Windows Analysis Report
https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg

Overview

General Information

Sample URL:	https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg
Analysis ID:	1417533
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML body contains low number of good links

HTML title does not match URL

Phishing site detected (based on OCR NLP Model)

Stores files to the Windows start menu directory

Classification

Signatures

HTML body contains low number of good links

Source: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg

HTTP Parser: Number of links: 0

HTML title does not match URL

Source: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg

HTTP Parser: Title: 7 17 Credit Union Registration does not match URL

Phishing site detected (based on OCR NLP Model)

Source: Chrome DOM: 0.0

ML Model on OCR Text: Matched 89.3% probability on "CREDIT Secure Message Center UNION Register Account Enter your email address and a password to register and begin sending and receiving secure messages. Email Address: smckenzie@op-f.org Password: Re-enter Password: Password Rules Passwords must contain 8 to 32 characters, and meet the following conditions. Contain both alphabetic and numeric characters Contain both uppercase and lowercase characters Contain at least one special character, such as: Passwords cannot match email address. Cancel Register For Customer Support, send an email message to into@717cu.com. We use cookies, find out why in our cookie disclosure. NCUA LENDER s tasted by Zix on of 7 17 unen zix Secured by "

Source: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg

HTTP Parser: <input type="password" .../> found

Source: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg

HTTP Parser: No favicon

Source: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg

HTTP Parser: No <meta name="author".. found

Source: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.16:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.16:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.16:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.16:49741 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.21.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10

Source: global traffic	HTTP traffic detected: GET /s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_desktopFallthrough.css HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_mobile.css HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/CON-b3f2f0a9/sevenseventeen_stylesheet_HandHeld.css HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/CON-566f38d3/sevenseventeen_stylesheet_mobile.css HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_mobileLandscape.css HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_tablet.css HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_desktop.css HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/CON-3e12d828/sevenseventeen_stylesheet.css HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_print.css HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/stylesheets/skipnav.css HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /i/sevenseventeen/top_20180418_1239.gif HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /i/sevenseventeen/footer_20180418_1303.gif HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://securemail-sscu.net/s/CON-b3f2f0a9/sevenseventeen_stylesheet_HandHeld.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /i/securedbyzix.svg HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/REL-6.3.13-release.3.41521/default_validatorconstants_en.js HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/REL-6.3.13-release.3.41521/default_registerview_validator.js HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/REL-6.3.13-release.3.41521/emailfieldvalue.js HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/REL-6.3.13-release.3.41521/fieldvalue.js HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/REL-6.3.13-release.3.41521/userNotifier.js HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/REL-6.3.13-release.3.41521/attributeDefinitions.js HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /i/sevenseventeen/top_20180418_1239.gif HTTP/1.1Host: securemail-sscu.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /i/sevenseventeen/footer_20180418_1303.gif HTTP/1.1Host: securemail-sscu.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /i/securedbyzix.svg HTTP/1.1Host: securemail-sscu.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/REL-6.3.13-release.3.41521/scripts/jquery/jquery.js HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/REL-6.3.13-release.3.41521/scripts/jqueryui/jquery-ui.js HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=7vLLDg5WPava8OB&MD=MGu6ZWZk HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: securemail-sscu.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=7vLLDg5WPava8OB&MD=MGu6ZWZk HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com

