Windows Analysis Report
https://devilmountainnursery.xecurify.com/moas/broker/login/jwt/274346?client_id=n92u6orbf31lj9ma4u1hj24k8geyewm&redirect_uri=https://www.dropbox.com/scl/fi/mex0l2evnbgpxy1sb76qa/wildlandhydrology.pdf?rlkey=3lcwcglxqjz4pbmhlm5l4f7sg&st=wdv58dw4&dl=0

Overview

General Information

Sample URL:	https://devilmountainnursery.xecurify.com/moas/broker/login/jwt/274346?client_id=n92u6orbf31lj9ma4u1hj24k8geyewm&redirect_uri=https://www.dropbox.com/scl/fi/mex0l2evnbgpxy1sb76qa/wildlandhydrology.pdf
Analysis ID:	1432209

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Stores files to the Windows start menu directory

Classification

Signatures

Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.17:49818 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.212.62.204:443 -> 192.168.2.17:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.222:443 -> 192.168.2.17:49836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.42.65.90:443 -> 192.168.2.17:49835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.4.254:443 -> 192.168.2.17:49844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.6.254:443 -> 192.168.2.17:49848 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.17:49856 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.17:49857 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.17:49866 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.254:443 -> 192.168.2.17:49870 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.28.14:443 -> 192.168.2.17:49871 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49872 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.219.0.180:443 -> 192.168.2.17:49877 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.122.249
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.122.249
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.222.123
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.222.123
Source: unknown	TCP traffic detected without corresponding DNS query: 23.45.182.104
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200

Source: global traffic	DNS traffic detected: DNS query: devilmountainnursery.xecurify.com
Source: global traffic	DNS traffic detected: DNS query: www.dropbox.com
Source: global traffic	DNS traffic detected: DNS query: cfl.dropboxstatic.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cdn.dropboxexperiment.com
Source: global traffic	DNS traffic detected: DNS query: d.dropbox.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.17:49818 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.212.62.204:443 -> 192.168.2.17:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.222:443 -> 192.168.2.17:49836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.42.65.90:443 -> 192.168.2.17:49835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.4.254:443 -> 192.168.2.17:49844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.6.254:443 -> 192.168.2.17:49848 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.17:49856 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.17:49857 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.17:49866 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.254:443 -> 192.168.2.17:49870 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.28.14:443 -> 192.168.2.17:49871 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49872 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.219.0.180:443 -> 192.168.2.17:49877 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@15/74@24/157

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://devilmountainnursery.xecurify.com/moas/broker/login/jwt/274346?client_id=n92u6orbf31lj9ma4u1hj24k8geyewm&redirect_uri=https://www.dropbox.com/scl/fi/mex0l2evnbgpxy1sb76qa/wildlandhydrology.pdf?rlkey=3lcwcglxqjz4pbmhlm5l4f7sg&st=wdv58dw4&dl=0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1924,i,15614675761257703520,8709050243928717944,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1924,i,15614675761257703520,8709050243928717944,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Screenshots

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.226.52.56	unknown	United States	16509	AMAZON-02US	false
192.178.50.67	unknown	United States	15169	GOOGLEUS	false
1.1.1.1	unknown	Australia	13335	CLOUDFLARENETUS	false
192.178.50.68	www.google.com	United States	15169	GOOGLEUS	false
142.251.107.84	unknown	United States	15169	GOOGLEUS	false
50.16.146.75	idp-alb-ingress-prod-391105109.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
142.250.64.142	unknown	United States	15169	GOOGLEUS	false
142.250.64.174	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.217.165.195	unknown	United States	15169	GOOGLEUS	false
162.125.1.20	d-edge.v.dropbox.com	United States	19679	DROPBOXUS	false
104.16.99.29	unknown	United States	13335	CLOUDFLARENETUS	false
13.226.52.36	cdn.dropboxexperiment.com	United States	16509	AMAZON-02US	false
162.125.5.18	www-env.dropbox-dns.com	United States	19679	DROPBOXUS	false

