Windows Analysis Report
https://btobconsultores.com:4453/DECOFINMEX/#/access/signin

Overview

General Information

Sample URL:	https://btobconsultores.com:4453/DECOFINMEX/#/access/signin
Analysis ID:	1427878

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Stores files to the Windows start menu directory

Classification

Signatures

HTML body contains low number of good links

Source: https://btobconsultores.com:4453/DECOFINMEX/#/access/signin

HTTP Parser: Number of links: 0

HTML body contains password input but no form action

Source: https://btobconsultores.com:4453/DECOFINMEX/#/access/signin

HTTP Parser: <input type="password" .../> found but no <form action="...

HTML title does not match URL

Source: https://btobconsultores.com:4453/DECOFINMEX/#/access/signin

HTTP Parser: Title: Proveedores does not match URL

Source: https://btobconsultores.com:4453/DECOFINMEX/#/access/signin

HTTP Parser: <input type="password" .../> found

Source: https://btobconsultores.com:4453/DECOFINMEX/#/access/signin	HTTP Parser: No favicon
Source: https://btobconsultores.com:4453/DECOFINMEX/#/access/signin	HTTP Parser: No favicon
Source: https://www.google.com/sorry/index?continue=https://www.google.com/&q=EgRRtTk0GM-hg7EGIjAm1Dp16S9na2oq3k65YpqH29foSumcYiBbEi1b6EGaU0WQlqcf1b1HnHG_HpWtzcMyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	HTTP Parser: No favicon
Source: https://www.google.com/sorry/index?continue=https://www.google.com/&q=EgRRtTk0GM-hg7EGIjAm1Dp16S9na2oq3k65YpqH29foSumcYiBbEi1b6EGaU0WQlqcf1b1HnHG_HpWtzcMyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=normal&s=kWZmKJ9wnpCGFcdvWsN-7UNKYiLeKZ-SYzl12BfXbaGjJzt-b_rJRznzt3vUkpSPRylmbJ-YXLgTXZQ8A4ab7twtjdjEFN27krLPKMgbWYc5SkM8zF6ScTNRgRyKdLkiAmAsEB53dmjNML7_lrrQwZ29JiUKYPJPYRRx4L53vbYfX3jHY0n0WvowPoGUY-EPyszc8intAWoAlWYINBY8Dcq-CbZWUChyfa6w77CFsnWWklTKXRZW0rJhtYrmoIj48HiNylgm9cey8upHwWSAWSGTHFOlOC4&cb=ycvkig5fs5pb	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	HTTP Parser: No favicon

Source: https://btobconsultores.com:4453/DECOFINMEX/#/access/signin	HTTP Parser: No <meta name="author".. found
Source: https://btobconsultores.com:4453/DECOFINMEX/#/access/signin	HTTP Parser: No <meta name="author".. found

Source: https://btobconsultores.com:4453/DECOFINMEX/#/access/signin	HTTP Parser: No <meta name="copyright".. found
Source: https://btobconsultores.com:4453/DECOFINMEX/#/access/signin	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.17:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.216.73.151:443 -> 192.168.2.17:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.216.73.151:443 -> 192.168.2.17:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.17:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.28.20:443 -> 192.168.2.17:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.21.200:443 -> 192.168.2.17:49730 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 1MB later: 30MB

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.73.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.73.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.73.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.73.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.73.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.73.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.73.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.73.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.73.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.73.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.73.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.73.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.73.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.73.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.73.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.73.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.73.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.73.151

Source: unknown

DNS traffic detected: queries for: btobconsultores.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.17:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.216.73.151:443 -> 192.168.2.17:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.216.73.151:443 -> 192.168.2.17:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.17:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.28.20:443 -> 192.168.2.17:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.21.200:443 -> 192.168.2.17:49730 version: TLS 1.2

