Windows Analysis Report
https://www.dropbox.com/l/scl/AAAcY-eWoLGLi278HUQ_CZ-qX4IzHBKKhcc

Overview

General Information

Sample URL:	https://www.dropbox.com/l/scl/AAAcY-eWoLGLi278HUQ_CZ-qX4IzHBKKhcc
Analysis ID:	1430398

Detection

Score:	3
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Found iframes

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Phishing site detected (based on OCR NLP Model)

Stores files to the Windows start menu directory

Classification

Signatures

Found iframes

Source: https://www.dropbox.com/scl/fi/npjm7awdnic3cghugihry/RKB-INVESTMENT-OUTPUT.pdf?oref=e&r=ACIhn7cBuGaZJ3e_yibjf6oa5aSpUtSRevuBQRKZFzJrrzehQ9Cs-MPRYFhDa7A-7Ip6LQ6cHpIpsTXYETOE0bip-mxmJX5oq9HtvXvefZ_Cf_-d3mTkDgZkLBTR8duHjaCf4UHIGXK9U1xgvUp4lkGgO55edtFbREIfsZFZ5kcFnLbbCIrlYHg_QhAb8mp7V5anNO3nNo-AOhGyMRSJ_Z2j&sm=1&dl=0	HTTP Parser: Iframe src: https://dropboxcaptcha.com
Source: https://www.dropbox.com/scl/fi/npjm7awdnic3cghugihry/RKB-INVESTMENT-OUTPUT.pdf?oref=e&r=ACIhn7cBuGaZJ3e_yibjf6oa5aSpUtSRevuBQRKZFzJrrzehQ9Cs-MPRYFhDa7A-7Ip6LQ6cHpIpsTXYETOE0bip-mxmJX5oq9HtvXvefZ_Cf_-d3mTkDgZkLBTR8duHjaCf4UHIGXK9U1xgvUp4lkGgO55edtFbREIfsZFZ5kcFnLbbCIrlYHg_QhAb8mp7V5anNO3nNo-AOhGyMRSJ_Z2j&sm=1&dl=0	HTTP Parser: Iframe src: https://www.dropbox.com/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&uri_for_logging=dropbox.com&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true
Source: https://www.dropbox.com/scl/fi/npjm7awdnic3cghugihry/RKB-INVESTMENT-OUTPUT.pdf?oref=e&r=ACIhn7cBuGaZJ3e_yibjf6oa5aSpUtSRevuBQRKZFzJrrzehQ9Cs-MPRYFhDa7A-7Ip6LQ6cHpIpsTXYETOE0bip-mxmJX5oq9HtvXvefZ_Cf_-d3mTkDgZkLBTR8duHjaCf4UHIGXK9U1xgvUp4lkGgO55edtFbREIfsZFZ5kcFnLbbCIrlYHg_QhAb8mp7V5anNO3nNo-AOhGyMRSJ_Z2j&sm=1&dl=0	HTTP Parser: Iframe src: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_152185_252595&as=hdA9yJEkhhbWIGZXGHpNvw&hl=en
Source: https://www.dropbox.com/scl/fi/npjm7awdnic3cghugihry/RKB-INVESTMENT-OUTPUT.pdf?oref=e&r=ACIhn7cBuGaZJ3e_yibjf6oa5aSpUtSRevuBQRKZFzJrrzehQ9Cs-MPRYFhDa7A-7Ip6LQ6cHpIpsTXYETOE0bip-mxmJX5oq9HtvXvefZ_Cf_-d3mTkDgZkLBTR8duHjaCf4UHIGXK9U1xgvUp4lkGgO55edtFbREIfsZFZ5kcFnLbbCIrlYHg_QhAb8mp7V5anNO3nNo-AOhGyMRSJ_Z2j&sm=1&dl=0	HTTP Parser: Iframe src: https://dropboxcaptcha.com
Source: https://www.dropbox.com/scl/fi/npjm7awdnic3cghugihry/RKB-INVESTMENT-OUTPUT.pdf?oref=e&r=ACIhn7cBuGaZJ3e_yibjf6oa5aSpUtSRevuBQRKZFzJrrzehQ9Cs-MPRYFhDa7A-7Ip6LQ6cHpIpsTXYETOE0bip-mxmJX5oq9HtvXvefZ_Cf_-d3mTkDgZkLBTR8duHjaCf4UHIGXK9U1xgvUp4lkGgO55edtFbREIfsZFZ5kcFnLbbCIrlYHg_QhAb8mp7V5anNO3nNo-AOhGyMRSJ_Z2j&sm=1&dl=0	HTTP Parser: Iframe src: https://www.dropbox.com/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&uri_for_logging=dropbox.com&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true
Source: https://www.dropbox.com/scl/fi/npjm7awdnic3cghugihry/RKB-INVESTMENT-OUTPUT.pdf?oref=e&r=ACIhn7cBuGaZJ3e_yibjf6oa5aSpUtSRevuBQRKZFzJrrzehQ9Cs-MPRYFhDa7A-7Ip6LQ6cHpIpsTXYETOE0bip-mxmJX5oq9HtvXvefZ_Cf_-d3mTkDgZkLBTR8duHjaCf4UHIGXK9U1xgvUp4lkGgO55edtFbREIfsZFZ5kcFnLbbCIrlYHg_QhAb8mp7V5anNO3nNo-AOhGyMRSJ_Z2j&sm=1&dl=0	HTTP Parser: Iframe src: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_163668_983677&as=hdA9yJEkhhbWIGZXGHpNvw&hl=en

HTML body contains low number of good links

Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_152185_252595&as=hdA9yJEkhhbWIGZXGHpNvw&hl=en	HTTP Parser: Number of links: 0
Source: https://www.dropbox.com/scl/fi/npjm7awdnic3cghugihry/RKB-INVESTMENT-OUTPUT.pdf?oref=e&r=ACIhn7cBuGaZJ3e_yibjf6oa5aSpUtSRevuBQRKZFzJrrzehQ9Cs-MPRYFhDa7A-7Ip6LQ6cHpIpsTXYETOE0bip-mxmJX5oq9HtvXvefZ_Cf_-d3mTkDgZkLBTR8duHjaCf4UHIGXK9U1xgvUp4lkGgO55edtFbREIfsZFZ5kcFnLbbCIrlYHg_QhAb8mp7V5anNO3nNo-AOhGyMRSJ_Z2j&sm=1&dl=0	HTTP Parser: Number of links: 0
Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_163668_983677&as=hdA9yJEkhhbWIGZXGHpNvw&hl=en	HTTP Parser: Number of links: 0

HTML body contains password input but no form action

Source: https://www.dropbox.com/scl/fi/npjm7awdnic3cghugihry/RKB-INVESTMENT-OUTPUT.pdf?oref=e&r=ACIhn7cBuGaZJ3e_yibjf6oa5aSpUtSRevuBQRKZFzJrrzehQ9Cs-MPRYFhDa7A-7Ip6LQ6cHpIpsTXYETOE0bip-mxmJX5oq9HtvXvefZ_Cf_-d3mTkDgZkLBTR8duHjaCf4UHIGXK9U1xgvUp4lkGgO55edtFbREIfsZFZ5kcFnLbbCIrlYHg_QhAb8mp7V5anNO3nNo-AOhGyMRSJ_Z2j&sm=1&dl=0

HTTP Parser: <input type="password" .../> found but no <form action="...