Private

IP
192.168.2.17
192.168.2.4

Contacted Domains

Name	IP	Active
idp-alb-ingress-prod-391105109.us-east-1.elb.amazonaws.com	50.16.146.75	true
cdn.dropboxexperiment.com	13.226.52.36	true
www-env.dropbox-dns.com	162.125.5.18	true
d-edge.v.dropbox.com	162.125.1.20	true
www.google.com	192.178.50.68	true
devilmountainnursery.xecurify.com	unknown	unknown
d.dropbox.com	unknown	unknown
www.dropbox.com	unknown	unknown
cfl.dropboxstatic.com	unknown	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.dropbox.com/scl/fi/mex0l2evnbgpxy1sb76qa/wildlandhydrology.pdf?rlkey=3lcwcglxqjz4pbmhlm5l4f7sg&error=1140	false		high
https://www.dropbox.com/en/ccpa_iframe?hide_gdpr=false&is_ccpa_enabled=true&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&uri_for_logging=dropbox.com&locale_override=en&should_auto_open_options=false&privacy_consent_upgrade_flag=true	false		high

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 14:25:50 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	1EFCEB2163500BF71A8BAC583FF426BF	2141A00C48942DDAA730B819E7768CF1F4092006	95AB26CE52134FE11798C6E34D7A6105D21C46923A5ED701AC7A71716E2EDF00
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 14:25:50 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	729889454E3886FCD5B46CFC5B7FE6B5	4A8651CB526AE61A82A89913EA5787786677F15F	956EBFAB2D4834B6B3A9EDB0A63D078F832468821DF7CE475C1FD0AD869E2179
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:54:41 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	C44205B4873948A075D8F9B810C44FDF	5C5379DFB72C7F7D6C9F713DBB8AB8B39CD48B2C	3459D00AEA513BC808FD8EEAF76402B552DB5C4372F5317D1501CF473CCA77BE
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 14:25:50 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	1D6687ADDDC472C3CA631CB5AB4046BA	C30F81E44843CCCE5E5C5EC6AF492EF5D4B79B85	E2118D4C824182D097738DF47010C126C7E62E92A1810E2465CE62794DB7D17A
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 14:25:50 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	8A96511F1CC063476CB4D721B72D4D86	184684E99B1AB5B1679DA143CA6C9DD6E9A7800A	558F13533C5422EF7F9FFA1C74E0F953BB810D994FA5C603D645CFEAA36E117C
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 14:25:50 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	822FA48E3B15D6E747AB5588C2E4A746	CB39B506F84A4AA8521CFE51050765099C0AD50B	160C75E56E2DF1454976461207302BFF21192E4606FB0A8705183A5A9ADAE8B9
Chrome Cache Entry: 135	ASCII text, with very long lines (4720)	366641E9CB419315F25D1AD2BF70936B	B789F141CB7EA723E10CB6F24428B760977FB9A2	D8A348DF23957CF3F7400C5A160B6D276D7DF0F16C46B673FD722391E5583586
Chrome Cache Entry: 136	ASCII text	3E904D06E56BD470498071EF9F7403BE	F99226A89C61F90A6FA6E3601E7B933DAD057A11	AC66E676723D630FDEC99090F7F476E9F933773409EEE8B4CC9157A3E3856794
Chrome Cache Entry: 137	ASCII text, with very long lines (4787)	1DB6D4FD47F26888CB9787D97FC00EC0	7E0F0236E67678426A357D5CDC7F75773F5A4E44	85CC4203336C5900A1D094989172DF90925D5704EFCB314F5EB7633CDC811137
Chrome Cache Entry: 138	ASCII text, with very long lines (21663)	10F3FA701AF7A3CB6F9E8054D4AEBC62	A18AFB404DC5405CCBB850D4371AAB5119779302	40CF8DA6EAE259A4BC031CEDBE0844AB5B09D2A78ADE4A30B4FCB86237186CBB