Source: classification engine

Classification label: clean2.win@18/59@26/140

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://btobconsultores.com:4453/DECOFINMEX/#/access/signin
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=2024,i,8253099188864072191,4541607165751654986,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=2024,i,8253099188864072191,4541607165751654986,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Source: Window Recorder

Window detected: More than 3 window changes detected

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Screenshots

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
193.252.122.137	unknown	France	24600	WANADOOPORTAILS-ASWanadooPortailsDirectiontechniqueFR	false
31.13.65.36	unknown	Ireland	32934	FACEBOOKUS	false
173.194.219.97	unknown	United States	15169	GOOGLEUS	false
193.252.133.109	poole-soi-https.prod.cachehttp.gslb.fti.net	France	8891	FTBGPDMFR	false
173.194.219.94	unknown	United States	15169	GOOGLEUS	false
3.163.115.43	sdk.privacy-center.org	United States	16509	AMAZON-02US	false
74.125.136.101	unknown	United States	15169	GOOGLEUS	false
74.125.138.103	www.google.com	United States	15169	GOOGLEUS	false
64.233.177.94	unknown	United States	15169	GOOGLEUS	false
109.61.94.86	1630983047.rsc.cdn77.org	Hungary	197248	DRAVANET-ASHU	false
1.1.1.1	unknown	Australia	13335	CLOUDFLARENETUS	false
142.250.105.94	unknown	United States	15169	GOOGLEUS	false
142.250.105.95	unknown	United States	15169	GOOGLEUS	false
31.13.66.35	star-mini.c10r.facebook.com	Ireland	32934	FACEBOOKUS	false
172.217.215.138	unknown	United States	15169	GOOGLEUS	false
173.194.219.104	unknown	United States	15169	GOOGLEUS	false
90.84.180.167	www.orange.com	France	2280	OCBHONEYOCBpubliccloudnetworkEU	false
189.203.180.53	btobconsultores.com	Mexico	22884	TOTALPLAYTELECOMUNICACIONESSADECVMX	false
31.13.65.7	scontent.xx.fbcdn.net	Ireland	32934	FACEBOOKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
64.233.185.94	unknown	United States	15169	GOOGLEUS	false
108.177.122.94	unknown	United States	15169	GOOGLEUS	false
142.250.9.102	unknown	United States	15169	GOOGLEUS	false
108.177.122.95	unknown	United States	15169	GOOGLEUS	false
172.217.215.84	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.17
192.168.2.16
192.168.2.13
192.168.2.15

Contacted Domains

Name	IP	Active
sdk.privacy-center.org	3.163.115.43	true
star-mini.c10r.facebook.com	31.13.66.35	true
scontent.xx.fbcdn.net	31.13.65.7	true
www.google.com	74.125.138.103	true
btobconsultores.com	189.203.180.53	true
poole-soi-https.prod.cachehttp.gslb.fti.net	193.252.133.109	true
1630983047.rsc.cdn77.org	109.61.94.86	true
www.orange.com	90.84.180.167	true
www.facebook.com	unknown	unknown
cdn-eu.readspeaker.com	unknown	unknown
connect.facebook.net	unknown	unknown
c.woopic.com	unknown	unknown
_4453._https.btobconsultores.com	unknown	unknown

Contacted URLs

Name	Malicious	Reputation
https://www.google.com/sorry/index?continue=https://www.google.com/&q=EgRRtTk0GM-hg7EGIjAm1Dp16S9na2oq3k65YpqH29foSumcYiBbEi1b6EGaU0WQlqcf1b1HnHG_HpWtzcMyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	false	high
https://www.google.com/recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	false	high
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=normal&s=kWZmKJ9wnpCGFcdvWsN-7UNKYiLeKZ-SYzl12BfXbaGjJzt-b_rJRznzt3vUkpSPRylmbJ-YXLgTXZQ8A4ab7twtjdjEFN27krLPKMgbWYc5SkM8zF6ScTNRgRyKdLkiAmAsEB53dmjNML7_lrrQwZ29JiUKYPJPYRRx4L53vbYfX3jHY0n0WvowPoGUY-EPyszc8intAWoAlWYINBY8Dcq-CbZWUChyfa6w77CFsnWWklTKXRZW0rJhtYrmoIj48HiNylgm9cey8upHwWSAWSGTHFOlOC4&cb=ycvkig5fs5pb	false	high
about:blank	false	low
https://www.orange.com/en	false	high
https://btobconsultores.com:4453/DECOFINMEX/#/access/signin	false	unknown

