Windows Analysis Report
https://www.jottacloud.com/s/359ee8b110b8ca8464998842a5d227ed979

Overview

General Information

Sample URL:	https://www.jottacloud.com/s/359ee8b110b8ca8464998842a5d227ed979
Analysis ID:	1430561

Detection

HTMLPhisher

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected HtmlPhish10

Phishing site detected (based on image similarity)

Phishing site or detected (based on various text indicators)

Drops files with a non-matching file extension (content does not match file extension)

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden URLs or javascript code

HTML title does not match URL

Stores files to the Windows start menu directory

Classification

Signatures

Phishing

Yara detected HtmlPhish10

Source: Yara match	File source: 4.7.pages.csv, type: HTML
Source: Yara match	File source: 4.7.pages.csv, type: HTML
Source: Yara match	File source: 4.8.pages.csv, type: HTML
Source: Yara match	File source: 4.8.pages.csv, type: HTML
Source: Yara match	File source: 4.7.pages.csv, type: HTML
Source: Yara match	File source: 4.9.pages.csv, type: HTML

Phishing site detected (based on image similarity)

Source: https://longz.bigordermilok.com/boxmine/

Matcher: Found strong image similarity, brand: MICROSOFT

Phishing site or detected (based on various text indicators)

Source: Chrome DOM: 3.6

OCR Text: new pdf (2) (l).pdf (432 kB) Download 1/1 X Close 22 Apr 202419:31 Automatic Zoom of 1 REVIEW DOCUMENT HERE

HTML body contains low number of good links

Source: https://www.jottacloud.com/webapp_static/pdf-viewer/web/viewer.html?file=https%3A%2F%2F093-up-r.jotta.cloud%2Ffiles%2Fv1%2Fdl%2FeyJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2IiwiemlwIjoiREVGIn0..uOnc7yq_osSVezDF5ydxiw.KgWnxlaLangXgFHgL64YVU6V_47rBHOvB2CjVUUxkr1KDCE6NbVeozXPm33FKJaldU6B99rp0IZG6ebG6KDbdPbzErWZRg55Coi58YVUl_jWOSe4fEtmYPJWc6Li8S1LLOtThrCoHtKYFXKwuqbO9cuwS_Hc0AZzjV6YzyxZeo3yj-sdIVbm0oDC8igOsLUkDeRPqgMAUGsC4uD4o_9CjZoSlnf-K3D-qwHtqIFaF0U4Di31XZYP9SvGbNloxNgwgMJsXcERLY8NIfIRvZOYfOHsRrAqiC3pg9wgvScP1RM.ZafFNXbJOwOiPo-zDG0m_A%2Fnew%2520pdf%2520(2)%2520(1).pdf%3Faccess_token%3DeyJraWQiOiJkZDBhMWIyOS02MjIyLTRmMWMtYjhkOS1jOTFiY2Q1OTRiMjkiLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJhdWQiOiJhY2NvdW50Iiwic3ViIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiMTg5NzU5ODciLCJzdCI6IkNpQndYemd6WlRVME9HTTRZekZoTlRRNFlURmhZMkV5T0dJeE9EazNOVGs0TnhJQ0NBRWFKUm9qTXpVNVpXVTRZakV4TUdJNFkyRTRORFkwT1RrNE9EUXlZVFZrTWpJM1pXUTVOems9IiwiaXNzIjoiam90dGEiLCJ0eXAiOiJCZWFyZXIiLCJleHAiOjE3MTM5ODgxODEsInVzZXJuYW1lIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiM...	HTTP Parser: Number of links: 0
Source: https://longz.bigordermilok.com/boxmine/	HTTP Parser: Number of links: 0

HTML body contains password input but no form action

Source: https://www.jottacloud.com/webapp_static/pdf-viewer/web/viewer.html?file=https%3A%2F%2F093-up-r.jotta.cloud%2Ffiles%2Fv1%2Fdl%2FeyJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2IiwiemlwIjoiREVGIn0..uOnc7yq_osSVezDF5ydxiw.KgWnxlaLangXgFHgL64YVU6V_47rBHOvB2CjVUUxkr1KDCE6NbVeozXPm33FKJaldU6B99rp0IZG6ebG6KDbdPbzErWZRg55Coi58YVUl_jWOSe4fEtmYPJWc6Li8S1LLOtThrCoHtKYFXKwuqbO9cuwS_Hc0AZzjV6YzyxZeo3yj-sdIVbm0oDC8igOsLUkDeRPqgMAUGsC4uD4o_9CjZoSlnf-K3D-qwHtqIFaF0U4Di31XZYP9SvGbNloxNgwgMJsXcERLY8NIfIRvZOYfOHsRrAqiC3pg9wgvScP1RM.ZafFNXbJOwOiPo-zDG0m_A%2Fnew%2520pdf%2520(2)%2520(1).pdf%3Faccess_token%3DeyJraWQiOiJkZDBhMWIyOS02MjIyLTRmMWMtYjhkOS1jOTFiY2Q1OTRiMjkiLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJhdWQiOiJhY2NvdW50Iiwic3ViIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiMTg5NzU5ODciLCJzdCI6IkNpQndYemd6WlRVME9HTTRZekZoTlRRNFlURmhZMkV5T0dJeE9EazNOVGs0TnhJQ0NBRWFKUm9qTXpVNVpXVTRZakV4TUdJNFkyRTRORFkwT1RrNE9EUXlZVFZrTWpJM1pXUTVOems9IiwiaXNzIjoiam90dGEiLCJ0eXAiOiJCZWFyZXIiLCJleHAiOjE3MTM5ODgxODEsInVzZXJuYW1lIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiM...	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://longz.bigordermilok.com/boxmine/	HTTP Parser: <input type="password" .../> found but no <form action="...

HTML page contains hidden URLs or javascript code

Source: https://longz.bigordermilok.com/boxmine/

HTTP Parser: Base64 decoded:  <input type="hidden" id="f" value="next.php">  <input type="hidden" id="rdrt" value="https://www.office.com">

HTML title does not match URL

Source: https://www.jottacloud.com/webapp_static/pdf-viewer/web/viewer.html?file=https%3A%2F%2F093-up-r.jotta.cloud%2Ffiles%2Fv1%2Fdl%2FeyJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2IiwiemlwIjoiREVGIn0..uOnc7yq_osSVezDF5ydxiw.KgWnxlaLangXgFHgL64YVU6V_47rBHOvB2CjVUUxkr1KDCE6NbVeozXPm33FKJaldU6B99rp0IZG6ebG6KDbdPbzErWZRg55Coi58YVUl_jWOSe4fEtmYPJWc6Li8S1LLOtThrCoHtKYFXKwuqbO9cuwS_Hc0AZzjV6YzyxZeo3yj-sdIVbm0oDC8igOsLUkDeRPqgMAUGsC4uD4o_9CjZoSlnf-K3D-qwHtqIFaF0U4Di31XZYP9SvGbNloxNgwgMJsXcERLY8NIfIRvZOYfOHsRrAqiC3pg9wgvScP1RM.ZafFNXbJOwOiPo-zDG0m_A%2Fnew%2520pdf%2520(2)%2520(1).pdf%3Faccess_token%3DeyJraWQiOiJkZDBhMWIyOS02MjIyLTRmMWMtYjhkOS1jOTFiY2Q1OTRiMjkiLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJhdWQiOiJhY2NvdW50Iiwic3ViIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiMTg5NzU5ODciLCJzdCI6IkNpQndYemd6WlRVME9HTTRZekZoTlRRNFlURmhZMkV5T0dJeE9EazNOVGs0TnhJQ0NBRWFKUm9qTXpVNVpXVTRZakV4TUdJNFkyRTRORFkwT1RrNE9EUXlZVFZrTWpJM1pXUTVOems9IiwiaXNzIjoiam90dGEiLCJ0eXAiOiJCZWFyZXIiLCJleHAiOjE3MTM5ODgxODEsInVzZXJuYW1lIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiM...	HTTP Parser: Title: PDF.js viewer does not match URL
Source: https://longz.bigordermilok.com/boxmine/	HTTP Parser: Title: Login does not match URL

Source: https://www.jottacloud.com/webapp_static/pdf-viewer/web/viewer.html?file=https%3A%2F%2F093-up-r.jotta.cloud%2Ffiles%2Fv1%2Fdl%2FeyJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2IiwiemlwIjoiREVGIn0..uOnc7yq_osSVezDF5ydxiw.KgWnxlaLangXgFHgL64YVU6V_47rBHOvB2CjVUUxkr1KDCE6NbVeozXPm33FKJaldU6B99rp0IZG6ebG6KDbdPbzErWZRg55Coi58YVUl_jWOSe4fEtmYPJWc6Li8S1LLOtThrCoHtKYFXKwuqbO9cuwS_Hc0AZzjV6YzyxZeo3yj-sdIVbm0oDC8igOsLUkDeRPqgMAUGsC4uD4o_9CjZoSlnf-K3D-qwHtqIFaF0U4Di31XZYP9SvGbNloxNgwgMJsXcERLY8NIfIRvZOYfOHsRrAqiC3pg9wgvScP1RM.ZafFNXbJOwOiPo-zDG0m_A%2Fnew%2520pdf%2520(2)%2520(1).pdf%3Faccess_token%3DeyJraWQiOiJkZDBhMWIyOS02MjIyLTRmMWMtYjhkOS1jOTFiY2Q1OTRiMjkiLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJhdWQiOiJhY2NvdW50Iiwic3ViIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiMTg5NzU5ODciLCJzdCI6IkNpQndYemd6WlRVME9HTTRZekZoTlRRNFlURmhZMkV5T0dJeE9EazNOVGs0TnhJQ0NBRWFKUm9qTXpVNVpXVTRZakV4TUdJNFkyRTRORFkwT1RrNE9EUXlZVFZrTWpJM1pXUTVOems9IiwiaXNzIjoiam90dGEiLCJ0eXAiOiJCZWFyZXIiLCJleHAiOjE3MTM5ODgxODEsInVzZXJuYW1lIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiM...	HTTP Parser: <input type="password" .../> found
Source: https://longz.bigordermilok.com/boxmine/	HTTP Parser: <input type="password" .../> found

