Windows Analysis Report
municipal-parking-ticket9092495.pdf

Overview

General Information

Sample name: municipal-parking-ticket9092495.pdf
Analysis ID: 1417447
MD5: 3c36dd56c4b136b4c51f48653f86ca75
SHA1: 2724c932716afcabeb78e73a73023f1373ca5590
SHA256: 670c142dd082c6e2abf1542ee9bfb14a1696f10182085ad02ba957cec6262dd1
Infos:

Detection

PDFPhish
Score: 80
Range: 0 - 100
Whitelisted: false
Confidence: 100%

Signatures

Antivirus detection for URL or domain
Found potential malicious PDF (bad image similarity)
Multi AV Scanner detection for submitted file
Yara detected PDFPhish
Machine Learning detection for sample
Suspicious PDF detected (based on various text indicators)
IP address seen in connection with other malware
JA3 SSL client fingerprint seen in connection with other malware
PDF has an OpenAction (likely to launch a dropper script)
Phishing site detected (based on OCR NLP Model)

Classification

AV Detection
barindex
Antivirus detection for URL or domain
Source: https://spamchallenge.msftemail.com/XaXR2aElpOEEyS3ROQ3o0YmZoZEFhcXEycXB1eWJXTHNHSVhwcGlCN3ZNQVJwbzR Avira URL Cloud: Label: phishing
Source: https://spamchallenge.msftemail.com/XdUlMRDdER0g2RlVSZXdZRUU5Qk5JQ0ZQZ1J4UW9PR0FFRjZ2OGFiMkVNUnlGa2R Avira URL Cloud: Label: phishing
Multi AV Scanner detection for submitted file
Source: municipal-parking-ticket9092495.pdf Virustotal: Detection: 26% Perma Link
Machine Learning detection for sample
Source: municipal-parking-ticket9092495.pdf Joe Sandbox ML: detected