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 06:49:16 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	0E8D233019146E7BF8D90B64344DF410	3DA7DB8846C44E4FD01FFFBED73238876742F5F7	10533E2EED9F4E876291DA7257E8994159301809951BF1F629FA82B5DFE18739
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 06:49:16 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	6E5E5E2158218B48A209638609DF1ED4	3D1CDD3DFE61AFE9DD84409A14D0F8C42796AE15	42CBF63725E772AE84C4BBE8ABB6606E7B9A1F74D73CFF58D784D182B92A5497
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:54:41 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	C7805F351561995CA8782D5DAC321C74	145E47E768D224576C3CB0C8869D094DC95EF7D8	D32E3E0F944DF621668BA32EC3F8DF447AF458BC4E262C570953D5DFA5BC23FE
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 06:49:16 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	227BCC6C12E87C37F3D5F8D4CFAF4E80	894CBE2D0A1DA88C7CEC6E4BD30B4710F78805B8	5D60282C3E870F41D9F97BA5445CF0AC26EFE2E5DC4DCA505AD2C779F4816B9B
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 06:49:16 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	6F04C7AF8355C29ABC4806580B33558A	2E9396D2DDEE0F3E6FE8BD21F30DEEB84BFB01B3	DD74D76B61AF662F3DCF47AA7BD5B10FACEC89DD1C3B6AC9E02DAA368E96D007
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 06:49:16 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	53DE85C795ACFF708A930EC277CA86A0	01336AD87B11EAA4261DD44898486BC72CF097A1	787ED710B25D0C9D4DD8672EBD5035175F09F48309D7CA09B79F9FFC5EE7BC68
Chrome Cache Entry: 122	HTML document, Unicode text, UTF-8 text, with very long lines (2749), with CRLF, LF line terminators	4D05097E9D80F3147D3B011BDA62ABAF	10A6F0307582172AF9EFBDD01444B41B0C6BCCFD	CB36626AC3083291655FCF324BC47ACFD5071D8CC6B95E87082BB0D52F980845
Chrome Cache Entry: 123	ASCII text, with very long lines (56412), with no line terminators	2C00B9F417B688224937053CD0C284A5	17B4C18EBC129055DD25F214C3F11E03E9DF2D82	1E754B107428162C65A26D399B66DB3DAAEA09616BF8620D9DE4BC689CE48EED
Chrome Cache Entry: 124	ASCII text, with no line terminators	AFB69DF47958EB78B4E941270772BD6A	D9FE9A625E906FF25C1F165E7872B1D9C731E78E	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
Chrome Cache Entry: 125	ASCII text, with no line terminators	C193745DEB63FE67F3AA6B578C40DD99	8A3ECC2696074E71D3B011C99B98CB25229E1A31	D41E076366E4207D57A5FD1725C2024F751C43AE4A3A8E93CC46DFB8462A3E5B
Chrome Cache Entry: 126	ASCII text, with very long lines (64347)	ED4FA4EB31641234901881C752E61024	DBD32C0D8D3E063329D7A27E24499E63804A94FB	85F407912384186334577F65BF6BB88045BD96F5222D7C696CC71303D65C826A