Source: https://policy.app.cookieinformation.com/cookiesharingiframe.html	HTTP Parser: No favicon
Source: https://www.jottacloud.com/s/359ee8b110b8ca8464998842a5d227ed979	HTTP Parser: No favicon
Source: https://www.jottacloud.com/s/359ee8b110b8ca8464998842a5d227ed979/thumbs	HTTP Parser: No favicon
Source: https://www.jottacloud.com/s/359ee8b110b8ca8464998842a5d227ed979/thumbs	HTTP Parser: No favicon
Source: https://www.jottacloud.com/webapp_static/pdf-viewer/web/viewer.html?file=https%3A%2F%2F093-up-r.jotta.cloud%2Ffiles%2Fv1%2Fdl%2FeyJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2IiwiemlwIjoiREVGIn0..uOnc7yq_osSVezDF5ydxiw.KgWnxlaLangXgFHgL64YVU6V_47rBHOvB2CjVUUxkr1KDCE6NbVeozXPm33FKJaldU6B99rp0IZG6ebG6KDbdPbzErWZRg55Coi58YVUl_jWOSe4fEtmYPJWc6Li8S1LLOtThrCoHtKYFXKwuqbO9cuwS_Hc0AZzjV6YzyxZeo3yj-sdIVbm0oDC8igOsLUkDeRPqgMAUGsC4uD4o_9CjZoSlnf-K3D-qwHtqIFaF0U4Di31XZYP9SvGbNloxNgwgMJsXcERLY8NIfIRvZOYfOHsRrAqiC3pg9wgvScP1RM.ZafFNXbJOwOiPo-zDG0m_A%2Fnew%2520pdf%2520(2)%2520(1).pdf%3Faccess_token%3DeyJraWQiOiJkZDBhMWIyOS02MjIyLTRmMWMtYjhkOS1jOTFiY2Q1OTRiMjkiLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJhdWQiOiJhY2NvdW50Iiwic3ViIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiMTg5NzU5ODciLCJzdCI6IkNpQndYemd6WlRVME9HTTRZekZoTlRRNFlURmhZMkV5T0dJeE9EazNOVGs0TnhJQ0NBRWFKUm9qTXpVNVpXVTRZakV4TUdJNFkyRTRORFkwT1RrNE9EUXlZVFZrTWpJM1pXUTVOems9IiwiaXNzIjoiam90dGEiLCJ0eXAiOiJCZWFyZXIiLCJleHAiOjE3MTM5ODgxODEsInVzZXJuYW1lIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiM...	HTTP Parser: No favicon
Source: https://www.jottacloud.com/webapp_static/pdf-viewer/web/viewer.html?file=https%3A%2F%2F093-up-r.jotta.cloud%2Ffiles%2Fv1%2Fdl%2FeyJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2IiwiemlwIjoiREVGIn0..uOnc7yq_osSVezDF5ydxiw.KgWnxlaLangXgFHgL64YVU6V_47rBHOvB2CjVUUxkr1KDCE6NbVeozXPm33FKJaldU6B99rp0IZG6ebG6KDbdPbzErWZRg55Coi58YVUl_jWOSe4fEtmYPJWc6Li8S1LLOtThrCoHtKYFXKwuqbO9cuwS_Hc0AZzjV6YzyxZeo3yj-sdIVbm0oDC8igOsLUkDeRPqgMAUGsC4uD4o_9CjZoSlnf-K3D-qwHtqIFaF0U4Di31XZYP9SvGbNloxNgwgMJsXcERLY8NIfIRvZOYfOHsRrAqiC3pg9wgvScP1RM.ZafFNXbJOwOiPo-zDG0m_A%2Fnew%2520pdf%2520(2)%2520(1).pdf%3Faccess_token%3DeyJraWQiOiJkZDBhMWIyOS02MjIyLTRmMWMtYjhkOS1jOTFiY2Q1OTRiMjkiLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJhdWQiOiJhY2NvdW50Iiwic3ViIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiMTg5NzU5ODciLCJzdCI6IkNpQndYemd6WlRVME9HTTRZekZoTlRRNFlURmhZMkV5T0dJeE9EazNOVGs0TnhJQ0NBRWFKUm9qTXpVNVpXVTRZakV4TUdJNFkyRTRORFkwT1RrNE9EUXlZVFZrTWpJM1pXUTVOems9IiwiaXNzIjoiam90dGEiLCJ0eXAiOiJCZWFyZXIiLCJleHAiOjE3MTM5ODgxODEsInVzZXJuYW1lIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiM...	HTTP Parser: No favicon
Source: https://www.jottacloud.com/webapp_static/pdf-viewer/web/viewer.html?file=https%3A%2F%2F093-up-r.jotta.cloud%2Ffiles%2Fv1%2Fdl%2FeyJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2IiwiemlwIjoiREVGIn0..uOnc7yq_osSVezDF5ydxiw.KgWnxlaLangXgFHgL64YVU6V_47rBHOvB2CjVUUxkr1KDCE6NbVeozXPm33FKJaldU6B99rp0IZG6ebG6KDbdPbzErWZRg55Coi58YVUl_jWOSe4fEtmYPJWc6Li8S1LLOtThrCoHtKYFXKwuqbO9cuwS_Hc0AZzjV6YzyxZeo3yj-sdIVbm0oDC8igOsLUkDeRPqgMAUGsC4uD4o_9CjZoSlnf-K3D-qwHtqIFaF0U4Di31XZYP9SvGbNloxNgwgMJsXcERLY8NIfIRvZOYfOHsRrAqiC3pg9wgvScP1RM.ZafFNXbJOwOiPo-zDG0m_A%2Fnew%2520pdf%2520(2)%2520(1).pdf%3Faccess_token%3DeyJraWQiOiJkZDBhMWIyOS02MjIyLTRmMWMtYjhkOS1jOTFiY2Q1OTRiMjkiLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJhdWQiOiJhY2NvdW50Iiwic3ViIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiMTg5NzU5ODciLCJzdCI6IkNpQndYemd6WlRVME9HTTRZekZoTlRRNFlURmhZMkV5T0dJeE9EazNOVGs0TnhJQ0NBRWFKUm9qTXpVNVpXVTRZakV4TUdJNFkyRTRORFkwT1RrNE9EUXlZVFZrTWpJM1pXUTVOems9IiwiaXNzIjoiam90dGEiLCJ0eXAiOiJCZWFyZXIiLCJleHAiOjE3MTM5ODgxODEsInVzZXJuYW1lIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiM...	HTTP Parser: No favicon
Source: https://longz.bigordermilok.com/boxmine/	HTTP Parser: No favicon
Source: https://longz.bigordermilok.com/boxmine/	HTTP Parser: No favicon
Source: https://longz.bigordermilok.com/boxmine/	HTTP Parser: No favicon

Source: https://www.jottacloud.com/webapp_static/pdf-viewer/web/viewer.html?file=https%3A%2F%2F093-up-r.jotta.cloud%2Ffiles%2Fv1%2Fdl%2FeyJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2IiwiemlwIjoiREVGIn0..uOnc7yq_osSVezDF5ydxiw.KgWnxlaLangXgFHgL64YVU6V_47rBHOvB2CjVUUxkr1KDCE6NbVeozXPm33FKJaldU6B99rp0IZG6ebG6KDbdPbzErWZRg55Coi58YVUl_jWOSe4fEtmYPJWc6Li8S1LLOtThrCoHtKYFXKwuqbO9cuwS_Hc0AZzjV6YzyxZeo3yj-sdIVbm0oDC8igOsLUkDeRPqgMAUGsC4uD4o_9CjZoSlnf-K3D-qwHtqIFaF0U4Di31XZYP9SvGbNloxNgwgMJsXcERLY8NIfIRvZOYfOHsRrAqiC3pg9wgvScP1RM.ZafFNXbJOwOiPo-zDG0m_A%2Fnew%2520pdf%2520(2)%2520(1).pdf%3Faccess_token%3DeyJraWQiOiJkZDBhMWIyOS02MjIyLTRmMWMtYjhkOS1jOTFiY2Q1OTRiMjkiLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJhdWQiOiJhY2NvdW50Iiwic3ViIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiMTg5NzU5ODciLCJzdCI6IkNpQndYemd6WlRVME9HTTRZekZoTlRRNFlURmhZMkV5T0dJeE9EazNOVGs0TnhJQ0NBRWFKUm9qTXpVNVpXVTRZakV4TUdJNFkyRTRORFkwT1RrNE9EUXlZVFZrTWpJM1pXUTVOems9IiwiaXNzIjoiam90dGEiLCJ0eXAiOiJCZWFyZXIiLCJleHAiOjE3MTM5ODgxODEsInVzZXJuYW1lIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiM	HTTP Parser: No <meta name="author".. found
Source: https://www.jottacloud.com/webapp_static/pdf-viewer/web/viewer.html?file=https%3A%2F%2F093-up-r.jotta.cloud%2Ffiles%2Fv1%2Fdl%2FeyJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2IiwiemlwIjoiREVGIn0..uOnc7yq_osSVezDF5ydxiw.KgWnxlaLangXgFHgL64YVU6V_47rBHOvB2CjVUUxkr1KDCE6NbVeozXPm33FKJaldU6B99rp0IZG6ebG6KDbdPbzErWZRg55Coi58YVUl_jWOSe4fEtmYPJWc6Li8S1LLOtThrCoHtKYFXKwuqbO9cuwS_Hc0AZzjV6YzyxZeo3yj-sdIVbm0oDC8igOsLUkDeRPqgMAUGsC4uD4o_9CjZoSlnf-K3D-qwHtqIFaF0U4Di31XZYP9SvGbNloxNgwgMJsXcERLY8NIfIRvZOYfOHsRrAqiC3pg9wgvScP1RM.ZafFNXbJOwOiPo-zDG0m_A%2Fnew%2520pdf%2520(2)%2520(1).pdf%3Faccess_token%3DeyJraWQiOiJkZDBhMWIyOS02MjIyLTRmMWMtYjhkOS1jOTFiY2Q1OTRiMjkiLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJhdWQiOiJhY2NvdW50Iiwic3ViIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiMTg5NzU5ODciLCJzdCI6IkNpQndYemd6WlRVME9HTTRZekZoTlRRNFlURmhZMkV5T0dJeE9EazNOVGs0TnhJQ0NBRWFKUm9qTXpVNVpXVTRZakV4TUdJNFkyRTRORFkwT1RrNE9EUXlZVFZrTWpJM1pXUTVOems9IiwiaXNzIjoiam90dGEiLCJ0eXAiOiJCZWFyZXIiLCJleHAiOjE3MTM5ODgxODEsInVzZXJuYW1lIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiM	HTTP Parser: No <meta name="author".. found
Source: https://www.jottacloud.com/webapp_static/pdf-viewer/web/viewer.html?file=https%3A%2F%2F093-up-r.jotta.cloud%2Ffiles%2Fv1%2Fdl%2FeyJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2IiwiemlwIjoiREVGIn0..uOnc7yq_osSVezDF5ydxiw.KgWnxlaLangXgFHgL64YVU6V_47rBHOvB2CjVUUxkr1KDCE6NbVeozXPm33FKJaldU6B99rp0IZG6ebG6KDbdPbzErWZRg55Coi58YVUl_jWOSe4fEtmYPJWc6Li8S1LLOtThrCoHtKYFXKwuqbO9cuwS_Hc0AZzjV6YzyxZeo3yj-sdIVbm0oDC8igOsLUkDeRPqgMAUGsC4uD4o_9CjZoSlnf-K3D-qwHtqIFaF0U4Di31XZYP9SvGbNloxNgwgMJsXcERLY8NIfIRvZOYfOHsRrAqiC3pg9wgvScP1RM.ZafFNXbJOwOiPo-zDG0m_A%2Fnew%2520pdf%2520(2)%2520(1).pdf%3Faccess_token%3DeyJraWQiOiJkZDBhMWIyOS02MjIyLTRmMWMtYjhkOS1jOTFiY2Q1OTRiMjkiLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJhdWQiOiJhY2NvdW50Iiwic3ViIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiMTg5NzU5ODciLCJzdCI6IkNpQndYemd6WlRVME9HTTRZekZoTlRRNFlURmhZMkV5T0dJeE9EazNOVGs0TnhJQ0NBRWFKUm9qTXpVNVpXVTRZakV4TUdJNFkyRTRORFkwT1RrNE9EUXlZVFZrTWpJM1pXUTVOems9IiwiaXNzIjoiam90dGEiLCJ0eXAiOiJCZWFyZXIiLCJleHAiOjE3MTM5ODgxODEsInVzZXJuYW1lIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiM	HTTP Parser: No <meta name="author".. found
Source: https://longz.bigordermilok.com/boxmine/	HTTP Parser: No <meta name="author".. found
Source: https://longz.bigordermilok.com/boxmine/	HTTP Parser: No <meta name="author".. found
Source: https://longz.bigordermilok.com/boxmine/	HTTP Parser: No <meta name="author".. found