HTML title does not match URL

HTTP Parser: Title: Sign up to view this shared file does not match URL

Phishing site detected (based on OCR NLP Model)

Source: Chrome DOM: 1.1

ML Model on OCR Text: Matched 87.4% probability on "To keep RKB INVESTMENT OUTPUT .pdf secure, we need to confirm your identity All Files Log in or sign up Continue witn Google PDF Continue with Apple Email melisa.droz@vailhealth.org "

HTTP Parser: <input type="password" .../> found

Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_152185_252595&as=hdA9yJEkhhbWIGZXGHpNvw&hl=en	HTTP Parser: No favicon
Source: https://dropboxcaptcha.com/	HTTP Parser: No favicon
Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_163668_983677&as=hdA9yJEkhhbWIGZXGHpNvw&hl=en	HTTP Parser: No favicon

Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_152185_252595&as=hdA9yJEkhhbWIGZXGHpNvw&hl=en	HTTP Parser: No <meta name="author".. found
Source: https://www.dropbox.com/scl/fi/npjm7awdnic3cghugihry/RKB-INVESTMENT-OUTPUT.pdf?oref=e&r=ACIhn7cBuGaZJ3e_yibjf6oa5aSpUtSRevuBQRKZFzJrrzehQ9Cs-MPRYFhDa7A-7Ip6LQ6cHpIpsTXYETOE0bip-mxmJX5oq9HtvXvefZ_Cf_-d3mTkDgZkLBTR8duHjaCf4UHIGXK9U1xgvUp4lkGgO55edtFbREIfsZFZ5kcFnLbbCIrlYHg_QhAb8mp7V5anNO3nNo-AOhGyMRSJ_Z2j&sm=1&dl=0	HTTP Parser: No <meta name="author".. found
Source: https://www.dropbox.com/scl/fi/npjm7awdnic3cghugihry/RKB-INVESTMENT-OUTPUT.pdf?oref=e&r=ACIhn7cBuGaZJ3e_yibjf6oa5aSpUtSRevuBQRKZFzJrrzehQ9Cs-MPRYFhDa7A-7Ip6LQ6cHpIpsTXYETOE0bip-mxmJX5oq9HtvXvefZ_Cf_-d3mTkDgZkLBTR8duHjaCf4UHIGXK9U1xgvUp4lkGgO55edtFbREIfsZFZ5kcFnLbbCIrlYHg_QhAb8mp7V5anNO3nNo-AOhGyMRSJ_Z2j&sm=1&dl=0	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_163668_983677&as=hdA9yJEkhhbWIGZXGHpNvw&hl=en	HTTP Parser: No <meta name="author".. found

Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_152185_252595&as=hdA9yJEkhhbWIGZXGHpNvw&hl=en	HTTP Parser: No <meta name="copyright".. found
Source: https://www.dropbox.com/scl/fi/npjm7awdnic3cghugihry/RKB-INVESTMENT-OUTPUT.pdf?oref=e&r=ACIhn7cBuGaZJ3e_yibjf6oa5aSpUtSRevuBQRKZFzJrrzehQ9Cs-MPRYFhDa7A-7Ip6LQ6cHpIpsTXYETOE0bip-mxmJX5oq9HtvXvefZ_Cf_-d3mTkDgZkLBTR8duHjaCf4UHIGXK9U1xgvUp4lkGgO55edtFbREIfsZFZ5kcFnLbbCIrlYHg_QhAb8mp7V5anNO3nNo-AOhGyMRSJ_Z2j&sm=1&dl=0	HTTP Parser: No <meta name="copyright".. found
Source: https://www.dropbox.com/scl/fi/npjm7awdnic3cghugihry/RKB-INVESTMENT-OUTPUT.pdf?oref=e&r=ACIhn7cBuGaZJ3e_yibjf6oa5aSpUtSRevuBQRKZFzJrrzehQ9Cs-MPRYFhDa7A-7Ip6LQ6cHpIpsTXYETOE0bip-mxmJX5oq9HtvXvefZ_Cf_-d3mTkDgZkLBTR8duHjaCf4UHIGXK9U1xgvUp4lkGgO55edtFbREIfsZFZ5kcFnLbbCIrlYHg_QhAb8mp7V5anNO3nNo-AOhGyMRSJ_Z2j&sm=1&dl=0	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_163668_983677&as=hdA9yJEkhhbWIGZXGHpNvw&hl=en	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.17:49849 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.17:49904 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.17:49905 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.17:49917 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.7.32:443 -> 192.168.2.17:49921 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49922 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.21.200:443 -> 192.168.2.17:49923 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112

Source: unknown

DNS traffic detected: queries for: www.dropbox.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.17:49849 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.17:49904 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.17:49905 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.17:49917 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.7.32:443 -> 192.168.2.17:49921 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49922 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.21.200:443 -> 192.168.2.17:49923 version: TLS 1.2

Source: classification engine

Classification label: clean3.win@22/124@36/216

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.dropbox.com/l/scl/AAAcY-eWoLGLi278HUQ_CZ-qX4IzHBKKhcc
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=1904,i,17202080002802975808,12985406018730654758,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3180 --field-trial-handle=1904,i,17202080002802975808,12985406018730654758,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5700 --field-trial-handle=1904,i,17202080002802975808,12985406018730654758,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=1904,i,17202080002802975808,12985406018730654758,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3180 --field-trial-handle=1904,i,17202080002802975808,12985406018730654758,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5700 --field-trial-handle=1904,i,17202080002802975808,12985406018730654758,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Screenshots

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
1.1.1.1	unknown	Australia	13335	CLOUDFLARENETUS	false
142.250.9.106	unknown	United States	15169	GOOGLEUS	false
172.253.124.138	unknown	United States	15169	GOOGLEUS	false
172.253.124.113	unknown	United States	15169	GOOGLEUS	false
172.253.124.84	unknown	United States	15169	GOOGLEUS	false
173.194.219.84	unknown	United States	15169	GOOGLEUS	false
162.125.9.18	www-env.dropbox-dns.com	United States	19679	DROPBOXUS	false
13.32.255.209	dropboxcaptcha.com	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
18.165.116.50	unknown	United States	3	MIT-GATEWAYSUS	false
142.251.15.106	www.google.com	United States	15169	GOOGLEUS	false
18.165.116.121	fp.dropbox.com	United States	3	MIT-GATEWAYSUS	false
142.251.15.94	unknown	United States	15169	GOOGLEUS	false
172.217.215.94	unknown	United States	15169	GOOGLEUS	false
142.251.15.95	unknown	United States	15169	GOOGLEUS	false
142.250.9.94	unknown	United States	15169	GOOGLEUS	false
104.16.99.29	unknown	United States	13335	CLOUDFLARENETUS	false
142.251.15.102	play.google.com	United States	15169	GOOGLEUS	false
64.233.185.139	unknown	United States	15169	GOOGLEUS	false
74.125.250.129	stun-anycast.l.google.com	United States	15169	GOOGLEUS	false
172.217.215.84	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.17
192.168.2.16

Contacted Domains

Name	IP	Active
stun-anycast.l.google.com	74.125.250.129	true
play.google.com	142.251.15.102	true
dropboxcaptcha.com	13.32.255.209	true
www-env.dropbox-dns.com	162.125.9.18	true
www.google.com	142.251.15.106	true
fp.dropbox.com	18.165.116.121	true
stun.fpapi.io	unknown	unknown
www.dropbox.com	unknown	unknown
cfl.dropboxstatic.com	unknown	unknown
stun.l.google.com	unknown	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&uri_for_logging=dropbox.com&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true	false		high
https://www.dropbox.com/scl/fi/npjm7awdnic3cghugihry/RKB-INVESTMENT-OUTPUT.pdf?oref=e&r=ACIhn7cBuGaZJ3e_yibjf6oa5aSpUtSRevuBQRKZFzJrrzehQ9Cs-MPRYFhDa7A-7Ip6LQ6cHpIpsTXYETOE0bip-mxmJX5oq9HtvXvefZ_Cf_-d3mTkDgZkLBTR8duHjaCf4UHIGXK9U1xgvUp4lkGgO55edtFbREIfsZFZ5kcFnLbbCIrlYHg_QhAb8mp7V5anNO3nNo-AOhGyMRSJ_Z2j&sm=1&dl=0	false		high
https://www.dropbox.com/scl/fi/npjm7awdnic3cghugihry/RKB-INVESTMENT-OUTPUT.pdf?dl=0&oref=e&r=ACIhn7cBuGaZJ3e_yibjf6oa5aSpUtSRevuBQRKZFzJrrzehQ9Cs-MPRYFhDa7A-7Ip6LQ6cHpIpsTXYETOE0bip-mxmJX5oq9HtvXvefZ_Cf_-d3mTkDgZkLBTR8duHjaCf4UHIGXK9U1xgvUp4lkGgO55edtFbREIfsZFZ5kcFnLbbCIrlYHg_QhAb8mp7V5anNO3nNo-AOhGyMRSJ_Z2j&sm=1	false		high
https://dropboxcaptcha.com/	false	URL Reputation: safe	unknown