Chrome Cache Entry: 139	ASCII text, with very long lines (27566)	FF72F9C4C4D393CF388CA1AC76E5AF20	66D291CEEDF054B9F1E62884E8BDF0BC32D40813	A29B08893AAD9007C103530BA47066D566E00734063515A5D4552791E2A4D816
Chrome Cache Entry: 140	ASCII text, with very long lines (1353)	4D83CD35A5B3138D895EA13588222C8F	2C86E768E75EB2F2846502D5D20C142A9912A590	90FD413CA296A562B99A32806EC8AA799455B0D252DEC24B2580FA45F621881A
Chrome Cache Entry: 141	JSON data	99914B932BD37A50B983C5E7C90AE93B	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
Chrome Cache Entry: 142	ASCII text	2E6703075C8091494BA675B3074106D5	B27E439F714447E0AA27C35F9A6AE3F34067528C	93AA6ADA3F177FD877A3EF785CDCFBC48865A6FFE745C339E61955B592EBEE29
Chrome Cache Entry: 143	ASCII text, with very long lines (57485)	9344C1ACA08405FF26D245EA6D33379D	ACB6C050B2830F8FC108B5174F6A138D49C9974A	8D9948E65D622C35A926726F17860B9F76A87FAD28CA7FFEEE697F6241D6A2AE
Chrome Cache Entry: 144	ASCII text	D6C32610BC01D28D09392E8CAE4869E6	1A248754B2853D6FFA0381BBA3C4CA65C1AF19C5	107F84EDAF1294B3B3681D48FAFE9DE85165493D55EA9C361FA08ECBD7994148
Chrome Cache Entry: 145	ASCII text, with very long lines (54939)	4D32661F45D92FB57ADCF45D1BBDE91A	0AB0B927E72BBE699FB744280396B2FFC5D68E06	FD5BAF908AC836D689B36BFCAD4A7F96D7D5509EA754CFF0206006F3E452EF13
Chrome Cache Entry: 146	ASCII text, with very long lines (2314)	61444FC69EEE497F28D680EE0C9157E7	D72A2EC487F48C1C8C6AAB7B316FCBB6F2ADD7BF	6E6CC053B72069322499F1716187D1C81889190DE9E22D00ADC3231A7FFF90D6
Chrome Cache Entry: 147	ASCII text, with very long lines (31230)	97366B5396C1C6CB5B58CDF6F3A65527	8FC3649AF780C883CD08F85F55C2AF49CBD5F0E4	7FEDD50BE760F82829C4C313D7003F2D4C2448A5DEDB4FD5DE7A78B458F994A3
Chrome Cache Entry: 148	ASCII text, with very long lines (40479)	20F30FB9628BA036488482FB976F603B	70A5B9C5F2B2A4B57BEA63EDAB4DCC50D2E911C1	CEA69EFB64401F584B3997F762DD72005C1CE83246A8BE02E7F6328CDA1001D3
Chrome Cache Entry: 149	ASCII text, with very long lines (4828)	E6C7B1B5B48D9989C48C543C3EA5ABC6	2109AF7D0C10FF2D93FF2B58802C7F01B93B485F	AF3DF2BE4EA805F2A8A8C43951C7EB8BB8CA60E16AA24A3868206156B4B7667E
Chrome Cache Entry: 150	ASCII text, with very long lines (65155)	6C0117474A7C527DC4D099D44DAE71A1	7E755D51CA5A05F8D42518F791BDA950A2F89D0B	23162DDA13C76A1FF73B9FE7F7EFFB042AA830093F19033B6C52F17716F74126
Chrome Cache Entry: 151	Web Open Font Format (Version 2), TrueType, length 43308, version 1.66	93B6F18EC99BCB7C3FA7EA570A75E240	60B9E3062FE532CBC18B897FAC542C56A03544C7	43693F7BDD6146E783FAB3F75BA0A51AA3CF9530ADBF790DBD686FC8A17AA3DB
Chrome Cache Entry: 153	ASCII text, with very long lines (30377)	8F16E6A90F27A7F35D51E36625BF0B8B	725FE40E151531AE74088A4A66D6747440569BC4	21DA27C1879494F260F847ED48A69BE8A741C37A2859D626B6B3B6EDD3F18CC4
Chrome Cache Entry: 154	ASCII text, with very long lines (30366)	B044DAC971CBF8C8900F47B9A013E5B4	B89856A306A07AFE9F7A6EF20B12E4E10BB80377	ADD10064805D82156171DB2EE649FFE9D98E1A60CCFB5BF4154C5327D5117AD6
Chrome Cache Entry: 155	ASCII text, with very long lines (10533)	151644207B52C049454C572377EE3E83	3BF4661205268520A40DA52C8D2E87F0F9B4BBA4	8BB9C7C60AFCCF29AE2F7CFC9A613619677105D1C698E0343287225080FADFB2
