| URL: | https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=becky.suarez@enbridge.com&senderemailaddress=Rosa.Laureano@franciscanalliance.org&senderorganization=AwGBAAAAAn0AAAADAQAAABSme7zPDcJKiangJ4up5R5PVT1mcmFuY2lzY2FuLm9ubWljcm9zb2Z0LmNvbSxPVT1NaWNyb3NvZnQgRXhjaGFuZ2UgSG9zdGVkIE9yZ2FuaXphdGlvbnMsREM9TkFNUFIxN0EwMDEsREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTfE+d4/qlghMuwaGd0zKuilDTj1Db25maWd1cmF0aW9uLENOPWZyYW5jaXNjYW4ub25taWNyb3NvZnQuY29tLENOPUNvbmZpZ3VyYXRpb25Vbml0cyxEQz1OQU1QUjE3QTAwMSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NAQ==&messageid=<CH2PR17MB39446441E2DEC41AEB6A1DEA8FFF0@CH2PR17MB3944.namprd17.prod.outlook.com>&cfmRecipient=SystemMailbox{D0E409A0-AF9B-4720-92FE-AAC869B0D201}@franciscan.onmicrosoft.com&consumerEncryption=false&senderorgid=4b843c54-adae-4ff2-9f04-d9248f52101e&customizationTemplate=Franciscan+OME+Configuration&expiryDate=132515834506512952&e4e_sdata=Xhbi7nPaPoIZ0U9AXI8zpLVxLwnY7EVrH0M4fgdZV57sRszTijLlkhqGuyzc3fU4LontnVJby2EsqVWRjhsjcUw1KW5QuIPmXs/IgmTeIgCoWfbni1PIPcucuSxshAJ2eQTAbi0UsR7YTx7fgMsB6Tyflbylo6BYnCyG0WGUPKb293eCA1eJsgGxekj7vq0hCtB8nGrHO3lbEJ4kEFsDB2Jd4ETISbISCNobZPUbKf+WW6fwNSWnpqpWDoEW2pbcudKTAJSQj0IQw9haiuDVRw9lAyjPWI4tx5uLsXm6Tq5EW+EFJAn63HuEqWxTLo/iv2RrXb5QkLU7NCsM71mC/w== |
| Full analysis: | https://app.any.run/tasks/aaf49103-5db0-4547-9f43-0ee7114e7d00 |
| Verdict: | No threats detected |
| Analysis date: | November 20, 2020, 22:41:15 |
| OS: | Windows 7 Professional Service Pack 1 (build: 7601, 32 bit) |
| MD5: | 096F0D0724E4775B6CD98E4D390789AC |
| SHA1: | 1A55FD2B319A63F02FBB83673CE1D12211B54DD4 |
| SHA256: | C2B7C127659083E90721605267A561F60D20911BDA3ACD5AD6A8D370CBB08840 |
| SSDEEP: | 24:2nMD/DIwZt+jwJEaN2QTJdw6ZajSsJr0U2VzQ5Vx2M1lu/n87SKD:PLIwL+qw6ojS9U+kzPsqSe |
MALICIOUS
No malicious indicators.SUSPICIOUS
No suspicious indicators.INFO
No info indicators.
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
Total processes
33
Monitored processes
1
Malicious processes
0
Suspicious processes
0
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process |
|---|---|---|---|---|
| 2544 | "C:\Program Files\Google\Chrome\Application\chrome.exe" --disk-cache-dir=null --disk-cache-size=1 --media-cache-size=1 --disable-gpu-shader-disk-cache --disable-background-networking "https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=becky.suarez@enbridge.com&senderemailaddress=Rosa.Laureano@franciscanalliance.org&senderorganization=AwGBAAAAAn0AAAADAQAAABSme7zPDcJKiangJ4up5R5PVT1mcmFuY2lzY2FuLm9ubWljcm9zb2Z0LmNvbSxPVT1NaWNyb3NvZnQgRXhjaGFuZ2UgSG9zdGVkIE9yZ2FuaXphdGlvbnMsREM9TkFNUFIxN0EwMDEsREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTfE+d4/qlghMuwaGd0zKuilDTj1Db25maWd1cmF0aW9uLENOPWZyYW5jaXNjYW4ub25taWNyb3NvZnQuY29tLENOPUNvbmZpZ3VyYXRpb25Vbml0cyxEQz1OQU1QUjE3QTAwMSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NAQ==&messageid=<CH2PR17MB39446441E2DEC41AEB6A1DEA8FFF0@CH2PR17MB3944.namprd17.prod.outlook.com>&cfmRecipient=SystemMailbox{D0E409A0-AF9B-4720-92FE-AAC869B0D201}@franciscan.onmicrosoft.com&consumerEncryption=false&senderorgid=4b843c54-adae-4ff2-9f04-d9248f52101e&customizationTemplate=Franciscan+OME+Configuration&expiryDate=132515834506512952&e4e_sdata=Xhbi7nPaPoIZ0U9AXI8zpLVxLwnY7EVrH0M4fgdZV57sRszTijLlkhqGuyzc3fU4LontnVJby2EsqVWRjhsjcUw1KW5QuIPmXs/IgmTeIgCoWfbni1PIPcucuSxshAJ2eQTAbi0UsR7YTx7fgMsB6Tyflbylo6BYnCyG0WGUPKb293eCA1eJsgGxekj7vq0hCtB8nGrHO3lbEJ4kEFsDB2Jd4ETISbISCNobZPUbKf+WW6fwNSWnpqpWDoEW2pbcudKTAJSQj0IQw9haiuDVRw9lAyjPWI4tx5uLsXm6Tq5EW+EFJAn63HuEqWxTLo/iv2RrXb5QkLU7NCsM71mC/w==" | C:\Program Files\Google\Chrome\Application\chrome.exe | — | explorer.exe |
User: admin Company: Google LLC Integrity Level: MEDIUM Description: Google Chrome Exit code: 0 Version: 75.0.3770.100 | ||||
Total events
0
Read events
0
Write events
0
Delete events
0
Modification events
Executable files
0
Suspicious files
0
Text files
0
Unknown types
0
Dropped files
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
0
TCP/UDP connections
18
DNS requests
7
Threats
0
HTTP requests
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
— | — | 52.97.155.114:443 | outlook.office365.com | Microsoft Corporation | US | unknown |
— | — | 216.58.212.173:443 | accounts.google.com | Google Inc. | US | whitelisted |
— | — | 152.199.19.160:443 | ajax.aspnetcdn.com | MCI Communications Services, Inc. d/b/a Verizon Business | US | whitelisted |
— | — | 23.44.195.10:443 | static2.sharepointonline.com | Akamai Technologies, Inc. | US | unknown |
— | — | 40.101.121.2:443 | outlook.office365.com | Microsoft Corporation | NL | whitelisted |
— | — | 52.97.200.162:443 | outlook.office365.com | Microsoft Corporation | US | unknown |
— | — | 172.217.18.3:443 | ssl.gstatic.com | Google Inc. | US | whitelisted |
— | — | 23.212.156.64:443 | r1.res.office365.com | GTT Communications Inc. | US | unknown |
— | — | 172.217.195.95:443 | safebrowsing.googleapis.com | Google Inc. | US | whitelisted |
DNS requests
Domain | IP | Reputation |
|---|---|---|
outlook.office365.com |
| whitelisted |
accounts.google.com |
| shared |
static2.sharepointonline.com |
| whitelisted |
ajax.aspnetcdn.com |
| whitelisted |
safebrowsing.googleapis.com |
| whitelisted |
r1.res.office365.com |
| whitelisted |
ssl.gstatic.com |
| whitelisted |