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 23 13:05:44 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	E5AC2608923CE46F15799127BAB28B00	9F7A3E2DC3D284DC75990329AD9A785680F74016	64297AEBAA1BEDA84DC3BB264275E65526A72F97741A58CC637DE564CF96811B
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 23 13:05:44 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	1015113CE4CC1D6A166FFB0DB31EB105	6DE1421E494EC3EBEB2E69831C5553C968BFD5EC	2E71072C366B6E961E8DBDE36C3A47E11B8F541897310CC0D62A91C890F9DA0D
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:54:41 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	4E9999D36EDCF7DE43BF9B37997479E2	4B8C602E55942322CCC39FCC8F98FE36C014C899	BECEDFCDCC2015237F507DE85830F4FF5DF84E9585E8EE5615B92D9FE7BB649E
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 23 13:05:44 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	76F2EA980DA3BD57847711817BF042DB	8EAC590FBE8F573DF342B999BE37EBAF5E73834A	D20FAA60B7711EFA7BFCD07F92BAE1E5BDF6AEB10F6CA3F9F0C1A95325A83981
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 23 13:05:44 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	B557A09A56F8F2D2ACD6CFA8E53F3AD4	296A7B274375232672D78F88953404593294F71A	67ED58E10F9C029EEDED1CC9AD6DAB7796286ECA45038C42A64A84151D58AC3E
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 23 13:05:44 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	B64CFB699DADB98A009DCB4125C0ABD8	0FC182D5F3A4504998B892988DF9DDDEFAE166AB	2F2DEC0DC33CC33B21594D02E2CA49FE67F32DC86D829423A22FE4234FA58FB0
Chrome Cache Entry: 160	ASCII text, with very long lines (4720)	366641E9CB419315F25D1AD2BF70936B	B789F141CB7EA723E10CB6F24428B760977FB9A2	D8A348DF23957CF3F7400C5A160B6D276D7DF0F16C46B673FD722391E5583586
Chrome Cache Entry: 161	ASCII text, with very long lines (65536), with no line terminators	6E94A3261ADD129CA90FCE01FB28446A	B56FB257B87B7785E502CDB29119371F20593933	8010DCA8F8B19B5CED05B965FCBCA498D61608D873274590AF243B853AC944D4
Chrome Cache Entry: 162	ASCII text, with very long lines (65536), with no line terminators	D7A3C32094B126EA229D11DF4960ED0C	AB37565FF9EAAECB989D64CE99197486FFB28C67	973219C3D63CD492A44CE0C43D9C792DA4E82D4EE52D5884E0FE747D3DADC0CA
Chrome Cache Entry: 163	ASCII text	3E904D06E56BD470498071EF9F7403BE	F99226A89C61F90A6FA6E3601E7B933DAD057A11	AC66E676723D630FDEC99090F7F476E9F933773409EEE8B4CC9157A3E3856794
Chrome Cache Entry: 164	ASCII text, with very long lines (605)	23BFE7E99565EE8F34AFD63C06F4C24B	BF08B8AD1AD73C12A7C9CB211926CE23A861DB07	9DB33292007AB6C38527B39D5663E976A305564E19B2A5A8713EA2B2C00F505D
Chrome Cache Entry: 165	ASCII text, with very long lines (52402)	2D38135994C678D7640482640774DE39	28D6E93C409A6DF7408CA134D04A788B17499828	D15AF9827C1B2B2E300C8A04FBF14717BD643FE77E36621CD3523AB432124978
Chrome Cache Entry: 166	ASCII text, with very long lines (2594)	6A659784D18A6B5C28D7265FCEAF029E	BFF59C59F46746A74F5ECFE44C79AF188BEE210D	599770A70378299719343410259A4B5053660CC4830011DEBDD48F47969D6DCA
Chrome Cache Entry: 167	ASCII text, with very long lines (4787)	1DB6D4FD47F26888CB9787D97FC00EC0	7E0F0236E67678426A357D5CDC7F75773F5A4E44	85CC4203336C5900A1D094989172DF90925D5704EFCB314F5EB7633CDC811137
Chrome Cache Entry: 168	ASCII text, with very long lines (544)	61699B70CF57ABE63FDF5F4007D36EC1	6C05189CC2D08BB2A7609C002F0675C9C670D362	229BBF4D0E7488209564152C6723497F1AC3934136CA1684233D2FA88FA4146F
Chrome Cache Entry: 169	ASCII text, with very long lines (21663)	10F3FA701AF7A3CB6F9E8054D4AEBC62	A18AFB404DC5405CCBB850D4371AAB5119779302	40CF8DA6EAE259A4BC031CEDBE0844AB5B09D2A78ADE4A30B4FCB86237186CBB
Chrome Cache Entry: 170	ASCII text, with very long lines (1353)	4D83CD35A5B3138D895EA13588222C8F	2C86E768E75EB2F2846502D5D20C142A9912A590	90FD413CA296A562B99A32806EC8AA799455B0D252DEC24B2580FA45F621881A
Chrome Cache Entry: 171	ASCII text, with very long lines (667)	391DF6D8943BD72729FFAE6D12FFCC1F	639C7997CD036AA108FFD006750974C3EDB421C9	D0891DBFBD95E964CB336D1006DD9ADDEAA7E3450ED687A30C445D9BA0090E22
Chrome Cache Entry: 172	JSON data	99914B932BD37A50B983C5E7C90AE93B	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
Chrome Cache Entry: 173	ASCII text, with very long lines (57485)	9344C1ACA08405FF26D245EA6D33379D	ACB6C050B2830F8FC108B5174F6A138D49C9974A	8D9948E65D622C35A926726F17860B9F76A87FAD28CA7FFEEE697F6241D6A2AE
Chrome Cache Entry: 174	ASCII text, with very long lines (362)	7D3C66659E01077F47CBDD74349E60FA	86EC17A2B340E0E3BD6B84E38CE741D0867C0B9F	B4374EBF2AD5928DC936BB92738388059F1A6DF117AA47FB33F741B8DA23F864
Chrome Cache Entry: 175	ASCII text	D6C32610BC01D28D09392E8CAE4869E6	1A248754B2853D6FFA0381BBA3C4CA65C1AF19C5	107F84EDAF1294B3B3681D48FAFE9DE85165493D55EA9C361FA08ECBD7994148
Chrome Cache Entry: 176	ASCII text, with very long lines (54939)	4D32661F45D92FB57ADCF45D1BBDE91A	0AB0B927E72BBE699FB744280396B2FFC5D68E06	FD5BAF908AC836D689B36BFCAD4A7F96D7D5509EA754CFF0206006F3E452EF13
Chrome Cache Entry: 177	ASCII text, with no line terminators	B509BB1155AF9583D877612A622204DC	C7EDCE4F93FFFB98DABD1E96CE73ABEF72025916	094F433915FA5A80D4A9B1826967D172797A66A27C0B3DE3807FEF69F2277CE3
Chrome Cache Entry: 178	ASCII text, with very long lines (2099)	F77250E0EFE74549BDB944F47C9FCB47	BB9407BB3E11799F95B829271637913AAF1177DD	B8F5E9440EA0ACE133BC11771970A4D105A24584AD118CD8D73758A58894D0CD
Chrome Cache Entry: 179	ASCII text, with very long lines (51287)	2B78FC32690682B2275760850331C4D5	F2C36B7D5C6BB25688FA42FCAE3576BDD06CF05E	5C07793D2FF05D2894BFFB5A9EEB2674BBADE259CBB857E4E330521340F9F8AC
Chrome Cache Entry: 180	ASCII text, with very long lines (2314)	61444FC69EEE497F28D680EE0C9157E7	D72A2EC487F48C1C8C6AAB7B316FCBB6F2ADD7BF	6E6CC053B72069322499F1716187D1C81889190DE9E22D00ADC3231A7FFF90D6
Chrome Cache Entry: 181	ASCII text, with very long lines (31230)	97366B5396C1C6CB5B58CDF6F3A65527	8FC3649AF780C883CD08F85F55C2AF49CBD5F0E4	7FEDD50BE760F82829C4C313D7003F2D4C2448A5DEDB4FD5DE7A78B458F994A3
Chrome Cache Entry: 182	ASCII text, with very long lines (30383)	688F3CD7F3D0DA9E8D52F3FD7520FC7C	58E67FED60249575E3AC98B913A968CB4D706F1E	2B4DDEE1A7B57B94D1E081D0B111F30E6E1EEE04498B866CDF4CB18E3F802CD1
Chrome Cache Entry: 183	ASCII text, with very long lines (21694)	2968EA53455F7060CDE6EE7B77B65BB4	12872D8072A63D0E680705FD54353967B4FF5966	22B6A22B68B4E7F934729EF432A9A9FEAABF07E64838EAE43D8C7F680975467C