Chrome Cache Entry: 127	ASCII text, with very long lines (65536), with no line terminators	A9C5AB43A85A9BF36120D1DE81BB463A	8D1C52FCC5094348655AA2F5A1732B2B23012889	AB46C1CD923CD8438CF84B391EC0F4F0968248B0926ED472798AA57BD128F788
Chrome Cache Entry: 128	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 64x64, components 3	AC99C98417917C5A3FD0D3FB914CB40A	75310C00888E475C7B0DC4F7972E052A9994436E	6EE7180452C25CCB4F7C226CB7444B29F7CBD9D78808EA08683257BF294532BD
Chrome Cache Entry: 129	Unicode text, UTF-8 text, with very long lines (65419)	8102D03E578E797B25DB9B4695395A6C	65BD1070A30A2367A6CC0C77FC374FCCCEA2DD7C	860D71A05AD08EEB5B40B50B80AAE8CEB25F612C0B7D535A2326E1180D5F57E8
Chrome Cache Entry: 130	RIFF (little-endian) data, Web/P image	C54B2F5C20A51324FA9F4AA91991C983	BCAF0EB2EE24A992B06320DAEFF6EA4D521B1864	9CA7E752816AEFEE44B0D1316464B15454532BED550DC392D178F825D91EDBBC
Chrome Cache Entry: 131	ASCII text, with very long lines (763)	9D004359F7AAA73ED061A33C45C65AB6	05DE35ECA7BD1894D7EF112517A08095554ECE18	43120883765E745553A31511D9EB9385E35559AAF4EB54177B6FF61083184244
Chrome Cache Entry: 134	ASCII text, with very long lines (17688)	193FAF4CCBFF651AFBDAB44C730688E6	D0F7A7137497933524C9C1ED7CB2347BF2C0419B	22C1D495AEEDE1C2B990E01BE9CC1C0623D0E479D48CC4D9BAAE7050925DD943
Chrome Cache Entry: 135	ASCII text, with very long lines (3328)	38FB26DA58FD17484B0E33D2EC8492C8	E018DC251FA894E0C57CACE02D7A94A4A1EAA056	CAF6BF301A2C09A0CBCF1A69FBAB4E6E6C3D4A1B707C1AC8534FD2E0D8A7353C
Chrome Cache Entry: 136	PNG image data, 60 x 60, 8-bit colormap, non-interlaced	99B5D1408DE370B24CD9D0EA0DC738C7	5FA3ED71758F687B98BBE4D399EFEE7B6F82977C	620871F25930F79FDBF7C23250A612E39FF1F17A7205203D3222222259DA6D20
Chrome Cache Entry: 137	ASCII text, with very long lines (65447)	90BBAD227118D36F15E01C9513A7AA93	12BB20CD07AC934109CD89E2FFC1DBA61AA28106	C0041F01B24697C6C788BB0B6304028CFCA2F1869E3569EDFB71A36AEA69BA77
Chrome Cache Entry: 138	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 64x64, components 3	7BBAB5335E5899AAE5A94069AD44CCA4	275954BB5B66AD7899E8562299C57254E7A0BDBD	F327DFAD90E075474F78EED7C7264ADAFB9F0FA7E8FD688B0523F8FF041054E3
Chrome Cache Entry: 139	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 64x64, components 3	5F6149B493F607E3AAEC1A0B50EF238B	FC912FFAA8AD7D322B5C34BBEBFCDFCDEEAA5902	AB3E3C8DFC490E49872782BFA678C3B761E722EDF7A95A0B4FA062369CA3D26D
Chrome Cache Entry: 140	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2100x500, components 3	8437750180B6BAC0DA8E37BD46911BF9	9EAED4BCC070764D14EFF24B4BC1F15DA5E63EFE	A443081F79DC2A2B0BD91CAF526BF09CB29C020834E01FD9A2CAA5B340089C72