Source: unknown

DNS traffic detected: queries for: securemail-sscu.net

Source: chromecache_70.1.dr	String found in binary or memory: Http://bugs.jqueryui.com/ticket/9446
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/accordion/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/autocomplete/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/blind-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/bounce-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/button/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/category/effects-core/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/checkboxradio/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/clip-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/controlgroup/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/data-selector/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/datepicker/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/dialog/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/disableSelection/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/draggable/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/drop-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/droppable/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/explode-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/fade-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/focusable-selector/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/fold-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/form-reset-mixin/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/highlight-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/jQuery.ui.keyCode/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/jQuery.widget/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/labels/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/menu/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/mouse/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/progressbar/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/puff-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/pulsate-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/resizable/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/scale-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/scrollParent/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/selectable/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/selectmenu/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/shake-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/size-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/slide-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/slider/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/sortable/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/spinner/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/tabbable-selector/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/tabs/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/tooltip/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/transfer-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/uniqueId/
Source: chromecache_70.1.dr	String found in binary or memory: http://bugs.jquery.com/ticket/11778
Source: chromecache_70.1.dr	String found in binary or memory: http://bugs.jqueryui.com/ticket/7552
Source: chromecache_70.1.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/accordion/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/autocomplete/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/button/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/checkboxradio/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/controlgroup/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/datepicker/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/dialog/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/draggable/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/droppable/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/menu/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/position/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/progressbar/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/resizable/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/selectable/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/selectmenu/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/slider/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/sortable/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/spinner/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/tabs/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/tooltip/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/widget/
Source: chromecache_70.1.dr	String found in binary or memory: http://jsfiddle.net/JZSMt/3/
Source: chromecache_76.1.dr	String found in binary or memory: http://photo-bugs.com/wp-content/uploads/2012/03/bananahuge.gif
Source: chromecache_70.1.dr	String found in binary or memory: http://www.robertpenner.com/easing)
Source: chromecache_77.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=378607
Source: chromecache_77.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=449857
Source: chromecache_77.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=470258
Source: chromecache_77.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=589347
Source: chromecache_77.1.dr	String found in binary or memory: https://bugs.jquery.com/ticket/12359
Source: chromecache_77.1.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13378
Source: chromecache_77.1.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13393
Source: chromecache_77.1.dr	String found in binary or memory: https://bugs.jquery.com/ticket/4833
Source: chromecache_70.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=107380
Source: chromecache_77.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_77.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=137337
Source: chromecache_77.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_70.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=47182
Source: chromecache_70.1.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=561664
Source: chromecache_77.1.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_70.1.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=313082
Source: chromecache_70.1.dr	String found in binary or memory: https://code.google.com/p/maashaack/source/browse/packages/graphics/trunk/src/graphics/colors/HUE2RG
Source: chromecache_77.1.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_70.1.dr, chromecache_77.1.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_77.1.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#resolved-values
Source: chromecache_70.1.dr	String found in binary or memory: https://github.com/jquery/jquery-color
Source: chromecache_70.1.dr	String found in binary or memory: https://github.com/jquery/jquery/blob/e539bac79e666bba95bba86d690b4e609dca2286/src/selector/escapeSe
Source: chromecache_70.1.dr	String found in binary or memory: https://github.com/jquery/jquery/issues/4382
Source: chromecache_77.1.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_77.1.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_77.1.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_77.1.dr	String found in binary or memory: https://github.com/whatwg/html/issues/2369
Source: chromecache_77.1.dr	String found in binary or memory: https://html.spec.whatwg.org/#nonce-attributes
Source: chromecache_77.1.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_77.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#category-listed
Source: chromecache_77.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
Source: chromecache_77.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
Source: chromecache_77.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
Source: chromecache_77.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
Source: chromecache_77.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
Source: chromecache_77.1.dr	String found in binary or memory: https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace
Source: chromecache_77.1.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_77.1.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_77.1.dr	String found in binary or memory: https://js.foundation/
Source: chromecache_77.1.dr	String found in binary or memory: https://jsperf.com/getall-vs-sizzle/2
Source: chromecache_77.1.dr	String found in binary or memory: https://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_77.1.dr	String found in binary or memory: https://promisesaplus.com/#point-48
Source: chromecache_77.1.dr	String found in binary or memory: https://promisesaplus.com/#point-54
Source: chromecache_77.1.dr	String found in binary or memory: https://promisesaplus.com/#point-57
Source: chromecache_77.1.dr	String found in binary or memory: https://promisesaplus.com/#point-59
Source: chromecache_77.1.dr	String found in binary or memory: https://promisesaplus.com/#point-61
Source: chromecache_77.1.dr	String found in binary or memory: https://promisesaplus.com/#point-64
Source: chromecache_77.1.dr	String found in binary or memory: https://promisesaplus.com/#point-75
Source: chromecache_77.1.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_77.1.dr	String found in binary or memory: https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_77.1.dr	String found in binary or memory: https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443

Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.16:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.16:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.16:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.16:49741 version: TLS 1.2

Source: classification engine

Classification label: clean2.win@14/53@6/4

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=1940,i,18419103110123412338,14174858769471850138,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=1940,i,18419103110123412338,14174858769471850138,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
63.71.13.102	securemail-sscu.net	United States	13380	ASN-CUSTUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.253.63.147	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.16

Contacted Domains

Name	IP	Active
www.google.com	172.253.63.147	true
securemail-sscu.net	63.71.13.102	true

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_print.css	false	Avira URL Cloud: safe	unknown
https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg	false		unknown
https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/attributeDefinitions.js	false	Avira URL Cloud: safe	unknown
https://securemail-sscu.net/i/sevenseventeen/top_20180418_1239.gif	false	Avira URL Cloud: safe	unknown
https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_mobileLandscape.css	false	Avira URL Cloud: safe	unknown
https://securemail-sscu.net/favicon.ico	false	Avira URL Cloud: safe	unknown
https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/userNotifier.js	false	Avira URL Cloud: safe	unknown
https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/default_registerview_validator.js	false	Avira URL Cloud: safe	unknown
https://securemail-sscu.net/s/CON-3e12d828/sevenseventeen_stylesheet.css	false	Avira URL Cloud: safe	unknown
https://securemail-sscu.net/s/stylesheets/skipnav.css	false	Avira URL Cloud: safe	unknown
https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/scripts/jquery/jquery.js	false	Avira URL Cloud: safe	unknown
https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/default_validatorconstants_en.js	false	Avira URL Cloud: safe	unknown
https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/emailfieldvalue.js	false	Avira URL Cloud: safe	unknown
https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_desktopFallthrough.css	false	Avira URL Cloud: safe	unknown
https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/fieldvalue.js	false	Avira URL Cloud: safe	unknown
https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_tablet.css	false	Avira URL Cloud: safe	unknown
https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/scripts/jqueryui/jquery-ui.js	false	Avira URL Cloud: safe	unknown
https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_mobile.css	false	Avira URL Cloud: safe	unknown
https://securemail-sscu.net/s/CON-566f38d3/sevenseventeen_stylesheet_mobile.css	false	Avira URL Cloud: safe	unknown