Chrome Cache Entry: 184	ASCII text, with very long lines (4828)	E6C7B1B5B48D9989C48C543C3EA5ABC6	2109AF7D0C10FF2D93FF2B58802C7F01B93B485F	AF3DF2BE4EA805F2A8A8C43951C7EB8BB8CA60E16AA24A3868206156B4B7667E
Chrome Cache Entry: 185	ASCII text, with very long lines (41553)	C715D5135A3F304F19BC34A3954F7937	782A003978640B50552F7D841C142512B76F1DBA	D4913CB47DA91CB6110D06E8FF9BFE439502D4494C219FF895480974A3358576
Chrome Cache Entry: 186	ASCII text, with very long lines (65155)	6C0117474A7C527DC4D099D44DAE71A1	7E755D51CA5A05F8D42518F791BDA950A2F89D0B	23162DDA13C76A1FF73B9FE7F7EFFB042AA830093F19033B6C52F17716F74126
Chrome Cache Entry: 187	Web Open Font Format (Version 2), TrueType, length 43308, version 1.66	93B6F18EC99BCB7C3FA7EA570A75E240	60B9E3062FE532CBC18B897FAC542C56A03544C7	43693F7BDD6146E783FAB3F75BA0A51AA3CF9530ADBF790DBD686FC8A17AA3DB
Chrome Cache Entry: 189	ASCII text, with very long lines (40465)	D46AFA6C036AE14E4B6995BD43CE3A57	C9F8FBBC5248FE6ECE403193D347E7DC8FF999B3	11F87AD69D016C032DCBDCDA80F4071D843DA1CF92A11E73B5125FA900F30B71
Chrome Cache Entry: 190	ASCII text, with very long lines (25701)	6147FC8D260EB9D681C80F3D974C713D	FDE6BE0942C18722FB467FA9AD3FF90D431966CE	DFE4ED256A5C75579163A390549BE9EE31E0ED6E6CD368880AADDA48AEA912A3
Chrome Cache Entry: 191	ASCII text, with very long lines (10533)	151644207B52C049454C572377EE3E83	3BF4661205268520A40DA52C8D2E87F0F9B4BBA4	8BB9C7C60AFCCF29AE2F7CFC9A613619677105D1C698E0343287225080FADFB2
Chrome Cache Entry: 192	ASCII text, with very long lines (4934)	F89735DD18CC42E63140917E07CF2C99	FDA8163CA3BD87016D4376CF094B0AE4EFB993D5	FBF67DBB48D74A501DD35F15EF6E5E2D015DA5E07B5E556C9DA237CD8F1717B0
Chrome Cache Entry: 193	ASCII text, with very long lines (26312)	B81161543399CE8985A244004D3BF2BE	546775FDB5068A331F2217702DFABCF44EEA0F36	D78B91BA7FA509896508F7C3BE2A409D4F6E8C43DF1CF6904D296431FE5D2044
Chrome Cache Entry: 194	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel	F25511F4158C2DFAB6AA11A07D026E4A	99F63CF1694FA5E52F43EB967462EA0D9EEF7513	C0906D540D89DBE1F09B24F17B7F35B81350E8D381C1558B075C28EA913C450D
Chrome Cache Entry: 195	ASCII text, with very long lines (3688)	84E0D1528BBA312A4FEE99A61DD4370E	D4F4533D94FB6810F834D3A36ECD49ABBEBD705A	D46139C016C3C8CDD649DE4F8D3FB699EF6A3FDCABBABCBA9EB43733DE8710AC
Chrome Cache Entry: 196	ASCII text, with very long lines (8406)	26AAC2A148655859CD7464BAAA808AE8	FAFABB4EF231C4D08C6FDE13503BC16B193CB32C	A800D6B2E4BE85662AB2E5FE5E10E46CA1EBC1AF29A27269CFBDF26CFC6325D3
Chrome Cache Entry: 197	TrueType Font data, 16 tables, 1st "GDEF", 19 names, Microsoft, language 0x409	F9ABED3D3D7E0B5A0A5A303B113C53F4	8DEA33D500E929B878CED36C5980745C0BF13DB9	2BB6585B06B56D32AA48AC85F698AEA00A96B5E32B944C9FBA5022CD90F97DCF
Chrome Cache Entry: 198	ASCII text, with very long lines (6506)	4A0F62C20280F479F751116AAF6FF004	92E3963DEE944C49A5CF1F9BCC0E668D307CCABD	B16431F6654C40FDCD3D12717AB8E23CAC760678A5DB6063D3C3DA35316451F9
Chrome Cache Entry: 199	ASCII text, with very long lines (9719)	3A41E8178E412410EDB90DD7415F2301	FBA994B9A8F68ADB63E90DD9A6141065250A82AF	1E064B68ABC4580DE81D356A93961CD8685C786D0DAF3C494D2DF91DD929E485
Chrome Cache Entry: 201	ASCII text, with very long lines (1563)	7B08E15668E6293DED274A0E43734BD4	84CC2086318F411FA109744A702B5B04271D7658	6A8AD86F86D2671FDF62C01740FDC191743F39E124EE7401857E238144329881
Chrome Cache Entry: 202	ASCII text, with very long lines (5602)	CA16D5CAE96CA2371692E4019505C217	438924A22E5C1272240AD7CDC8523FE98A82551F	A5DF177C3AB72BAB2BDFD61E71281E3AF2553E222AE02A89548DED7DAF6753A3
Chrome Cache Entry: 203	ASCII text	A3A2554444A71B125FBF14F91125D2E7	7212DDC0E5552AF5BF29C82351474F88A3C99CB8	C5D544593946BDB983EADD3A6BA179CBD317C5D98409C3DD00C1D19444FC44EB
Chrome Cache Entry: 204	ASCII text, with very long lines (65536), with no line terminators	9399F55783480DB822CF654BA10EF050	05890E089C22CBF65878D08E5D4F2B7125FD7FFD	A679E10D76F51E53F19137FEF3DD0D39973DD3CE4C693312C4D316E2059DA52C
Chrome Cache Entry: 205	ASCII text, with very long lines (37813)	E8610524A37C783C12736026210E54F8	B771D988771F01270E63C1CCD89135A4D6FF8C47	CF24DA1C7EFC209200ADDA31BAF434A0A846BA41B7992273B9DC1B65E2C6BC0C
Chrome Cache Entry: 206	ASCII text, with no line terminators	513F1D1684F5F5F96983E4AFDE6A12A9	9EE5B819E26671328A7B58526C7B5885EE053F1E	BFC7DC4C0C556175F63B2D19A5BDB021D04A3160EEBFD0DAD90E4B3F019A6C5B
Chrome Cache Entry: 207	ASCII text, with very long lines (21020)	8C17286E4DD6DA4E2BB22FAD073B0111	7691782263480837FA2084DF5A6205AC818E3B8A	65C9ACEFE5A311F07615CE0B32146665B4BC33833B4D37A5064046212E19133E
Chrome Cache Entry: 208	ASCII text, with very long lines (4143)	6D7F12ED56D5FAFDFB141EAAF437F237	CC722F807C215B6B90A005A8405E0C18E63564C7	229FF7E74BF376A04E7DAE2B3A8A6DA04DF25A07D5B0300FCEFDA8FC821F8FF9
Chrome Cache Entry: 209	ASCII text, with very long lines (304)	4E2CC091FAC48A36F2EB401FA6ECE06B	AC35B42D5B1FF5B592A44574459A1C6CE6DFBE44	EA511EB41E9199AEC50864F7CD7862DEF7BE3AE5C232DBC066AC353EA56FEC8D
Chrome Cache Entry: 210	ASCII text, with very long lines (729)	75ED595D4A569CF9073CD6EEE308B3B3	13F9416A70CEEA9033A496A6AA5B922B72A6FBE2	34BA9C679427ACA43C1321759FAE0373E54B68661E8D12FB59BDB1F3D93ED1E8
Chrome Cache Entry: 211	ASCII text	00E3748EF6EF9B75F69F6AC20471BC85	713BD618ADFC43F6EC695CFE3788D19708666FB1	5E49FEF385C5BDA41E5FD72F0D0FB2E76722A5C156CAC7AFDBDCD9C6B9B9648A
Chrome Cache Entry: 212	ASCII text, with very long lines (2051)	72F9A26C26C1A681AD75A7E270550788	5579A02442ADFE9980A87BF495B18260927CD146	F4024DCE9F70735047ADC3A8CF7E8AC9FD2E1D4BFF6ABFC4158A1810EDFCE45F
Chrome Cache Entry: 213	ASCII text, with very long lines (16982)	4015C8AEA03713850B2ED6A120A7B947	81627FB8CD488CC6652D0A5EB9B85D164EC66DC8	E2105D63158F5AB48345741B47916947BF9078522FF0A4F84737D33DE6478205
Chrome Cache Entry: 214	ASCII text	98070F1CF7C37AF35E411C1EAE73D5C3	652F4EC37768D55F02BA12617D3058E3A3436761	2DD3B640A7C87526BB0B29205D1FD3253AA5B779BDCCBF8A6F4C082FE909BE90
Chrome Cache Entry: 215	ASCII text, with very long lines (2899)	3058FA17342BAB493637B82D7C656EBF	6602D54A0022D562ECADA60A62EE69DA15F59C01	11ABF43824754BB3F94118A307F823D87FB4CF005336DB7F57DE8B9A24562F16
Chrome Cache Entry: 216	ASCII text	069657210BAFE54BF738CE8489298BED	ACD814731DB697E444A3AEA6B636DC608FB17E89	1860B01D5A60C2E661647C79123AD74DC04E7BDBC3CE1C5463AB7469ADA4EC89
Chrome Cache Entry: 217	ASCII text, with very long lines (519)	C2591593FFBD92E16276E86068DB913A	E7B7B89E0FFB6C5E1CD91BB81AA418E1E9BD77D1	64CFD9646AFC31C4E5D1E3E6753194DCE4F385B017B1227DE2248730DE2DC0C0