Chrome Cache Entry: 141	Unicode text, UTF-8 text, with very long lines (33527), with no line terminators	7BF90FAA7616984FAFBAAEBD7842A93C	9133BAE751841AC6EDD441EF9F685D9589C2A231	7CDB56181A6D697826596C9FEF4F40B847F8E26F2E4D8AE4498B17C8FFBE6732
Chrome Cache Entry: 145	Unicode text, UTF-8 text	DA65E67DB4FF83BF7BF7C732AB74BC32	C8E75DBF34578B0427105E19901191F236289064	EEBB53DD8EF609C18C115DE732B78C3B0EF742CD93E0858E365C29171368D892
Chrome Cache Entry: 146	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel	F3418A443E7D841097C714D69EC4BCB8	49263695F6B0CDD72F45CF1B775E660FDC36C606	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
Chrome Cache Entry: 147	Web Open Font Format (Version 2), TrueType, length 37996, version 1.0	769482BCACDC615CC3FF80F584550771	CC72BB1C657B402F81AC13745478CD1CC98D2C51	DB8ADBB2540762202EDC492EC31B16E6849FC6D8B9F1656FD4B09D813E43F038
Chrome Cache Entry: 149	Unicode text, UTF-8 text, with very long lines (10068)	F9F3323F8ED9BC6D3D8BBA32043A57B5	6DE213853F8FF2BFCA46E27CA509B0E681FDC766	C9EC49649CFA0130334657E877A680824995DF33C097D3EA8BF426D3B692045B
Chrome Cache Entry: 151	ASCII text, with very long lines (1222), with no line terminators	E9AD011280352C75C6F9CF212C42AACD	05A41AC3A9E296E1D9E6251E6908EABFE9697D04	B5E1FFD95251B13685BD867DFB1759CEB8DE9E5FB874E052C856022B29DDA862
Chrome Cache Entry: 153	ASCII text, with no line terminators	9C777777AFF2970730DDEADE613570FA	C80874F0FE22315DD7BA7D583329D3AD6082C502	E6332CDFAE884BE78FC2EC38394D6D9EBDE687EF85017C696625BDDDFBAB8F98
Chrome Cache Entry: 154	Unicode text, UTF-8 text, with very long lines (65533), with no line terminators	07955AA606C90E6C8228DD13E189408D	69BA017CAC440919D9C2EC266C9746666CA2222B	DCF9FA94AAA92C19476A31C7D995A7DEA08A4CF8A431274391A186D73AA32E0E
Chrome Cache Entry: 155	PNG image data, 250 x 250, 8-bit colormap, non-interlaced	BA58C4C13A8CCE3745D4891ECE04159E	F06787352D2F6C0A8AE701FF27A066D4BA646A6C	B36E8CA10880FFC8A3903CD991589FBBE8AA75CBFF6315F475BE1ED0E9BDA472
Chrome Cache Entry: 156	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced	EF9941290C50CD3866E2BA6B793F010D	4736508C795667DCEA21F8D864233031223B7832	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
Chrome Cache Entry: 157	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 64x64, components 3	03A0AF686BAD429EEC2E9270AB3F76C8	9E3BF65C8B0E5652BF7ED7CEEC13438491F63B18	80A3E2E44C82654CB978B894866B485DB6BEC9BBD34654461F6A0600394E31DE
Chrome Cache Entry: 158	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 64x18, components 3	6FFA13228B3972D3D2E93ADA838842AF	AB6750A9398FAC9213381C0A2227EDFF37C30E31	A2FE583EF53567DCCFC2B25BB0DB9F2944D70D101A2CF9C650D7122C665389FD