Phishing
barindex
Yara detected PDFPhish
Source: Yara match File source: municipal-parking-ticket9092495.pdf, type: SAMPLE
Suspicious PDF detected (based on various text indicators)
Source: Adobe Acrobat PDF OCR Text: Adobe Document Cloud This document is encrypted using Adobe Secure CloudTM. Click below to securely view contents. Secure Open Please note: Some webmail clients are not compatible with Adobe Adob obat Secure CloudTM. If that happens, download the file and open on Desktop.
Phishing site detected (based on OCR NLP Model)
Source: Adobe Acrobat PDF ML Model on OCR Text: Matched 96.7% probability on "Adobe Document Cloud This document is encrypted using Adobe Secure CloudTM. Click below to securely view contents. Secure Open Please note: Some webmail clients are not compatible with Adobe Adob obat Secure CloudTM. If that happens, download the file and open on Desktop. "
Source: https://secured-login.net/pages/0f69d9d6917891c88b56d51c66748acb/XdUlMRDdER0g2RlVSZXdZRUU5Qk5JQ0ZQZ1J4UW9PR0FFRjZ2OGFiMkVNUnlGa2RMRlFIa3lhYUtQTmNPMEhISzhVSFl3b0FaMWVOMGdad1dHZitpR0JzbnhYN3Fuak8reXk5bEZaZ1BBaEFIVjlOaEcxUDNTc1VDaWlkLzk5Rkk5NGEyUzlDOTlOVjFBanNZQ3lyUW1oZzBjM3h0TjNKVTYvY1ltMERQOWNJQ3lEVUU4OHFjYUV4U1V3TWpTS2ZHZ2U4YUNBSStRZStEVFFxcG5Hbz0tLStFMXRmYjViQTV3UVhMMEktLURoTlc0R21HWGNEMVg5c09BbGt1VHc9PQ== HTTP Parser: No favicon
Source: unknown HTTPS traffic detected: 23.56.8.114:443 -> 192.168.2.4:49738 version: TLS 1.2
Source: unknown HTTPS traffic detected: 23.56.8.114:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.4:49747 version: TLS 1.2
IP address seen in connection with other malware
Source: Joe Sandbox View IP Address: 104.17.24.14 104.17.24.14
Source: Joe Sandbox View IP Address: 239.255.255.250 239.255.255.250
Source: Joe Sandbox View IP Address: 146.75.28.193 146.75.28.193
JA3 SSL client fingerprint seen in connection with other malware
Source: Joe Sandbox View JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: unknown TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown TCP traffic detected without corresponding DNS query: 23.56.8.114
Source: unknown TCP traffic detected without corresponding DNS query: 23.56.8.114
Source: unknown TCP traffic detected without corresponding DNS query: 23.56.8.114
Source: unknown TCP traffic detected without corresponding DNS query: 23.56.8.114
Source: unknown TCP traffic detected without corresponding DNS query: 23.56.8.114
Source: unknown TCP traffic detected without corresponding DNS query: 23.56.8.114
Source: unknown TCP traffic detected without corresponding DNS query: 23.56.8.114
Source: unknown TCP traffic detected without corresponding DNS query: 23.56.8.114
Source: unknown TCP traffic detected without corresponding DNS query: 23.56.8.114
Source: unknown TCP traffic detected without corresponding DNS query: 23.56.8.114
Source: unknown TCP traffic detected without corresponding DNS query: 23.56.8.114
Source: unknown TCP traffic detected without corresponding DNS query: 23.56.8.114
Source: unknown TCP traffic detected without corresponding DNS query: 23.56.8.114
Source: unknown TCP traffic detected without corresponding DNS query: 23.56.8.114
Source: unknown TCP traffic detected without corresponding DNS query: 23.56.8.114
Source: unknown TCP traffic detected without corresponding DNS query: 23.56.8.114
Source: unknown TCP traffic detected without corresponding DNS query: 23.56.8.114
Source: unknown TCP traffic detected without corresponding DNS query: 23.56.8.114
Source: unknown TCP traffic detected without corresponding DNS query: 23.45.148.189
Source: unknown TCP traffic detected without corresponding DNS query: 23.45.148.189
Source: unknown TCP traffic detected without corresponding DNS query: 23.45.148.189
Source: unknown TCP traffic detected without corresponding DNS query: 23.45.148.189
Source: unknown TCP traffic detected without corresponding DNS query: 23.45.148.189
Source: unknown TCP traffic detected without corresponding DNS query: 23.45.148.189
Source: unknown TCP traffic detected without corresponding DNS query: 23.45.148.189
Source: unknown TCP traffic detected without corresponding DNS query: 23.45.148.189
Source: unknown TCP traffic detected without corresponding DNS query: 23.45.148.189
Source: unknown TCP traffic detected without corresponding DNS query: 23.45.148.189
Source: unknown TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: global traffic HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: */*Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic HTTP traffic detected: GET /onboarding/smskillreader.txt HTTP/1.1Host: armmf.adobe.comConnection: keep-aliveAccept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ReaderServices/23.6.20320 Chrome/105.0.0.0 Safari/537.36Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brIf-None-Match: "78-5faa31cce96da"If-Modified-Since: Mon, 01 May 2023 15:02:33 GMT
Source: global traffic HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=kD8P4WgnXcOwg2P&MD=khovzDMU HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=kD8P4WgnXcOwg2P&MD=khovzDMU HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic HTTP traffic detected: GET /XdUlMRDdER0g2RlVSZXdZRUU5Qk5JQ0ZQZ1J4UW9PR0FFRjZ2OGFiMkVNUnlGa2RMRlFIa3lhYUtQTmNPMEhISzhVSFl3b0FaMWVOMGdad1dHZitpR0JzbnhYN3Fuak8reXk5bEZaZ1BBaEFIVjlOaEcxUDNTc1VDaWlkLzk5Rkk5NGEyUzlDOTlOVjFBanNZQ3lyUW1oZzBjM3h0TjNKVTYvY1ltMERQOWNJQ3lEVUU4OHFjYUV4U1V3TWpTS2ZHZ2U4YUNBSStRZStEVFFxcG5Hbz0tLStFMXRmYjViQTV3UVhMMEktLURoTlc0R21HWGNEMVg5c09BbGt1VHc9PQ==?cid=1972121800 HTTP/1.1Host: spamchallenge.msftemail.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pages/0f69d9d6917891c88b56d51c66748acb/XdUlMRDdER0g2RlVSZXdZRUU5Qk5JQ0ZQZ1J4UW9PR0FFRjZ2OGFiMkVNUnlGa2RMRlFIa3lhYUtQTmNPMEhISzhVSFl3b0FaMWVOMGdad1dHZitpR0JzbnhYN3Fuak8reXk5bEZaZ1BBaEFIVjlOaEcxUDNTc1VDaWlkLzk5Rkk5NGEyUzlDOTlOVjFBanNZQ3lyUW1oZzBjM3h0TjNKVTYvY1ltMERQOWNJQ3lEVUU4OHFjYUV4U1V3TWpTS2ZHZ2U4YUNBSStRZStEVFFxcG5Hbz0tLStFMXRmYjViQTV3UVhMMEktLURoTlc0R21HWGNEMVg5c09BbGt1VHc9PQ== HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://spamchallenge.msftemail.com/XdUlMRDdER0g2RlVSZXdZRUU5Qk5JQ0ZQZ1J4UW9PR0FFRjZ2OGFiMkVNUnlGa2RMRlFIa3lhYUtQTmNPMEhISzhVSFl3b0FaMWVOMGdad1dHZitpR0JzbnhYN3Fuak8reXk5bEZaZ1BBaEFIVjlOaEcxUDNTc1VDaWlkLzk5Rkk5NGEyUzlDOTlOVjFBanNZQ3lyUW1oZzBjM3h0TjNKVTYvY1ltMERQOWNJQ3lEVUU4OHFjYUV4U1V3TWpTS2ZHZ2U4YUNBSStRZStEVFFxcG5Hbz0tLStFMXRmYjViQTV3UVhMMEktLURoTlc0R21HWGNEMVg5c09BbGt1VHc9PQ==?cid=1972121800Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secured-login.net/pages/0f69d9d6917891c88b56d51c66748acb/XdUlMRDdER0g2RlVSZXdZRUU5Qk5JQ0ZQZ1J4UW9PR0FFRjZ2OGFiMkVNUnlGa2RMRlFIa3lhYUtQTmNPMEhISzhVSFl3b0FaMWVOMGdad1dHZitpR0JzbnhYN3Fuak8reXk5bEZaZ1BBaEFIVjlOaEcxUDNTc1VDaWlkLzk5Rkk5NGEyUzlDOTlOVjFBanNZQ3lyUW1oZzBjM3h0TjNKVTYvY1ltMERQOWNJQ3lEVUU4OHFjYUV4U1V3TWpTS2ZHZ2U4YUNBSStRZStEVFFxcG5Hbz0tLStFMXRmYjViQTV3UVhMMEktLURoTlc0R21HWGNEMVg5c09BbGt1VHc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /assets/sei-modal-298c1edd0166bef9cbaf6b85083b95d5819753f027d6a841658c738f21e84e49.css HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secured-login.net/pages/0f69d9d6917891c88b56d51c66748acb/XdUlMRDdER0g2RlVSZXdZRUU5Qk5JQ0ZQZ1J4UW9PR0FFRjZ2OGFiMkVNUnlGa2RMRlFIa3lhYUtQTmNPMEhISzhVSFl3b0FaMWVOMGdad1dHZitpR0JzbnhYN3Fuak8reXk5bEZaZ1BBaEFIVjlOaEcxUDNTc1VDaWlkLzk5Rkk5NGEyUzlDOTlOVjFBanNZQ3lyUW1oZzBjM3h0TjNKVTYvY1ltMERQOWNJQ3lEVUU4OHFjYUV4U1V3TWpTS2ZHZ2U4YUNBSStRZStEVFFxcG5Hbz0tLStFMXRmYjViQTV3UVhMMEktLURoTlc0R21HWGNEMVg5c09BbGt1VHc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /assets/sei-tooltip-1ae0d1e9729436272a0cdfaf2325f9aacea7d6f89787d08056eda54a1910752d.css HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secured-login.net/pages/0f69d9d6917891c88b56d51c66748acb/XdUlMRDdER0g2RlVSZXdZRUU5Qk5JQ0ZQZ1J4UW9PR0FFRjZ2OGFiMkVNUnlGa2RMRlFIa3lhYUtQTmNPMEhISzhVSFl3b0FaMWVOMGdad1dHZitpR0JzbnhYN3Fuak8reXk5bEZaZ1BBaEFIVjlOaEcxUDNTc1VDaWlkLzk5Rkk5NGEyUzlDOTlOVjFBanNZQ3lyUW1oZzBjM3h0TjNKVTYvY1ltMERQOWNJQ3lEVUU4OHFjYUV4U1V3TWpTS2ZHZ2U4YUNBSStRZStEVFFxcG5Hbz0tLStFMXRmYjViQTV3UVhMMEktLURoTlc0R21HWGNEMVg5c09BbGt1VHc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /assets/sei-flag-68d13d784ca9a21935d3004d873a9d547a5992deb153f1069c517f83cb514c7a.css HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secured-login.net/pages/0f69d9d6917891c88b56d51c66748acb/XdUlMRDdER0g2RlVSZXdZRUU5Qk5JQ0ZQZ1J4UW9PR0FFRjZ2OGFiMkVNUnlGa2RMRlFIa3lhYUtQTmNPMEhISzhVSFl3b0FaMWVOMGdad1dHZitpR0JzbnhYN3Fuak8reXk5bEZaZ1BBaEFIVjlOaEcxUDNTc1VDaWlkLzk5Rkk5NGEyUzlDOTlOVjFBanNZQ3lyUW1oZzBjM3h0TjNKVTYvY1ltMERQOWNJQ3lEVUU4OHFjYUV4U1V3TWpTS2ZHZ2U4YUNBSStRZStEVFFxcG5Hbz0tLStFMXRmYjViQTV3UVhMMEktLURoTlc0R21HWGNEMVg5c09BbGt1VHc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /assets/landing-watermark-16f13e16a7ef02fb6f94250aa1931ded83dbee5d9fad278e33dd5792d085194f.css HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secured-login.net/pages/0f69d9d6917891c88b56d51c66748acb/XdUlMRDdER0g2RlVSZXdZRUU5Qk5JQ0ZQZ1J4UW9PR0FFRjZ2OGFiMkVNUnlGa2RMRlFIa3lhYUtQTmNPMEhISzhVSFl3b0FaMWVOMGdad1dHZitpR0JzbnhYN3Fuak8reXk5bEZaZ1BBaEFIVjlOaEcxUDNTc1VDaWlkLzk5Rkk5NGEyUzlDOTlOVjFBanNZQ3lyUW1oZzBjM3h0TjNKVTYvY1ltMERQOWNJQ3lEVUU4OHFjYUV4U1V3TWpTS2ZHZ2U4YUNBSStRZStEVFFxcG5Hbz0tLStFMXRmYjViQTV3UVhMMEktLURoTlc0R21HWGNEMVg5c09BbGt1VHc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /ajax/libs/twitter-bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secured-login.net/pages/0f69d9d6917891c88b56d51c66748acb/XdUlMRDdER0g2RlVSZXdZRUU5Qk5JQ0ZQZ1J4UW9PR0FFRjZ2OGFiMkVNUnlGa2RMRlFIa3lhYUtQTmNPMEhISzhVSFl3b0FaMWVOMGdad1dHZitpR0JzbnhYN3Fuak8reXk5bEZaZ1BBaEFIVjlOaEcxUDNTc1VDaWlkLzk5Rkk5NGEyUzlDOTlOVjFBanNZQ3lyUW1oZzBjM3h0TjNKVTYvY1ltMERQOWNJQ3lEVUU4OHFjYUV4U1V3TWpTS2ZHZ2U4YUNBSStRZStEVFFxcG5Hbz0tLStFMXRmYjViQTV3UVhMMEktLURoTlc0R21HWGNEMVg5c09BbGt1VHc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /managed_services/middleby_logo__may_24_.png HTTP/1.1Host: static.knowbe4.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secured-login.net/pages/0f69d9d6917891c88b56d51c66748acb/XdUlMRDdER0g2RlVSZXdZRUU5Qk5JQ0ZQZ1J4UW9PR0FFRjZ2OGFiMkVNUnlGa2RMRlFIa3lhYUtQTmNPMEhISzhVSFl3b0FaMWVOMGdad1dHZitpR0JzbnhYN3Fuak8reXk5bEZaZ1BBaEFIVjlOaEcxUDNTc1VDaWlkLzk5Rkk5NGEyUzlDOTlOVjFBanNZQ3lyUW1oZzBjM3h0TjNKVTYvY1ltMERQOWNJQ3lEVUU4OHFjYUV4U1V3TWpTS2ZHZ2U4YUNBSStRZStEVFFxcG5Hbz0tLStFMXRmYjViQTV3UVhMMEktLURoTlc0R21HWGNEMVg5c09BbGt1VHc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /assets/application-b8fb25919f68be551e6730684a8ed34bc7dd2dac142e7cc51ebf7b09c48546d5.js HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secured-login.net/pages/0f69d9d6917891c88b56d51c66748acb/XdUlMRDdER0g2RlVSZXdZRUU5Qk5JQ0ZQZ1J4UW9PR0FFRjZ2OGFiMkVNUnlGa2RMRlFIa3lhYUtQTmNPMEhISzhVSFl3b0FaMWVOMGdad1dHZitpR0JzbnhYN3Fuak8reXk5bEZaZ1BBaEFIVjlOaEcxUDNTc1VDaWlkLzk5Rkk5NGEyUzlDOTlOVjFBanNZQ3lyUW1oZzBjM3h0TjNKVTYvY1ltMERQOWNJQ3lEVUU4OHFjYUV4U1V3TWpTS2ZHZ2U4YUNBSStRZStEVFFxcG5Hbz0tLStFMXRmYjViQTV3UVhMMEktLURoTlc0R21HWGNEMVg5c09BbGt1VHc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /helpimg/landing_pages/css/dd.css HTTP/1.1Host: s3.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secured-login.net/pages/0f69d9d6917891c88b56d51c66748acb/XdUlMRDdER0g2RlVSZXdZRUU5Qk5JQ0ZQZ1J4UW9PR0FFRjZ2OGFiMkVNUnlGa2RMRlFIa3lhYUtQTmNPMEhISzhVSFl3b0FaMWVOMGdad1dHZitpR0JzbnhYN3Fuak8reXk5bEZaZ1BBaEFIVjlOaEcxUDNTc1VDaWlkLzk5Rkk5NGEyUzlDOTlOVjFBanNZQ3lyUW1oZzBjM3h0TjNKVTYvY1ltMERQOWNJQ3lEVUU4OHFjYUV4U1V3TWpTS2ZHZ2U4YUNBSStRZStEVFFxcG5Hbz0tLStFMXRmYjViQTV3UVhMMEktLURoTlc0R21HWGNEMVg5c09BbGt1VHc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /QRF01zv.png HTTP/1.1Host: i.imgur.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secured-login.net/pages/0f69d9d6917891c88b56d51c66748acb/XdUlMRDdER0g2RlVSZXdZRUU5Qk5JQ0ZQZ1J4UW9PR0FFRjZ2OGFiMkVNUnlGa2RMRlFIa3lhYUtQTmNPMEhISzhVSFl3b0FaMWVOMGdad1dHZitpR0JzbnhYN3Fuak8reXk5bEZaZ1BBaEFIVjlOaEcxUDNTc1VDaWlkLzk5Rkk5NGEyUzlDOTlOVjFBanNZQ3lyUW1oZzBjM3h0TjNKVTYvY1ltMERQOWNJQ3lEVUU4OHFjYUV4U1V3TWpTS2ZHZ2U4YUNBSStRZStEVFFxcG5Hbz0tLStFMXRmYjViQTV3UVhMMEktLURoTlc0R21HWGNEMVg5c09BbGt1VHc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /packs/js/vendor-954761ad0dceb106b971.js HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secured-login.net/pages/0f69d9d6917891c88b56d51c66748acb/XdUlMRDdER0g2RlVSZXdZRUU5Qk5JQ0ZQZ1J4UW9PR0FFRjZ2OGFiMkVNUnlGa2RMRlFIa3lhYUtQTmNPMEhISzhVSFl3b0FaMWVOMGdad1dHZitpR0JzbnhYN3Fuak8reXk5bEZaZ1BBaEFIVjlOaEcxUDNTc1VDaWlkLzk5Rkk5NGEyUzlDOTlOVjFBanNZQ3lyUW1oZzBjM3h0TjNKVTYvY1ltMERQOWNJQ3lEVUU4OHFjYUV4U1V3TWpTS2ZHZ2U4YUNBSStRZStEVFFxcG5Hbz0tLStFMXRmYjViQTV3UVhMMEktLURoTlc0R21HWGNEMVg5c09BbGt1VHc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /assets/modernizr-79e0181ec91aff04bb01d87cba546535ede843f75d19f5c60f66b8dd6546971f.js HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secured-login.net/pages/0f69d9d6917891c88b56d51c66748acb/XdUlMRDdER0g2RlVSZXdZRUU5Qk5JQ0ZQZ1J4UW9PR0FFRjZ2OGFiMkVNUnlGa2RMRlFIa3lhYUtQTmNPMEhISzhVSFl3b0FaMWVOMGdad1dHZitpR0JzbnhYN3Fuak8reXk5bEZaZ1BBaEFIVjlOaEcxUDNTc1VDaWlkLzk5Rkk5NGEyUzlDOTlOVjFBanNZQ3lyUW1oZzBjM3h0TjNKVTYvY1ltMERQOWNJQ3lEVUU4OHFjYUV4U1V3TWpTS2ZHZ2U4YUNBSStRZStEVFFxcG5Hbz0tLStFMXRmYjViQTV3UVhMMEktLURoTlc0R21HWGNEMVg5c09BbGt1VHc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /assets/application-3ab7c63a41a8761925d45817a71fb79e0ef7208b59de505ac640c8a2a183ec19.js HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secured-login.net/pages/0f69d9d6917891c88b56d51c66748acb/XdUlMRDdER0g2RlVSZXdZRUU5Qk5JQ0ZQZ1J4UW9PR0FFRjZ2OGFiMkVNUnlGa2RMRlFIa3lhYUtQTmNPMEhISzhVSFl3b0FaMWVOMGdad1dHZitpR0JzbnhYN3Fuak8reXk5bEZaZ1BBaEFIVjlOaEcxUDNTc1VDaWlkLzk5Rkk5NGEyUzlDOTlOVjFBanNZQ3lyUW1oZzBjM3h0TjNKVTYvY1ltMERQOWNJQ3lEVUU4OHFjYUV4U1V3TWpTS2ZHZ2U4YUNBSStRZStEVFFxcG5Hbz0tLStFMXRmYjViQTV3UVhMMEktLURoTlc0R21HWGNEMVg5c09BbGt1VHc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /packs/js/vendor-69f70dd3792dc7287ac8.js HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secured-login.net/pages/0f69d9d6917891c88b56d51c66748acb/XdUlMRDdER0g2RlVSZXdZRUU5Qk5JQ0ZQZ1J4UW9PR0FFRjZ2OGFiMkVNUnlGa2RMRlFIa3lhYUtQTmNPMEhISzhVSFl3b0FaMWVOMGdad1dHZitpR0JzbnhYN3Fuak8reXk5bEZaZ1BBaEFIVjlOaEcxUDNTc1VDaWlkLzk5Rkk5NGEyUzlDOTlOVjFBanNZQ3lyUW1oZzBjM3h0TjNKVTYvY1ltMERQOWNJQ3lEVUU4OHFjYUV4U1V3TWpTS2ZHZ2U4YUNBSStRZStEVFFxcG5Hbz0tLStFMXRmYjViQTV3UVhMMEktLURoTlc0R21HWGNEMVg5c09BbGt1VHc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /assets/modernizr-654222debe8018b12f1993ceddff30dc163a7d5008d79869c399d6d167321f97.js HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secured-login.net/pages/0f69d9d6917891c88b56d51c66748acb/XdUlMRDdER0g2RlVSZXdZRUU5Qk5JQ0ZQZ1J4UW9PR0FFRjZ2OGFiMkVNUnlGa2RMRlFIa3lhYUtQTmNPMEhISzhVSFl3b0FaMWVOMGdad1dHZitpR0JzbnhYN3Fuak8reXk5bEZaZ1BBaEFIVjlOaEcxUDNTc1VDaWlkLzk5Rkk5NGEyUzlDOTlOVjFBanNZQ3lyUW1oZzBjM3h0TjNKVTYvY1ltMERQOWNJQ3lEVUU4OHFjYUV4U1V3TWpTS2ZHZ2U4YUNBSStRZStEVFFxcG5Hbz0tLStFMXRmYjViQTV3UVhMMEktLURoTlc0R21HWGNEMVg5c09BbGt1VHc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /QRF01zv.png HTTP/1.1Host: i.imgur.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /managed_services/middleby_logo__may_24_.png HTTP/1.1Host: static.knowbe4.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /assets/landing-watermark-16f13e16a7ef02fb6f94250aa1931ded83dbee5d9fad278e33dd5792d085194f.css HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secured-login.net/pages/0f69d9d6917891c88b56d51c66748acb/XdUlMRDdER0g2RlVSZXdZRUU5Qk5JQ0ZQZ1J4UW9PR0FFRjZ2OGFiMkVNUnlGa2RMRlFIa3lhYUtQTmNPMEhISzhVSFl3b0FaMWVOMGdad1dHZitpR0JzbnhYN3Fuak8reXk5bEZaZ1BBaEFIVjlOaEcxUDNTc1VDaWlkLzk5Rkk5NGEyUzlDOTlOVjFBanNZQ3lyUW1oZzBjM3h0TjNKVTYvY1ltMERQOWNJQ3lEVUU4OHFjYUV4U1V3TWpTS2ZHZ2U4YUNBSStRZStEVFFxcG5Hbz0tLStFMXRmYjViQTV3UVhMMEktLURoTlc0R21HWGNEMVg5c09BbGt1VHc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /assets/sei-flag-90af55d793544fe1893f26677661a4252761afbe811fab0eced85c67bc82f984.png HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secured-login.net/assets/sei-flag-68d13d784ca9a21935d3004d873a9d547a5992deb153f1069c517f83cb514c7a.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /assets/sei-flag-90af55d793544fe1893f26677661a4252761afbe811fab0eced85c67bc82f984.png HTTP/1.1Host: secured-login.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secured-login.net/pages/0f69d9d6917891c88b56d51c66748acb/XdUlMRDdER0g2RlVSZXdZRUU5Qk5JQ0ZQZ1J4UW9PR0FFRjZ2OGFiMkVNUnlGa2RMRlFIa3lhYUtQTmNPMEhISzhVSFl3b0FaMWVOMGdad1dHZitpR0JzbnhYN3Fuak8reXk5bEZaZ1BBaEFIVjlOaEcxUDNTc1VDaWlkLzk5Rkk5NGEyUzlDOTlOVjFBanNZQ3lyUW1oZzBjM3h0TjNKVTYvY1ltMERQOWNJQ3lEVUU4OHFjYUV4U1V3TWpTS2ZHZ2U4YUNBSStRZStEVFFxcG5Hbz0tLStFMXRmYjViQTV3UVhMMEktLURoTlc0R21HWGNEMVg5c09BbGt1VHc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: secured-login.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: unknown DNS traffic detected: queries for: spamchallenge.msftemail.com