Chrome Cache Entry: 156	ASCII text, with very long lines (21690)	28838D093762EFCED2DC32687E38C67F	0BE9CDFED9CDFE6178941E16B56EC2F01BB40BEE	1BCFA4C86C92838343D63F4789FB1B182DCCE1E4E986CD890EE54079E4CE8096
Chrome Cache Entry: 157	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel	F25511F4158C2DFAB6AA11A07D026E4A	99F63CF1694FA5E52F43EB967462EA0D9EEF7513	C0906D540D89DBE1F09B24F17B7F35B81350E8D381C1558B075C28EA913C450D
Chrome Cache Entry: 159	C source, ASCII text, with very long lines (1061)	09634B0C5D5D982B41CA1B4AB14020C8	663001508EF6C36B901B3608BC4E8AEF07935C6F	047B6B6649E7329949A203F7FB973104E7985FE752B567EE68255021A3AF8648
Chrome Cache Entry: 160	ASCII text, with very long lines (2796)	ACE7825159A9505379C69EFD6C1A84D4	98852C301C162586BC06642BD6601FD39379EFC3	96080AFF0C7D4262118B6BE55AAFB37AE6D428F181B387BF57C45AC96390D19D
Chrome Cache Entry: 161	ASCII text	98070F1CF7C37AF35E411C1EAE73D5C3	652F4EC37768D55F02BA12617D3058E3A3436761	2DD3B640A7C87526BB0B29205D1FD3253AA5B779BDCCBF8A6F4C082FE909BE90
Chrome Cache Entry: 162	ASCII text, with very long lines (659)	86440C407CFE36B5EB64DC2EEB2B553B	48BB7FF81B23D4EFBB9822C7946573EAA9358AA5	E80B06A44279023B8CBEDC9345220A38764EA995F670105E775A930286ADA6B8
Chrome Cache Entry: 163	ASCII text	069657210BAFE54BF738CE8489298BED	ACD814731DB697E444A3AEA6B636DC608FB17E89	1860B01D5A60C2E661647C79123AD74DC04E7BDBC3CE1C5463AB7469ADA4EC89
Chrome Cache Entry: 164	ASCII text, with very long lines (519)	C2591593FFBD92E16276E86068DB913A	E7B7B89E0FFB6C5E1CD91BB81AA418E1E9BD77D1	64CFD9646AFC31C4E5D1E3E6753194DCE4F385B017B1227DE2248730DE2DC0C0
Chrome Cache Entry: 165	ASCII text, with very long lines (4940)	6E84A4BEF56EB53CF1950824869472B0	6405AAA709BE7FE462884C82D96ADC2D38D82087	EF241FC332BF046DC2EA2B86A91B8CE8048A8330BDC9FD3C90154CBD815BBF99
Chrome Cache Entry: 166	JSON data	85A782289BCBFC4C5DEC14318643F13C	648FBB29E4B3168E9ED4DCBD783B8BC505F72E52	BB2340BCFB7F1FF3C0363B45D0B9093BA3FA896BD828AA0F2BEF058A27A3A359
Chrome Cache Entry: 167	ASCII text	46CAC945E491B87E2835B2D5E8EC8804	2D072C5E3A12ABD4733DD429709C8DBCB5D3D50B	5A2D87CA902230E9900DF89430987C8F17B22FF184820DD40C8C6FBE777A5FC1
Chrome Cache Entry: 168	ASCII text, with very long lines (48075)	A0D8E626926695C465BCD28EF1BA88D3	FF123F2D6B155134B2FC8F3274008765930CDF63	A44A8BB333F71C540770429E142510EED81B0AD8242191DB25A5AA2252DAB531
Chrome Cache Entry: 169	ASCII text, with very long lines (605)	23BFE7E99565EE8F34AFD63C06F4C24B	BF08B8AD1AD73C12A7C9CB211926CE23A861DB07	9DB33292007AB6C38527B39D5663E976A305564E19B2A5A8713EA2B2C00F505D
Chrome Cache Entry: 170	ASCII text, with very long lines (54939)	BE46E7384B16280D2A080395AE35A8E6	72EB29B5FD98BAEBA883A827AC6FA487CA6DC9E1	A6E41B478743E79C6745B1BAD67932358D43BC911B34519C21D984B4213C2D7F
Chrome Cache Entry: 171	ASCII text, with very long lines (16928)	4FAB21998551BC9E7634953331152FF9	64966F2AE97BDC515A87A90D0E8B521E56B047DE	0010E48CF022AD4281F3F66822CB0F3A49EC82A32E978CEF0703941AD31FE480
Chrome Cache Entry: 172	ASCII text, with very long lines (2962)	4D8313A7B6900F61AE9BFE51DDF4F67B	8B528784DBBE02C32F5F844953563C9B30178600	BFF7C9A7A1D2C6B47613859610EBA689A43C53189917DB1E81B5826B21B6C957
Chrome Cache Entry: 173	ASCII text, with very long lines (28397)	0011684DCD3F3D8D765EC1212D93C4CE	98B9EB67023715C37D26CDD6D07B4FA84CE33C62	A62C851C032F7BE60FEE4CD0AF6321BC40576651F32E15CB4BE19AA361C13965