Chrome Cache Entry: 159	PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced	94D94014B522C5B485E9D379E9606A2E	3C6E9E507D6DAD84EF23D6CCA56B9BE3BF26C7E0	440B7323BEFD0AD65605AF950C80CD123074D3E99B58216C9026E1A037F8564B
Chrome Cache Entry: 160	ASCII text, with very long lines (597)	8326C23D6B3EED35BC3E62F3294587FD	EDDA17E74E53E85073E5EAC9CB6BE2163DBFA23C	57F03D3BA66117EDC152646341120DD3A1D7D71B9A98A3723AF5A8AE61BCB3AB
Chrome Cache Entry: 161	JSON data	42529F54C3622C071C045EBA9115757E	03535F6F81ABA2FA3268DB8FBAA703EC7C837E28	6BE9271FDC009077932F048DCFB3C195543D8AA9CDF36ABA0E669E66E01A8A40
Chrome Cache Entry: 162	ASCII text, with no line terminators	B1EC52E3831AD52A2475FEE4F1245522	8A5057A20FEF5DBC26CAC70A2B09FA3F0560C24A	1D49AC32F6A953C35C26061BA5766296FD4BEF368F002C61D691912168D0BFB5
Chrome Cache Entry: 164	ASCII text, with very long lines (65434)	69F29DE1E9B12DEDE630FBFD5EF0F51A	E19186B6B3EE98D8D552993259721445834066E1	501D6EBD493B9A77A025DE9592FCEAEDB9CD989AD84890E0ACCC2BD7E2C4200B
Chrome Cache Entry: 165	ASCII text, with very long lines (5917)	975BEA3863DEEF314FEEFCD8C26C9E0B	5184E45DE9CAA7E2D68199AD69D0868536638DDD	8493A97957F93FCB3E0116C3A8C0D24C911DFE4EF31420FDD8B306272FBF6C93
Chrome Cache Entry: 166	ASCII text, with very long lines (1077)	E8073832FB157BA1F8923FD5E4F187DB	C85E3A0DC6CA29AADF14EF9A1A14AD5E9F3A1842	18B66F36A7CE64E789A3BA1ECBC7CD892208DE2C8FF76E0399B1EBE4F82579D4
Chrome Cache Entry: 167	ASCII text	F42F0E1A32722BB9BCAA636B8160C66F	E520748F94F5B64A2AC4F1EB4A7017AA3214C50F	0E71086B6E2E9C2763161E304C1806256FF48FA1F305BCF70CACB762D09974A3
Chrome Cache Entry: 168	MS Windows icon resource - 9 icons, 16x16, 16 colors, 16x16	4644F2D45601037B8423D45E13194C93	DCFDC7B05CB629F3B91A7267C7F304306F461724	64A3170A912786E9EECE7E347B58F36471CB9D0BC790697B216C61050E6B1F08
Chrome Cache Entry: 169	RIFF (little-endian) data, Web/P image, VP8 encoding, 903x508, Scaling: [none]x[none], YUV color, decoders should clamp	F0D041ABCE740889BB1A76699016C868	0EFE30783E7962123D3EA434E8781952DEF05C74	3CE0C499D82E97CA848215EF3386F2879A24DFFC84C5EEE35E543B8F9931E719
Chrome Cache Entry: 170	TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icomoon	803F66F5B9A72CC7AFF94DFC88A1A2A3	95BED53E57D66FFF1C683E07DEEFB66EDD8F42C8	F18AC182A3430D32769BA39334E5F4003E492318BDD38B84F79B312A2114F72D
Chrome Cache Entry: 171	assembler source, ASCII text, with very long lines (14298)	851EF650B2168CFEBE3B78A3226FC860	B3FDB2C74B23A799C76F9A4B9BCB28B8C4FB20BD	A3B14CF76B2BA20D1E2D4451798F5D2AAEFCE4F85781FF6CACB8C99D708B31A7