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 29 Mar 2024 09:00:51 GMTContent-Type: text/plain; charset=utf-8Content-Length: 9Connection: closeX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-originCache-Control: no-cacheContent-Security-Policy: X-Request-Id: 08668782-7de9-4831-afb4-3e5d3d8e9660X-Runtime: 0.010725Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 29 Mar 2024 09:00:51 GMTContent-Type: text/plain; charset=utf-8Content-Length: 9Connection: closeX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-originCache-Control: no-cacheContent-Security-Policy: X-Request-Id: 72ca41af-02b4-4127-b023-eed8f2ea21cbX-Runtime: 0.010911Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 29 Mar 2024 09:00:51 GMTContent-Type: text/plain; charset=utf-8Content-Length: 9Connection: closeX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-originCache-Control: no-cacheContent-Security-Policy: X-Request-Id: 4a630b7f-a155-46b6-aff2-3eadca9bb1d3X-Runtime: 0.010842Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 29 Mar 2024 09:00:51 GMTContent-Type: text/plain; charset=utf-8Content-Length: 9Connection: closeX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-originCache-Control: no-cacheContent-Security-Policy: X-Request-Id: 7cc138e6-08db-48f9-87b2-98469b2ec036X-Runtime: 0.011105Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 29 Mar 2024 09:00:52 GMTContent-Type: text/plain; charset=utf-8Content-Length: 9Connection: closeX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-originCache-Control: no-cacheContent-Security-Policy: X-Request-Id: b8e9e6b9-32e1-4999-ba5e-61a1b011246cX-Runtime: 0.010942Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
Source: chromecache_184.10.dr String found in binary or memory: Http://bugs.jqueryui.com/ticket/9446
Source: chromecache_184.10.dr String found in binary or memory: http://api.jquery.com/jQuery.ajax/)
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/accordion/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/autocomplete/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/blind-effect/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/bounce-effect/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/button/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/category/effects-core/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/checkboxradio/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/clip-effect/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/controlgroup/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/data-selector/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/datepicker/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/dialog/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/disableSelection/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/draggable/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/drop-effect/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/droppable/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/explode-effect/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/fade-effect/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/focusable-selector/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/fold-effect/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/form-reset-mixin/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/highlight-effect/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/jQuery.ui.keyCode/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/jQuery.widget/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/labels/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/menu/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/mouse/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/progressbar/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/puff-effect/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/pulsate-effect/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/resizable/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/scale-effect/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/scrollParent/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/selectable/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/selectmenu/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/shake-effect/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/size-effect/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/slide-effect/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/slider/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/sortable/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/spinner/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/tabbable-selector/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/tabs/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/tooltip/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/transfer-effect/
Source: chromecache_184.10.dr String found in binary or memory: http://api.jqueryui.com/uniqueId/
Source: chromecache_184.10.dr String found in binary or memory: http://blog.jquery.com/2012/08/09/jquery-1-8-released/
Source: chromecache_184.10.dr String found in binary or memory: http://bugs.jquery.com/ticket/11778
Source: chromecache_184.10.dr String found in binary or memory: http://bugs.jquery.com/ticket/12359
Source: chromecache_184.10.dr String found in binary or memory: http://bugs.jquery.com/ticket/13378
Source: chromecache_184.10.dr String found in binary or memory: http://bugs.jqueryui.com/ticket/7552
Source: chromecache_184.10.dr String found in binary or memory: http://creativecommons.org/licenses/by/3.0/)
Source: chromecache_184.10.dr String found in binary or memory: http://datatables.net).
Source: chromecache_184.10.dr String found in binary or memory: http://datatables.net/license
Source: chromecache_184.10.dr String found in binary or memory: http://datatables.net/license/mit
Source: chromecache_184.10.dr String found in binary or memory: http://datatables.net/manual/styling/bootstrap
Source: chromecache_184.10.dr String found in binary or memory: http://datatables.net/tn/
Source: chromecache_184.10.dr String found in binary or memory: http://dev.w3.org/csswg/cssom/#resolved-values
Source: chromecache_184.10.dr String found in binary or memory: http://docs.closure-library.googlecode.com/git/closure_goog_date_date.js.source.html
Source: chromecache_184.10.dr String found in binary or memory: http://eligrey.com
Source: chromecache_184.10.dr String found in binary or memory: http://erik.eae.net/archives/2007/07/27/18.54.15/#comment-102291
Source: chromecache_184.10.dr String found in binary or memory: http://flightschool.acylt.com/devnotes/caret-position-woes/
Source: chromecache_184.10.dr String found in binary or memory: http://fluidproject.org/blog/2008/01/09/getting-setting-and-removing-tabindex-values-with-javascript
Source: chromecache_187.10.dr String found in binary or memory: http://getbootstrap.com)
Source: chromecache_184.10.dr String found in binary or memory: http://javascript.nwbox.com/IEContentLoaded/
Source: chromecache_184.10.dr String found in binary or memory: http://jquery.com/
Source: chromecache_184.10.dr String found in binary or memory: http://jquery.org/license
Source: chromecache_184.10.dr String found in binary or memory: http://jqueryui.com
Source: chromecache_184.10.dr String found in binary or memory: http://jqueryui.com/accordion/
Source: chromecache_184.10.dr String found in binary or memory: http://jqueryui.com/autocomplete/
Source: chromecache_184.10.dr String found in binary or memory: http://jqueryui.com/button/
Source: chromecache_184.10.dr String found in binary or memory: http://jqueryui.com/checkboxradio/
