Edit tour

Windows Analysis Report
https://colorado-education.jmailroute.net/x/d?c=44819838&l=3f42e1cb-7b27-4505-8bfe-d3398c46b475&r=dee8889a-85a8-4801-af6f-60c9c7c8c967

Overview

General Information

Sample URL:	https://colorado-education.jmailroute.net/x/d?c=44819838&l=3f42e1cb-7b27-4505-8bfe-d3398c46b475&r=dee8889a-85a8-4801-af6f-60c9c7c8c967
Analysis ID:	1611236
Infos:

Detection

Score:	48
Range:	0 - 100
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Detected non-DNS traffic on DNS port

Detected suspicious crossdomain redirect

Drops files with a non-matching file extension (content does not match file extension)

HTML page contains hidden javascript code

Invalid 'forgot password' link found

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4012 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4368 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2580 --field-trial-handle=2544,i,13932530888413711099,9761085573670360277,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3688 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.PrintingService --lang=en-US --service-sandbox-type=pdf_conversion --mojo-platform-channel-handle=6960 --field-trial-handle=2544,i,13932530888413711099,9761085573670360277,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5784 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://colorado-education.jmailroute.net/x/d?c=44819838&l=3f42e1cb-7b27-4505-8bfe-d3398c46b475&r=dee8889a-85a8-4801-af6f-60c9c7c8c967" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

Acrobat.exe (PID: 3872 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Downloads\UCCS-Strategic-Artificial-Intelligence-Advisory-Brochure.pdf" MD5: 24EAD1C46A47022347DC0F05F6EFBB8C)

AcroCEF.exe (PID: 7148 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

AcroCEF.exe (PID: 7108 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2104 --field-trial-handle=1520,i,18006825447178311642,566807441090331611,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