Chrome Cache Entry: 218	ASCII text, with no line terminators	9787D8E52A897B135A9229B55B793894	DC17BDE436C7037472EDDD9DD66008DA8377CA55	E44007295A1109B3EE9F07737B97B9E1EB58AA578307953F62776069F6DE3BA4
Chrome Cache Entry: 219	ASCII text	46CAC945E491B87E2835B2D5E8EC8804	2D072C5E3A12ABD4733DD429709C8DBCB5D3D50B	5A2D87CA902230E9900DF89430987C8F17B22FF184820DD40C8C6FBE777A5FC1
Chrome Cache Entry: 220	ASCII text, with very long lines (55161)	805C6456FB1120591958B02634DBE7DE	5C1DC8A222CA1C09AB61886B2A161AED3D5F1059	A90A4ED14E19DC52D9D7F61C896BAF12803D9D746210186329A8C83448381D2A
Chrome Cache Entry: 221	ASCII text, with very long lines (8486)	2B550C403E2A5FE12C846A9C2931F7C8	D9D69852E8B9F3F66A5E2CFEF60D40664B368286	72BDE476747B0BB5613AFFF1C51476F46BA3D1D481994838690C1786A9BD025A
Chrome Cache Entry: 223	ASCII text, with very long lines (10662)	BAD44F3FF516D5115FD80389FF48F251	BA4ED3A47A79EF4D2D44543734132D029F674347	C5BE44FE054D18F7EDDD32ECA1DC6C4AADD7951694440683F0CB503FF800564A
Chrome Cache Entry: 224	ASCII text, with very long lines (9586)	53A288476541A8A0E790FC62E77B6FB9	FFB02CE6E09E61EB494BDE86E21A225F01C58EDA	FB41B7F75A350B961521693271414222486CB98B099D0D68DFF83765F412CA94
Chrome Cache Entry: 225	ASCII text, with very long lines (54939)	BE46E7384B16280D2A080395AE35A8E6	72EB29B5FD98BAEBA883A827AC6FA487CA6DC9E1	A6E41B478743E79C6745B1BAD67932358D43BC911B34519C21D984B4213C2D7F
Chrome Cache Entry: 226	ASCII text, with very long lines (2962)	4D8313A7B6900F61AE9BFE51DDF4F67B	8B528784DBBE02C32F5F844953563C9B30178600	BFF7C9A7A1D2C6B47613859610EBA689A43C53189917DB1E81B5826B21B6C957
Chrome Cache Entry: 227	ASCII text, with very long lines (8391)	CEF3AFAC3BB3869958AE9EADA3A9E2D0	E19153C14CDC86ADDA25922707DEC307D7EAEA18	557B5C5A37612D8B42057A42C52D372546C51AAD7B3C8FF89E652EFAF6DAD603
Chrome Cache Entry: 228	ASCII text, with very long lines (2334)	D7102E61F8A55FE25337F4C956CCEF24	5B45C74151E3ADB6E9AA71428347060BA2098CA3	B3B2C6C4B2857BD79700FD042D4250538368ED5D1628FF82EAC6E7391D96DA86
Chrome Cache Entry: 229	Web Open Font Format, TrueType, length 58239, version 0.0	83BB5AE3E28AFB23B4ED2EF74C272312	C79EC10C6AB82271C588B59A0DD26DC57DE54843	B1F18FD551241D3EFD5B9D114317F1D52C0C19677D3ECE876CE75249A1E067A6
Chrome Cache Entry: 230	ASCII text, with very long lines (3522)	FFBAB8DFB32007435CE310875C4B9E3A	1AC39FB6FE4B6EA6F167578FE44860B86592C2EE	11E6E275B26FF5020EDD9C966DB60DB45B0EE0C43A7376434A8480538AD6E1D3
Chrome Cache Entry: 231	ASCII text, with very long lines (47981)	AC75D2758BF3E040611814872A174121	CC5AF2F2D44FEF889E3779F768CFEC8713D4F386	7314EB1E0738878F2BACCF1B901FCD3E438834902A0146BC21B54D1521E62A3D
Chrome Cache Entry: 232	ASCII text	FC60AD01769EDF0D5971E4EC374173DA	51AFD215A146CFF839D36EFB42CCC887C8217A5E	B8587D983EFAEEBA5B477D57A8BA7FC180471E03BA3ABA4F9B2C2588413CE57F
Chrome Cache Entry: 233	HTML document, ASCII text	00F53700C90A2EDF60A83C7C3B959710	270A7C333D4BDE912992993FBDB7D2EC579E9B1B	C23F75F5147BEDB59DE93A0559B52C5303702B063C8D665C27CD8F40FE329B8B
Chrome Cache Entry: 234	ASCII text, with very long lines (65536), with no line terminators	1962A05F4DC99C9D8BBA80166E8AE9CC	391FCAB3620266F8A466E73604A1007B8B539BA4	676929D3AED5F666EA264763C9E73C58889C38B57C9808FAA7F0953224E2AE19
Chrome Cache Entry: 235	ASCII text, with very long lines (5082)	0E80CBB2EF9225FDC2B4DEFA7D321901	BD0862DEAD0CDAD41CC33D88856225717C6B173E	E34014DB1E6DA64AE844602B85DAFC41024F5694E49058A6F138DC7415E0AD25
Chrome Cache Entry: 236	ASCII text, with very long lines (48054)	9A4D33E9F93F1ED9DA898D73B532A9E6	1350A5CBE24B1CB428FA1033DBC9A47EA2E07151	1C3BD03F8C5D3EB2450C490C1679A36E7CD9488D127A74433BB57DD691E8F8B3
Chrome Cache Entry: 237	ASCII text, with very long lines (65536), with no line terminators	7845CB6F42076C023C80071C11996BE6	49E3BB0A6FC0E333F22D3BBC80A1B50DBBF70E4F	19090A32A00D4A6EBF337CE903D1CB165B59DF95F8419780A882AC041C25831B
Chrome Cache Entry: 238	ASCII text, with very long lines (2845)	0E3B3B3216D852E1ADEABC8B6E7FC27B	5D2CC55D2D9738CBCBDFE2CC350ABF2A3BF0EFA0	5585BCC97733AF2B7DC9F697D3BA3B7D4AF58484C38117DECD68F75E8407ADFE
Chrome Cache Entry: 239	ASCII text, with very long lines (2102), with no line terminators	FFF8E4C34D574BE9AC43718EE5ACCD9E	A88F5AAC146D4726FE7A7DC60BDF6BF3236CF187	851BAAFA4D75A31942B8D7F752909C9BD63873DD2B2D9E3C5B69439FC1F645A2
Chrome Cache Entry: 241	ASCII text, with very long lines (16909)	313C3A6F8BD31B6BF355EF74CF3F819D	08A271D9551636E72D071433E8EBB0F2975D7A7E	C5FE6187E5DA574D6D694A83BE523993E62DAC5F89D165283F38EB92C830F992
Chrome Cache Entry: 242	ASCII text, with very long lines (655)	9E909F5DC4EB2917A092969CFA8C1C1B	EC5795627579E606612250BE3E30690F3A70E3CF	C174E839D663E6F9ED38C7901711B911FF058A033154BCDE3DF30208DF454C74
Chrome Cache Entry: 243	ASCII text, with very long lines (33484)	99EB0DE2B72A849BCAB77B4AB0CA030B	1273CD3F0776E5A43F00065FBFF954FF243C837F	F3560B927CD30017511D2623F2F3FF299BCAA3A09167742BC3DA3AE417D1F852
Chrome Cache Entry: 244	ASCII text, with very long lines (5341)	757A6AB0DD9C36D34560BA29F8A2E990	FA23336FD64AFC6218933D458A1FEFEDC6F56838	5A600EA33AB9E0371DB4C3BAE67E8917DF17A05B3D55B1DB58B2B33B6B81258C
Chrome Cache Entry: 245	ASCII text, with no line terminators	6F49B9E6422BA0C87E02EDF39D668CEF	2556F03261C6C8B460EBF80638B6AB29F2644611	EEF1EEEF3CA81E3969D43111FA0B6D13A39FBE3B6BEAF02487E8C568CE440EA2
Chrome Cache Entry: 246	Unicode text, UTF-8 text, with very long lines (65529), with no line terminators	DD3A63D89A120D21CAEEF592A6D402F4	8E4FF005C1D1DF7A9A336A6F3AD8B06A5F5BA657	FC1D7B30F08DF466E74C29408525FD5DD625E2136B48FD5ADB5690DA179928E1
Chrome Cache Entry: 247	C source, ASCII text, with very long lines (1046)	FA9B26CB00C85A5EC7C1377CC8A6E716	F1C5D5D8361FF52554E6E5947E53FBCBB016B90B	80E3033E815DC1CD007B4D606237677AAE877EB72983FE03D865B7344D8C8E7C
Chrome Cache Entry: 248	ASCII text	E9B97DB6D2E8DA79AA3E750F28E1BF56	1EDD4B6BB950948139840936828FED909BE6B8B8	A28E9054559B06E3D1520ED9058715B6511F6ADDFF73690FF35C90CB9332BE25
Chrome Cache Entry: 249	ASCII text, with very long lines (623)	B8BE0AEA05D076DD5B710F6DED7565B0	65F0CF4F7D35B7EC22F2E244A11A30E39BEF57BD	6437CDA00E26052D776AFE662A06DDF8FE9981DD79AB0F9D3F2360D694AC319E
Chrome Cache Entry: 250	ASCII text, with very long lines (1025)	20DEA3DFDE3B9352F8294408ADC604E9	C21EDD35DB63CD8852790ECE8323957643928648	0DA537469F646AEA2AB5EAFE2641AA33C329A7D17F2751B63D93D39722BFB21C