Source: chromecache_184.10.dr String found in binary or memory: http://jqueryui.com/controlgroup/
Source: chromecache_184.10.dr String found in binary or memory: http://jqueryui.com/datepicker/
Source: chromecache_184.10.dr String found in binary or memory: http://jqueryui.com/dialog/
Source: chromecache_184.10.dr String found in binary or memory: http://jqueryui.com/draggable/
Source: chromecache_184.10.dr String found in binary or memory: http://jqueryui.com/droppable/
Source: chromecache_184.10.dr String found in binary or memory: http://jqueryui.com/effect/
Source: chromecache_184.10.dr String found in binary or memory: http://jqueryui.com/menu/
Source: chromecache_184.10.dr String found in binary or memory: http://jqueryui.com/position/
Source: chromecache_184.10.dr String found in binary or memory: http://jqueryui.com/progressbar/
Source: chromecache_184.10.dr String found in binary or memory: http://jqueryui.com/resizable/
Source: chromecache_184.10.dr String found in binary or memory: http://jqueryui.com/selectable/
Source: chromecache_184.10.dr String found in binary or memory: http://jqueryui.com/selectmenu/
Source: chromecache_184.10.dr String found in binary or memory: http://jqueryui.com/slider/
Source: chromecache_184.10.dr String found in binary or memory: http://jqueryui.com/sortable/
Source: chromecache_184.10.dr String found in binary or memory: http://jqueryui.com/spinner/
Source: chromecache_184.10.dr String found in binary or memory: http://jqueryui.com/tabs/
Source: chromecache_184.10.dr String found in binary or memory: http://jqueryui.com/tooltip/
Source: chromecache_184.10.dr String found in binary or memory: http://jqueryui.com/widget/
Source: chromecache_184.10.dr String found in binary or memory: http://jsfiddle.net/JZSMt/3/
Source: chromecache_184.10.dr String found in binary or memory: http://jsperf.com/getall-vs-sizzle/2
Source: chromecache_184.10.dr String found in binary or memory: http://jsperf.com/html-decode
Source: chromecache_184.10.dr String found in binary or memory: http://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_184.10.dr String found in binary or memory: http://jsperf.com/tostring-v-check
Source: chromecache_184.10.dr String found in binary or memory: http://momentjs.com/guides/#/warnings/add-inverted-param/
Source: chromecache_184.10.dr String found in binary or memory: http://momentjs.com/guides/#/warnings/define-locale/
Source: chromecache_184.10.dr String found in binary or memory: http://momentjs.com/guides/#/warnings/dst-shifted/
Source: chromecache_184.10.dr String found in binary or memory: http://momentjs.com/guides/#/warnings/js-date/
Source: chromecache_184.10.dr String found in binary or memory: http://momentjs.com/guides/#/warnings/min-max/
Source: chromecache_184.10.dr String found in binary or memory: http://momentjs.com/guides/#/warnings/zone/
Source: chromecache_184.10.dr String found in binary or memory: http://pdfmake.org
Source: chromecache_184.10.dr String found in binary or memory: http://semver.org/
Source: chromecache_184.10.dr String found in binary or memory: http://sizzlejs.com/
Source: chromecache_184.10.dr String found in binary or memory: http://stackoverflow.com/a/21336448/937891
Source: chromecache_184.10.dr String found in binary or memory: http://stackoverflow.com/a/26707753
Source: chromecache_184.10.dr String found in binary or memory: http://stackoverflow.com/a/32954565/96342
Source: chromecache_184.10.dr String found in binary or memory: http://stackoverflow.com/a/384380/937891
Source: chromecache_184.10.dr String found in binary or memory: http://stackoverflow.com/questions/3561493/is-there-a-regexp-escape-function-in-javascript
Source: chromecache_184.10.dr String found in binary or memory: http://stackoverflow.com/questions/8898412
Source: chromecache_184.10.dr String found in binary or memory: http://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_184.10.dr String found in binary or memory: http://weblogs.java.net/blog/driscoll/archive/2009/09/08/eval-javascript-global-context
Source: chromecache_184.10.dr String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_184.10.dr String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0)
Source: chromecache_184.10.dr String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.txt
Source: chromecache_184.10.dr String found in binary or memory: http://www.datatables.net
Source: chromecache_184.10.dr String found in binary or memory: http://www.datatables.net/extensions/select
Source: chromecache_184.10.dr String found in binary or memory: http://www.macromedia.com/go/getflashplayer
Source: chromecache_184.10.dr String found in binary or memory: http://www.robertpenner.com/easing)
Source: chromecache_184.10.dr String found in binary or memory: http://www.sprymedia.co.uk/dataTables/lang.txt
Source: chromecache_184.10.dr String found in binary or memory: https://blog.alexmaccaw.com/css-transitions
Source: chromecache_184.10.dr String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=107380
Source: chromecache_184.10.dr String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_184.10.dr String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_184.10.dr String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=47182
Source: chromecache_184.10.dr String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=491668
Source: chromecache_184.10.dr String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=561664
Source: chromecache_184.10.dr String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=649285
Source: chromecache_184.10.dr String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_194.10.dr String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/css/bootstrap.min.css
Source: chromecache_184.10.dr String found in binary or memory: https://chmln.github.io/flatpickr/#altinput
Source: chromecache_184.10.dr String found in binary or memory: https://chmln.github.io/flatpickr/#dateformat
Source: chromecache_184.10.dr String found in binary or memory: https://chmln.github.io/flatpickr/#disable
Source: chromecache_184.10.dr String found in binary or memory: https://chmln.github.io/flatpickr/#inline-calendar
Source: chromecache_184.10.dr String found in binary or memory: https://chmln.github.io/flatpickr/examples/#flatpickr-external-elements
Source: chromecache_184.10.dr String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=313082
Source: chromecache_184.10.dr String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=378607
Source: chromecache_184.10.dr String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=449857
Source: chromecache_184.10.dr String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=470258
Source: chromecache_184.10.dr String found in binary or memory: https://code.google.com/p/maashaack/source/browse/packages/graphics/trunk/src/graphics/colors/HUE2RG
Source: chromecache_184.10.dr String found in binary or memory: https://datatables.net/tn/11
Source: chromecache_184.10.dr String found in binary or memory: https://developer.apple.com/library/safari/documentation/Tools/Conceptual/SafariExtensionGuide/Worki
Source: chromecache_184.10.dr String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_184.10.dr String found in binary or memory: https://developer.mozilla.org/en-US/docs/Using_Firefox_1.5_caching
Source: chromecache_184.10.dr String found in binary or memory: https://developer.mozilla.org/en/Security/CSP)
Source: chromecache_184.10.dr String found in binary or memory: https://developer.snapappointments.com/bootstrap-select)
Source: chromecache_184.10.dr String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_194.10.dr String found in binary or memory: https://fonts.googleapis.com/css2?family=Open
Source: chromecache_181.10.dr String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI
Source: chromecache_181.10.dr String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4iaVI
Source: chromecache_181.10.dr String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4jaVI
Source: chromecache_181.10.dr String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4kaVI
Source: chromecache_181.10.dr String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4saVI