Chrome Cache Entry: 174	ASCII text, with very long lines (55161)	339AB5487FCC7DA2EA5162570695B19D	6AFA3EFB1FDB91A653F47A2616E26088E84B0CD1	86B2EA30A82DFDE1F4019CAC8243F4F9CECDCA08D97A65C3E3AE8D2AE6D84CC4
Chrome Cache Entry: 175	ASCII text, with very long lines (8391)	CEF3AFAC3BB3869958AE9EADA3A9E2D0	E19153C14CDC86ADDA25922707DEC307D7EAEA18	557B5C5A37612D8B42057A42C52D372546C51AAD7B3C8FF89E652EFAF6DAD603
Chrome Cache Entry: 176	ASCII text, with very long lines (2334)	D7102E61F8A55FE25337F4C956CCEF24	5B45C74151E3ADB6E9AA71428347060BA2098CA3	B3B2C6C4B2857BD79700FD042D4250538368ED5D1628FF82EAC6E7391D96DA86
Chrome Cache Entry: 177	ASCII text, with very long lines (47981)	AC75D2758BF3E040611814872A174121	CC5AF2F2D44FEF889E3779F768CFEC8713D4F386	7314EB1E0738878F2BACCF1B901FCD3E438834902A0146BC21B54D1521E62A3D
Chrome Cache Entry: 178	ASCII text, with very long lines (3249)	16438E8288495AFBDD94C9E8424C3F31	7968C874A120775969A150D792C8F3908F2068C0	632D3BF4F9D67403C75C65B9C66E1B51F0BC190B26CC652854E9AD0851F98901
Chrome Cache Entry: 179	ASCII text, with very long lines (52417)	94519F660BA4BEAE161BA463D4B87CC3	2914793AEE05AC17975ABD390BB89752EEB3E26F	D66989513AC75356AC4503CFCDF506CC3DC28101D7DB071120738EB582F678A7
Chrome Cache Entry: 180	ASCII text, with very long lines (5082)	0E80CBB2EF9225FDC2B4DEFA7D321901	BD0862DEAD0CDAD41CC33D88856225717C6B173E	E34014DB1E6DA64AE844602B85DAFC41024F5694E49058A6F138DC7415E0AD25
Chrome Cache Entry: 181	ASCII text, with very long lines (1319)	84767B0ECAF9F07C988004FA006D4FCC	418FD8E87F8CDE8BD32B62E2B40C7E97C63C54C4	2D8191C3C686182E2908401E2FEDDD878BDAEF19801EEEACC54D39C3E5122A0B
Chrome Cache Entry: 182	ASCII text, with very long lines (544)	61699B70CF57ABE63FDF5F4007D36EC1	6C05189CC2D08BB2A7609C002F0675C9C670D362	229BBF4D0E7488209564152C6723497F1AC3934136CA1684233D2FA88FA4146F
Chrome Cache Entry: 183	ASCII text, with very long lines (16909)	313C3A6F8BD31B6BF355EF74CF3F819D	08A271D9551636E72D071433E8EBB0F2975D7A7E	C5FE6187E5DA574D6D694A83BE523993E62DAC5F89D165283F38EB92C830F992
Chrome Cache Entry: 184	ASCII text, with very long lines (655)	9E909F5DC4EB2917A092969CFA8C1C1B	EC5795627579E606612250BE3E30690F3A70E3CF	C174E839D663E6F9ED38C7901711B911FF058A033154BCDE3DF30208DF454C74
Chrome Cache Entry: 185	ASCII text, with very long lines (33484)	99EB0DE2B72A849BCAB77B4AB0CA030B	1273CD3F0776E5A43F00065FBFF954FF243C837F	F3560B927CD30017511D2623F2F3FF299BCAA3A09167742BC3DA3AE417D1F852
Chrome Cache Entry: 186	ASCII text, with very long lines (65536), with no line terminators	3C5767F2F86DBB23522AABD65F004D55	3C7236F5FFB9FC1DE1C3DFAAD32B73823DE47799	581DDEEF4192E787E0F11FB8DBF64D9D31F1A2147F458757020EF21CF3429334
Chrome Cache Entry: 187	ASCII text, with very long lines (65536), with no line terminators	7EC9A2A3EE65EA4BD5D9716D56111A2C	9A109EB1FAB537718F3A873E68E6F970AF9F98F9	8AB631D0BF8F79DDEFCD4D60E28328E4D141B260DBF40249389D50D7C08E589A
Chrome Cache Entry: 188	ASCII text, with very long lines (65536), with no line terminators	397A12082DAD602AE56CE2CB59E1ACD6	F79D65AC745F6F69130A615A89B1529702A02CC0	7806010CF8606175464D880FF8CA152D0B334CA809359D7B927B27210606766F
