCII text	AED4EF043E73BEE3E3378D104FBEB292	10647F1B5329C90B9E4E0A1D44F2E5EB1F3CD6CD	E099369BEE76C1215C10E6B980AB68C6F285568DC35C75BE3BD9A653BEB72466
Chrome Cache Entry: 204	ASCII text, with very long lines (605)	23BFE7E99565EE8F34AFD63C06F4C24B	BF08B8AD1AD73C12A7C9CB211926CE23A861DB07	9DB33292007AB6C38527B39D5663E976A305564E19B2A5A8713EA2B2C00F505D
Chrome Cache Entry: 205	ASCII text, with very long lines (9586)	53A288476541A8A0E790FC62E77B6FB9	FFB02CE6E09E61EB494BDE86E21A225F01C58EDA	FB41B7F75A350B961521693271414222486CB98B099D0D68DFF83765F412CA94
Chrome Cache Entry: 206	ASCII text, with very long lines (54939)	BE46E7384B16280D2A080395AE35A8E6	72EB29B5FD98BAEBA883A827AC6FA487CA6DC9E1	A6E41B478743E79C6745B1BAD67932358D43BC911B34519C21D984B4213C2D7F
Chrome Cache Entry: 207	ASCII text, with very long lines (2962)	4D8313A7B6900F61AE9BFE51DDF4F67B	8B528784DBBE02C32F5F844953563C9B30178600	BFF7C9A7A1D2C6B47613859610EBA689A43C53189917DB1E81B5826B21B6C957
Chrome Cache Entry: 208	ASCII text, with very long lines (12986)	DBAD3434ECE4FB0850279562C33493BC	CA6F83838D22F0C2E43685D9827A1DC0087C9C24	66056CA52A46B369A05901B43415B703458E8408D0B3FAFC51621FAFFF97170E
Chrome Cache Entry: 209	ASCII text, with very long lines (65536), with no line terminators	8BF45A086AD2882D7BFCFC83044DE8F5	CA84226913162AD5A69293FDE5DD697CE5F4A3CC	F1CD4A1AFD77CA54BD4783DDB0B85507775FAB81B7BD957842BED9CBF22FAAF4
Chrome Cache Entry: 210	Web Open Font Format, TrueType, length 58239, version 0.0	83BB5AE3E28AFB23B4ED2EF74C272312	C79EC10C6AB82271C588B59A0DD26DC57DE54843	B1F18FD551241D3EFD5B9D114317F1D52C0C19677D3ECE876CE75249A1E067A6
Chrome Cache Entry: 211	ASCII text	FC60AD01769EDF0D5971E4EC374173DA	51AFD215A146CFF839D36EFB42CCC887C8217A5E	B8587D983EFAEEBA5B477D57A8BA7FC180471E03BA3ABA4F9B2C2588413CE57F
Chrome Cache Entry: 212	ASCII text, with very long lines (4391)	B3563618234C1597D3D8BAAC4CFE4B98	F8B953E5C399329D9092F6B4B3E2D4A83E55EF74	60A6FF9B6B8BB4B2522628C7928E2B76A5999066984378C798F8D9BE8E3831EB
Chrome Cache Entry: 213	HTML document, ASCII text	00F53700C90A2EDF60A83C7C3B959710	270A7C333D4BDE912992993FBDB7D2EC579E9B1B	C23F75F5147BEDB59DE93A0559B52C5303702B063C8D665C27CD8F40FE329B8B
Chrome Cache Entry: 214	ASCII text, with very long lines (25022)	5D3EA5041D80FDDF57116D450D838899	6AEC8269A5D46AD222A9B28FD5EEAF67F4F8536A	EA61B9AD2C5167F1D900C843CE60021DD8BB3E79D1417ACAD89DE75AE6D1A810
Chrome Cache Entry: 215	ASCII text, with very long lines (5082)	0E80CBB2EF9225FDC2B4DEFA7D321901	BD0862DEAD0CDAD41CC33D88856225717C6B173E	E34014DB1E6DA64AE844602B85DAFC41024F5694E49058A6F138DC7415E0AD25
Chrome Cache Entry: 216	ASCII text, with very long lines (40787)	944B77531013CF210A5ED7ACEA115C76	1DD7E67FD13E69C55431E77E9F2BF8A0C63C752C	C66CBC57BA90FBEB2C7B0D06725A8EE333BA57F0019909D97217D0B10458BE2F