Source: chromecache_181.10.dr String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4taVI
Source: chromecache_181.10.dr String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4uaVI
Source: chromecache_181.10.dr String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4vaVI
Source: chromecache_181.10.dr String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B5OaVI
Source: chromecache_181.10.dr String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B5caVI
Source: chromecache_184.10.dr String found in binary or memory: https://fullcalendar.io/
Source: chromecache_184.10.dr String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_184.10.dr String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#affix
Source: chromecache_184.10.dr String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#alerts
Source: chromecache_184.10.dr String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#buttons
Source: chromecache_184.10.dr String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#carousel
Source: chromecache_184.10.dr String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#collapse
Source: chromecache_184.10.dr String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#dropdowns
Source: chromecache_184.10.dr String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#modals
Source: chromecache_184.10.dr String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#popovers
Source: chromecache_184.10.dr String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#scrollspy
Source: chromecache_184.10.dr String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#tabs
Source: chromecache_184.10.dr String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#tooltip
Source: chromecache_184.10.dr String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#transitions
Source: chromecache_184.10.dr String found in binary or memory: https://github.com/DoersGuild/jQuery.print/issues/18#issuecomment-96451589
Source: chromecache_184.10.dr String found in binary or memory: https://github.com/Microsoft/tslib/blob/v1.6.0/tslib.js
Source: chromecache_184.10.dr String found in binary or memory: https://github.com/angular/angular/blob/7.2.4/packages/core/src/sanitization/url_sanitizer.ts
Source: chromecache_184.10.dr String found in binary or memory: https://github.com/bassjobsen/Bootstrap-3-Typeahead
Source: chromecache_184.10.dr String found in binary or memory: https://github.com/davidstutz/bootstrap-multiselect)
Source: chromecache_184.10.dr String found in binary or memory: https://github.com/dordille/moment-isoduration/blob/master/moment.isoduration.js
Source: chromecache_184.10.dr String found in binary or memory: https://github.com/eligrey/classList.js/issues/36
Source: chromecache_184.10.dr String found in binary or memory: https://github.com/jashkenas/underscore/blob/1.6.0/underscore.js#L714
Source: chromecache_184.10.dr String found in binary or memory: https://github.com/jdewit/bootstrap-timepicker/graphs/contributors
Source: chromecache_184.10.dr String found in binary or memory: https://github.com/jquery/jquery-color
Source: chromecache_184.10.dr String found in binary or memory: https://github.com/jquery/jquery-color/
Source: chromecache_184.10.dr String found in binary or memory: https://github.com/jquery/jquery-ui/blob/1.11.0/ui/core.js#L51
Source: chromecache_184.10.dr String found in binary or memory: https://github.com/jquery/jquery/blob/2.2.4/src/core.js#L448
Source: chromecache_184.10.dr String found in binary or memory: https://github.com/jquery/jquery/blob/e539bac79e666bba95bba86d690b4e609dca2286/src/selector/escapeSe
Source: chromecache_184.10.dr String found in binary or memory: https://github.com/jquery/jquery/issues/4382
Source: chromecache_184.10.dr String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_184.10.dr String found in binary or memory: https://github.com/jquery/jquery/pull/764
Source: chromecache_184.10.dr String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_184.10.dr String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_183.10.dr String found in binary or memory: https://github.com/kriskowal/es5-shim/blob/master/es5-shim.js
Source: chromecache_184.10.dr String found in binary or memory: https://github.com/moment/moment/blob/2.18.1/src/lib/moment/format.js#L22
Source: chromecache_184.10.dr String found in binary or memory: https://github.com/moment/moment/issues/1423
Source: chromecache_184.10.dr String found in binary or memory: https://github.com/moment/moment/issues/2166
Source: chromecache_184.10.dr String found in binary or memory: https://github.com/moment/moment/issues/2978
Source: chromecache_184.10.dr String found in binary or memory: https://github.com/moment/moment/pull/1871
Source: chromecache_184.10.dr String found in binary or memory: https://github.com/rails/jquery-ujs
Source: chromecache_184.10.dr String found in binary or memory: https://github.com/rails/jquery-ujs/issues/357
Source: chromecache_184.10.dr String found in binary or memory: https://github.com/snapappointments/bootstrap-select/blob/master/LICENSE)
Source: chromecache_184.10.dr, chromecache_187.10.dr String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_184.10.dr String found in binary or memory: https://github.com/twbs/bootstrap/issues/14093
Source: chromecache_184.10.dr String found in binary or memory: https://github.com/twbs/bootstrap/issues/20280
Source: chromecache_184.10.dr String found in binary or memory: https://github.com/uxsolutions/bootstrap-datepicker)
Source: chromecache_184.10.dr String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_194.10.dr String found in binary or memory: https://i.imgur.com/QRF01zv.png
Source: chromecache_184.10.dr String found in binary or memory: https://itsjavi.com/bootstrap-colorpicker/
Source: chromecache_184.10.dr String found in binary or memory: https://jsperf.com/childnodes-array-slice-vs-loop
Source: chromecache_184.10.dr String found in binary or memory: https://modernizr.com/)
Source: chromecache_184.10.dr String found in binary or memory: https://nodejs.org/dist/latest/docs/api/util.html#util_custom_inspect_function_on_objects
Source: chromecache_184.10.dr String found in binary or memory: https://npms.io/search?q=ponyfill.
Source: chromecache_194.10.dr String found in binary or memory: https://s3.amazonaws.com/helpimg/landing_pages/css/dd.css
Source: chromecache_199.10.dr String found in binary or memory: https://secured-login.net/pages/0f69d9d6917891c88b56d51c66748acb/XdUlMRDdER0g2RlVSZXdZRUU5Qk5JQ0ZQZ1
Source: municipal-parking-ticket9092495.pdf String found in binary or memory: https://spamchallenge.msftemail.com/XRVhkUlZtTzVoRjFFb1ZKQVZ6T1plT1RpYVJ1VkJENFZKYU1pcmxPRThEWUkxVks
Source: municipal-parking-ticket9092495.pdf String found in binary or memory: https://spamchallenge.msftemail.com/XZUwvaTQrS0F6Nlk2UkNCSGJSNTZVdVJobVFHMkdDalg5UUkxY1pXT211OTVFR0t
Source: municipal-parking-ticket9092495.pdf String found in binary or memory: https://spamchallenge.msftemail.com/XaXR2aElpOEEyS3ROQ3o0YmZoZEFhcXEycXB1eWJXTHNHSVhwcGlCN3ZNQVJwbzR
Source: municipal-parking-ticket9092495.pdf String found in binary or memory: https://spamchallenge.msftemail.com/XdUlMRDdER0g2RlVSZXdZRUU5Qk5JQ0ZQZ1J4UW9PR0FFRjZ2OGFiMkVNUnlGa2R
Source: chromecache_184.10.dr String found in binary or memory: https://stackoverflow.com/q/181348
Source: chromecache_194.10.dr String found in binary or memory: https://static.knowbe4.com/managed_services/middleby_logo__may_24_.png
Source: chromecache_184.10.dr String found in binary or memory: https://tools.ietf.org/html/rfc2822#section-3.3
Source: chromecache_184.10.dr String found in binary or memory: https://www.chromestatus.com/features/5093566007214080
Source: chromecache_184.10.dr String found in binary or memory: https://www.ecma-international.org/news/TC45_current_work/Office%20Open%20XML%20Part%204%20-%20Marku
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown HTTPS traffic detected: 23.56.8.114:443 -> 192.168.2.4:49738 version: TLS 1.2
Source: unknown HTTPS traffic detected: 23.56.8.114:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.4:49747 version: TLS 1.2