Chrome Cache Entry: 172	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 64x64, components 3	011774E93B4F6E779F20A5887BA23F20	F3E74BA0B236BC761369B0023301F75DB3305AFD	381335B1DEA34D7ECA46435F9968DF13DBF345ACEC98C00460BCA426EBAB0D89
Chrome Cache Entry: 174	Unicode text, UTF-8 text, with very long lines (21014)	FA7FFAC3252553460EBEDEC706D91D6F	B6E7FC0D98EE65735894CB7D04565899C0C34D89	B42EF845C1A0B49C9A966D712D563740FCC91C2C737CC6FA2160F8A082DCFC52
Chrome Cache Entry: 175	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 64x64, components 3	BC60DF7F459B559BBA425119DD1E5AAC	6E1845530A52968E6D358776725F77F3D57C8F05	E71A12D2B07EDDAA6D8366AC4D933E9D3A4E354BE977B134E0F2BEDC8E663613
Chrome Cache Entry: 176	PNG image data, 64 x 64, 8-bit colormap, non-interlaced	EEDC5C87CF3D95CB8A50078DEABE2BFF	105A016BAC70BA2B78E47B5D32CBCE3E451997F5	7BD7FC9313A1DB35E0262B08F77D5C217EE8B6D3A3026ADA73B7D0A62EB3CDEC
Chrome Cache Entry: 178	ASCII text, with very long lines (348), with no line terminators	271DDC131899A4A37D0936E545BFA31D	30351616E8B4CEE5FD101D284D963F0F67BC82FA	84A48824FA64D083F08CA64D036F6B6CE7B06C114C276DC42E9A02717F4B5F95
Chrome Cache Entry: 179	RIFF (little-endian) data, Web/P image, VP8 encoding, 846x476, Scaling: [none]x[none], YUV color, decoders should clamp	4F7D3DD63282C8A0CD8B1FDFA7503ED8	C6B7FAD822996FC12570ECA7E4EAB40A72E440FA	44088E582A619213D3907044B0F08B29F14B1E74ACF8F792B0F123A003CDCA82
Chrome Cache Entry: 180	PNG image data, 60 x 60, 8-bit/color RGB, non-interlaced	68920749BF08C94304904DA175703E0B	A3CF2E4E50EDDEE0FDFB03948518C5582AB984A4	6CCCEEC628D86D155654A45DA11C7F635450F15077DBBBB0BA06E07B5AD9584F
Chrome Cache Entry: 181	Web Open Font Format (Version 2), TrueType, length 38000, version 1.0	0710C4368BD435181B9766D8193069B7	CBF3776944CD3D0E6395584C270B54B0A6E1D078	39848EBE4A0BDD73F0F2418229FB2A3005D6C6E2CE8EFAA4C6DD4D9E7F7AFB6F
Chrome Cache Entry: 182	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0	5D4AEB4E5F5EF754E307D7FFAEF688BD	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
Chrome Cache Entry: 183	RIFF (little-endian) data, Web/P image, VP8 encoding, 421x237, Scaling: [none]x[none], YUV color, decoders should clamp	5BD969623EEB6FF0F95B14CCCBCF1C24	8642669891900674AF76EB62CA869E008A200D4E	D1333E756F6CC8D461F8B6BFD9C833952C10D3AAD7E5807A6A5483C13FD59149
Chrome Cache Entry: 184	ASCII text, with very long lines (65536), with no line terminators	64E9B0DF8B9DC34B61E5279A50D0A661	57A69F11A25535A7F7BA1AC268A54B9C8DEF66F3	0065CA2A796D40768F3133066A52DEB54FCC9E86A9C0D4D46E7D78EB3EE4AB0A
Chrome Cache Entry: 187	ASCII text, with very long lines (1078)	8D9DB4E68AB9ED7056416413F65BA1E7	8674A08E52343D6626954EC655144CE7ABCB63BC	D6AD8B95CAC47C6A812B164D0E6E1BAAF2FBDAEB33531C72BE67B0928A9B2084