chrome.exe (PID: 940 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://bit.ly/advisor-center" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4744 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2492 --field-trial-handle=1908,i,718000698419144506,315186180618625309,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /api/388/envelope/?sentry_key=355a1d96717e4038ac25aa852fa79a8f&sentry_version=7&sentry_client=sentry.javascript.react%2F7.81.0 HTTP/1.1Host: relay-pdx.sentry.insops.netConnection: keep-aliveContent-Length: 473sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://executiveeducation.instructure.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://executiveeducation.instructure.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_645.2.dr	String found in binary or memory: http://accounts.zoho.com
Source: chromecache_436.2.dr, chromecache_454.2.dr	String found in binary or memory: http://dabblet.com)
Source: chromecache_575.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Autocomplete#theming
Source: chromecache_575.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Datepicker#theming
Source: chromecache_575.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Dialog#theming
Source: chromecache_575.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Progressbar#theming
Source: chromecache_575.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Resizable#theming
Source: chromecache_575.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Selectable#theming
Source: chromecache_575.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Tabs#theming
Source: chromecache_575.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Theming/API
Source: chromecache_562.2.dr	String found in binary or memory: http://github.com/semantic-org/semantic-ui/
Source: chromecache_575.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_575.2.dr	String found in binary or memory: http://jqueryui.com/about)
Source: chromecache_575.2.dr	String found in binary or memory: http://jqueryui.com/themeroller/
Source: chromecache_562.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: chromecache_436.2.dr, chromecache_454.2.dr	String found in binary or memory: http://prismjs.com/
Source: chromecache_609.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: 5a6df977-78f5-4aea-8c18-a487ce955362.tmp.11.dr	String found in binary or memory: https://chrome.cloudflare-dns.com
Source: chromecache_645.2.dr	String found in binary or memory: https://contacts.zoho.com/file?ot=35&t=serviceorg&ID=733614947&fs=original
Source: chromecache_645.2.dr	String found in binary or memory: https://contacts.zoho.com/file?ot=35&t=serviceorg&ID=733614947&fs=stamp
Source: chromecache_645.2.dr	String found in binary or memory: https://contacts.zoho.com/file?ot=35&t=serviceorg&ID=733614947&fs=thumb
Source: chromecache_645.2.dr	String found in binary or memory: https://css.zohostatic.com/personal/stable
Source: chromecache_645.2.dr	String found in binary or memory: https://docs.executive.education
Source: chromecache_648.2.dr, chromecache_482.2.dr	String found in binary or memory: https://docs.executive.education/preview/f7lbtdb18e4e216404b6188764d510dccd7cf
Source: chromecache_648.2.dr, chromecache_482.2.dr	String found in binary or memory: https://docs.executive.education/print/f7lbtdb18e4e216404b6188764d510dccd7cf
Source: chromecache_645.2.dr	String found in binary or memory: https://docs.executive.education/public/api/v1/license/4431844000006183158
Source: chromecache_648.2.dr, chromecache_482.2.dr	String found in binary or memory: https://docs.executive.education/public/api/v1/previewinfo/f7lbtdb18e4e216404b6188764d510dccd7cf
Source: chromecache_645.2.dr	String found in binary or memory: https://docs.executive.education/sheet
Source: chromecache_645.2.dr	String found in binary or memory: https://docs.executive.education/show
Source: chromecache_645.2.dr	String found in binary or memory: https://docs.executive.education/writer
Source: chromecache_572.2.dr, chromecache_627.2.dr, chromecache_509.2.dr	String found in binary or memory: https://du11hjcvx0uqb.cloudfront.net/dist/images/apple-touch-icon-585e5d997d.png
Source: chromecache_572.2.dr, chromecache_627.2.dr, chromecache_509.2.dr	String found in binary or memory: https://du11hjcvx0uqb.cloudfront.net/dist/images/favicon-e10d657a73.ico
Source: chromecache_572.2.dr, chromecache_627.2.dr, chromecache_509.2.dr	String found in binary or memory: https://du11hjcvx0uqb.cloudfront.net/dist/images/mobile-global-nav-logo-aff8453309.svg
Source: chromecache_572.2.dr, chromecache_627.2.dr, chromecache_509.2.dr	String found in binary or memory: https://du11hjcvx0uqb.cloudfront.net/dist/images/windows-tile-eda8889e7b.png
Source: chromecache_572.2.dr, chromecache_627.2.dr, chromecache_509.2.dr	String found in binary or memory: https://du11hjcvx0uqb.cloudfront.net/dist/images/windows-tile-wide-44d3cc1060.png