System Summary
barindex
Found potential malicious PDF (bad image similarity)
Source: municipal-parking-ticket9092495.pdf Static PDF information: Image stream: 21
Source: classification engine Classification label: mal80.phis.winPDF@39/90@20/10
Source: municipal-parking-ticket9092495.pdf Initial sample: https://spamchallenge.msftemail.com/xdulmrdder0g2rlvszxdzruu5qk5jq0zqz1j4uw9pr0ffrjz2ogfimkvnunlga2rmrlfia3lhyutqtmnpmehiszhvsfl3b0famwvomgdad1dhzitpr0jzbnhyn3fuak8rexk5bezaz1bbaefivjloaecxudntc1vdawlklzk5rkk5ngeyuzldotlovjfbannzq3lyuw1ozzbjm3h0tjnkvtyvy1ltmerqownjq3levuu4ohfjyuv4u1v3twpts2zhz2u4yunbsstrzstevffxcg5hbz0tlstfmxrmyjviqtv3uvhmmektlurotlc0r21hwgnemvg5c09bbgt1vhc9pq==?cid=1972121800
Source: municipal-parking-ticket9092495.pdf Initial sample: https://spamchallenge.msftemail.com/XZUwvaTQrS0F6Nlk2UkNCSGJSNTZVdVJobVFHMkdDalg5UUkxY1pXT211OTVFR0tvMkdVbmhncWFNcUVTdUNTeWJCUHJwNkNCbXVHOTNFcUUrNElHMVFHNUdnRjVOUXQ3U1VKdFR6ZEUwYk84KytaWm9ZTFdONW91V284VVJ6VVE2aFhXeW1aRE1GeTF3dGNlWDU4YlgzTmtlcEZPNm1UMHlwMFRwNmdyZXlmMGUrdXVvOWR2U1N3d3R1ZTVVT1RSdmgyT2xpS2dRV3FXRktlbk9Laz0tLU1yT0Mvd3dHbE9WNWdEb2ctLXl6YWdCQTZRbklzNmdRK1EzTHNlZHc9PQ==?cid=1972121800
Source: municipal-parking-ticket9092495.pdf Initial sample: https://spamchallenge.msftemail.com/xaxr2aelpoeeys3roq3o0ymzozefhcxeycxb1ewjxthnhsvhwcglcn3znqvjwbzrldmnqslzma2ddtnj5otvpys9hakdurkdtdmnqr3eywlvnzdbuunb0dmxxweevzglsnulprfjfdfdtwwtkdlfytddtzzrlwdfkymr5k1zoanlhthracmffmmm3eui2t2n1atfrvgfrmwpfztfit0nqdjrgm3lrweyvzhj3cwxbslv1mgezr1pnmm80btbwmw5mavb3dmrytfpmchi5wnvvl3mryz0tlvg3cwhidmgvvxblmjvtt2stlvlstkx2k2vmrglknthfndqvberytve9pq==?cid=1972121800
Source: municipal-parking-ticket9092495.pdf Initial sample: https://spamchallenge.msftemail.com/xzuwvatqrs0f6nlk2ukncsgjsntzvdvjobvfhmkddalg5uukxy1pxt211otvfr0tvmkdvbmhncwfncuvtduntewjcuhjwnkncbxvhotnfcuurnelhmvfhnudnrjvouxq3u1vkdfr6zeuwyk84kytawm9ztfdonw91v284vvj6vve2afhxew1are1getf3dgnlwdu4ylgztmtlcezpnm1umhlwmfrwnmdyzxlmmgurdxvvowr2u1n3d3r1ztvvt1rsdmgyt2xps2drv3fxrktlbk9laz0tlu1yt0mvd3dhbe9wnwdeb2ctlxl6ywdcqtzrbklznmdrk1ezthnlzhc9pq==?cid=1972121800
Source: municipal-parking-ticket9092495.pdf Initial sample: https://spamchallenge.msftemail.com/XdUlMRDdER0g2RlVSZXdZRUU5Qk5JQ0ZQZ1J4UW9PR0FFRjZ2OGFiMkVNUnlGa2RMRlFIa3lhYUtQTmNPMEhISzhVSFl3b0FaMWVOMGdad1dHZitpR0JzbnhYN3Fuak8reXk5bEZaZ1BBaEFIVjlOaEcxUDNTc1VDaWlkLzk5Rkk5NGEyUzlDOTlOVjFBanNZQ3lyUW1oZzBjM3h0TjNKVTYvY1ltMERQOWNJQ3lEVUU4OHFjYUV4U1V3TWpTS2ZHZ2U4YUNBSStRZStEVFFxcG5Hbz0tLStFMXRmYjViQTV3UVhMMEktLURoTlc0R21HWGNEMVg5c09BbGt1VHc9PQ==?cid=1972121800
Source: municipal-parking-ticket9092495.pdf Initial sample: https://spamchallenge.msftemail.com/XaXR2aElpOEEyS3ROQ3o0YmZoZEFhcXEycXB1eWJXTHNHSVhwcGlCN3ZNQVJwbzRldmNqSlZMa2dDTnJ5OTVPYS9hakdURkdtdmNQR3EyWlVnZDBuUnB0dmxXWEEvZGlsNUlPRFJFdFdtWWtkdlFyTDdTZzRLWDFKYmR5K1ZOanlhTHRacmFFMmM3eUI2T2N1aTFRVGFrMWpFZTFiT0NQdjRGM3lRWEYvZHJ3cWxBSlV1MGEzR1pnMm80bTBwMW5MaVB3dmRyTFpMcHI5WnVvL3MrYz0tLVg3cWhIdmgvVXBlMjVtT2stLVlsTkx2K2VmRGlKNThFNDQvbERyTVE9PQ==?cid=1972121800
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-03-29 09-59-24-712.log Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA Jump to behavior
Source: municipal-parking-ticket9092495.pdf Virustotal: Detection: 26%
Source: unknown Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\municipal-parking-ticket9092495.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2100 --field-trial-handle=1352,i,17440810105437182178,13092006359344771328,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://spamchallenge.msftemail.com/XdUlMRDdER0g2RlVSZXdZRUU5Qk5JQ0ZQZ1J4UW9PR0FFRjZ2OGFiMkVNUnlGa2RMRlFIa3lhYUtQTmNPMEhISzhVSFl3b0FaMWVOMGdad1dHZitpR0JzbnhYN3Fuak8reXk5bEZaZ1BBaEFIVjlOaEcxUDNTc1VDaWlkLzk5Rkk5NGEyUzlDOTlOVjFBanNZQ3lyUW1oZzBjM3h0TjNKVTYvY1ltMERQOWNJQ3lEVUU4OHFjYUV4U1V3TWpTS2ZHZ2U4YUNBSStRZStEVFFxcG5Hbz0tLStFMXRmYjViQTV3UVhMMEktLURoTlc0R21HWGNEMVg5c09BbGt1VHc9PQ==?cid=1972121800"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1992 --field-trial-handle=1908,i,5920951951954005384,6651277585814174029,262144 /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2100 --field-trial-handle=1352,i,17440810105437182178,13092006359344771328,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://spamchallenge.msftemail.com/XdUlMRDdER0g2RlVSZXdZRUU5Qk5JQ0ZQZ1J4UW9PR0FFRjZ2OGFiMkVNUnlGa2RMRlFIa3lhYUtQTmNPMEhISzhVSFl3b0FaMWVOMGdad1dHZitpR0JzbnhYN3Fuak8reXk5bEZaZ1BBaEFIVjlOaEcxUDNTc1VDaWlkLzk5Rkk5NGEyUzlDOTlOVjFBanNZQ3lyUW1oZzBjM3h0TjNKVTYvY1ltMERQOWNJQ3lEVUU4OHFjYUV4U1V3TWpTS2ZHZ2U4YUNBSStRZStEVFFxcG5Hbz0tLStFMXRmYjViQTV3UVhMMEktLURoTlc0R21HWGNEMVg5c09BbGt1VHc9PQ==?cid=1972121800" Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1992 --field-trial-handle=1908,i,5920951951954005384,6651277585814174029,262144 /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: Window Recorder Window detected: More than 3 window changes detected
Source: municipal-parking-ticket9092495.pdf Initial sample: PDF keyword /EmbeddedFile count = 0
Source: municipal-parking-ticket9092495.pdf Initial sample: PDF keyword obj count = 54
PDF has an OpenAction (likely to launch a dropper script)
Source: municipal-parking-ticket9092495.pdf Initial sample: PDF keyword /OpenAction
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process information queried: ProcessInformation Jump to behavior
windows-stand
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 signatures2 2 Behavior Graph ID: 1417447 Sample: municipal-parking-ticket909... Startdate: 29/03/2024 Architecture: WINDOWS Score: 80 32 Found potential malicious PDF (bad image similarity) 2->32 34 Antivirus detection for URL or domain 2->34 36 Multi AV Scanner detection for submitted file 2->36 38 3 other signatures 2->38 7 chrome.exe 1 2->7         started        10 Acrobat.exe 18 75 2->10         started        process3 dnsIp4 22 192.168.2.4, 138, 443, 49738 unknown unknown 7->22 24 239.255.255.250 unknown Reserved 7->24 12 chrome.exe 7->12         started        15 AcroCEF.exe 105 10->15         started        process5 dnsIp6 26 ipv4.imgur.map.fastly.net 146.75.28.193, 443, 49762, 49770 SCCGOVUS Sweden 12->26 28 www.google.com 142.251.167.105, 443, 49774, 49794 GOOGLEUS United States 12->28 30 8 other IPs or domains 12->30 17 AcroCEF.exe 2 15->17         started        process7 dnsIp8 20 23.45.148.189, 443, 49740 BBIL-APBHARTIAirtelLtdIN United States 17->20
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
44.196.126.127
 secured-login.net United States
14618 AMAZON-AESUS false
104.17.24.14
 cdnjs.cloudflare.com United States
13335 CLOUDFLARENETUS false
99.84.208.62
 static.knowbe4.com United States
16509 AMAZON-02US false
52.216.93.13
 s3.amazonaws.com United States
16509 AMAZON-02US false
54.237.54.171
 unknown United States
14618 AMAZON-AESUS false
142.251.167.105
 www.google.com United States
15169 GOOGLEUS false
23.45.148.189
 unknown United States
9498 BBIL-APBHARTIAirtelLtdIN false
239.255.255.250
 unknown Reserved
unknown unknown false
146.75.28.193
 ipv4.imgur.map.fastly.net Sweden
30051 SCCGOVUS false