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Mar 29 13:15:56 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	A905B6FC38C374F588327534A4B11915	2726B754F88EB72FB1C169C1748E5522CD350DF1	3368E4649F49900AC20D0DC7456F17D878AFCD12051366E1741A085CB0D31765
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Mar 29 13:15:56 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	EDECD59F174383ECC7567447A27BC4C2	164653BBAAF22620128D0104D9E4259C848E828F	4A18AD121B351E66821FDD4F028D2B39B2EC7C52EE1F953A68B058736C55E6B1
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	6AB088F8C72B59B3DFD05071319C1448	D460A3440A65B65545D47A596E451F6041E7E430	93BDDFCCC21F3759FB67DC19B42A892ACB5549B584D360FD2C0AC0076FED8826
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Mar 29 13:15:56 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	D93C29AB4EB8905A17B93FBC4A7D051E	9F0084CFD1F9A11C9E53C4072E6768D948D67D87	3E4B0F8DEF5C5CD3A40B35B6F087E259677EBF90E23556F634249BF01DF5A085
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Mar 29 13:15:56 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	55BD93DA37CA2A526264BEDBFF5D241F	5A80C8A2BDFF1184AA73C4B65A2D590A8DAF4E2D	3CC13CA6E07AD2EFA50425BBFABFA456EBDF2B568F28E9E608F0B1431A80CC9D
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Mar 29 13:15:56 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	50EE848886D4EF82A374F44B765628AC	F008091B897D935F233EA2164EC20D6C3FEFC69B	2424F98F4A67D055F27F39E7AA5CA56610380BCA7D2205E83923E29B32997C36
Chrome Cache Entry: 67	ASCII text, with very long lines (736)	63AEC865D81748A53F7C598A6303C0B1	5C900F1E3A55DDE914B0C2D918C1311D117B87EF	88493528EA867C5990CF874EA57D2CA56FA4E08D91F8CBEE3CA5F9F9D3800C41
Chrome Cache Entry: 68	ASCII text, with no line terminators	B6BB6A31A466AD34A4696CF692B0D149	5B2294276DE4146EFC35013F4B2B7E9BED34ABDF	8D3FA28651BE2AC741A2212692C764AFD157460A6DDD91EA1D0231A5FC2969A6
Chrome Cache Entry: 69	ASCII text	37F0A98FA1E40956308C3FCAEE929744	39467A9D2ED951F9461F51032F354F3F03974776	2A07A12EC6607580E1C9BD6BFE4EEC68A495563A224F82EB56CCE72BFC8348A4
Chrome Cache Entry: 70	ASCII text, with very long lines (1004)	CBC65FF85E08B21D7E0C0394FBF3A371	0EBABCD2C6DA47BDE11FADF331A02C98845B0A8D	C4B0FB9E123AD9F72C1192B6FEFF0BB0171BE251BB76050B92E5E85C1FE3F757
Chrome Cache Entry: 71	ASCII text	79DE66ECFAE36933B337F9D81CFD0AAD	CC14E85CDDAE0DDEBA1B14B50882975A02837765	A9FEFF9CE2D0A12D3E823E83BC5C1D16EBC42C22DBDFA2771ABA4346404E9A78
Chrome Cache Entry: 72	ASCII text, with very long lines (545)	402199F122593D31ED27C0EEFE093EF2	968DEEA426F88EB65F6D3D0A2BA8C24F5FFBF762	BC8B1DED0DA0E857EC0848ACFCF605A8D193A0F8D25C62E7100964D69E79D7E8
Chrome Cache Entry: 73	SVG Scalable Vector Graphics image	C5E7A96D9F08831036AF7261F519F8EF	13F265BBBEAEAED4E6D43995A7553893F514FB0A	2EC8BFF74CFFA23AFAD4C372398FF59B7BDEA6C07DCE9B511112D9A4B743A560
Chrome Cache Entry: 74	GIF image data, version 89a, 1200 x 130	03253B7B8F8F4D565E64FF36097A1B49	D04E01B6A2537CB6F7CA62FEC41C4488DD47B3AC	CA53E78875450065BBCABCFA2BFA5E85AD7566C6E811CAE9F3D2E77E733B559E