Chrome Cache Entry: 251	Unicode text, UTF-8 text, with very long lines (12419)	984321419F75695DCB8DBA30B23F47BF	E271F9477E79851F6FE667387D2DDC5EF0ADE48A	055E1500910B555C205EF3ADF3857E9FE5BEAA4FF34395C1688EE53960CF9243
Chrome Cache Entry: 252	ASCII text, with very long lines (65536), with no line terminators	3C970BE168DB70FCD810C5F7C67AFC21	D803EC7F49E8D46870DF35E9D9000F4F1B227EC3	640917A369C435FED6F302D35E7932086D4F841AA0F50BD622EA6E565E96390A
Chrome Cache Entry: 253	ASCII text	D3216D824D821C8026C31566767B57E4	03F460961D787EAB26DDD334BF740332E1113B54	ED5175A8E6813F9CB849D8E0DAE03CDCBC8F76C8E2C6328135E9AA648F95FA70
Chrome Cache Entry: 254	ASCII text, with very long lines (1281)	68B92CF8F7C6D25796C695153614D004	718B985F5FA2A0FB44A5418FAF206B0BCBC07ABA	432741E746A4433ED39843670574A69AE8724BAB0DE5A8992510B99C34646D12
Chrome Cache Entry: 255	ASCII text, with very long lines (345)	A1782CB302D36D94A8F5904841B1F9CD	F489819205A11E879A7CBD37D906B7476040F5D9	2B1903F4A4FA1A2C629480FCDDD60D673D3CEE3BE8C13C6D198419757FB6E228
Chrome Cache Entry: 256	ASCII text, with very long lines (1641)	565B12C7B3FFC7D46032C040A23A9A66	270406F09279BD6E8A571E07DB52516F6EBDAFCC	99C4895C9154E53837084897DFDEF1602258DE6D205F58746CF0DEA9027ADD6C
Chrome Cache Entry: 257	ASCII text, with very long lines (30380)	23CEF7F24583BC0D961B2CBD66391EC0	5C994B00A0BDFE8D1D6DFCAA02417F7C6D461C90	3BA954DB2E6E2CCD8952AF91595BF6DB6F5CD8A2A2DCA0F887362975F1AE546D
Chrome Cache Entry: 258	ASCII text	68C8F81D9FDD45D2F65BCEE949F4AD28	EBE2733E978AF725E227EDE139BA61E776A44ADC	D6F848FB0E9C27FF1C2DD18CF2D0096AEE107068F8D3E4B6F9087837D14BD46C
Chrome Cache Entry: 259	ASCII text	3B0BB3313BC069CCF76EC11101C435AA	3835D1E89171D4D16E7516B02F8DF3A7B2111EAE	B496879288D68FAF0C74CD134E93249132880AE2E8308930EAABA76231929623
Chrome Cache Entry: 260	ASCII text, with very long lines (597)	8326C23D6B3EED35BC3E62F3294587FD	EDDA17E74E53E85073E5EAC9CB6BE2163DBFA23C	57F03D3BA66117EDC152646341120DD3A1D7D71B9A98A3723AF5A8AE61BCB3AB
Chrome Cache Entry: 261	HTML document, Unicode text, UTF-8 text, with very long lines (1136)	FBE36EB2EECF1B90451A3A72701E49D2	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
Chrome Cache Entry: 262	ASCII text, with very long lines (12494)	0CCE36E0D631A9F9391326766FA604CC	32C7AC701C52A87238CF4F6A36AD8A8D517B9C72	090502C741FCE96E98551F7BB6CC3C89B14F55B2A2DD5F87BAF7856B5A699249
Chrome Cache Entry: 263	ASCII text, with very long lines (15368)	62E594328005F6A1C6E0EDBCAFA712B0	69404C43961EA5224B6DF433C9424C07679A08BD	2C79A0244A616AC9449EE94382007A3631AF38C5BE7BC6B91CC1B9F9C9F99513
Chrome Cache Entry: 264	ASCII text, with very long lines (1327)	03EA710579B2A03B4874E2AC684B72F4	1BAA6ACAAB61033E0702993D7BDD1204AA3FBE5A	67DB7A1710B395F92D3328FF8ABD8AA1C280C577B631D1F4013B975E88E986C4
Chrome Cache Entry: 265	ASCII text, with very long lines (2792)	77A115D3A09DC29A146902DD0A75A3BC	67FF8B3F8E44B4ADC666B6605B84160CD0BEEAF2	22E5825BE132E56D6A435331B14689B3C4A935C9F46808ABBDB6F6B7BC1792A8
Chrome Cache Entry: 266	Web Open Font Format (Version 2), TrueType, length 46188, version 1.66	DFC5E24CBC1B134E0C00C61E84EC999A	D3B1A8EF1D0F6F9162986479252570525719F203	B5DB3E633EC765FC01A19C06B0955D56C2503285E59D8D348D08EC34ABBFEAF3
Chrome Cache Entry: 267	ASCII text, with very long lines (533), with no line terminators	FEB698008C36A09DFE88AB06A1C3E3B9	A871FBCBBE298AE7078D06627708B2C106A0FAF3	1C4E7E389D73C6ACF7F19CC812514E71230740791FDE8A018C1D7EDCCF1590AE
Chrome Cache Entry: 268	ASCII text, with very long lines (744)	FFA4A8CEE985A798CFF48D450F8436AD	0584E9A89D7DCE5DA4AC9084DC91297237BB3B94	45526D8DCBFAE6EE2E386F518184BC65B459B3F207FF8E82A89C8FBFABB249F4
Chrome Cache Entry: 269	ASCII text, with very long lines (665)	A0EF15CB4F52D5F152A361C4A4208C73	62E8A6612C09E571E1266353758F61DC379401B0	7EB159511D44A621FB5DC9FF210E67E3621EC4000806F3D9255920F8A7B3DBF6
Chrome Cache Entry: 270	ASCII text, with very long lines (12980)	48E3CF3B41636EF6A51CDBC950C4EB1D	6AFCA96B7FBD0F0E467B28D5314305BF0339FAAF	071A37CB10715EAFA60E1388A4F466E8CABE50B4F90288768D73A37F6D6CD4B1
Chrome Cache Entry: 271	C source, ASCII text, with very long lines (1061)	09634B0C5D5D982B41CA1B4AB14020C8	663001508EF6C36B901B3608BC4E8AEF07935C6F	047B6B6649E7329949A203F7FB973104E7985FE752B567EE68255021A3AF8648
Chrome Cache Entry: 272	ASCII text, with very long lines (40848)	EEFB1DF59C67FEF3C54F0CC53930B725	71ECD7F9FE0B2C0625573040BB58E797028FA21C	25799CE1BA6C1727D2F14B7C13438CC517A1A59536ED338EFD85F4F39D646750
Chrome Cache Entry: 273	ASCII text, with very long lines (11110)	FF1CE802509E2FAD7F5D9E5B2C6A4569	B76A581B129BD8B4DFB72631CCC2F571158DFC8D	476D028A8E77E5C0F8B9CECF57FE68345B94AF5E54982539213CC71BE7B1CD85
Chrome Cache Entry: 274	ASCII text, with very long lines (25071)	5C58E16142E19DAF0DD244CAFD20B7E7	6EDC0AAE20B8F54B25394C5A5F90B2E486E2FC05	1C7257CB23A4E78C1F37D04526C2D63E676379EB8F0A073BDF04184658752193
Chrome Cache Entry: 275	ASCII text, with very long lines (34319)	3B0AAE56F910A58C70F0698436FBE5D3	CB232720DCD91EF2548D51596781950127CC47CF	3E6FE783A303947EA75A4B811C9E81C237148FA60D14B9B31A59F2DB10C988DA
Chrome Cache Entry: 277	ASCII text, with very long lines (57547)	EDB1B6F279D6A33DED91AA34B23CEE63	A9C604D641C90B95124A20EAF411FD8968054E53	60C2622F549664EEF7622C8B121EB1E705B013D1943B8BF872703FA5425C5641
Chrome Cache Entry: 278	ASCII text, with very long lines (1290), with no line terminators	E7FA60E6D3BC241EE2F254AC7DC7B056	958281D9B3544C39B748E1C042CB44ABE35FC383	AA177A486023FBFF9070CA75CF28B1B73865C7B8BDB905465A3A50B152F82CF5
Chrome Cache Entry: 279	ASCII text, with very long lines (565)	6D92292A133E794F5C1FADC6361DD5AC	9F9C7C2DB732A64AB4A014E2AFDA0AA446D3A04B	DC21D296459DD21437B246D4768E05C86DAE1180277C8A5AAC07E241665CF8B5
Chrome Cache Entry: 280	Web Open Font Format (Version 2), TrueType, length 54666, version 1.0	EBEE194A9B773F166DC16096F8614AAA	9D6A893AF295C90E9E9792D7E54A80034192255B	00F90DB31F42975FCDC5FA1F70660568BE68792EC11BE2AAC36362F435A6E555
Chrome Cache Entry: 281	ASCII text	5CDC20BEC764EEDD4CB5275BF0AAF4D0	A6DF9646C37996C4F8A118621B404925EEA353EE	05E1FBE4401829DB2CA3ECB53F1F748CA2F47E7907A8D2E90D1641E0FC6CFB7C
Chrome Cache Entry: 282	ASCII text, with very long lines (1083)	FD1F51563EF8379FC1E7AE8FA481321E	F223B40A43B9835BDA8B41FADB42334FBDE89C80	542BC81597A55D09409562CC63FB8F32E19A61344C359DD2A0CA6C9B70E6F415