Chrome Cache Entry: 217	ASCII text, with very long lines (2845)	0E3B3B3216D852E1ADEABC8B6E7FC27B	5D2CC55D2D9738CBCBDFE2CC350ABF2A3BF0EFA0	5585BCC97733AF2B7DC9F697D3BA3B7D4AF58484C38117DECD68F75E8407ADFE
Chrome Cache Entry: 218	ASCII text, with very long lines (9670)	F19F96944C7E4D2DA365827B0A7D3600	04B76367299A59F7F2FDEC196E441107CD429374	C9EADC5B4873B7B3F8D145E134B129D839755BDD0089160E7ED5191E81C5570F
Chrome Cache Entry: 219	ASCII text, with very long lines (2102), with no line terminators	FFF8E4C34D574BE9AC43718EE5ACCD9E	A88F5AAC146D4726FE7A7DC60BDF6BF3236CF187	851BAAFA4D75A31942B8D7F752909C9BD63873DD2B2D9E3C5B69439FC1F645A2
Chrome Cache Entry: 221	ASCII text, with very long lines (32930)	D07825F7461151933192BB0A5FAEE372	16B7C552EFC7D87E43791450FE79F0493DEFBE4C	3CB4F95B97C73072DD4C7C767B7D5ACC7455DE87C3B54C41583CB561CD6D9942
Chrome Cache Entry: 222	ASCII text, with very long lines (13739)	8B607192EEE3B44BB38D9E7A978F2CBD	E36F40F7C2EEB49D94CE93F1910A10898534F479	BEADDBBAF0E4053DF957B4397006E43E73A02A60F1E9C9D55453FD32E8BF5BC2
Chrome Cache Entry: 223	ASCII text, with no line terminators	688C50AAB19BD42AB1A494381763B433	CE76DF11E29A270BD8F9365267A0C19E3CC99DE7	1A2B06786E747F2758F2F647520103BE4F29A98192D395A43AB3C5DF07241E1D
Chrome Cache Entry: 224	ASCII text, with no line terminators	6D41677ABDBFE3CCA14FFDA9E9D99B4A	4F4D4B8EECB19C744A0FD489D258493B97DC90AB	751C121C592CDD81EB02979625DF6CADBDB887463FBB3C1545FC73AF077DB3D5
Chrome Cache Entry: 225	ASCII text, with very long lines (13617)	6CBF159B8EBEAAF9337A386CD5BD793B	22692D0D9BF6846CB2ADEAA38AD52BA29D1A27FC	BC0D86A1944F728B1F0707EEA72C15109EBF95373E6E0A5E4DE1C281E8C50AE3
Chrome Cache Entry: 226	ASCII text, with very long lines (632)	ADD520996E437BFF5D081315DA187FBF	2E489FE16F3712BF36DF00B03A8A5AF8FA8D4B42	922B951591D52D44AA7015EBC95CAB08192AA435B64F9016673AC5DA1124A8B4
Chrome Cache Entry: 227	Unicode text, UTF-8 text, with very long lines (65529), with no line terminators	DD3A63D89A120D21CAEEF592A6D402F4	8E4FF005C1D1DF7A9A336A6F3AD8B06A5F5BA657	FC1D7B30F08DF466E74C29408525FD5DD625E2136B48FD5ADB5690DA179928E1
Chrome Cache Entry: 228	C source, ASCII text, with very long lines (1046)	FA9B26CB00C85A5EC7C1377CC8A6E716	F1C5D5D8361FF52554E6E5947E53FBCBB016B90B	80E3033E815DC1CD007B4D606237677AAE877EB72983FE03D865B7344D8C8E7C
Chrome Cache Entry: 229	ASCII text, with very long lines (10407)	8F853EFC677232EE6FCA418A27B6B7A7	BA7D10A40D3638ED97FC35F9DFAF87EEC3AAFF7A	E43B38DF7D07F1119273348992E39DAC256E94BB33FF4372FD0335F51B8DAF0A
Chrome Cache Entry: 230	ASCII text	E9B97DB6D2E8DA79AA3E750F28E1BF56	1EDD4B6BB950948139840936828FED909BE6B8B8	A28E9054559B06E3D1520ED9058715B6511F6ADDFF73690FF35C90CB9332BE25
Chrome Cache Entry: 231	ASCII text, with very long lines (623)	B8BE0AEA05D076DD5B710F6DED7565B0	65F0CF4F7D35B7EC22F2E244A11A30E39BEF57BD	6437CDA00E26052D776AFE662A06DDF8FE9981DD79AB0F9D3F2360D694AC319E