Chrome Cache Entry: 189	ASCII text, with very long lines (654)	CB1AF7AA187B240DD312106671197878	B2B0F9905B73A81421E694D30BE3ED5153A0D9A0	BA287E808B159FFC9EF8939ADDD0B8F1D579C5315CEAF25825E6F4DD709635EC
Chrome Cache Entry: 190	C source, ASCII text, with very long lines (1046)	FA9B26CB00C85A5EC7C1377CC8A6E716	F1C5D5D8361FF52554E6E5947E53FBCBB016B90B	80E3033E815DC1CD007B4D606237677AAE877EB72983FE03D865B7344D8C8E7C
Chrome Cache Entry: 191	ASCII text, with very long lines (42904)	1261983D7E30CBFA42E8A56E5894B6C3	B3010EF616F3FEB4819A24888E7FD5D9755A8CE0	0C7088477ED8519AAC3BAFCEDD97D9D7AD8A9F544048F45DDB6D4CE1C4F70C9C
Chrome Cache Entry: 193	ASCII text, with very long lines (345)	A1782CB302D36D94A8F5904841B1F9CD	F489819205A11E879A7CBD37D906B7476040F5D9	2B1903F4A4FA1A2C629480FCDDD60D673D3CEE3BE8C13C6D198419757FB6E228
Chrome Cache Entry: 194	ASCII text, with very long lines (4143)	6D7F12ED56D5FAFDFB141EAAF437F237	CC722F807C215B6B90A005A8405E0C18E63564C7	229FF7E74BF376A04E7DAE2B3A8A6DA04DF25A07D5B0300FCEFDA8FC821F8FF9
Chrome Cache Entry: 195	ASCII text, with very long lines (57541)	59304F0F4263BF0DFB0303515B315CB6	B25DE4815730CD4F20E6238012D7FBF34DE33226	80C0AE5C85D53A1F5D71E1311D0D3C13B998F14AC2B2C0D582119517F0D2875F
Chrome Cache Entry: 196	ASCII text	3B0BB3313BC069CCF76EC11101C435AA	3835D1E89171D4D16E7516B02F8DF3A7B2111EAE	B496879288D68FAF0C74CD134E93249132880AE2E8308930EAABA76231929623
Chrome Cache Entry: 197	ASCII text, with very long lines (65536), with no line terminators	6688A02B84E1484B55E5AE2392E020DF	7557C382028E592745916306A3AF4DE00E6D99B2	DD0F5B8645C4C2F5CBE777A611B2551E3DF5622B40F75AA082534E2986391DBA
Chrome Cache Entry: 198	ASCII text, with very long lines (12494)	0CCE36E0D631A9F9391326766FA604CC	32C7AC701C52A87238CF4F6A36AD8A8D517B9C72	090502C741FCE96E98551F7BB6CC3C89B14F55B2A2DD5F87BAF7856B5A699249
Chrome Cache Entry: 199	ASCII text, with very long lines (1633)	BD9B8DE409C3C80284941DF4506BB7EC	C4B2C7DCA7FABD9F436C7E6DC316218524187FA3	DDC408D16E2CBFA933458004B9D8AA71814602B613B26E9FD7CCFB934136AF3B
Chrome Cache Entry: 200	ASCII text, with very long lines (15368)	62E594328005F6A1C6E0EDBCAFA712B0	69404C43961EA5224B6DF433C9424C07679A08BD	2C79A0244A616AC9449EE94382007A3631AF38C5BE7BC6B91CC1B9F9C9F99513
Chrome Cache Entry: 202	ASCII text, with very long lines (24769)	FEE116EA72819385F48A42A2394E0CCF	E16CF1E7B3BE1506883F92A6771C322521BA596F	111B1E8F62E35C5D4C306D7D9DB7899C2F4B5E90475B4048AD349BFA397CB602
Chrome Cache Entry: 203	ASCII text, with very long lines (40848)	EEFB1DF59C67FEF3C54F0CC53930B725	71ECD7F9FE0B2C0625573040BB58E797028FA21C	25799CE1BA6C1727D2F14B7C13438CC517A1A59536ED338EFD85F4F39D646750
Chrome Cache Entry: 205	ASCII text, with very long lines (12980)	6F60E0C89282DED473D1097E46D7E83F	8ABB36DEB8814FB719F2BAF80A8DFCE0D7B7DA57	4589A03BB766DAF71F315EED76C218FBE0712FCFEDF2F655009DF6FDE6BFB8EA
Chrome Cache Entry: 206	ASCII text	C87A3D15B564115619CFC8460FCB4FA7	B2CB0DA9352A4372A2FC8828FBDFE07C8C904D81	90784379E2F18E7A3D7211227E3211822BDFBEB6C85FBCBFA7F9736C776500C1
Chrome Cache Entry: 207	Web Open Font Format (Version 2), TrueType, length 54666, version 1.0	EBEE194A9B773F166DC16096F8614AAA	9D6A893AF295C90E9E9792D7E54A80034192255B	00F90DB31F42975FCDC5FA1F70660568BE68792EC11BE2AAC36362F435A6E555

Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.17:49818 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.212.62.204:443 -> 192.168.2.17:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.222:443 -> 192.168.2.17:49836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.42.65.90:443 -> 192.168.2.17:49835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.4.254:443 -> 192.168.2.17:49844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.6.254:443 -> 192.168.2.17:49848 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.17:49856 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.17:49857 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.17:49866 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.254:443 -> 192.168.2.17:49870 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.28.14:443 -> 192.168.2.17:49871 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49872 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.219.0.180:443 -> 192.168.2.17:49877 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.122.249
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.122.249
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.222.123
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.222.123
Source: unknown	TCP traffic detected without corresponding DNS query: 23.45.182.104
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200

Source: global traffic	DNS traffic detected: DNS query: devilmountainnursery.xecurify.com
Source: global traffic	DNS traffic detected: DNS query: www.dropbox.com
Source: global traffic	DNS traffic detected: DNS query: cfl.dropboxstatic.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cdn.dropboxexperiment.com
Source: global traffic	DNS traffic detected: DNS query: d.dropbox.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.17:49818 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.212.62.204:443 -> 192.168.2.17:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.222:443 -> 192.168.2.17:49836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.42.65.90:443 -> 192.168.2.17:49835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.4.254:443 -> 192.168.2.17:49844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.6.254:443 -> 192.168.2.17:49848 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.17:49856 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.17:49857 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.17:49866 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.254:443 -> 192.168.2.17:49870 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.28.14:443 -> 192.168.2.17:49871 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49872 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.219.0.180:443 -> 192.168.2.17:49877 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@15/74@24/157