Chrome Cache Entry: 75	C source, ASCII text	F7C582BEF0D90EC28C1500B05F62EC63	79B2276C5C9D1131347EBC7183AC65EC6E2AD920	A57E6E8ACE4AF732A75BE722FF22CAC47EC4253DE7220FCFF4881604FCCB2EAA
Chrome Cache Entry: 76	ASCII text	32E9D431BD7BA52AACDAA3988B7A47DC	538C7ADBFA8E1588AC59931B3387462F116304D8	7D110159015B3BF23A9F8D78E5D9DFC0AB06769988599213DC0417E6FE2A4CDC
Chrome Cache Entry: 77	ASCII text	2849239B95F5A9A2AEA3F6ED9420BB88	AF32F706407AB08F800C5E697CCE92466E735847	1FE2BB5390A75E5D61E72C107CAB528FC3C29A837D69AAB7D200E1DBB5DCD239
Chrome Cache Entry: 78	ASCII text	56A5BB37719239FD5EA38C789FBC0E39	079B63878CBDA4DF4B9534257E36F3734D3B13BD	5F180D55F25EAEBF710C3ADF71EEC2D704C42EAEA452AA3120126D873F281509
Chrome Cache Entry: 79	ASCII text, with very long lines (342)	D3C4BE0F7308A19FB17DB9376D7DEC7A	EE16C49C9B804EB7EE2988B38F5611AB85026678	81103F073BE555414136AEA440D8F6272A80F08CE513607CB76040453712E25C
Chrome Cache Entry: 80	ASCII text	1EE901EA2968D580CB3DBFC0D576A60E	D34381C10C8130EBAB70E589825FEEC7341DEE44	E967764F603B517699D3C4AB4C8722211E0ACA5A5C3C8B55D666B2CA7FA44E8B
Chrome Cache Entry: 81	GIF image data, version 89a, 1200 x 130	03253B7B8F8F4D565E64FF36097A1B49	D04E01B6A2537CB6F7CA62FEC41C4488DD47B3AC	CA53E78875450065BBCABCFA2BFA5E85AD7566C6E811CAE9F3D2E77E733B559E
Chrome Cache Entry: 82	GIF image data, version 89a, 185 x 60	A0F5ED9A23FCD41B9E9FD2C329CA8B41	77A7876E5A7344304FFE6A5D49A73559A914A239	584AD90C6010AB170956E3F8CF658938D5F0E89673CC1D905262CF20FB8D635E
Chrome Cache Entry: 83	ASCII text	8DFC6D0E61703B900E5EBB4D5EC9E9FB	015B0A1EDCE4B4D07F5FFA406797E368B2E8612B	EBED0465108C352AD4706496AE008FC85B1DDF2C06DD269AD42E53A37EEFB0C3
Chrome Cache Entry: 84	ASCII text	BF9A0EAE8529030C24FB3E19C86E4FD0	788BB1FD37EE9C29D2FCE24F18B4697D25B5CF98	50982BA9961B6C3F2BE89BC0C20948DDAD27AF428A44AA21B123AB5007BE8309
Chrome Cache Entry: 85	ASCII text	738806F6615E2BD7730F0E97EB375C98	F91D847E78830D8278B9F1CED3907AC13501EF98	A63577E7A4896B28D2FF18374539681D675B6D6E815846315E51EAD479FE6B89
Chrome Cache Entry: 86	C source, ASCII text	78E5C476E160DC0D2F1E219A1AC54D12	64AA415D7522DA1BCF3581239B61EC2591E3097E	BF714B969A60F049145EB5C2879309AE27CB4D4D6C557D1D71F1233E12F1755D
Chrome Cache Entry: 87	SVG Scalable Vector Graphics image	C5E7A96D9F08831036AF7261F519F8EF	13F265BBBEAEAED4E6D43995A7553893F514FB0A	2EC8BFF74CFFA23AFAD4C372398FF59B7BDEA6C07DCE9B511112D9A4B743A560
Chrome Cache Entry: 88	GIF image data, version 89a, 185 x 60	A0F5ED9A23FCD41B9E9FD2C329CA8B41	77A7876E5A7344304FFE6A5D49A73559A914A239	584AD90C6010AB170956E3F8CF658938D5F0E89673CC1D905262CF20FB8D635E
Chrome Cache Entry: 89	ASCII text	372E5E534B2F2DD81AD3647ACA4782D4	CFAFD72458521B6896D16B17F47C31B5B20009D2	FE8E6E29FD6FF507EB4320931B53996D1D20EB33CB2A3BE0DBA694AF8796EE06
Chrome Cache Entry: 90	ASCII text	496D4CD5A824E776DED961247841A2D6	57CAF10F2500D036438421A6196D359686B28B2C	1CD23F829A9FDA20D675E4B312DE0F6C6D1E4E207EC60084C1DA519D6CF3CA62
Chrome Cache Entry: 91	ASCII text	1BB76B6E62A47BD8E54BAAF5DA382B78	EEEF314B661E68472400BBD9D477E86D77FCAAE5	B0C0E3C8FCF8160433ADE6287C7022FE3E8AE2F9D473762238977712791629D2