Found iframes

Source: https://www.dropbox.com/scl/fi/npjm7awdnic3cghugihry/RKB-INVESTMENT-OUTPUT.pdf?oref=e&r=ACIhn7cBuGaZJ3e_yibjf6oa5aSpUtSRevuBQRKZFzJrrzehQ9Cs-MPRYFhDa7A-7Ip6LQ6cHpIpsTXYETOE0bip-mxmJX5oq9HtvXvefZ_Cf_-d3mTkDgZkLBTR8duHjaCf4UHIGXK9U1xgvUp4lkGgO55edtFbREIfsZFZ5kcFnLbbCIrlYHg_QhAb8mp7V5anNO3nNo-AOhGyMRSJ_Z2j&sm=1&dl=0	HTTP Parser: Iframe src: https://dropboxcaptcha.com
Source: https://www.dropbox.com/scl/fi/npjm7awdnic3cghugihry/RKB-INVESTMENT-OUTPUT.pdf?oref=e&r=ACIhn7cBuGaZJ3e_yibjf6oa5aSpUtSRevuBQRKZFzJrrzehQ9Cs-MPRYFhDa7A-7Ip6LQ6cHpIpsTXYETOE0bip-mxmJX5oq9HtvXvefZ_Cf_-d3mTkDgZkLBTR8duHjaCf4UHIGXK9U1xgvUp4lkGgO55edtFbREIfsZFZ5kcFnLbbCIrlYHg_QhAb8mp7V5anNO3nNo-AOhGyMRSJ_Z2j&sm=1&dl=0	HTTP Parser: Iframe src: https://www.dropbox.com/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&uri_for_logging=dropbox.com&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true
Source: https://www.dropbox.com/scl/fi/npjm7awdnic3cghugihry/RKB-INVESTMENT-OUTPUT.pdf?oref=e&r=ACIhn7cBuGaZJ3e_yibjf6oa5aSpUtSRevuBQRKZFzJrrzehQ9Cs-MPRYFhDa7A-7Ip6LQ6cHpIpsTXYETOE0bip-mxmJX5oq9HtvXvefZ_Cf_-d3mTkDgZkLBTR8duHjaCf4UHIGXK9U1xgvUp4lkGgO55edtFbREIfsZFZ5kcFnLbbCIrlYHg_QhAb8mp7V5anNO3nNo-AOhGyMRSJ_Z2j&sm=1&dl=0	HTTP Parser: Iframe src: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_152185_252595&as=hdA9yJEkhhbWIGZXGHpNvw&hl=en
Source: https://www.dropbox.com/scl/fi/npjm7awdnic3cghugihry/RKB-INVESTMENT-OUTPUT.pdf?oref=e&r=ACIhn7cBuGaZJ3e_yibjf6oa5aSpUtSRevuBQRKZFzJrrzehQ9Cs-MPRYFhDa7A-7Ip6LQ6cHpIpsTXYETOE0bip-mxmJX5oq9HtvXvefZ_Cf_-d3mTkDgZkLBTR8duHjaCf4UHIGXK9U1xgvUp4lkGgO55edtFbREIfsZFZ5kcFnLbbCIrlYHg_QhAb8mp7V5anNO3nNo-AOhGyMRSJ_Z2j&sm=1&dl=0	HTTP Parser: Iframe src: https://dropboxcaptcha.com
Source: https://www.dropbox.com/scl/fi/npjm7awdnic3cghugihry/RKB-INVESTMENT-OUTPUT.pdf?oref=e&r=ACIhn7cBuGaZJ3e_yibjf6oa5aSpUtSRevuBQRKZFzJrrzehQ9Cs-MPRYFhDa7A-7Ip6LQ6cHpIpsTXYETOE0bip-mxmJX5oq9HtvXvefZ_Cf_-d3mTkDgZkLBTR8duHjaCf4UHIGXK9U1xgvUp4lkGgO55edtFbREIfsZFZ5kcFnLbbCIrlYHg_QhAb8mp7V5anNO3nNo-AOhGyMRSJ_Z2j&sm=1&dl=0	HTTP Parser: Iframe src: https://www.dropbox.com/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&uri_for_logging=dropbox.com&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true
Source: https://www.dropbox.com/scl/fi/npjm7awdnic3cghugihry/RKB-INVESTMENT-OUTPUT.pdf?oref=e&r=ACIhn7cBuGaZJ3e_yibjf6oa5aSpUtSRevuBQRKZFzJrrzehQ9Cs-MPRYFhDa7A-7Ip6LQ6cHpIpsTXYETOE0bip-mxmJX5oq9HtvXvefZ_Cf_-d3mTkDgZkLBTR8duHjaCf4UHIGXK9U1xgvUp4lkGgO55edtFbREIfsZFZ5kcFnLbbCIrlYHg_QhAb8mp7V5anNO3nNo-AOhGyMRSJ_Z2j&sm=1&dl=0	HTTP Parser: Iframe src: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_163668_983677&as=hdA9yJEkhhbWIGZXGHpNvw&hl=en