Source: https://www.jottacloud.com/webapp_static/pdf-viewer/web/viewer.html?file=https%3A%2F%2F093-up-r.jotta.cloud%2Ffiles%2Fv1%2Fdl%2FeyJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2IiwiemlwIjoiREVGIn0..uOnc7yq_osSVezDF5ydxiw.KgWnxlaLangXgFHgL64YVU6V_47rBHOvB2CjVUUxkr1KDCE6NbVeozXPm33FKJaldU6B99rp0IZG6ebG6KDbdPbzErWZRg55Coi58YVUl_jWOSe4fEtmYPJWc6Li8S1LLOtThrCoHtKYFXKwuqbO9cuwS_Hc0AZzjV6YzyxZeo3yj-sdIVbm0oDC8igOsLUkDeRPqgMAUGsC4uD4o_9CjZoSlnf-K3D-qwHtqIFaF0U4Di31XZYP9SvGbNloxNgwgMJsXcERLY8NIfIRvZOYfOHsRrAqiC3pg9wgvScP1RM.ZafFNXbJOwOiPo-zDG0m_A%2Fnew%2520pdf%2520(2)%2520(1).pdf%3Faccess_token%3DeyJraWQiOiJkZDBhMWIyOS02MjIyLTRmMWMtYjhkOS1jOTFiY2Q1OTRiMjkiLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJhdWQiOiJhY2NvdW50Iiwic3ViIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiMTg5NzU5ODciLCJzdCI6IkNpQndYemd6WlRVME9HTTRZekZoTlRRNFlURmhZMkV5T0dJeE9EazNOVGs0TnhJQ0NBRWFKUm9qTXpVNVpXVTRZakV4TUdJNFkyRTRORFkwT1RrNE9EUXlZVFZrTWpJM1pXUTVOems9IiwiaXNzIjoiam90dGEiLCJ0eXAiOiJCZWFyZXIiLCJleHAiOjE3MTM5ODgxODEsInVzZXJuYW1lIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiM...	HTTP Parser: No <meta name="copyright".. found
Source: https://www.jottacloud.com/webapp_static/pdf-viewer/web/viewer.html?file=https%3A%2F%2F093-up-r.jotta.cloud%2Ffiles%2Fv1%2Fdl%2FeyJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2IiwiemlwIjoiREVGIn0..uOnc7yq_osSVezDF5ydxiw.KgWnxlaLangXgFHgL64YVU6V_47rBHOvB2CjVUUxkr1KDCE6NbVeozXPm33FKJaldU6B99rp0IZG6ebG6KDbdPbzErWZRg55Coi58YVUl_jWOSe4fEtmYPJWc6Li8S1LLOtThrCoHtKYFXKwuqbO9cuwS_Hc0AZzjV6YzyxZeo3yj-sdIVbm0oDC8igOsLUkDeRPqgMAUGsC4uD4o_9CjZoSlnf-K3D-qwHtqIFaF0U4Di31XZYP9SvGbNloxNgwgMJsXcERLY8NIfIRvZOYfOHsRrAqiC3pg9wgvScP1RM.ZafFNXbJOwOiPo-zDG0m_A%2Fnew%2520pdf%2520(2)%2520(1).pdf%3Faccess_token%3DeyJraWQiOiJkZDBhMWIyOS02MjIyLTRmMWMtYjhkOS1jOTFiY2Q1OTRiMjkiLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJhdWQiOiJhY2NvdW50Iiwic3ViIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiMTg5NzU5ODciLCJzdCI6IkNpQndYemd6WlRVME9HTTRZekZoTlRRNFlURmhZMkV5T0dJeE9EazNOVGs0TnhJQ0NBRWFKUm9qTXpVNVpXVTRZakV4TUdJNFkyRTRORFkwT1RrNE9EUXlZVFZrTWpJM1pXUTVOems9IiwiaXNzIjoiam90dGEiLCJ0eXAiOiJCZWFyZXIiLCJleHAiOjE3MTM5ODgxODEsInVzZXJuYW1lIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiM...	HTTP Parser: No <meta name="copyright".. found
Source: https://www.jottacloud.com/webapp_static/pdf-viewer/web/viewer.html?file=https%3A%2F%2F093-up-r.jotta.cloud%2Ffiles%2Fv1%2Fdl%2FeyJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2IiwiemlwIjoiREVGIn0..uOnc7yq_osSVezDF5ydxiw.KgWnxlaLangXgFHgL64YVU6V_47rBHOvB2CjVUUxkr1KDCE6NbVeozXPm33FKJaldU6B99rp0IZG6ebG6KDbdPbzErWZRg55Coi58YVUl_jWOSe4fEtmYPJWc6Li8S1LLOtThrCoHtKYFXKwuqbO9cuwS_Hc0AZzjV6YzyxZeo3yj-sdIVbm0oDC8igOsLUkDeRPqgMAUGsC4uD4o_9CjZoSlnf-K3D-qwHtqIFaF0U4Di31XZYP9SvGbNloxNgwgMJsXcERLY8NIfIRvZOYfOHsRrAqiC3pg9wgvScP1RM.ZafFNXbJOwOiPo-zDG0m_A%2Fnew%2520pdf%2520(2)%2520(1).pdf%3Faccess_token%3DeyJraWQiOiJkZDBhMWIyOS02MjIyLTRmMWMtYjhkOS1jOTFiY2Q1OTRiMjkiLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJhdWQiOiJhY2NvdW50Iiwic3ViIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiMTg5NzU5ODciLCJzdCI6IkNpQndYemd6WlRVME9HTTRZekZoTlRRNFlURmhZMkV5T0dJeE9EazNOVGs0TnhJQ0NBRWFKUm9qTXpVNVpXVTRZakV4TUdJNFkyRTRORFkwT1RrNE9EUXlZVFZrTWpJM1pXUTVOems9IiwiaXNzIjoiam90dGEiLCJ0eXAiOiJCZWFyZXIiLCJleHAiOjE3MTM5ODgxODEsInVzZXJuYW1lIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiM...	HTTP Parser: No <meta name="copyright".. found
Source: https://longz.bigordermilok.com/boxmine/	HTTP Parser: No <meta name="copyright".. found
Source: https://longz.bigordermilok.com/boxmine/	HTTP Parser: No <meta name="copyright".. found
Source: https://longz.bigordermilok.com/boxmine/	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Source: unknown	HTTPS traffic detected: 23.46.214.6:443 -> 192.168.2.18:49694 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.18:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.28.21:443 -> 192.168.2.18:49840 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.28.21:443 -> 192.168.2.18:49841 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.18:49845 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.18:49846 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 1MB later: 33MB

Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: unknown

DNS traffic detected: queries for: www.jottacloud.com

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49695 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49695
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49694
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 49694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49679 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 23.46.214.6:443 -> 192.168.2.18:49694 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.18:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.28.21:443 -> 192.168.2.18:49840 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.28.21:443 -> 192.168.2.18:49841 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.18:49845 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.18:49846 version: TLS 1.2

Source: classification engine

Classification label: mal56.phis.win@16/84@56/269

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.jottacloud.com/s/359ee8b110b8ca8464998842a5d227ed979
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=1900,i,11903278720065606161,16450679075012361117,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=1900,i,11903278720065606161,16450679075012361117,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Drops files with a non-matching file extension (content does not match file extension)

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: Chrome Cache Entry: 175

Jump to dropped file

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Screenshots

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.10.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
13.107.246.40	part-0012.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
64.233.176.94	unknown	United States	15169	GOOGLEUS	false
152.195.19.97	sni1gl.wpc.omegacdn.net	United States	15133	EDGECASTUS	false
172.67.191.212	longz.bigordermilok.com	United States	13335	CLOUDFLARENETUS	false
185.179.129.45	uc.jottacloud.com	Norway	206667	JOTTA-ASNO	false
142.250.105.138	unknown	United States	15169	GOOGLEUS	false
64.233.185.113	unknown	United States	15169	GOOGLEUS	false
162.159.153.4	miro.medium.com	United States	13335	CLOUDFLARENETUS	false
185.179.128.50	093-up-r.jotta.cloud	Norway	206667	JOTTA-ASNO	false
13.107.213.41	part-0013.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.251.15.95	unknown	United States	15169	GOOGLEUS	false
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
1.1.1.1	unknown	Australia	13335	CLOUDFLARENETUS	false
142.250.105.94	unknown	United States	15169	GOOGLEUS	false
64.233.176.84	unknown	United States	15169	GOOGLEUS	false
185.179.129.37	www.jottacloud.com	Norway	206667	JOTTA-ASNO	false
185.179.129.39	a.jottacloud.com	Norway	206667	JOTTA-ASNO	false
172.253.124.95	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.21.27.152	unknown	United States	13335	CLOUDFLARENETUS	false
185.179.129.31	sn.jotta.cloud	Norway	206667	JOTTA-ASNO	false
185.179.128.40	api.jotta.cloud	Norway	206667	JOTTA-ASNO	false
64.233.185.95	unknown	United States	15169	GOOGLEUS	false
20.76.133.196	consent.app.cookieinformation.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
108.177.122.105	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.16
192.168.2.18

Contacted Domains

Name	IP	Active
sn.jotta.cloud	185.179.129.31	true
www.jottacloud.com	185.179.129.37	true
a.nel.cloudflare.com	35.190.80.1	true
longz.bigordermilok.com	172.67.191.212	true
api.jotta.cloud	185.179.128.40	true
maxcdn.bootstrapcdn.com	104.18.10.207	true
a.jottacloud.com	185.179.129.39	true
093-up-r.jotta.cloud	185.179.128.50	true
part-0013.t-0009.t-msedge.net	13.107.213.41	true
code.jquery.com	151.101.194.137	true
uc.jottacloud.com	185.179.129.45	true
cdnjs.cloudflare.com	104.17.24.14	true
sni1gl.wpc.omegacdn.net	152.195.19.97	true
www.google.com	108.177.122.105	true
part-0012.t-0009.t-msedge.net	13.107.246.40	true
consent.app.cookieinformation.com	20.76.133.196	true
miro.medium.com	162.159.153.4	true
use.fontawesome.com	unknown	unknown
secure.aadcdn.microsoftonline-p.com	unknown	unknown
uc-105.jottacloud.com	unknown	unknown
policy.app.cookieinformation.com	unknown	unknown