Chrome Cache Entry: 232	ASCII text, with very long lines (5915)	E8E9EB71CB62F590D0062C8CF199B056	E278DB2DA23AB86A27B4E906F2FF2AE4305541C0	5C493BAE6EC9234D4759EB79FBBF79878FEF44F3064D57A3DD2180CE681B1167
Chrome Cache Entry: 233	ASCII text, with very long lines (1025)	20DEA3DFDE3B9352F8294408ADC604E9	C21EDD35DB63CD8852790ECE8323957643928648	0DA537469F646AEA2AB5EAFE2641AA33C329A7D17F2751B63D93D39722BFB21C
Chrome Cache Entry: 234	ASCII text, with very long lines (65536), with no line terminators	B9E5DA0759FC08B634CB5BF04D6320E3	92E4E8C7D4AFC13D4F9958681B7CE55B9137D9D9	C8A042587C9142DDAE3CC07AB0589FD61CE18FD3AB5FD783D9ED134DF6B65658
Chrome Cache Entry: 235	ASCII text, with very long lines (4497)	EA30E1059D8AF51D27EFF7111A91A399	145F7B03CE9C062A6B93914A7E572CBE69AF3DCA	FF3270156983CC26EE888FA9F9477F5A6689B98C945D0296B388EB9E9D995D44
Chrome Cache Entry: 236	ASCII text, with very long lines (1281)	68B92CF8F7C6D25796C695153614D004	718B985F5FA2A0FB44A5418FAF206B0BCBC07ABA	432741E746A4433ED39843670574A69AE8724BAB0DE5A8992510B99C34646D12
Chrome Cache Entry: 237	ASCII text, with very long lines (345)	A1782CB302D36D94A8F5904841B1F9CD	F489819205A11E879A7CBD37D906B7476040F5D9	2B1903F4A4FA1A2C629480FCDDD60D673D3CEE3BE8C13C6D198419757FB6E228
Chrome Cache Entry: 238	ASCII text	3B0BB3313BC069CCF76EC11101C435AA	3835D1E89171D4D16E7516B02F8DF3A7B2111EAE	B496879288D68FAF0C74CD134E93249132880AE2E8308930EAABA76231929623
Chrome Cache Entry: 239	ASCII text, with very long lines (8497)	30EBE89ADA4569020889569E3700FD6D	9CC0DB62BCF4E8688461CF10903FC686375005E2	9189666CBA8E7FEEE41224C2231C5BEBB265652BE0A4FFA623F7504F9F6C417F
Chrome Cache Entry: 240	C source, ASCII text, with very long lines (1655)	3D6F67FDE4C1CE8F843304A9954027D5	F241A38E83A52EC3E0B58E0E4D1245BBE867D72D	0EDC11BDDCD5F65EF7226CC17C634F58A1B92CA97F209579FE4885566E5F6B75
Chrome Cache Entry: 241	ASCII text, with very long lines (52131)	C828AC23007DA983A092DFEBFC2AE736	607D2B4D8056FC1F1B5A11289B34457F9C70525C	6DC9C96D745FDF2E541D0CA58F2D6D7E8EFCF4267A1108C5EE8D6CB13105308C
Chrome Cache Entry: 242	HTML document, Unicode text, UTF-8 text, with very long lines (1136)	FBE36EB2EECF1B90451A3A72701E49D2	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
Chrome Cache Entry: 243	ASCII text, with very long lines (12494)	0CCE36E0D631A9F9391326766FA604CC	32C7AC701C52A87238CF4F6A36AD8A8D517B9C72	090502C741FCE96E98551F7BB6CC3C89B14F55B2A2DD5F87BAF7856B5A699249
Chrome Cache Entry: 244	ASCII text, with very long lines (15368)	62E594328005F6A1C6E0EDBCAFA712B0	69404C43961EA5224B6DF433C9424C07679A08BD	2C79A0244A616AC9449EE94382007A3631AF38C5BE7BC6B91CC1B9F9C9F99513
Chrome Cache Entry: 245	ASCII text, with very long lines (2792)	77A115D3A09DC29A146902DD0A75A3BC	67FF8B3F8E44B4ADC666B6605B84160CD0BEEAF2	22E5825BE132E56D6A435331B14689B3C4A935C9F46808ABBDB6F6B7BC1792A8