Private

IP
192.168.2.4

Contacted Domains

Name IP Active
s3.amazonaws.com 52.216.93.13 true
static.knowbe4.com 99.84.208.62 true
cdnjs.cloudflare.com 104.17.24.14 true
www.google.com 142.251.167.105 true
secured-login.net 44.196.126.127 true
landing.training.knowbe4.com 44.196.126.127 true
ipv4.imgur.map.fastly.net 146.75.28.193 true
i.imgur.com unknown unknown
spamchallenge.msftemail.com unknown unknown

Contacted URLs

Name Malicious Antivirus Detection Reputation
https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/css/bootstrap.min.css false
    		high
    https://secured-login.net/assets/sei-tooltip-1ae0d1e9729436272a0cdfaf2325f9aacea7d6f89787d08056eda54a1910752d.css false
    • 1%, Virustotal, Browse
    • Avira URL Cloud: safe
    		 unknown
    https://secured-login.net/assets/application-b8fb25919f68be551e6730684a8ed34bc7dd2dac142e7cc51ebf7b09c48546d5.js false
    • 3%, Virustotal, Browse
    • Avira URL Cloud: safe
    		 unknown
    https://secured-login.net/assets/sei-modal-298c1edd0166bef9cbaf6b85083b95d5819753f027d6a841658c738f21e84e49.css false
    • 1%, Virustotal, Browse
    • Avira URL Cloud: safe
    		 unknown
    https://secured-login.net/favicon.ico false
    • 1%, Virustotal, Browse
    • Avira URL Cloud: safe
    		 unknown
    https://secured-login.net/assets/modernizr-654222debe8018b12f1993ceddff30dc163a7d5008d79869c399d6d167321f97.js false
    • 0%, Virustotal, Browse
    • Avira URL Cloud: safe
    		 unknown
    https://secured-login.net/pages/0f69d9d6917891c88b56d51c66748acb/XdUlMRDdER0g2RlVSZXdZRUU5Qk5JQ0ZQZ1J4UW9PR0FFRjZ2OGFiMkVNUnlGa2RMRlFIa3lhYUtQTmNPMEhISzhVSFl3b0FaMWVOMGdad1dHZitpR0JzbnhYN3Fuak8reXk5bEZaZ1BBaEFIVjlOaEcxUDNTc1VDaWlkLzk5Rkk5NGEyUzlDOTlOVjFBanNZQ3lyUW1oZzBjM3h0TjNKVTYvY1ltMERQOWNJQ3lEVUU4OHFjYUV4U1V3TWpTS2ZHZ2U4YUNBSStRZStEVFFxcG5Hbz0tLStFMXRmYjViQTV3UVhMMEktLURoTlc0R21HWGNEMVg5c09BbGt1VHc9PQ== false
      		unknown
      https://i.imgur.com/QRF01zv.png false
        		high