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://devilmountainnursery.xecurify.com/moas/broker/login/jwt/274346?client_id=n92u6orbf31lj9ma4u1hj24k8geyewm&redirect_uri=https://www.dropbox.com/scl/fi/mex0l2evnbgpxy1sb76qa/wildlandhydrology.pdf?rlkey=3lcwcglxqjz4pbmhlm5l4f7sg&st=wdv58dw4&dl=0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1924,i,15614675761257703520,8709050243928717944,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1924,i,15614675761257703520,8709050243928717944,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

ID:	1432209
Product:	CloudBasic
Start time:	17:25:18
Start date:	26.04.2024
Cookbook:	defaultwindowsinteractivecookbook.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Windows Analysis Report
https://devilmountainnursery.xecurify.com/moas/broker/login/jwt/274346?client_id=n92u6orbf31lj9ma4u1hj24k8geyewm&redirect_uri=https://www.dropbox.com/scl/fi/mex0l2evnbgpxy1sb76qa/wildlandhydrology.pdf?rlkey=3lcwcglxqjz4pbmhlm5l4f7sg&st=wdv58dw4&dl=0

Overview

General Information

Detection

Signatures

Classification

Signatures

Compliance

Networking

System Summary

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://devilmountainnursery.xecurify.com/moas/broker/login/jwt/274346?client_id=n92u6orbf31lj9ma4u1hj24k8geyewm&redirect_uri=https://www.dropbox.com/scl/fi/mex0l2evnbgpxy1sb76qa/wildlandhydrology.pdf?rlkey=3lcwcglxqjz4pbmhlm5l4f7sg&st=wdv58dw4&dl=0

Overview

General Information

Detection

Signatures

Classification

Signatures

Compliance

Networking

System Summary

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://devilmountainnursery.xecurify.com/moas/broker/login/jwt/274346?client_id=n92u6orbf31lj9ma4u1hj24k8geyewm&redirect_uri=https://www.dropbox.com/scl/fi/mex0l2evnbgpxy1sb76qa/wildlandhydrology.pdf?rlkey=3lcwcglxqjz4pbmhlm5l4f7sg&st=wdv58dw4&dl=0