Contacted URLs

Name	Malicious	Reputation
https://www.jottacloud.com/s/359ee8b110b8ca8464998842a5d227ed979	false	high
https://policy.app.cookieinformation.com/cookiesharingiframe.html	false	unknown
https://www.jottacloud.com/s/359ee8b110b8ca8464998842a5d227ed979/thumbs	false	high
https://longz.bigordermilok.com/boxmine/	true	unknown

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 23 18:49:31 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	BFC1E4571964771A9586750230BF1043	DA10C36AA97420137E0D8CCE014EC0D04466122F	0E4DA75A8E7637FA70A805428A73CE4058DB8E6C6DC739C3BACA874C73B921FB
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 23 18:49:31 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	7EB56F8ABD6DE0EAAFF2F8B0AFACA353	EC02DF06246101CDD3D293A2F059F860E6E3B0DA	490B82B8BB3422336B62DA4CACA909F6C391D0B83EFF6BDF2ABF08BBF2EE3DCF
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 09:23:19 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	17E15E8EDF037C7DB5B64E62BEA9FA21	9ABBAD62B30F1FCF35027E50343C0649F909B768	C38AC8E4B6CB026536BDFDADDAD056B64D6BAA88795762A94D26FD6596B2183F
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 23 18:49:31 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	280002900E5BACA03CD4BF319ECC9196	52620FDA1DDA5711A68A20FB94C2C84C887EA64F	EDCD47199B161593B2F23639C4FA8EF48130B0BB5693B733A1CCD71185D9C09D
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 23 18:49:31 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	FD120591622FA42F46D7A8D75A3CC1C4	50205FA46F8264FF87CD7811622509901F3BD7C4	D43DC6A85836AD0596F23D3FA625F8E1C9C95814D13B3189381552F8541F633D
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 23 18:49:31 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	0F47550177B8A09B4B92723215868A0B	16679DBE00BDD240522C496E4176B59BD2DCAC0E	24EB69ED7F954684DCD0A51F27ABFB39CC09122192731F565B78C94281AE7CA3
Chrome Cache Entry: 107	SVG Scalable Vector Graphics image	C2CB766A28B28EB331836BE1ECF9B0E5	3FDC6D95484CD51251FD73BB1BD93A05A7A7C185	47B71A702AFCBCA881D390F6478EBF4ACC682871E1891DEE7F3BFCE898A8DD33
Chrome Cache Entry: 108	ASCII text	6A07DA9FAE934BAF3F749E876BBFDD96	46A436EBA01C79ACDB225757ED80BF54BAD6416B	D8AA24ECC6CECB1A60515BC093F1C9DA38A0392612D9AB8AE0F7F36E6EEE1FAD
Chrome Cache Entry: 109	SVG Scalable Vector Graphics image	6E9A87E8892BBC18D6C8C6EC92F928BE	17C87D32A8EC9491DFD20CFF6284D78492EB759B	88098D3E47FD921122C5263DCE50EE67C662C9CB65908BE0481891DFE521A6C5
Chrome Cache Entry: 110	SVG Scalable Vector Graphics image	15C198A9E82F0ACDE67BCF984A2A392E	8CE08B234B3D67EE5BCB5DCFAFD321236FB54CA7	FF717321D89309F51BCCCC28F347E6A888E73570527845D6560A84F5D70CB3A0
Chrome Cache Entry: 111	ASCII text, with very long lines (18738)	82E0BC18D30AB58709C26FC1038994B6	454724C47A885E01A0B24F233B400AB104E16C9A	153459E1771C1628544AC1ADF0373E3BA3D2352F1AD20641C1C5D02B6EC0688D
Chrome Cache Entry: 112	SVG Scalable Vector Graphics image	F72BDA736F4134A6FBBABB07B2DF33DE	B3BC5D920302431971DDEBDDE6087DF90FCB9348	267745D6C176AFE038630C3F7C0FCDA78141FC7634F73898FFC6CBB1262C77AB
Chrome Cache Entry: 113	Web Open Font Format (Version 2), TrueType, length 74316, version 329.30932	52134B924FD61958F88323845DEFFC64	CFCCDF2C8BE593220EA949989A5ABC0B380EA2AC	658CF43DB24E9D4C57890E958AA74656A13139754DE24F19E706F0A355279E4D
Chrome Cache Entry: 116	JSON data	21A92384AC6A624BB1AA2120FF9BE317	0A3034892F1D69DA62F8FA5D6F106F37BC090351	476BF410C7E351E334018FB3D5935AA1C7E147D03488E72A3EDB90673DCBF47D
Chrome Cache Entry: 117	ASCII text, with very long lines (19015)	70D3FDA195602FE8B75E0097EED74DDE	C3B977AA4B8DFB69D651E07015031D385DED964B	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
Chrome Cache Entry: 119	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel	9917A99BD40FDCE58BBA7EF98D8633B2	381C593DBB31FA1ED5183809A14F60802107DD42	8BB7616478E8737B9969394D0AA8D1D2040EDEBB6EC48BC60DEA64B6E46803BE
Chrome Cache Entry: 120	ASCII text, with very long lines (65536), with no line terminators	F3BBC56D2D353D1C65AAEAF40B61FB7D	55FF92CAF4B0FF19AD5C60FBD40249069B9A8DBF	39CB635BA41940F63F1B48D9016EF26CDE859517B3F6B32037AC9FB0DE49FEC3
Chrome Cache Entry: 121	JSON data	5B4D3297DEA978CF0EA859545E236839	E1DBBA2F515A3760D710C1FC0C2F83A477EE01D2	1B4013ADE85D7B42EAF46BFACAC5C14A540CA0605626DC7ABE0407D85C7A4023
Chrome Cache Entry: 122	Unicode text, UTF-8 text, with very long lines (54018)	54AC3441FDCDF76F2822450B1D499397	55902F96418BD787D5192DD9DC9E6E6509629303	49BC466CD34C306E496E382E7DC94E76803FF132DDD6EC5DCF6B34C1CC2EDDFE
Chrome Cache Entry: 123	SVG Scalable Vector Graphics image	F1E2C311332EE5BEC43BEBE6A9E6FADC	51F494133615B7D92BF4BBE49D077FF6C21B7B24	2DB41F97615A8C912F676A62C88B12E2B8715F4ED188DF325737423501AA4A8A
Chrome Cache Entry: 124	HTML document, ASCII text, with very long lines (1238)	9E8F56E8E1806253BA01A95CFC3D392C	A8AF90D7482E1E99D03DE6BF88FED2315C5DD728	2595496FE48DF6FCF9B1BC57C29A744C121EB4DD11566466BC13D2E52E6BBCC8
Chrome Cache Entry: 125	ASCII text, with very long lines (5371)	16BC2E761CB8E42CA1A6ACA542691CD5	266077F912A4E2A41B2619DF60E2DCDE28B8F6FF	0B3B7520D6CD4BCD95A341A7E3F55B23E8B16CD47C6572017D1E58B3D55E81A7
Chrome Cache Entry: 127	SVG Scalable Vector Graphics image	7393DB490C10E1225AF2BEA630DFF600	A11FFD89D850C3B3F02CBA9FEE2DF44002916D7A	722DFE315686A5841D0A0D00F34DF8F706D2C6E24551D46A5EBE971FE4AF62D2
Chrome Cache Entry: 130	ASCII text, with very long lines (65536), with no line terminators	75F79E96180983C041E2A52872003E91	73FA328FEDF0430994B8D3AB5607D50D14CB41C0	918D51E0781CF1CE82856FC12E345ECADC7BB067955363BC3725DDBC52698DA5
Chrome Cache Entry: 131	Web Open Font Format (Version 2), TrueType, length 15740, version 1.0	B9C29351C46F3E8C8631C4002457F48A	E57E59C5780995FF2937AB2B511A769212974A87	F75911313E1C7802C23345AB57E754D87801581706780C993FB23FF4E0FE62EF
Chrome Cache Entry: 132	HTML document, ASCII text, with very long lines (23389), with CRLF line terminators	AD74ACE2A26B3D0A7AD1D223901FF1D9	F3EE8B3DF455260748B9DC154DC299371D1B4D01	6E05E4797B40DCFB4B7DA172B87B7C68693A31DE24C1A63FD7DA8ADAF823550D
Chrome Cache Entry: 133	ASCII text, with very long lines (49244)	20E71BC510144B0A99684AF1D855C9D0	D82D63DC728C6CCDBD33746E98B943945BC0F602	0E9608F5401A5AB05854DE996BEA5416605CE888AD65E4F837EF113F9AB89C13
Chrome Cache Entry: 134	HTML document, Unicode text, UTF-8 text	4EBD5EE8A39A63D0DE667A572389AD60	F1AE73730117286826783314FBA22F74FB81C640	09D7486BC51857F9046D150331B7C17918E1BA5D1498B7DE9AE69ADE84DA3704
Chrome Cache Entry: 136	ASCII text, with very long lines (32012)	5F48FC77CAC90C4778FA24EC9C57F37D	9E89D1515BC4C371B86F4CB1002FD8E377C1829F	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
Chrome Cache Entry: 138	ASCII text, with very long lines (65325)	450FC463B8B1A349DF717056FBB3E078	895125A4522A3B10EE7ADA06EE6503587CBF95C5	2C0F3DCFE93D7E380C290FE4AB838ED8CADFF1596D62697F5444BE460D1F876D
Chrome Cache Entry: 139	ASCII text, with no line terminators	EB3CE3190D8A58E048D35E620747D3A5	76B5B6461189F839B018EF5C785DB4836B818B7D	2D670E2962D8D805B95912CACA0822CE7C6913636BA40373C6E6AEA73CAC8457
Chrome Cache Entry: 140	SVG Scalable Vector Graphics image	A7BDE62B304E817FC82B3EB447A4E61F	F9308F996F2202BCF9B304538EB5EFD323586D5C	BAC79138CB730C6BFA63BEF02D7E5906AEE727BB54DF15878823426822BADAAA
Chrome Cache Entry: 141	SVG Scalable Vector Graphics image	950D42D1105146A1868BA45AC2ED54F5	2FCA57DEC95EA56E3433ADEA46ADF40E62F09501	366A40C3627E67F97164976D5FF38B5484716E834D08FEFE252A6EA37FEDA895
Chrome Cache Entry: 142	ASCII text, with very long lines (32030)	E071ABDA8FE61194711CFC2AB99FE104	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
Chrome Cache Entry: 143	Unicode text, UTF-8 text, with very long lines (65528), with no line terminators	763AD858F8D1DA9643DD036B2B7B34EF	7B44E4DDB089CDD89D8DFC8096FF3B54CEADB82A	D22D5139B39F6446928D715827EFEE579F256F8D685D29511CD4A3B5114196F7
Chrome Cache Entry: 145	C++ source, Unicode text, UTF-8 text, with very long lines (1007)	B375DF18F822E8DA152E6B5EDC835C4F	1D1B77F2BB3370ED6F79B03CB0474D4AD3638218	7E87B68DF0DC3C7F037EA688EBF9CE67524657EE96D026E0543F4EC0C30B2D35
Chrome Cache Entry: 146	ASCII text, with very long lines (64402)	F50CAC4599187BE2AEB84DB38CCF3BD3	80FCAC3F89D98A72DA61B03EB11FE3425FB1AFCE	24602E2F20FEE9364BD889FBBA1DA81A3E172AD5136D7B83778F8698DDB949E7
Chrome Cache Entry: 147	Web Open Font Format (Version 2), TrueType, length 15920, version 1.0	3A44E06EB954B96AA043227F3534189D	23CEF6993DDB2B2979E8E7647FC3763694E2BA7D	B019538234514166EC7665359D097403358F8A4C991901983922FB4D56989F1E
Chrome Cache Entry: 148	ASCII text, with very long lines (5412)	E2B7A1B1106981EF9F6AC07B00E28B00	F9378A052A6424B3019269242DE02BAA9AEEB0CE	12155177349A2A738FEC0CE29CB3F627C37FA99BBFCA74137399149D72508EA6
Chrome Cache Entry: 151	JPEG image data, baseline, precision 8, 30x30, components 3	DB1FF890182ABDF57B0561A7C04195DF	C0AC469A5997F31ADCEC575214D244D90C76ABD1	7A62CF7D76DD6A80E9BAC58D21DA2C5FCA0200E394C157C67504B9B613C9F5A9