Source: chromecache_480.2.dr	String found in binary or memory: https://du11hjcvx0uqb.cloudfront.net/dist/javascripts/lti_post_message_forwarding-59677caad5.js
Source: chromecache_480.2.dr	String found in binary or memory: https://executiveeducation.instructure.com
Source: chromecache_645.2.dr	String found in binary or memory: https://files-accl.zohoexternal.com
Source: chromecache_645.2.dr	String found in binary or memory: https://files-accl.zohoexternal.com/WD-Chunk-Public/v2/stream/publicupload
Source: chromecache_645.2.dr	String found in binary or memory: https://files-accl.zohoexternal.com/public/workdrive-external/download/f7lbtdb18e4e216404b6188764d51
Source: chromecache_645.2.dr	String found in binary or memory: https://files-accl.zohoexternal.com/publicupload
Source: chromecache_645.2.dr	String found in binary or memory: https://files.zohoexternal.com/WD-Chunk-Public/v2/stream/publicupload
Source: chromecache_645.2.dr	String found in binary or memory: https://files.zohoexternal.com/publicupload
Source: chromecache_436.2.dr, chromecache_454.2.dr	String found in binary or memory: https://github.com/instructure/canvas-rce-api
Source: chromecache_572.2.dr, chromecache_627.2.dr, chromecache_509.2.dr	String found in binary or memory: https://instructure-uploads-pdx.s3.us-west-2.amazonaws.com/account_159080000000000001/attachments/54
Source: chromecache_572.2.dr, chromecache_627.2.dr, chromecache_509.2.dr	String found in binary or memory: https://instructure-uploads-pdx.s3.us-west-2.amazonaws.com/account_159080000000000001/attachments/56
Source: chromecache_645.2.dr	String found in binary or memory: https://js.zohostatic.com/personal/stable
Source: chromecache_436.2.dr, chromecache_454.2.dr	String found in binary or memory: https://npms.io/search?q=ponyfill.
Source: chromecache_648.2.dr, chromecache_482.2.dr	String found in binary or memory: https://previewengine-accl.zohoexternal.com/pdf/WD/f7lbtdb18e4e216404b6188764d510dccd7cf?version=1.0
Source: chromecache_592.2.dr, chromecache_620.2.dr	String found in binary or memory: https://quartz.csez.zohocorpin.com
Source: chromecache_592.2.dr, chromecache_620.2.dr	String found in binary or memory: https://quartz.localzoho.com
Source: chromecache_592.2.dr, chromecache_620.2.dr	String found in binary or memory: https://quartz.zoho.com
Source: chromecache_592.2.dr, chromecache_620.2.dr	String found in binary or memory: https://quartz.zoho.com.au
Source: chromecache_592.2.dr, chromecache_620.2.dr	String found in binary or memory: https://quartz.zoho.com.cn
Source: chromecache_592.2.dr, chromecache_620.2.dr	String found in binary or memory: https://quartz.zoho.eu
Source: chromecache_592.2.dr, chromecache_620.2.dr	String found in binary or memory: https://quartz.zoho.in
Source: chromecache_592.2.dr, chromecache_620.2.dr	String found in binary or memory: https://quartz.zoho.jp
Source: chromecache_592.2.dr, chromecache_620.2.dr	String found in binary or memory: https://quartz.zoho.sa
Source: chromecache_592.2.dr, chromecache_620.2.dr	String found in binary or memory: https://quartz.zohocloud.ca
Source: chromecache_645.2.dr	String found in binary or memory: https://static.zohocdn.com/personal/stable
Source: chromecache_645.2.dr	String found in binary or memory: https://static.zohocdn.com/personal/stable/jsapps/
Source: chromecache_645.2.dr	String found in binary or memory: https://static.zohocdn.com/personal/stable/jsapps/$0/dist/assets/v37.2/assetMap.json
Source: chromecache_645.2.dr	String found in binary or memory: https://static.zohocdn.com/personal/stable/jsapps/$0/dist/assets/v37.2/wd-sri.json
Source: chromecache_645.2.dr	String found in binary or memory: https://static.zohocdn.com/personal/stable/jsapps/files/dist/
Source: chromecache_645.2.dr	String found in binary or memory: https://static.zohocdn.com/personal/stable/jsapps/ui-lab/dist/
Source: chromecache_645.2.dr	String found in binary or memory: https://static.zohocdn.com/personal/stable/jsapps/ui-lab/dist/assets/dev/wd_images/favicons/defaults
Source: chromecache_645.2.dr	String found in binary or memory: https://static.zohocdn.com/quartz/feedback/v2/zquartz-tracker.js
Source: chromecache_570.2.dr, chromecache_624.2.dr	String found in binary or memory: https://twemoji.maxcdn.com/2/72x72/
Source: chromecache_570.2.dr, chromecache_624.2.dr	String found in binary or memory: https://twemoji.maxcdn.com/2/svg/
Source: chromecache_645.2.dr	String found in binary or memory: https://workdrive.zohoexternal.com/services/oembed?type=json&url=https%3A%2F%2Fdocs.executive.educat
Source: chromecache_645.2.dr	String found in binary or memory: https://www.zoho.com/workdrive
Source: chromecache_645.2.dr	String found in binary or memory: https://www.zoho.com/workdrive/signup.html
Source: chromecache_444.2.dr, chromecache_567.2.dr	String found in binary or memory: https://yarnpkg.com/en/docs/selective-version-resolutions
Source: chromecache_487.2.dr, chromecache_543.2.dr	String found in binary or memory: https://yourwebsite.com/yourpage?section=women