Chrome Cache Entry: 246	Web Open Font Format (Version 2), TrueType, length 46188, version 1.66	DFC5E24CBC1B134E0C00C61E84EC999A	D3B1A8EF1D0F6F9162986479252570525719F203	B5DB3E633EC765FC01A19C06B0955D56C2503285E59D8D348D08EC34ABBFEAF3
Chrome Cache Entry: 247	ASCII text, with very long lines (533), with no line terminators	FEB698008C36A09DFE88AB06A1C3E3B9	A871FBCBBE298AE7078D06627708B2C106A0FAF3	1C4E7E389D73C6ACF7F19CC812514E71230740791FDE8A018C1D7EDCCF1590AE
Chrome Cache Entry: 248	ASCII text, with very long lines (1376)	CC270F290430D32FD30D83D36FDB28CD	01A24AE7E765B64F089111A1976DDFE7C5EC2DB2	5320B9183F2DAE6587268AAC7B4C477476D696BFF69A2114ED0FB80C5AA8E41F
Chrome Cache Entry: 249	ASCII text, with very long lines (744)	FFA4A8CEE985A798CFF48D450F8436AD	0584E9A89D7DCE5DA4AC9084DC91297237BB3B94	45526D8DCBFAE6EE2E386F518184BC65B459B3F207FF8E82A89C8FBFABB249F4
Chrome Cache Entry: 250	ASCII text, with very long lines (665)	A0EF15CB4F52D5F152A361C4A4208C73	62E8A6612C09E571E1266353758F61DC379401B0	7EB159511D44A621FB5DC9FF210E67E3621EC4000806F3D9255920F8A7B3DBF6
Chrome Cache Entry: 251	ASCII text, with very long lines (12980)	48E3CF3B41636EF6A51CDBC950C4EB1D	6AFCA96B7FBD0F0E467B28D5314305BF0339FAAF	071A37CB10715EAFA60E1388A4F466E8CABE50B4F90288768D73A37F6D6CD4B1
Chrome Cache Entry: 252	C source, ASCII text, with very long lines (1061)	09634B0C5D5D982B41CA1B4AB14020C8	663001508EF6C36B901B3608BC4E8AEF07935C6F	047B6B6649E7329949A203F7FB973104E7985FE752B567EE68255021A3AF8648
Chrome Cache Entry: 253	ASCII text, with very long lines (690)	130D1623A6C0ED6EAE3F51D358CF5BE5	F65BCF823D03BB540DA829E8FAE5BF738BA5801E	75CE3A7F1C4C8420618814C77EA4A461DA736CB2504BD9A9DA75CD9BB3F37ADE
Chrome Cache Entry: 254	ASCII text, with very long lines (65536), with no line terminators	63DC710D17E9E4DF7ABC7230882F064A	3667F9E9F261858018E47A1852F0ABF5BA9BF287	0DBBE070E11D1FCD2B0CD23400887AE285458B4652BBC87BE8D930C979AEABF0
Chrome Cache Entry: 256	ASCII text, with very long lines (1442), with no line terminators	E359730C09228133C43BB4F3994A210B	549E4C4DE13B955F9473D49E197604C4D083AA5E	DBE4FCB2A194F0413A9244215F178C267945420FB0A52FC3B18A0259DCF58804
Chrome Cache Entry: 257	ASCII text, with very long lines (565)	6D92292A133E794F5C1FADC6361DD5AC	9F9C7C2DB732A64AB4A014E2AFDA0AA446D3A04B	DC21D296459DD21437B246D4768E05C86DAE1180277C8A5AAC07E241665CF8B5
Chrome Cache Entry: 258	Web Open Font Format (Version 2), TrueType, length 54666, version 1.0	EBEE194A9B773F166DC16096F8614AAA	9D6A893AF295C90E9E9792D7E54A80034192255B	00F90DB31F42975FCDC5FA1F70660568BE68792EC11BE2AAC36362F435A6E555
Chrome Cache Entry: 259	ASCII text	5CDC20BEC764EEDD4CB5275BF0AAF4D0	A6DF9646C37996C4F8A118621B404925EEA353EE	05E1FBE4401829DB2CA3ECB53F1F748CA2F47E7907A8D2E90D1641E0FC6CFB7C