Chrome Cache Entry: 152	ASCII text, with very long lines (65536), with no line terminators	D047965855A41D9A743271EF6C507395	37CA10CB778DEED893B9CAD017EA3522CE6F3A42	26431755B6557A83D5FC83ED7A9F7A803BE7B6FE9E4723F16C82DD81694D080E
Chrome Cache Entry: 153	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651	9F368BC4580FED907775F31C6B26D6CF	E393A40B3E337F43057EEE3DE189F197AB056451	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
Chrome Cache Entry: 155	HTML document, ASCII text, with very long lines (65522)	1CEA4C021F7DBFFF0BF851D7B2EDA864	4BC70851FE2A13442597C6F9FE3C62EE52D04DDF	71BACBF9B3BAA263F9122EABF4D92EE8CF0C2223EF364EE079B4D757099F77F4
Chrome Cache Entry: 157	SVG Scalable Vector Graphics image	3C685C673DEB2A6D84FB7C0029B03E63	326431CD28C5582DFBECA042FA9CBE82AF17A6AA	EEB6CD0CE94DCFEA6BD2ACA222DA7B1583D74800EA9C94640FF8FA06C13FB044
Chrome Cache Entry: 159	SVG Scalable Vector Graphics image	E05350ECB3F3A562A95C949D80618E7B	E45603CFBB6F87FCC5CAF298E8B1CC12294D345E	E0B8A59C272DC9A1D9A07D461363F96C3B3BD3DF2DB778F8F99743DFFFD51D78
Chrome Cache Entry: 161	HTML document, ASCII text, with very long lines (857)	A241E6F48893C0EE3640D1E494108DDE	49D17D964E33E6675747376478FF952301BF7646	ADCDF1A90A05B8A4C391689E319455552CA4845C50833B2EB91D5339DA6B4124
Chrome Cache Entry: 162	PNG image data, 320 x 132, 8-bit/color RGBA, non-interlaced	FB05D8D6B20A137E26ABBBB397935343	45CBA22706760C28F0573070530CAE7317C7B5F4	CF97C1C62FA69EC6266D56A01EF57A5DF1D715A1ACCB6B3D2ADA7AE444561599
Chrome Cache Entry: 163	ASCII text	48BE14D383C80BEE3C0F34215FD5C467	BEE0863DE9AC198217B469A5CA74E3979E5A5214	694ADC42B1E12C4EDC69F43C2AAAFEA20E28D55D4EE73C3505CD1BF8B90E3452
Chrome Cache Entry: 164	HTML document, ASCII text, with very long lines (8796), with no line terminators	C6A90A566CB06FC9B3FFFA496E50874C	9D7CE1C5F576474F88B79399158E3881D24461F0	C05407572F3A85559E74489F5AFBFF7E49AB8E7B4C47A1BEB1F5A4826E96BF44
Chrome Cache Entry: 165	exported SGML document, ASCII text	0A949763D70EA4A891C8DE6F071F60E0	6BDFA134720A6C24E9E74DCF92DFCCEC677B2534	CAECD203F60286176AA48C7930EA683BC88D9C00970DA66A12FDCFD9F987E414
Chrome Cache Entry: 166	SVG Scalable Vector Graphics image	460A4F30268E7CA89CAF686BC6D158D8	F97D64336AEDB7DB5AFC0A9DFAC52756C3547D60	32889ACAFD84EDEEC513DB6131252FA97FFFF00FEE6272D05E35E2D95216E30F
Chrome Cache Entry: 167	Unicode text, UTF-8 text	4C078F0E3316B38F270AA5644F676567	0A7652FD52B893AC0F3CAB4212D7C8FC60115EEE	80DF21808B4F12FD9EDB48DDE6A947EA75E8E60F5065A003DF4C66AB8A3E2299
Chrome Cache Entry: 168	Unicode text, UTF-8 text, with very long lines (40549), with no line terminators	9B66424CF366864EB27FD86BE06CA08B	5E62746D771F37863706D43ADD10ED6BCA4B7FF3	45CC7D60437A9144CB85B2071E4F472A86BE8C58B1DE2E01FB51A808AAB579DF
Chrome Cache Entry: 170	SVG Scalable Vector Graphics image	B74203EB9C9B702676441AE7E844A0B5	9F2F9A4F8D570E6B69E12279C65303FEAEF1CFA5	5FA35769DB66B33D6408F378E8AA68FA060331F0CC9DD6AD41FB7366082AAD34
Chrome Cache Entry: 171	ASCII text, with very long lines (65352)	CD0BD313BA7B4EA26EEF2A81D281010E	1B1472536703E5B10CACCA83FFE5E36C2E67F596	8AAB2C13D56FDC127D52FB24D84E126FFB2F1E3FB0066652E0608219ADB8132C
Chrome Cache Entry: 173	SVG Scalable Vector Graphics image	F069204380261A6209E0A8D09296ECAC	FF391D47B9F65031EB1285A358D67A9ED57816BE	09A14CBD902AAD9FE40F2351DB2AC5593AD897AED8810B9C6AEB0E56389FF100
Chrome Cache Entry: 175	PDF document, version 1.7	523C4961434ACE4780D06699C76745C4	0167671978F139610E0C64ED06B301AA8889960D	7B24AFE5BFF42DAB7CC0DB43218696B4F07624EE6197B201164B3265300904D2
Chrome Cache Entry: 176	JSON data	52075233FDB8A600B076D197F84CC417	59FA4C14C79622A093B96DBC384085BF36857EBB	CB54DAAA82D5FF826634A6E4751DE253101841D07BA84ABB43A90862A319454C
Chrome Cache Entry: 177	GIF image data, version 89a, 24 x 24	FAA74E8C61FC64D5EDB11613C7EEAD2C	E043879D3EE94A3EDF10260F21F44BFA4A6FC66E	483C4A0396691993A641EC409C44B8B7E1DAAB0AE7E2B2944C4BC59520BB7655
Chrome Cache Entry: 178	Unicode text, UTF-8 text, with very long lines (65456), with no line terminators	9C8B67C9801F3CA808CE36928827D5C8	5E913179AC1C9C72CBEE50F496BDE1DE1533D33D	A4E10817DB051E3B2A2995B25910F9ED81A11BC7B05F1335354875B287E40016
Chrome Cache Entry: 180	ASCII text	82E85B357E743609100B88349BA6C33B	D439A1B5FD7EC55BE0FF71B000F4E9E7239D301E	0D157A65C6DFE59CE72477BC3CCAA739DE878C5C96FDC472A1255B6694CE8C9A
Chrome Cache Entry: 182	SVG Scalable Vector Graphics image	28E82FA827563F85D2986895C1162311	EED9FC8E8C5AA8A579804D130C705DF4ACFC7559	7D6E14CF6226C74C26E2141180EADC944EF4CE8565E9B6DD2670EC202417A764
Chrome Cache Entry: 183	HTML document, ASCII text	A34AC19F4AFAE63ADC5D2F7BC970C07F	A82190FC530C265AA40A045C21770D967F4767B8	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
Chrome Cache Entry: 184	JPEG image data, baseline, precision 8, 130x130, components 3	5BF27EDA093FD9B43BC5B22EE84C3DDC	2B56EC6D98455B54A780387E8576915386239546	0DC3944CA065B7F67FCE90FBD40F17926DCE481943C59A50D5C7EB096E4198C6
Chrome Cache Entry: 185	ASCII text, with very long lines (54456)	251D28BD755F5269A4531DF8A81D5664	C0F035B41B23C6E8FAB735F618AA3CFF0897B4F9	AFDC6BF2DE981FFD7D370B76F44E7580572F197EFBE214B9CFA4005D189D8EAE
Chrome Cache Entry: 186	ASCII text, with very long lines (32065)	2F6B11A7E914718E0290410E85366FE9	69BB69E25CA7D5EF0935317584E6153F3FD9A88C	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
Chrome Cache Entry: 187	SVG Scalable Vector Graphics image	2624927CA6A9B27A89EA3771016667AE	CBC4C26EDB61A6F0945E45F10EBAA0AB0AD2EBCA	E07FBF17B3C7CA2CDA9C4E54CDD66CB0AA63D368232CBB2C9AED5559720BF96C
Chrome Cache Entry: 190	Unicode text, UTF-8 text, with very long lines (697)	9DAE89A948638B6D3EF58A5A77284A30	88905A1B07003B30F183DDB880D927256D989BA5	F0149685B74013C3847031669DB23D685369DC04E23882800246EAD857010925
Chrome Cache Entry: 191	Algol 68 source, ASCII text	8BD15388CDC6864187157338605CF634	98E4E828CF9B8D9693C1E4771BAF68883FD243A9	89FEEE0C8C3596319B0703AD178C91893068BE20076D823A67827B3193B72B7B
Chrome Cache Entry: 193	Web Open Font Format (Version 2), TrueType, length 15860, version 1.0	E9F5AAF547F165386CD313B995DDDD8E	ACDEF5603C2387B0E5BFFD744B679A24A8BC1968	F5AEBDFEA35D1E7656EF4ACC5DB1F243209755AE3300943EF8FC6280F363C860
Chrome Cache Entry: 194	HTML document, ASCII text	175F17658434A1778A3B28E0F7C3E7E5	13E84E68D8D1B4E6D576D473D69C505C1EF452D7	D927F93FAAEE6C445206C0794628C3098D33DEF7EA5EF1B10C1B1C30848F2E8B
Chrome Cache Entry: 196	SVG Scalable Vector Graphics image	1C49E5945EBBB8F01334868D4CF3EB41	4CE53233DA75C9853E999C7C4C33ECF79360DDDD	AFA286C8EA1941EAEC589ED6A2103C5A845F3FF76A7423BA985F449465005163
Chrome Cache Entry: 197	Web Open Font Format (Version 2), TrueType, length 15744, version 1.0	15D9F621C3BD1599F0169DCF0BD5E63E	7CA9C5967F3BB8BFFEAB24B639B49C1E7D03FA52	F6734F8177112C0839B961F96D813FCB189D81B60E96C33278C1983B6F419615
Chrome Cache Entry: 198	ASCII text, with very long lines (65536), with no line terminators	727BE654B9E403C46A6E8461A15F0C31	1F936549BA5CD541348E7A73FEEB0FE76A99DFF7	E5F61BA3FC40FD6479BA7935F38B5B22740BA2512ACCC0F3DE980481FDF3894C
Chrome Cache Entry: 201	ASCII text, with very long lines (48664)	14D449EB8876FA55E1EF3C2CC52B0C17	A9545831803B1359CFEED47E3B4D6BAE68E40E99	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
Chrome Cache Entry: 203	ASCII text	A1B623B480C10860325CEC82F031FF4A	9EE81458C3EF11577DAA3B7BC34E693BB5D36D89	31D196AFC7BF97B61BE0A9881F623B3B8A7B56D4B0C08C6B78C37CE92D7827B2
Chrome Cache Entry: 204	JSON data	86DC2DB91D7AF6F6727FED4CE342F6B4	5E47CD7A4BC0C61FD3D28934AC07B0C78754C716	64B5EC22D72DC0A5B72B7684DEB64D17B456BEBA5A3520F73BA2411EBA555BBB
Chrome Cache Entry: 206	ASCII text	CBA4ED6C809962AC6C2A26842183B67A	3F8E077AFC8EF5BAB7FA626EA782DAE34D419BBE	AAE65C231008861C6430EBE296C926E728C4D2CCB1492F86E42D760E9B67D9A5
Chrome Cache Entry: 207	ASCII text, with no line terminators	2388EC7D39531EB7789842E2EE3A47B2	F79F957BAB68B5157EB4968B8FB4AE057304E039	037FF51F36F601915E7C6DBA2B6C347A840E48825BF34A23D68B501AEE485C8D
Chrome Cache Entry: 208	SVG Scalable Vector Graphics image	8F1B37788128093E13E5C8EBF4FFA176	10358D242BAFAD85CF323B69C183348A58576815	081BF99D3C2390036A2D9C7E9485316BCD049F90A74E982F1EEBCFD4D9B178E3
Chrome Cache Entry: 209	ASCII text, with very long lines (65536), with no line terminators	8DE96FD86D8C160AEA774F082D5F7CFA	A7F13F0D368B917318469E956200EEFBE519F367	0F9CA70A7855A3BF9F9EDB694CFCFD96E5D8D70E85A5DD952909CA953573B82E
Chrome Cache Entry: 210	ASCII text, with very long lines (1601)	E37D22AF5214486617B5C1B8133FC836	496EEA1E824B8E74D3FACF38C144B894D7C7B62D	B8EA113C9234DDF9C7E0CF80F147A573D41AC1A02097A0D2873C05C12191871F
Chrome Cache Entry: 213	C++ source, ASCII text	92AEF4205A17B4774F25F8B3C9BAFDBB	795A2112A0C779A4B2A94761F26EC9231E09367E	E3930E536E27FD051A05943B1887074D9E68EF1E247A71012AAF5697CE34F7E1
Chrome Cache Entry: 214	JSON data	65BBA91358BC78255784D50C6DE97CB3	4A2A0345318DACF99323AED94130A34A97A8C5D4	75B7CCAEA73A3C1D4BCE144A842BB2915C17DD66C3F103E2720992C9C3CB8DCF