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 52609 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52553 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52633 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 52576 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 52599 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52610 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 52541 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52518 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52587 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52644 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52529 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 52393 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 52565 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52517 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52645 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52622 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52588 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52701
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52707
Source: unknown	Network traffic detected: HTTP traffic on port 52656 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52706
Source: unknown	Network traffic detected: HTTP traffic on port 52608 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52700
Source: unknown	Network traffic detected: HTTP traffic on port 52713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52554 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52667 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 52611 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52540 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52643 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52620 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52689 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52528 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52666 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 52539 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52654 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52577 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 52655 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52555 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 52516 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52621 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52589 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52527 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52632 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52516
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52637
Source: unknown	Network traffic detected: HTTP traffic on port 52676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52517
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52638
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52514
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52635
Source: unknown	Network traffic detected: HTTP traffic on port 52653 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52515
Source: unknown	Network traffic detected: HTTP traffic on port 52567 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52636
Source: unknown	Network traffic detected: HTTP traffic on port 52699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52515 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52518
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52639
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52519
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52630
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52512
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52633
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52513
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52634
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52510
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52631
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52511
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52632
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52538 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52618 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52527
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52648
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52528
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52649
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52525
Source: unknown	Network traffic detected: HTTP traffic on port 52591 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52646
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52526
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52647
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52529
Source: unknown	Network traffic detected: HTTP traffic on port 52549 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52640
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52520
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52641
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52523
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52644
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52524
Source: unknown	Network traffic detected: HTTP traffic on port 52606 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52645
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52521
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52642
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52522
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52643
Source: unknown	Network traffic detected: HTTP traffic on port 52556 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52665 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52630 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52538
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52659
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52539
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52536
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52657
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52537
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52658
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52590 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52651
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52531
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52652
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52650
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52534
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52655
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52535
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52656
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52532
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52653
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52533
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52654
Source: unknown	Network traffic detected: HTTP traffic on port 52664 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52687 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52526 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52631 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52549
Source: unknown	Network traffic detected: HTTP traffic on port 52568 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52547
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52668
Source: unknown	Network traffic detected: HTTP traffic on port 52698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52548
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52669
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52541
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52662
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52542
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52663
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52660
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52540
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52661
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52545
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52666
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52546
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52667
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52664
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52665
Source: unknown	Network traffic detected: HTTP traffic on port 52579 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52642 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52670
Source: unknown	Network traffic detected: HTTP traffic on port 52537 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52619 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52628 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52592 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52713
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52548 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52710
Source: unknown	Network traffic detected: HTTP traffic on port 52557 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52604
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52605
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52602
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52603
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52608
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52609
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52606
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52607
Source: unknown	Network traffic detected: HTTP traffic on port 52675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52600
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52601
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52640 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52580 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52617 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52525 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52615
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52616
Source: unknown	Network traffic detected: HTTP traffic on port 52569 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52613
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52614
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52619
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52617
Source: unknown	Network traffic detected: HTTP traffic on port 52674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52618
Source: unknown	Network traffic detected: HTTP traffic on port 52513 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52607 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52611
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52612
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52610
Source: unknown	Network traffic detected: HTTP traffic on port 52581 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52641 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52536 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52505
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52626
Source: unknown	Network traffic detected: HTTP traffic on port 52652 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52627
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52624
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52625
Source: unknown	Network traffic detected: HTTP traffic on port 52547 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52629 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52628
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52629
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52622
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52623
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52620
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52500
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52621
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52663 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52558 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52596
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52597
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52594
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52595
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52598
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52599
Source: unknown	Network traffic detected: HTTP traffic on port 52662 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52627 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52650 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52524 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52570 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52638 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52535 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52603 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52651 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52523 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52571 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52639 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52616 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52382
Source: unknown	Network traffic detected: HTTP traffic on port 52559 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52593 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52512 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52389
Source: unknown	Network traffic detected: HTTP traffic on port 52582 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52393
Source: unknown	Network traffic detected: HTTP traffic on port 52707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52558
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52559
Source: unknown	Network traffic detected: HTTP traffic on port 52672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52552
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52673
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52553
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52674
Source: unknown	Network traffic detected: HTTP traffic on port 52695 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52550
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52671
Source: unknown	Network traffic detected: HTTP traffic on port 52511 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52551
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52556
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52557
Source: unknown	Network traffic detected: HTTP traffic on port 52605 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52554
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52675
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52555
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52676
Source: unknown	Network traffic detected: HTTP traffic on port 52614 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52637 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52583 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52560
Source: unknown	Network traffic detected: HTTP traffic on port 52534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52560 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52595 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52569
Source: unknown	Network traffic detected: HTTP traffic on port 52648 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52545 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52563
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52564
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52561
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52562
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52683
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52567
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52688
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52568
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52689
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52565
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52566
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52687
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52570
Source: unknown	Network traffic detected: HTTP traffic on port 52661 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52691
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52571
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52692
Source: unknown	Network traffic detected: HTTP traffic on port 52500 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52594 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52626 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52649 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52574
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52695
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52575
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52696
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52572
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52573
Source: unknown	Network traffic detected: HTTP traffic on port 52584 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52694
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52578
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52699
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52579
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52576
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52577
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52698
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52581
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52582
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52580
Source: unknown	Network traffic detected: HTTP traffic on port 52683 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52522 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52572 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52585
Source: unknown	Network traffic detected: HTTP traffic on port 52694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52586
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52583
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52584
Source: unknown	Network traffic detected: HTTP traffic on port 52660 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52589
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52587
Source: unknown	Network traffic detected: HTTP traffic on port 52604 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52588
Source: unknown	Network traffic detected: HTTP traffic on port 52615 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52592
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52593
Source: unknown	Network traffic detected: HTTP traffic on port 52533 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52561 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52590
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52591
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52521 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52647 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52550 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52624 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52601 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52562 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52659 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52573 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52613 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52532 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52551 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52658 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52574 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52625 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52585 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52600 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52636 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52670 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52596 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52519 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 52586 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52563 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 52692 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 52520 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52623 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52602 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52531 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52552 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 52598 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52669 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 52705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 52634 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 52542 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52668 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52635 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52612 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52597 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52564 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52646 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52691 -> 443