Phishing

LLM detected suspicious webpage text

Found iframes

Source: https://www.dropbox.com/scl/fi/2rygfxoalmirlp80ayvuj/2024_08_05_knowlesconsulting_78762_.pdf?oref=e&r=ACLOe00iVfePyr2nTZGdAg5dVEW6B8HTV-nk_-ILS4VetbxY3J1dB5cM1e0MWoYsaAoOjL0J-YIbNy69aXoEfHoqwW27-5KaDPEtfJjvWLl5ZwLNxlMTCx_hQwqaeTkc7IPxSmVNdK-U1DJI_NKsmEENwPlXZterjigzHp0RadhWcz9_5An0r5B8X5Q8PX3DxEsTskSpqMfuxcbys73dyXUXVVBAP9h4Ktfht1DkB9owNQ&sm=1&dl=0	HTTP Parser: Iframe src: https://dropboxcaptcha.com
Source: https://www.dropbox.com/scl/fi/2rygfxoalmirlp80ayvuj/2024_08_05_knowlesconsulting_78762_.pdf?oref=e&r=ACLOe00iVfePyr2nTZGdAg5dVEW6B8HTV-nk_-ILS4VetbxY3J1dB5cM1e0MWoYsaAoOjL0J-YIbNy69aXoEfHoqwW27-5KaDPEtfJjvWLl5ZwLNxlMTCx_hQwqaeTkc7IPxSmVNdK-U1DJI_NKsmEENwPlXZterjigzHp0RadhWcz9_5An0r5B8X5Q8PX3DxEsTskSpqMfuxcbys73dyXUXVVBAP9h4Ktfht1DkB9owNQ&sm=1&dl=0	HTTP Parser: Iframe src: https://www.dropbox.com/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&uri_for_logging=dropbox.com&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true&default_non_ccpa=true
Source: https://www.dropbox.com/scl/fi/2rygfxoalmirlp80ayvuj/2024_08_05_knowlesconsulting_78762_.pdf?oref=e&r=ACLOe00iVfePyr2nTZGdAg5dVEW6B8HTV-nk_-ILS4VetbxY3J1dB5cM1e0MWoYsaAoOjL0J-YIbNy69aXoEfHoqwW27-5KaDPEtfJjvWLl5ZwLNxlMTCx_hQwqaeTkc7IPxSmVNdK-U1DJI_NKsmEENwPlXZterjigzHp0RadhWcz9_5An0r5B8X5Q8PX3DxEsTskSpqMfuxcbys73dyXUXVVBAP9h4Ktfht1DkB9owNQ&sm=1&dl=0	HTTP Parser: Iframe src: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_750802_980424&as=X3Glee7%2BfERfmfrE228fdA&hl=en

HTML body contains low number of good links

HTTP Parser: Number of links: 0

HTML body contains password input but no form action

HTTP Parser: <input type="password" .../> found but no <form action="...