Phishing

Yara detected HtmlPhish10

Source: Yara match	File source: 4.7.pages.csv, type: HTML
Source: Yara match	File source: 4.7.pages.csv, type: HTML
Source: Yara match	File source: 4.8.pages.csv, type: HTML
Source: Yara match	File source: 4.8.pages.csv, type: HTML
Source: Yara match	File source: 4.7.pages.csv, type: HTML
Source: Yara match	File source: 4.9.pages.csv, type: HTML

Phishing site detected (based on image similarity)

Source: https://longz.bigordermilok.com/boxmine/

Matcher: Found strong image similarity, brand: MICROSOFT

Phishing site or detected (based on various text indicators)

Source: Chrome DOM: 3.6

OCR Text: new pdf (2) (l).pdf (432 kB) Download 1/1 X Close 22 Apr 202419:31 Automatic Zoom of 1 REVIEW DOCUMENT HERE

HTML body contains low number of good links

Source: https://www.jottacloud.com/webapp_static/pdf-viewer/web/viewer.html?file=https%3A%2F%2F093-up-r.jotta.cloud%2Ffiles%2Fv1%2Fdl%2FeyJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2IiwiemlwIjoiREVGIn0..uOnc7yq_osSVezDF5ydxiw.KgWnxlaLangXgFHgL64YVU6V_47rBHOvB2CjVUUxkr1KDCE6NbVeozXPm33FKJaldU6B99rp0IZG6ebG6KDbdPbzErWZRg55Coi58YVUl_jWOSe4fEtmYPJWc6Li8S1LLOtThrCoHtKYFXKwuqbO9cuwS_Hc0AZzjV6YzyxZeo3yj-sdIVbm0oDC8igOsLUkDeRPqgMAUGsC4uD4o_9CjZoSlnf-K3D-qwHtqIFaF0U4Di31XZYP9SvGbNloxNgwgMJsXcERLY8NIfIRvZOYfOHsRrAqiC3pg9wgvScP1RM.ZafFNXbJOwOiPo-zDG0m_A%2Fnew%2520pdf%2520(2)%2520(1).pdf%3Faccess_token%3DeyJraWQiOiJkZDBhMWIyOS02MjIyLTRmMWMtYjhkOS1jOTFiY2Q1OTRiMjkiLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJhdWQiOiJhY2NvdW50Iiwic3ViIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiMTg5NzU5ODciLCJzdCI6IkNpQndYemd6WlRVME9HTTRZekZoTlRRNFlURmhZMkV5T0dJeE9EazNOVGs0TnhJQ0NBRWFKUm9qTXpVNVpXVTRZakV4TUdJNFkyRTRORFkwT1RrNE9EUXlZVFZrTWpJM1pXUTVOems9IiwiaXNzIjoiam90dGEiLCJ0eXAiOiJCZWFyZXIiLCJleHAiOjE3MTM5ODgxODEsInVzZXJuYW1lIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiM...	HTTP Parser: Number of links: 0
Source: https://longz.bigordermilok.com/boxmine/	HTTP Parser: Number of links: 0

HTML body contains password input but no form action

Source: https://www.jottacloud.com/webapp_static/pdf-viewer/web/viewer.html?file=https%3A%2F%2F093-up-r.jotta.cloud%2Ffiles%2Fv1%2Fdl%2FeyJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2IiwiemlwIjoiREVGIn0..uOnc7yq_osSVezDF5ydxiw.KgWnxlaLangXgFHgL64YVU6V_47rBHOvB2CjVUUxkr1KDCE6NbVeozXPm33FKJaldU6B99rp0IZG6ebG6KDbdPbzErWZRg55Coi58YVUl_jWOSe4fEtmYPJWc6Li8S1LLOtThrCoHtKYFXKwuqbO9cuwS_Hc0AZzjV6YzyxZeo3yj-sdIVbm0oDC8igOsLUkDeRPqgMAUGsC4uD4o_9CjZoSlnf-K3D-qwHtqIFaF0U4Di31XZYP9SvGbNloxNgwgMJsXcERLY8NIfIRvZOYfOHsRrAqiC3pg9wgvScP1RM.ZafFNXbJOwOiPo-zDG0m_A%2Fnew%2520pdf%2520(2)%2520(1).pdf%3Faccess_token%3DeyJraWQiOiJkZDBhMWIyOS02MjIyLTRmMWMtYjhkOS1jOTFiY2Q1OTRiMjkiLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJhdWQiOiJhY2NvdW50Iiwic3ViIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiMTg5NzU5ODciLCJzdCI6IkNpQndYemd6WlRVME9HTTRZekZoTlRRNFlURmhZMkV5T0dJeE9EazNOVGs0TnhJQ0NBRWFKUm9qTXpVNVpXVTRZakV4TUdJNFkyRTRORFkwT1RrNE9EUXlZVFZrTWpJM1pXUTVOems9IiwiaXNzIjoiam90dGEiLCJ0eXAiOiJCZWFyZXIiLCJleHAiOjE3MTM5ODgxODEsInVzZXJuYW1lIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiM...	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://longz.bigordermilok.com/boxmine/	HTTP Parser: <input type="password" .../> found but no <form action="...

HTML page contains hidden URLs or javascript code

Source: https://longz.bigordermilok.com/boxmine/

HTTP Parser: Base64 decoded:  <input type="hidden" id="f" value="next.php">  <input type="hidden" id="rdrt" value="https://www.office.com">

HTML title does not match URL

Source: https://www.jottacloud.com/webapp_static/pdf-viewer/web/viewer.html?file=https%3A%2F%2F093-up-r.jotta.cloud%2Ffiles%2Fv1%2Fdl%2FeyJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2IiwiemlwIjoiREVGIn0..uOnc7yq_osSVezDF5ydxiw.KgWnxlaLangXgFHgL64YVU6V_47rBHOvB2CjVUUxkr1KDCE6NbVeozXPm33FKJaldU6B99rp0IZG6ebG6KDbdPbzErWZRg55Coi58YVUl_jWOSe4fEtmYPJWc6Li8S1LLOtThrCoHtKYFXKwuqbO9cuwS_Hc0AZzjV6YzyxZeo3yj-sdIVbm0oDC8igOsLUkDeRPqgMAUGsC4uD4o_9CjZoSlnf-K3D-qwHtqIFaF0U4Di31XZYP9SvGbNloxNgwgMJsXcERLY8NIfIRvZOYfOHsRrAqiC3pg9wgvScP1RM.ZafFNXbJOwOiPo-zDG0m_A%2Fnew%2520pdf%2520(2)%2520(1).pdf%3Faccess_token%3DeyJraWQiOiJkZDBhMWIyOS02MjIyLTRmMWMtYjhkOS1jOTFiY2Q1OTRiMjkiLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJhdWQiOiJhY2NvdW50Iiwic3ViIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiMTg5NzU5ODciLCJzdCI6IkNpQndYemd6WlRVME9HTTRZekZoTlRRNFlURmhZMkV5T0dJeE9EazNOVGs0TnhJQ0NBRWFKUm9qTXpVNVpXVTRZakV4TUdJNFkyRTRORFkwT1RrNE9EUXlZVFZrTWpJM1pXUTVOems9IiwiaXNzIjoiam90dGEiLCJ0eXAiOiJCZWFyZXIiLCJleHAiOjE3MTM5ODgxODEsInVzZXJuYW1lIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiM...	HTTP Parser: Title: PDF.js viewer does not match URL
Source: https://longz.bigordermilok.com/boxmine/	HTTP Parser: Title: Login does not match URL