HTML body contains low number of good links

Source: https://btobconsultores.com:4453/DECOFINMEX/#/access/signin

HTTP Parser: Number of links: 0

HTML body contains password input but no form action

Source: https://btobconsultores.com:4453/DECOFINMEX/#/access/signin

HTTP Parser: <input type="password" .../> found but no <form action="...

HTML title does not match URL

Source: https://btobconsultores.com:4453/DECOFINMEX/#/access/signin

HTTP Parser: Title: Proveedores does not match URL

Source: https://btobconsultores.com:4453/DECOFINMEX/#/access/signin

HTTP Parser: <input type="password" .../> found

Source: https://btobconsultores.com:4453/DECOFINMEX/#/access/signin	HTTP Parser: No favicon
Source: https://btobconsultores.com:4453/DECOFINMEX/#/access/signin	HTTP Parser: No favicon
Source: https://www.google.com/sorry/index?continue=https://www.google.com/&q=EgRRtTk0GM-hg7EGIjAm1Dp16S9na2oq3k65YpqH29foSumcYiBbEi1b6EGaU0WQlqcf1b1HnHG_HpWtzcMyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	HTTP Parser: No favicon
Source: https://www.google.com/sorry/index?continue=https://www.google.com/&q=EgRRtTk0GM-hg7EGIjAm1Dp16S9na2oq3k65YpqH29foSumcYiBbEi1b6EGaU0WQlqcf1b1HnHG_HpWtzcMyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=normal&s=kWZmKJ9wnpCGFcdvWsN-7UNKYiLeKZ-SYzl12BfXbaGjJzt-b_rJRznzt3vUkpSPRylmbJ-YXLgTXZQ8A4ab7twtjdjEFN27krLPKMgbWYc5SkM8zF6ScTNRgRyKdLkiAmAsEB53dmjNML7_lrrQwZ29JiUKYPJPYRRx4L53vbYfX3jHY0n0WvowPoGUY-EPyszc8intAWoAlWYINBY8Dcq-CbZWUChyfa6w77CFsnWWklTKXRZW0rJhtYrmoIj48HiNylgm9cey8upHwWSAWSGTHFOlOC4&cb=ycvkig5fs5pb	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	HTTP Parser: No favicon

Source: https://btobconsultores.com:4453/DECOFINMEX/#/access/signin	HTTP Parser: No <meta name="author".. found
Source: https://btobconsultores.com:4453/DECOFINMEX/#/access/signin	HTTP Parser: No <meta name="author".. found

Source: https://btobconsultores.com:4453/DECOFINMEX/#/access/signin	HTTP Parser: No <meta name="copyright".. found
Source: https://btobconsultores.com:4453/DECOFINMEX/#/access/signin	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.17:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.216.73.151:443 -> 192.168.2.17:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.216.73.151:443 -> 192.168.2.17:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.17:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.28.20:443 -> 192.168.2.17:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.21.200:443 -> 192.168.2.17:49730 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 1MB later: 30MB

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.73.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.73.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.73.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.73.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.73.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.73.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.73.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.73.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.73.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.73.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.73.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.73.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.73.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.73.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.73.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.73.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.73.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.73.151

Source: unknown

DNS traffic detected: queries for: btobconsultores.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.17:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.216.73.151:443 -> 192.168.2.17:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.216.73.151:443 -> 192.168.2.17:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.17:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.28.20:443 -> 192.168.2.17:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.21.200:443 -> 192.168.2.17:49730 version: TLS 1.2

Source: classification engine

Classification label: clean2.win@18/59@26/140

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://btobconsultores.com:4453/DECOFINMEX/#/access/signin
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=2024,i,8253099188864072191,4541607165751654986,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=2024,i,8253099188864072191,4541607165751654986,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Source: Window Recorder

Window detected: More than 3 window changes detected

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

ID:	1427878
Product:	CloudBasic
Start time:	09:48:36
Start date:	18.04.2024
Cookbook:	defaultwindowsinteractivecookbook.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Windows Analysis Report
https://btobconsultores.com:4453/DECOFINMEX/#/access/signin

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://btobconsultores.com:4453/DECOFINMEX/#/access/signin

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://btobconsultores.com:4453/DECOFINMEX/#/access/signin