HTML title does not match URL

HTTP Parser: Title: Sign up to view this shared file does not match URL

HTTP Parser: <input type="password" .../> found

Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_750802_980424&as=X3Glee7%2BfERfmfrE228fdA&hl=en	HTTP Parser: No favicon
Source: https://dropboxcaptcha.com/	HTTP Parser: No favicon

Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_750802_980424&as=X3Glee7%2BfERfmfrE228fdA&hl=en	HTTP Parser: No <meta name="author".. found
Source: https://www.dropbox.com/scl/fi/2rygfxoalmirlp80ayvuj/2024_08_05_knowlesconsulting_78762_.pdf?oref=e&r=ACLOe00iVfePyr2nTZGdAg5dVEW6B8HTV-nk_-ILS4VetbxY3J1dB5cM1e0MWoYsaAoOjL0J-YIbNy69aXoEfHoqwW27-5KaDPEtfJjvWLl5ZwLNxlMTCx_hQwqaeTkc7IPxSmVNdK-U1DJI_NKsmEENwPlXZterjigzHp0RadhWcz9_5An0r5B8X5Q8PX3DxEsTskSpqMfuxcbys73dyXUXVVBAP9h4Ktfht1DkB9owNQ&sm=1&dl=0	HTTP Parser: No <meta name="author".. found

Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_750802_980424&as=X3Glee7%2BfERfmfrE228fdA&hl=en	HTTP Parser: No <meta name="copyright".. found
Source: https://www.dropbox.com/scl/fi/2rygfxoalmirlp80ayvuj/2024_08_05_knowlesconsulting_78762_.pdf?oref=e&r=ACLOe00iVfePyr2nTZGdAg5dVEW6B8HTV-nk_-ILS4VetbxY3J1dB5cM1e0MWoYsaAoOjL0J-YIbNy69aXoEfHoqwW27-5KaDPEtfJjvWLl5ZwLNxlMTCx_hQwqaeTkc7IPxSmVNdK-U1DJI_NKsmEENwPlXZterjigzHp0RadhWcz9_5An0r5B8X5Q8PX3DxEsTskSpqMfuxcbys73dyXUXVVBAP9h4Ktfht1DkB9owNQ&sm=1&dl=0	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.16:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.192.208.109:443 -> 192.168.2.16:49861 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.192.208.109:443 -> 192.168.2.16:49865 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 27MB later: 37MB

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: www.dropbox.com
Source: global traffic	DNS traffic detected: DNS query: cfl.dropboxstatic.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: fp.dropbox.com
Source: global traffic	DNS traffic detected: DNS query: stun.fpapi.io
Source: global traffic	DNS traffic detected: DNS query: stun.l.google.com
Source: global traffic	DNS traffic detected: DNS query: dropboxcaptcha.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.16:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.192.208.109:443 -> 192.168.2.16:49861 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.192.208.109:443 -> 192.168.2.16:49865 version: TLS 1.2

Source: classification engine

Classification label: sus22.phis.win@21/118@32/68

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.dropbox.com/l/scl/AABodOL3qFQp8pdaVX2jHhyRCVHs7XJY-r4
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 --field-trial-handle=2004,i,12640136437407880739,4973871106599706493,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 --field-trial-handle=2004,i,12640136437407880739,4973871106599706493,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3080 --field-trial-handle=2004,i,12640136437407880739,4973871106599706493,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5328 --field-trial-handle=2004,i,12640136437407880739,4973871106599706493,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3080 --field-trial-handle=2004,i,12640136437407880739,4973871106599706493,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5328 --field-trial-handle=2004,i,12640136437407880739,4973871106599706493,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

ID:	1438601
Product:	CloudBasic
Start time:	22:05:12
Start date:	08.05.2024
Cookbook:	defaultwindowsinteractivecookbook.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Windows Analysis Report
https://www.dropbox.com/l/scl/AABodOL3qFQp8pdaVX2jHhyRCVHs7XJY-r4

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://www.dropbox.com/l/scl/AABodOL3qFQp8pdaVX2jHhyRCVHs7XJY-r4

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://www.dropbox.com/l/scl/AABodOL3qFQp8pdaVX2jHhyRCVHs7XJY-r4