Source: https://www.jottacloud.com/webapp_static/pdf-viewer/web/viewer.html?file=https%3A%2F%2F093-up-r.jotta.cloud%2Ffiles%2Fv1%2Fdl%2FeyJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2IiwiemlwIjoiREVGIn0..uOnc7yq_osSVezDF5ydxiw.KgWnxlaLangXgFHgL64YVU6V_47rBHOvB2CjVUUxkr1KDCE6NbVeozXPm33FKJaldU6B99rp0IZG6ebG6KDbdPbzErWZRg55Coi58YVUl_jWOSe4fEtmYPJWc6Li8S1LLOtThrCoHtKYFXKwuqbO9cuwS_Hc0AZzjV6YzyxZeo3yj-sdIVbm0oDC8igOsLUkDeRPqgMAUGsC4uD4o_9CjZoSlnf-K3D-qwHtqIFaF0U4Di31XZYP9SvGbNloxNgwgMJsXcERLY8NIfIRvZOYfOHsRrAqiC3pg9wgvScP1RM.ZafFNXbJOwOiPo-zDG0m_A%2Fnew%2520pdf%2520(2)%2520(1).pdf%3Faccess_token%3DeyJraWQiOiJkZDBhMWIyOS02MjIyLTRmMWMtYjhkOS1jOTFiY2Q1OTRiMjkiLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJhdWQiOiJhY2NvdW50Iiwic3ViIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiMTg5NzU5ODciLCJzdCI6IkNpQndYemd6WlRVME9HTTRZekZoTlRRNFlURmhZMkV5T0dJeE9EazNOVGs0TnhJQ0NBRWFKUm9qTXpVNVpXVTRZakV4TUdJNFkyRTRORFkwT1RrNE9EUXlZVFZrTWpJM1pXUTVOems9IiwiaXNzIjoiam90dGEiLCJ0eXAiOiJCZWFyZXIiLCJleHAiOjE3MTM5ODgxODEsInVzZXJuYW1lIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiM...	HTTP Parser: <input type="password" .../> found
Source: https://longz.bigordermilok.com/boxmine/	HTTP Parser: <input type="password" .../> found

Source: https://policy.app.cookieinformation.com/cookiesharingiframe.html	HTTP Parser: No favicon
Source: https://www.jottacloud.com/s/359ee8b110b8ca8464998842a5d227ed979	HTTP Parser: No favicon
Source: https://www.jottacloud.com/s/359ee8b110b8ca8464998842a5d227ed979/thumbs	HTTP Parser: No favicon
Source: https://www.jottacloud.com/s/359ee8b110b8ca8464998842a5d227ed979/thumbs	HTTP Parser: No favicon
Source: https://www.jottacloud.com/webapp_static/pdf-viewer/web/viewer.html?file=https%3A%2F%2F093-up-r.jotta.cloud%2Ffiles%2Fv1%2Fdl%2FeyJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2IiwiemlwIjoiREVGIn0..uOnc7yq_osSVezDF5ydxiw.KgWnxlaLangXgFHgL64YVU6V_47rBHOvB2CjVUUxkr1KDCE6NbVeozXPm33FKJaldU6B99rp0IZG6ebG6KDbdPbzErWZRg55Coi58YVUl_jWOSe4fEtmYPJWc6Li8S1LLOtThrCoHtKYFXKwuqbO9cuwS_Hc0AZzjV6YzyxZeo3yj-sdIVbm0oDC8igOsLUkDeRPqgMAUGsC4uD4o_9CjZoSlnf-K3D-qwHtqIFaF0U4Di31XZYP9SvGbNloxNgwgMJsXcERLY8NIfIRvZOYfOHsRrAqiC3pg9wgvScP1RM.ZafFNXbJOwOiPo-zDG0m_A%2Fnew%2520pdf%2520(2)%2520(1).pdf%3Faccess_token%3DeyJraWQiOiJkZDBhMWIyOS02MjIyLTRmMWMtYjhkOS1jOTFiY2Q1OTRiMjkiLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJhdWQiOiJhY2NvdW50Iiwic3ViIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiMTg5NzU5ODciLCJzdCI6IkNpQndYemd6WlRVME9HTTRZekZoTlRRNFlURmhZMkV5T0dJeE9EazNOVGs0TnhJQ0NBRWFKUm9qTXpVNVpXVTRZakV4TUdJNFkyRTRORFkwT1RrNE9EUXlZVFZrTWpJM1pXUTVOems9IiwiaXNzIjoiam90dGEiLCJ0eXAiOiJCZWFyZXIiLCJleHAiOjE3MTM5ODgxODEsInVzZXJuYW1lIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiM...	HTTP Parser: No favicon
Source: https://www.jottacloud.com/webapp_static/pdf-viewer/web/viewer.html?file=https%3A%2F%2F093-up-r.jotta.cloud%2Ffiles%2Fv1%2Fdl%2FeyJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2IiwiemlwIjoiREVGIn0..uOnc7yq_osSVezDF5ydxiw.KgWnxlaLangXgFHgL64YVU6V_47rBHOvB2CjVUUxkr1KDCE6NbVeozXPm33FKJaldU6B99rp0IZG6ebG6KDbdPbzErWZRg55Coi58YVUl_jWOSe4fEtmYPJWc6Li8S1LLOtThrCoHtKYFXKwuqbO9cuwS_Hc0AZzjV6YzyxZeo3yj-sdIVbm0oDC8igOsLUkDeRPqgMAUGsC4uD4o_9CjZoSlnf-K3D-qwHtqIFaF0U4Di31XZYP9SvGbNloxNgwgMJsXcERLY8NIfIRvZOYfOHsRrAqiC3pg9wgvScP1RM.ZafFNXbJOwOiPo-zDG0m_A%2Fnew%2520pdf%2520(2)%2520(1).pdf%3Faccess_token%3DeyJraWQiOiJkZDBhMWIyOS02MjIyLTRmMWMtYjhkOS1jOTFiY2Q1OTRiMjkiLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJhdWQiOiJhY2NvdW50Iiwic3ViIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiMTg5NzU5ODciLCJzdCI6IkNpQndYemd6WlRVME9HTTRZekZoTlRRNFlURmhZMkV5T0dJeE9EazNOVGs0TnhJQ0NBRWFKUm9qTXpVNVpXVTRZakV4TUdJNFkyRTRORFkwT1RrNE9EUXlZVFZrTWpJM1pXUTVOems9IiwiaXNzIjoiam90dGEiLCJ0eXAiOiJCZWFyZXIiLCJleHAiOjE3MTM5ODgxODEsInVzZXJuYW1lIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiM...	HTTP Parser: No favicon
Source: https://www.jottacloud.com/webapp_static/pdf-viewer/web/viewer.html?file=https%3A%2F%2F093-up-r.jotta.cloud%2Ffiles%2Fv1%2Fdl%2FeyJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2IiwiemlwIjoiREVGIn0..uOnc7yq_osSVezDF5ydxiw.KgWnxlaLangXgFHgL64YVU6V_47rBHOvB2CjVUUxkr1KDCE6NbVeozXPm33FKJaldU6B99rp0IZG6ebG6KDbdPbzErWZRg55Coi58YVUl_jWOSe4fEtmYPJWc6Li8S1LLOtThrCoHtKYFXKwuqbO9cuwS_Hc0AZzjV6YzyxZeo3yj-sdIVbm0oDC8igOsLUkDeRPqgMAUGsC4uD4o_9CjZoSlnf-K3D-qwHtqIFaF0U4Di31XZYP9SvGbNloxNgwgMJsXcERLY8NIfIRvZOYfOHsRrAqiC3pg9wgvScP1RM.ZafFNXbJOwOiPo-zDG0m_A%2Fnew%2520pdf%2520(2)%2520(1).pdf%3Faccess_token%3DeyJraWQiOiJkZDBhMWIyOS02MjIyLTRmMWMtYjhkOS1jOTFiY2Q1OTRiMjkiLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJhdWQiOiJhY2NvdW50Iiwic3ViIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiMTg5NzU5ODciLCJzdCI6IkNpQndYemd6WlRVME9HTTRZekZoTlRRNFlURmhZMkV5T0dJeE9EazNOVGs0TnhJQ0NBRWFKUm9qTXpVNVpXVTRZakV4TUdJNFkyRTRORFkwT1RrNE9EUXlZVFZrTWpJM1pXUTVOems9IiwiaXNzIjoiam90dGEiLCJ0eXAiOiJCZWFyZXIiLCJleHAiOjE3MTM5ODgxODEsInVzZXJuYW1lIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiM...	HTTP Parser: No favicon
Source: https://longz.bigordermilok.com/boxmine/	HTTP Parser: No favicon
Source: https://longz.bigordermilok.com/boxmine/	HTTP Parser: No favicon
Source: https://longz.bigordermilok.com/boxmine/	HTTP Parser: No favicon