HTML body contains low number of good links

Source: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg

HTTP Parser: Number of links: 0

HTML title does not match URL

Source: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg

HTTP Parser: Title: 7 17 Credit Union Registration does not match URL

Phishing site detected (based on OCR NLP Model)

Source: Chrome DOM: 0.0

Source: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg

HTTP Parser: <input type="password" .../> found

Source: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg

HTTP Parser: No favicon

Source: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg

HTTP Parser: No <meta name="author".. found

Source: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.16:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.16:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.16:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.16:49741 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.21.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10

Source: global traffic	HTTP traffic detected: GET /s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_desktopFallthrough.css HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_mobile.css HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/CON-b3f2f0a9/sevenseventeen_stylesheet_HandHeld.css HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/CON-566f38d3/sevenseventeen_stylesheet_mobile.css HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_mobileLandscape.css HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_tablet.css HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_desktop.css HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/CON-3e12d828/sevenseventeen_stylesheet.css HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_print.css HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/stylesheets/skipnav.css HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /i/sevenseventeen/top_20180418_1239.gif HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /i/sevenseventeen/footer_20180418_1303.gif HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://securemail-sscu.net/s/CON-b3f2f0a9/sevenseventeen_stylesheet_HandHeld.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /i/securedbyzix.svg HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/REL-6.3.13-release.3.41521/default_validatorconstants_en.js HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/REL-6.3.13-release.3.41521/default_registerview_validator.js HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/REL-6.3.13-release.3.41521/emailfieldvalue.js HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/REL-6.3.13-release.3.41521/fieldvalue.js HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/REL-6.3.13-release.3.41521/userNotifier.js HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/REL-6.3.13-release.3.41521/attributeDefinitions.js HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /i/sevenseventeen/top_20180418_1239.gif HTTP/1.1Host: securemail-sscu.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /i/sevenseventeen/footer_20180418_1303.gif HTTP/1.1Host: securemail-sscu.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /i/securedbyzix.svg HTTP/1.1Host: securemail-sscu.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/REL-6.3.13-release.3.41521/scripts/jquery/jquery.js HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/REL-6.3.13-release.3.41521/scripts/jqueryui/jquery-ui.js HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=7vLLDg5WPava8OB&MD=MGu6ZWZk HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: securemail-sscu.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=7vLLDg5WPava8OB&MD=MGu6ZWZk HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com