HTML body contains low number of good links

Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_152185_252595&as=hdA9yJEkhhbWIGZXGHpNvw&hl=en	HTTP Parser: Number of links: 0
Source: https://www.dropbox.com/scl/fi/npjm7awdnic3cghugihry/RKB-INVESTMENT-OUTPUT.pdf?oref=e&r=ACIhn7cBuGaZJ3e_yibjf6oa5aSpUtSRevuBQRKZFzJrrzehQ9Cs-MPRYFhDa7A-7Ip6LQ6cHpIpsTXYETOE0bip-mxmJX5oq9HtvXvefZ_Cf_-d3mTkDgZkLBTR8duHjaCf4UHIGXK9U1xgvUp4lkGgO55edtFbREIfsZFZ5kcFnLbbCIrlYHg_QhAb8mp7V5anNO3nNo-AOhGyMRSJ_Z2j&sm=1&dl=0	HTTP Parser: Number of links: 0
Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_163668_983677&as=hdA9yJEkhhbWIGZXGHpNvw&hl=en	HTTP Parser: Number of links: 0

HTML body contains password input but no form action

HTTP Parser: <input type="password" .../> found but no <form action="...

HTML title does not match URL

HTTP Parser: Title: Sign up to view this shared file does not match URL

Phishing site detected (based on OCR NLP Model)

Source: Chrome DOM: 1.1

HTTP Parser: <input type="password" .../> found

Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_152185_252595&as=hdA9yJEkhhbWIGZXGHpNvw&hl=en	HTTP Parser: No favicon
Source: https://dropboxcaptcha.com/	HTTP Parser: No favicon
Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_163668_983677&as=hdA9yJEkhhbWIGZXGHpNvw&hl=en	HTTP Parser: No favicon

Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_152185_252595&as=hdA9yJEkhhbWIGZXGHpNvw&hl=en	HTTP Parser: No <meta name="author".. found
Source: https://www.dropbox.com/scl/fi/npjm7awdnic3cghugihry/RKB-INVESTMENT-OUTPUT.pdf?oref=e&r=ACIhn7cBuGaZJ3e_yibjf6oa5aSpUtSRevuBQRKZFzJrrzehQ9Cs-MPRYFhDa7A-7Ip6LQ6cHpIpsTXYETOE0bip-mxmJX5oq9HtvXvefZ_Cf_-d3mTkDgZkLBTR8duHjaCf4UHIGXK9U1xgvUp4lkGgO55edtFbREIfsZFZ5kcFnLbbCIrlYHg_QhAb8mp7V5anNO3nNo-AOhGyMRSJ_Z2j&sm=1&dl=0	HTTP Parser: No <meta name="author".. found
Source: https://www.dropbox.com/scl/fi/npjm7awdnic3cghugihry/RKB-INVESTMENT-OUTPUT.pdf?oref=e&r=ACIhn7cBuGaZJ3e_yibjf6oa5aSpUtSRevuBQRKZFzJrrzehQ9Cs-MPRYFhDa7A-7Ip6LQ6cHpIpsTXYETOE0bip-mxmJX5oq9HtvXvefZ_Cf_-d3mTkDgZkLBTR8duHjaCf4UHIGXK9U1xgvUp4lkGgO55edtFbREIfsZFZ5kcFnLbbCIrlYHg_QhAb8mp7V5anNO3nNo-AOhGyMRSJ_Z2j&sm=1&dl=0	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_163668_983677&as=hdA9yJEkhhbWIGZXGHpNvw&hl=en	HTTP Parser: No <meta name="author".. found

Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_152185_252595&as=hdA9yJEkhhbWIGZXGHpNvw&hl=en	HTTP Parser: No <meta name="copyright".. found
Source: https://www.dropbox.com/scl/fi/npjm7awdnic3cghugihry/RKB-INVESTMENT-OUTPUT.pdf?oref=e&r=ACIhn7cBuGaZJ3e_yibjf6oa5aSpUtSRevuBQRKZFzJrrzehQ9Cs-MPRYFhDa7A-7Ip6LQ6cHpIpsTXYETOE0bip-mxmJX5oq9HtvXvefZ_Cf_-d3mTkDgZkLBTR8duHjaCf4UHIGXK9U1xgvUp4lkGgO55edtFbREIfsZFZ5kcFnLbbCIrlYHg_QhAb8mp7V5anNO3nNo-AOhGyMRSJ_Z2j&sm=1&dl=0	HTTP Parser: No <meta name="copyright".. found
Source: https://www.dropbox.com/scl/fi/npjm7awdnic3cghugihry/RKB-INVESTMENT-OUTPUT.pdf?oref=e&r=ACIhn7cBuGaZJ3e_yibjf6oa5aSpUtSRevuBQRKZFzJrrzehQ9Cs-MPRYFhDa7A-7Ip6LQ6cHpIpsTXYETOE0bip-mxmJX5oq9HtvXvefZ_Cf_-d3mTkDgZkLBTR8duHjaCf4UHIGXK9U1xgvUp4lkGgO55edtFbREIfsZFZ5kcFnLbbCIrlYHg_QhAb8mp7V5anNO3nNo-AOhGyMRSJ_Z2j&sm=1&dl=0	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_163668_983677&as=hdA9yJEkhhbWIGZXGHpNvw&hl=en	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.17:49849 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.17:49904 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.17:49905 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.17:49917 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.7.32:443 -> 192.168.2.17:49921 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49922 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.21.200:443 -> 192.168.2.17:49923 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112

Source: unknown

DNS traffic detected: queries for: www.dropbox.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.17:49849 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.17:49904 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.17:49905 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.17:49917 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.7.32:443 -> 192.168.2.17:49921 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49922 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.21.200:443 -> 192.168.2.17:49923 version: TLS 1.2

Source: classification engine

Classification label: clean3.win@22/124@36/216

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.dropbox.com/l/scl/AAAcY-eWoLGLi278HUQ_CZ-qX4IzHBKKhcc
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=1904,i,17202080002802975808,12985406018730654758,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3180 --field-trial-handle=1904,i,17202080002802975808,12985406018730654758,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5700 --field-trial-handle=1904,i,17202080002802975808,12985406018730654758,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=1904,i,17202080002802975808,12985406018730654758,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3180 --field-trial-handle=1904,i,17202080002802975808,12985406018730654758,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5700 --field-trial-handle=1904,i,17202080002802975808,12985406018730654758,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

ID:	1430398
Product:	CloudBasic
Start time:	16:05:12
Start date:	23.04.2024
Cookbook:	defaultwindowsinteractivecookbook.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Windows Analysis Report
https://www.dropbox.com/l/scl/AAAcY-eWoLGLi278HUQ_CZ-qX4IzHBKKhcc

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://www.dropbox.com/l/scl/AAAcY-eWoLGLi278HUQ_CZ-qX4IzHBKKhcc

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://www.dropbox.com/l/scl/AAAcY-eWoLGLi278HUQ_CZ-qX4IzHBKKhcc