Source: classification engine

Classification label: mal48.win@77/396@33/19

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2025-02-10 11-29-39-312.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2580 --field-trial-handle=2544,i,13932530888413711099,9761085573670360277,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://colorado-education.jmailroute.net/x/d?c=44819838&l=3f42e1cb-7b27-4505-8bfe-d3398c46b475&r=dee8889a-85a8-4801-af6f-60c9c7c8c967"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.PrintingService --lang=en-US --service-sandbox-type=pdf_conversion --mojo-platform-channel-handle=6960 --field-trial-handle=2544,i,13932530888413711099,9761085573670360277,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Downloads\UCCS-Strategic-Artificial-Intelligence-Advisory-Brochure.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2104 --field-trial-handle=1520,i,18006825447178311642,566807441090331611,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://bit.ly/advisor-center"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2492 --field-trial-handle=1908,i,718000698419144506,315186180618625309,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2580 --field-trial-handle=2544,i,13932530888413711099,9761085573670360277,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.PrintingService --lang=en-US --service-sandbox-type=pdf_conversion --mojo-platform-channel-handle=6960 --field-trial-handle=2544,i,13932530888413711099,9761085573670360277,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2104 --field-trial-handle=1520,i,18006825447178311642,566807441090331611,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2492 --field-trial-handle=1908,i,718000698419144506,315186180618625309,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe

File opened: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\crash_reporter.cfg

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Window detected: Number of UI elements: 15

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 483
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 483			Jump to dropped file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	11 Masquerading	OS Credential Dumping	1 System Information Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Source: https://docs.executive.education/external/file/f7lbtdb18e4e216404b6188764d510dccd7cf	HTTP Parser: No favicon
Source: https://docs.executive.education/external/file/f7lbtdb18e4e216404b6188764d510dccd7cf	HTTP Parser: No favicon
Source: file:///C:/Users/user/Downloads/UCCS-Strategic-Artificial-Intelligence-Advisory-Brochure.pdf	HTTP Parser: No favicon
Source: file:///C:/Users/user/Downloads/UCCS-Strategic-Artificial-Intelligence-Advisory-Brochure.pdf	HTTP Parser: No favicon
Source: https://executiveeducation.instructure.com/courses/261	HTTP Parser: No favicon

Source: https://executiveeducation.instructure.com/login/canvas	HTTP Parser: No <meta name="author".. found
Source: https://executiveeducation.instructure.com/login/canvas	HTTP Parser: No <meta name="author".. found
Source: https://executiveeducation.instructure.com/login/canvas	HTTP Parser: No <meta name="author".. found
Source: https://executiveeducation.instructure.com/login/canvas	HTTP Parser: No <meta name="author".. found
Source: https://executiveeducation.instructure.com/login/canvas	HTTP Parser: No <meta name="author".. found

Source: https://executiveeducation.instructure.com/login/canvas	HTTP Parser: No <meta name="copyright".. found
Source: https://executiveeducation.instructure.com/login/canvas	HTTP Parser: No <meta name="copyright".. found
Source: https://executiveeducation.instructure.com/login/canvas	HTTP Parser: No <meta name="copyright".. found
Source: https://executiveeducation.instructure.com/login/canvas	HTTP Parser: No <meta name="copyright".. found
Source: https://executiveeducation.instructure.com/login/canvas	HTTP Parser: No <meta name="copyright".. found

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: colorado-education.jmailroute.net
Source: global traffic	DNS traffic detected: DNS query: executive.education
Source: global traffic	DNS traffic detected: DNS query: docs.executive.education
Source: global traffic	DNS traffic detected: DNS query: static.zohocdn.com
Source: global traffic	DNS traffic detected: DNS query: contacts.zoho.com
Source: global traffic	DNS traffic detected: DNS query: previewengine-accl.zohoexternal.com
Source: global traffic	DNS traffic detected: DNS query: 241.42.69.40.in-addr.arpa
Source: global traffic	DNS traffic detected: DNS query: files-accl.zohoexternal.com
Source: global traffic	DNS traffic detected: DNS query: bit.ly
Source: global traffic	DNS traffic detected: DNS query: executiveeducation.instructure.com
Source: global traffic	DNS traffic detected: DNS query: du11hjcvx0uqb.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: instructure-uploads-pdx.s3.us-west-2.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: sso.canvaslms.com
Source: global traffic	DNS traffic detected: DNS query: relay-pdx.sentry.insops.net

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report
https://colorado-education.jmailroute.net/x/d?c=44819838&l=3f42e1cb-7b27-4505-8bfe-d3398c46b475&r=dee8889a-85a8-4801-af6f-60c9c7c8c967

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://colorado-education.jmailroute.net/x/d?c=44819838&l=3f42e1cb-7b27-4505-8bfe-d3398c46b475&r=dee8889a-85a8-4801-af6f-60c9c7c8c967

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Windows Analysis Report
https://colorado-education.jmailroute.net/x/d?c=44819838&l=3f42e1cb-7b27-4505-8bfe-d3398c46b475&r=dee8889a-85a8-4801-af6f-60c9c7c8c967