Source: https://www.jottacloud.com/webapp_static/pdf-viewer/web/viewer.html?file=https%3A%2F%2F093-up-r.jotta.cloud%2Ffiles%2Fv1%2Fdl%2FeyJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2IiwiemlwIjoiREVGIn0..uOnc7yq_osSVezDF5ydxiw.KgWnxlaLangXgFHgL64YVU6V_47rBHOvB2CjVUUxkr1KDCE6NbVeozXPm33FKJaldU6B99rp0IZG6ebG6KDbdPbzErWZRg55Coi58YVUl_jWOSe4fEtmYPJWc6Li8S1LLOtThrCoHtKYFXKwuqbO9cuwS_Hc0AZzjV6YzyxZeo3yj-sdIVbm0oDC8igOsLUkDeRPqgMAUGsC4uD4o_9CjZoSlnf-K3D-qwHtqIFaF0U4Di31XZYP9SvGbNloxNgwgMJsXcERLY8NIfIRvZOYfOHsRrAqiC3pg9wgvScP1RM.ZafFNXbJOwOiPo-zDG0m_A%2Fnew%2520pdf%2520(2)%2520(1).pdf%3Faccess_token%3DeyJraWQiOiJkZDBhMWIyOS02MjIyLTRmMWMtYjhkOS1jOTFiY2Q1OTRiMjkiLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJhdWQiOiJhY2NvdW50Iiwic3ViIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiMTg5NzU5ODciLCJzdCI6IkNpQndYemd6WlRVME9HTTRZekZoTlRRNFlURmhZMkV5T0dJeE9EazNOVGs0TnhJQ0NBRWFKUm9qTXpVNVpXVTRZakV4TUdJNFkyRTRORFkwT1RrNE9EUXlZVFZrTWpJM1pXUTVOems9IiwiaXNzIjoiam90dGEiLCJ0eXAiOiJCZWFyZXIiLCJleHAiOjE3MTM5ODgxODEsInVzZXJuYW1lIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiM	HTTP Parser: No <meta name="author".. found
Source: https://www.jottacloud.com/webapp_static/pdf-viewer/web/viewer.html?file=https%3A%2F%2F093-up-r.jotta.cloud%2Ffiles%2Fv1%2Fdl%2FeyJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2IiwiemlwIjoiREVGIn0..uOnc7yq_osSVezDF5ydxiw.KgWnxlaLangXgFHgL64YVU6V_47rBHOvB2CjVUUxkr1KDCE6NbVeozXPm33FKJaldU6B99rp0IZG6ebG6KDbdPbzErWZRg55Coi58YVUl_jWOSe4fEtmYPJWc6Li8S1LLOtThrCoHtKYFXKwuqbO9cuwS_Hc0AZzjV6YzyxZeo3yj-sdIVbm0oDC8igOsLUkDeRPqgMAUGsC4uD4o_9CjZoSlnf-K3D-qwHtqIFaF0U4Di31XZYP9SvGbNloxNgwgMJsXcERLY8NIfIRvZOYfOHsRrAqiC3pg9wgvScP1RM.ZafFNXbJOwOiPo-zDG0m_A%2Fnew%2520pdf%2520(2)%2520(1).pdf%3Faccess_token%3DeyJraWQiOiJkZDBhMWIyOS02MjIyLTRmMWMtYjhkOS1jOTFiY2Q1OTRiMjkiLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJhdWQiOiJhY2NvdW50Iiwic3ViIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiMTg5NzU5ODciLCJzdCI6IkNpQndYemd6WlRVME9HTTRZekZoTlRRNFlURmhZMkV5T0dJeE9EazNOVGs0TnhJQ0NBRWFKUm9qTXpVNVpXVTRZakV4TUdJNFkyRTRORFkwT1RrNE9EUXlZVFZrTWpJM1pXUTVOems9IiwiaXNzIjoiam90dGEiLCJ0eXAiOiJCZWFyZXIiLCJleHAiOjE3MTM5ODgxODEsInVzZXJuYW1lIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiM	HTTP Parser: No <meta name="author".. found
Source: https://www.jottacloud.com/webapp_static/pdf-viewer/web/viewer.html?file=https%3A%2F%2F093-up-r.jotta.cloud%2Ffiles%2Fv1%2Fdl%2FeyJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2IiwiemlwIjoiREVGIn0..uOnc7yq_osSVezDF5ydxiw.KgWnxlaLangXgFHgL64YVU6V_47rBHOvB2CjVUUxkr1KDCE6NbVeozXPm33FKJaldU6B99rp0IZG6ebG6KDbdPbzErWZRg55Coi58YVUl_jWOSe4fEtmYPJWc6Li8S1LLOtThrCoHtKYFXKwuqbO9cuwS_Hc0AZzjV6YzyxZeo3yj-sdIVbm0oDC8igOsLUkDeRPqgMAUGsC4uD4o_9CjZoSlnf-K3D-qwHtqIFaF0U4Di31XZYP9SvGbNloxNgwgMJsXcERLY8NIfIRvZOYfOHsRrAqiC3pg9wgvScP1RM.ZafFNXbJOwOiPo-zDG0m_A%2Fnew%2520pdf%2520(2)%2520(1).pdf%3Faccess_token%3DeyJraWQiOiJkZDBhMWIyOS02MjIyLTRmMWMtYjhkOS1jOTFiY2Q1OTRiMjkiLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJhdWQiOiJhY2NvdW50Iiwic3ViIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiMTg5NzU5ODciLCJzdCI6IkNpQndYemd6WlRVME9HTTRZekZoTlRRNFlURmhZMkV5T0dJeE9EazNOVGs0TnhJQ0NBRWFKUm9qTXpVNVpXVTRZakV4TUdJNFkyRTRORFkwT1RrNE9EUXlZVFZrTWpJM1pXUTVOems9IiwiaXNzIjoiam90dGEiLCJ0eXAiOiJCZWFyZXIiLCJleHAiOjE3MTM5ODgxODEsInVzZXJuYW1lIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiM	HTTP Parser: No <meta name="author".. found
Source: https://longz.bigordermilok.com/boxmine/	HTTP Parser: No <meta name="author".. found
Source: https://longz.bigordermilok.com/boxmine/	HTTP Parser: No <meta name="author".. found
Source: https://longz.bigordermilok.com/boxmine/	HTTP Parser: No <meta name="author".. found

Source: https://www.jottacloud.com/webapp_static/pdf-viewer/web/viewer.html?file=https%3A%2F%2F093-up-r.jotta.cloud%2Ffiles%2Fv1%2Fdl%2FeyJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2IiwiemlwIjoiREVGIn0..uOnc7yq_osSVezDF5ydxiw.KgWnxlaLangXgFHgL64YVU6V_47rBHOvB2CjVUUxkr1KDCE6NbVeozXPm33FKJaldU6B99rp0IZG6ebG6KDbdPbzErWZRg55Coi58YVUl_jWOSe4fEtmYPJWc6Li8S1LLOtThrCoHtKYFXKwuqbO9cuwS_Hc0AZzjV6YzyxZeo3yj-sdIVbm0oDC8igOsLUkDeRPqgMAUGsC4uD4o_9CjZoSlnf-K3D-qwHtqIFaF0U4Di31XZYP9SvGbNloxNgwgMJsXcERLY8NIfIRvZOYfOHsRrAqiC3pg9wgvScP1RM.ZafFNXbJOwOiPo-zDG0m_A%2Fnew%2520pdf%2520(2)%2520(1).pdf%3Faccess_token%3DeyJraWQiOiJkZDBhMWIyOS02MjIyLTRmMWMtYjhkOS1jOTFiY2Q1OTRiMjkiLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJhdWQiOiJhY2NvdW50Iiwic3ViIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiMTg5NzU5ODciLCJzdCI6IkNpQndYemd6WlRVME9HTTRZekZoTlRRNFlURmhZMkV5T0dJeE9EazNOVGs0TnhJQ0NBRWFKUm9qTXpVNVpXVTRZakV4TUdJNFkyRTRORFkwT1RrNE9EUXlZVFZrTWpJM1pXUTVOems9IiwiaXNzIjoiam90dGEiLCJ0eXAiOiJCZWFyZXIiLCJleHAiOjE3MTM5ODgxODEsInVzZXJuYW1lIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiM...	HTTP Parser: No <meta name="copyright".. found
Source: https://www.jottacloud.com/webapp_static/pdf-viewer/web/viewer.html?file=https%3A%2F%2F093-up-r.jotta.cloud%2Ffiles%2Fv1%2Fdl%2FeyJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2IiwiemlwIjoiREVGIn0..uOnc7yq_osSVezDF5ydxiw.KgWnxlaLangXgFHgL64YVU6V_47rBHOvB2CjVUUxkr1KDCE6NbVeozXPm33FKJaldU6B99rp0IZG6ebG6KDbdPbzErWZRg55Coi58YVUl_jWOSe4fEtmYPJWc6Li8S1LLOtThrCoHtKYFXKwuqbO9cuwS_Hc0AZzjV6YzyxZeo3yj-sdIVbm0oDC8igOsLUkDeRPqgMAUGsC4uD4o_9CjZoSlnf-K3D-qwHtqIFaF0U4Di31XZYP9SvGbNloxNgwgMJsXcERLY8NIfIRvZOYfOHsRrAqiC3pg9wgvScP1RM.ZafFNXbJOwOiPo-zDG0m_A%2Fnew%2520pdf%2520(2)%2520(1).pdf%3Faccess_token%3DeyJraWQiOiJkZDBhMWIyOS02MjIyLTRmMWMtYjhkOS1jOTFiY2Q1OTRiMjkiLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJhdWQiOiJhY2NvdW50Iiwic3ViIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiMTg5NzU5ODciLCJzdCI6IkNpQndYemd6WlRVME9HTTRZekZoTlRRNFlURmhZMkV5T0dJeE9EazNOVGs0TnhJQ0NBRWFKUm9qTXpVNVpXVTRZakV4TUdJNFkyRTRORFkwT1RrNE9EUXlZVFZrTWpJM1pXUTVOems9IiwiaXNzIjoiam90dGEiLCJ0eXAiOiJCZWFyZXIiLCJleHAiOjE3MTM5ODgxODEsInVzZXJuYW1lIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiM...	HTTP Parser: No <meta name="copyright".. found
Source: https://www.jottacloud.com/webapp_static/pdf-viewer/web/viewer.html?file=https%3A%2F%2F093-up-r.jotta.cloud%2Ffiles%2Fv1%2Fdl%2FeyJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2IiwiemlwIjoiREVGIn0..uOnc7yq_osSVezDF5ydxiw.KgWnxlaLangXgFHgL64YVU6V_47rBHOvB2CjVUUxkr1KDCE6NbVeozXPm33FKJaldU6B99rp0IZG6ebG6KDbdPbzErWZRg55Coi58YVUl_jWOSe4fEtmYPJWc6Li8S1LLOtThrCoHtKYFXKwuqbO9cuwS_Hc0AZzjV6YzyxZeo3yj-sdIVbm0oDC8igOsLUkDeRPqgMAUGsC4uD4o_9CjZoSlnf-K3D-qwHtqIFaF0U4Di31XZYP9SvGbNloxNgwgMJsXcERLY8NIfIRvZOYfOHsRrAqiC3pg9wgvScP1RM.ZafFNXbJOwOiPo-zDG0m_A%2Fnew%2520pdf%2520(2)%2520(1).pdf%3Faccess_token%3DeyJraWQiOiJkZDBhMWIyOS02MjIyLTRmMWMtYjhkOS1jOTFiY2Q1OTRiMjkiLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJhdWQiOiJhY2NvdW50Iiwic3ViIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiMTg5NzU5ODciLCJzdCI6IkNpQndYemd6WlRVME9HTTRZekZoTlRRNFlURmhZMkV5T0dJeE9EazNOVGs0TnhJQ0NBRWFKUm9qTXpVNVpXVTRZakV4TUdJNFkyRTRORFkwT1RrNE9EUXlZVFZrTWpJM1pXUTVOems9IiwiaXNzIjoiam90dGEiLCJ0eXAiOiJCZWFyZXIiLCJleHAiOjE3MTM5ODgxODEsInVzZXJuYW1lIjoicF84M2U1NDhjOGMxYTU0OGExYWNhMjhiM...	HTTP Parser: No <meta name="copyright".. found
Source: https://longz.bigordermilok.com/boxmine/	HTTP Parser: No <meta name="copyright".. found
Source: https://longz.bigordermilok.com/boxmine/	HTTP Parser: No <meta name="copyright".. found
Source: https://longz.bigordermilok.com/boxmine/	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Source: unknown	HTTPS traffic detected: 23.46.214.6:443 -> 192.168.2.18:49694 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.18:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.28.21:443 -> 192.168.2.18:49840 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.28.21:443 -> 192.168.2.18:49841 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.18:49845 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.18:49846 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 1MB later: 33MB

Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: unknown

DNS traffic detected: queries for: www.jottacloud.com

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49695 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49695
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49694
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 49694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49679 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 23.46.214.6:443 -> 192.168.2.18:49694 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.18:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.28.21:443 -> 192.168.2.18:49840 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.28.21:443 -> 192.168.2.18:49841 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.18:49845 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.18:49846 version: TLS 1.2

Source: classification engine

Classification label: mal56.phis.win@16/84@56/269

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.jottacloud.com/s/359ee8b110b8ca8464998842a5d227ed979
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=1900,i,11903278720065606161,16450679075012361117,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=1900,i,11903278720065606161,16450679075012361117,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Drops files with a non-matching file extension (content does not match file extension)

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: Chrome Cache Entry: 175

Jump to dropped file

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

ID:	1430561
Product:	CloudBasic
Start time:	21:48:53
Start date:	23.04.2024
Cookbook:	defaultwindowsinteractivecookbook.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Windows Analysis Report
https://www.jottacloud.com/s/359ee8b110b8ca8464998842a5d227ed979

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Persistence and Installation Behavior

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://www.jottacloud.com/s/359ee8b110b8ca8464998842a5d227ed979

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Persistence and Installation Behavior

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://www.jottacloud.com/s/359ee8b110b8ca8464998842a5d227ed979