Source: unknown

DNS traffic detected: queries for: securemail-sscu.net

Source: chromecache_70.1.dr	String found in binary or memory: Http://bugs.jqueryui.com/ticket/9446
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/accordion/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/autocomplete/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/blind-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/bounce-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/button/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/category/effects-core/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/checkboxradio/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/clip-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/controlgroup/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/data-selector/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/datepicker/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/dialog/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/disableSelection/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/draggable/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/drop-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/droppable/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/explode-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/fade-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/focusable-selector/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/fold-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/form-reset-mixin/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/highlight-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/jQuery.ui.keyCode/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/jQuery.widget/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/labels/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/menu/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/mouse/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/progressbar/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/puff-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/pulsate-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/resizable/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/scale-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/scrollParent/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/selectable/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/selectmenu/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/shake-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/size-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/slide-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/slider/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/sortable/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/spinner/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/tabbable-selector/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/tabs/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/tooltip/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/transfer-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/uniqueId/
Source: chromecache_70.1.dr	String found in binary or memory: http://bugs.jquery.com/ticket/11778
Source: chromecache_70.1.dr	String found in binary or memory: http://bugs.jqueryui.com/ticket/7552
Source: chromecache_70.1.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/accordion/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/autocomplete/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/button/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/checkboxradio/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/controlgroup/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/datepicker/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/dialog/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/draggable/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/droppable/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/menu/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/position/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/progressbar/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/resizable/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/selectable/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/selectmenu/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/slider/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/sortable/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/spinner/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/tabs/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/tooltip/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/widget/
Source: chromecache_70.1.dr	String found in binary or memory: http://jsfiddle.net/JZSMt/3/
Source: chromecache_76.1.dr	String found in binary or memory: http://photo-bugs.com/wp-content/uploads/2012/03/bananahuge.gif
Source: chromecache_70.1.dr	String found in binary or memory: http://www.robertpenner.com/easing)
Source: chromecache_77.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=378607
Source: chromecache_77.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=449857
Source: chromecache_77.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=470258
Source: chromecache_77.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=589347
Source: chromecache_77.1.dr	String found in binary or memory: https://bugs.jquery.com/ticket/12359
Source: chromecache_77.1.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13378
Source: chromecache_77.1.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13393
Source: chromecache_77.1.dr	String found in binary or memory: https://bugs.jquery.com/ticket/4833
Source: chromecache_70.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=107380
Source: chromecache_77.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_77.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=137337
Source: chromecache_77.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_70.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=47182
Source: chromecache_70.1.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=561664
Source: chromecache_77.1.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_70.1.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=313082
Source: chromecache_70.1.dr	String found in binary or memory: https://code.google.com/p/maashaack/source/browse/packages/graphics/trunk/src/graphics/colors/HUE2RG
Source: chromecache_77.1.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_70.1.dr, chromecache_77.1.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_77.1.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#resolved-values
Source: chromecache_70.1.dr	String found in binary or memory: https://github.com/jquery/jquery-color
Source: chromecache_70.1.dr	String found in binary or memory: https://github.com/jquery/jquery/blob/e539bac79e666bba95bba86d690b4e609dca2286/src/selector/escapeSe
Source: chromecache_70.1.dr	String found in binary or memory: https://github.com/jquery/jquery/issues/4382
Source: chromecache_77.1.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_77.1.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_77.1.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_77.1.dr	String found in binary or memory: https://github.com/whatwg/html/issues/2369
Source: chromecache_77.1.dr	String found in binary or memory: https://html.spec.whatwg.org/#nonce-attributes
Source: chromecache_77.1.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_77.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#category-listed
Source: chromecache_77.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
Source: chromecache_77.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
Source: chromecache_77.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
Source: chromecache_77.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
Source: chromecache_77.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
Source: chromecache_77.1.dr	String found in binary or memory: https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace
Source: chromecache_77.1.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_77.1.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_77.1.dr	String found in binary or memory: https://js.foundation/
Source: chromecache_77.1.dr	String found in binary or memory: https://jsperf.com/getall-vs-sizzle/2
Source: chromecache_77.1.dr	String found in binary or memory: https://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_77.1.dr	String found in binary or memory: https://promisesaplus.com/#point-48
Source: chromecache_77.1.dr	String found in binary or memory: https://promisesaplus.com/#point-54
Source: chromecache_77.1.dr	String found in binary or memory: https://promisesaplus.com/#point-57
Source: chromecache_77.1.dr	String found in binary or memory: https://promisesaplus.com/#point-59
Source: chromecache_77.1.dr	String found in binary or memory: https://promisesaplus.com/#point-61
Source: chromecache_77.1.dr	String found in binary or memory: https://promisesaplus.com/#point-64
Source: chromecache_77.1.dr	String found in binary or memory: https://promisesaplus.com/#point-75
Source: chromecache_77.1.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_77.1.dr	String found in binary or memory: https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_77.1.dr	String found in binary or memory: https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443

Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.16:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.16:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.16:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.16:49741 version: TLS 1.2

Source: classification engine

Classification label: clean2.win@14/53@6/4

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=1940,i,18419103110123412338,14174858769471850138,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=1940,i,18419103110123412338,14174858769471850138,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

ID:	1417533
Product:	CloudBasic
Start time:	15:15:26
Start date:	29.03.2024
Cookbook:	defaultwindowsinteractivecookbook.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Windows Analysis Report
https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg