top title background image
flash

https://appletreeanimalhospital.com/New/DocSigning.htm

Status: finished
Submission Time: 2020-10-19 20:53:25 +02:00
Malicious
Phishing
HTMLPhisher

Comments

Tags

Details

  • Analysis ID:
    300400
  • API (Web) ID:
    495921
  • Analysis Started:
    2020-10-19 20:55:17 +02:00
  • Analysis Finished:
    2020-10-19 21:00:11 +02:00
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
malicious
Score: 52
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

IPs

IP Country Detection
74.124.193.166
United States
13.224.186.88
United States
13.224.186.77
United States
Click to see the 7 hidden entries
104.18.71.113
United States
104.16.84.55
United States
18.185.222.177
United States
13.225.84.8
United States
18.130.35.144
United States
104.18.70.113
United States
108.177.126.155
United States

Domains

Name IP Detection
dfnmgvgrju45s.cloudfront.net
13.224.186.77
appletreeanimalhospital.com
74.124.193.166
stats.l.doubleclick.net
108.177.126.155
Click to see the 13 hidden entries
d1piuc6mf7ro4.cloudfront.net
13.224.186.88
cf.zdassets.com
104.18.71.113
widget-mediator.zopim.com
18.185.222.177
d2tf7t5wbettnq.cloudfront.net
13.225.84.8
external.pol.prod.a.ddy.systems
18.130.35.144
v2.zopim.com
104.16.84.55
js-agent.newrelic.com
0.0.0.0
auth.myprofile.postoffice.co.uk
0.0.0.0
stats.g.doubleclick.net
0.0.0.0
static.zdassets.com
0.0.0.0
myprofile.postoffice.co.uk
0.0.0.0
ekr.zdassets.com
0.0.0.0
bam-cell.nr-data.net
0.0.0.0

URLs

Name Detection
https://auth.myprofile.postoffice.co.uk/sign_in
https://myprofile.postoffice.co.uk/contact_info
https://auth.myprofile.postoffice.co.uk/sign_in?contrast=switch
Click to see the 97 hidden entries
https://appletreeanimalhospital.com/New/DocSigning.htm#content
https://appletreeanimalhospital.com/New/DocSigning.htm
https://appletreeanimalhospital.com/New/DocSigning.htmRoot
http://fluidproject.org/blog/2008/01/09/getting-setting-and-removing-tabindex-values-with-javascript
https://www.postoffice.co.uk/myaccount/account
https://html.spec.whatwg.org/#strip-and-collapse-whitespace
https://dfnmgvgrju45s.cloudfront.net/assets/branding/pol/safari-pinned-tab-5ac74b83798429dfaa0a526fa
https://getbootstrap.com/docs/3.4/javascript/#carousel
https://www.postoffice.co.uk/contact-us
https://appletreeanimalhospital.com/New/DocSigning.htm(Log
http://sizzlejs.com/
https://www.zendesk.
https://auth.myprofile.postoffice.co.uk/sign_in?contrast=switch&contrast=switch
http://jquery.org/license
https://use.typekit.net
https://bugs.webkit.org/show_bug.cgi?id=136851
https://d1piuc6mf7ro4.cloudfront.net/assets/branding/logo_postoffice-fe4a47829c4c284bebe7594b3857017
https://appletreeanimalhospital.com/New/DocSigning.htm#content
https://v2.zopim.com/widget/sounds
https://auth.myprofile
https://bugzilla.mozilla.org/show_bug.cgi?id=491668
https://www.zopim.com/auth/$NAME/$KEY-$MID
https://github.com/jquery/sizzle/pull/225
https://github.com/rails/jquery-ujs
https://myprofile.postoffice.co.uk/contact_infocontrast=switchbf7d25c0fd77d051974b320756ffadc6377672
https://www.zopim.com/auth/logout/$KEY-$MID
https://modernizr.com/)
https://appletreeanimalhospital.com/New/DocSigning.htm
https://getbootstrap.com/)
https://dfnmgvgrju45s.cloudfront.net/assets/application_pol-90e2e6f7e99a283ff4ca98fc713a9700d7d24e99
https://myprofile.postoffice.co.uk/contact_infocontrast=switch
https://github.com/silviomoreto/bootstrap-select/blob/master/LICENSE)
http://fontawesome.iohttp://fontawesome.iohttp://fontawesome.io/license/http://fontawesome.io/licens
https://dfnmgvgrju45s.cloudfront.net/assets/branding/pol/favicon-8358d52b4ba2d53af53c83d416e8e10283f
https://d1piuc6mf7ro4.cloudfront.net/assets/branding/pol/safari-pinned-tab-5ac74b83798429dfaa0a526fa
https://appletreelhospital.com/New/DocSigning.htm#contentRoot
https://d1piuc6mf7ro4.cloudfront.net/assets/branding/pol/favicon-8358d52b4ba2d53af53c83d416e8e10283f
https://auth.myprofile.postoffice.co.uk/sign_in
http://api.zopim.com/
https://d1piuc6mf7ro4.cloudfront.net/assets/branding/pol/favicon-32x32-29bf7d25c0fd77d051974b320756f
https://d2tf7t5wbettnq.cloudfront.net/eeecb4bb-cbcc-48e6-92e8-e1f7f4dac7ee-postoffice-background2.jp
https://getbootstrap.com/docs/3.4/javascript/#alerts
https://github.com/jquery/jquery/pull/557)
https://getbootstrap.com/docs/3.4/javascript/#affix
https://dfnmgvgrju45s.cloudfront.net/assets/branding/pol/apple-touch-icon-18bd968e650780527c4ab853f7
https://getbootstrap.com/docs/3.4/javascript/#buttons
https://d1piuc6mf7ro4.cloudfront.net/assets/application-5a56e54ee86d540f75ce68545f8bfc6c3db70716e884
http://jsperf.com/getall-vs-sizzle/2
http://zop.im/prem-offline-form
https://github.com/jquery/jquery/pull/764
https://getbootstrap.com/docs/3.4/javascript/#transitions
https://github.com/rails/sprockets#sprockets-directives)
https://myprofile.post
https://dfnmgvgrju45s.cloudfront.net/assets/branding/logo_postoffice-fe4a47829c4c284bebe7594b3857017
https://twitter.com/messages/compose?recipient_id=
https://github.com/krux/postscribe/blob/master/LICENSE.
https://dfnmgvgrju45s.cloudfront.net/assets/respond.min-3fca2ee5e635adc590683142c60af7c9209aff5f828a
https://blog.alexmaccaw.com/css-transitions
https://bugzilla.mozilla.org/show_bug.cgi?id=687787
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
https://github.com/twbs/bootstrap/issues/14093
http://silviomoreto.github.io/bootstrap-select)
https://myprofile.postoffice.co.uk/contact_info?contrast=switch
http://dev.w3.org/csswg/cssom/#resolved-values
https://bugs.webkit.org/show_bug.cgi?id=29084
https://auth.myprofile.postoffice.co.uk/sign_in?contrast=switch(Log
https://www.postoffice.co.uk/contact-us/
https://getbootstrap.com/docs/3.4/javascript/#popovers
https://d1piuc6mf7ro4.cloudfront.net/assets/branding/pol/favicon-16x16-2d6222eaa0e50664fb9b2bc07c339
http://bit.ly/raven-secret-key
https://www.zendesk.com/privacy
http://fontawesome.io
https://dfnmgvgrju45s.cloudfront.net/assets/branding/pol/favicon-32x32-29bf7d25c0fd77d051974b320756f
https://dfnmgvgrju45s.cloudfront.net/assets/branding/pol/favicon-16x16-2d6222eaa0e50664fb9b2bc07c339
https://appletreeanimalhospital.com/New/DocSigning.htm#contentoudfront.net/assets/branding/pol/favic
https://github.com/twbs/bootstrap/blob/master/LICENSE)
https://auth.myprofile.postoffice.co.uk/sign_in(Log
https://getbootstrap.com/docs/3.4/javascript/#scrollspy
https://developer.mozilla.org/en/Security/CSP)
https://appletreeoffice.co.uk/contact_infocontrast=switchRoot
https://d1piuc6mf7ro4.cloudfront.net/assets/application_pol-7fadf2bc209737dcd407e2585571686a2c80b4f2
https://developer.mozilla.org/en-US/docs/CSS/display
https://myprofile.postoffice.co.uk/contact_info
https://getbootstrap.com/docs/3.4/javascript/#collapse
https://www.zopim.com
https://www.zopim.com/privacy#cookie
http://weblogs.java.net/blog/driscoll/archive/2009/09/08/eval-javascript-global-context
https://ekr.zdassets.com/compose_product/zopim_chat/abc123?deprecated_features=true
https://getbootstrap.com/docs/3.4/javascript/#modals
https://developer.mozilla.org/en-US/docs/Using_Firefox_1.5_caching
https://github.com/twbs/bootstrap/issues/20280
https://d1piuc6mf7ro4.cloudfront.net/assets/branding/pol/site-7859f856bcb07813992135c4ee8a9a657c0ca3
https://getbootstrap.com/docs/3.4/javascript/#tooltip
https://bugzilla.mozilla.org/show_bug.cgi?id=649285
https://www.zendesk.com/embeddables/?utm_source=webwidgetchat&utm_medium=poweredbyzendesk&utm_campai
http://bugs.jquery.com/ticket/12359
https://appletree.postoffice.co.uk/sign_inng.htm#contentRoot

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\DocSigning[1].htm
HTML document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\logo_postoffice-fe4a47829c4c284bebe7594b38570178841c182def7d46aa844bb417ef5ad9cc[1].svg
SVG Scalable Vector Graphics image
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\gtm[1].js
ASCII text, with very long lines
#
Click to see the 40 hidden entries
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\sign_in[1].htm
HTML document, ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\ProbaPro-Italic-6e53e190b7e8ce10b18a9cabf913fcde21ed6658d29824b983de7109cc72a93b[1].otf
OpenType font data
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\ProbaPro-Medium-e037e3b2ffcdf5afd556b4776251026be6f7f69dd8948408f73077fe05be8d77[1].otf
OpenType font data
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\ProbaPro-Regular-d2e3f1204c73fba7806a19c43f5ab19877e836dc75ff9b631d00e39db3408cea[1].otf
OpenType font data
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\ProbaPro-SemiBold-648002088dd990e2cbfe342a450b4d4abd8c28f92c101d91be800ca871f94543[1].otf
OpenType font data
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\ProbaPro-SemiBold-648002088dd990e2cbfe342a450b4d4abd8c28f92c101d91be800ca871f94543[2].otf
OpenType font data
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\application_pol-7fadf2bc209737dcd407e2585571686a2c80b4f2ac6c2acf8f6dc9b54735ff65[1].css
UTF-8 Unicode (with BOM) text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\fontawesome-webfont-7bfcab6db99d5cfbf1705ca0536ddc78585432cc5fa41bbd7ad0f009033b2979[1].eot
Embedded OpenType (EOT), FontAwesome family
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\sign_in[1].htm
HTML document, ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\ProbaPro-Italic-6e53e190b7e8ce10b18a9cabf913fcde21ed6658d29824b983de7109cc72a93b[1].otf
OpenType font data
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\ProbaPro-Medium-e037e3b2ffcdf5afd556b4776251026be6f7f69dd8948408f73077fe05be8d77[1].otf
OpenType font data
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\application-5a56e54ee86d540f75ce68545f8bfc6c3db70716e884492f08de6a45730a0bf6[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\application_pol-7fadf2bc209737dcd407e2585571686a2c80b4f2ac6c2acf8f6dc9b54735ff65[1].css
UTF-8 Unicode (with BOM) text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\asset_composer[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\eeecb4bb-cbcc-48e6-92e8-e1f7f4dac7ee-postoffice-background2[1].jpg
[TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2], baseline, precision 8, 2500x1602, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\favicon-32x32-29bf7d25c0fd77d051974b320756ffadc6377672c38352b456cc5d81de75e1f8[1].png
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Temp\~DF38E0BB391E69AA3F.TMP
data
#
C:\Users\user\AppData\Local\Temp\~DFB354AB5C305999E4.TMP
data
#
C:\Users\user\AppData\Local\Temp\~DFBA859241ED4CE791.TMP
data
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\contact_info[1].htm
HTML document, UTF-8 Unicode text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{2F01221D-1288-11EB-90E5-ECF4BB570DC9}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{2F01221F-1288-11EB-90E5-ECF4BB570DC9}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{34F9B3FB-1288-11EB-90E5-ECF4BB570DC9}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\dikxvqf\imagestore.dat
data
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\NRJS-7bc6d3b14d5ba545792[1].js
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\ProbaPro-Regular-d2e3f1204c73fba7806a19c43f5ab19877e836dc75ff9b631d00e39db3408cea[1].otf
OpenType font data
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\ProbaPro-SemiBold-648002088dd990e2cbfe342a450b4d4abd8c28f92c101d91be800ca871f94543[1].otf
OpenType font data
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\application_pol-7fadf2bc209737dcd407e2585571686a2c80b4f2ac6c2acf8f6dc9b54735ff65[1].css
UTF-8 Unicode (with BOM) text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\application_pol-90e2e6f7e99a283ff4ca98fc713a9700d7d24e99cd6a655aab784cf0662708d3[1].css
UTF-8 Unicode (with BOM) text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\branded-2be6a9099671c3fd44fd386bcb767a443fe7d93189a421ce51f508b55290690e[1].js
HTML document, ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\DURNCK2N\myprofile.postoffice.co[1].xml
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\favicon-32x32-29bf7d25c0fd77d051974b320756ffadc6377672c38352b456cc5d81de75e1f8[1].png
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\fontawesome-webfont-7bfcab6db99d5cfbf1705ca0536ddc78585432cc5fa41bbd7ad0f009033b2979[1].eot
Embedded OpenType (EOT), FontAwesome family
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\logo_postoffice-fe4a47829c4c284bebe7594b38570178841c182def7d46aa844bb417ef5ad9cc[1].svg
SVG Scalable Vector Graphics image
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\nr-1184.min[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\sign_in[1].htm
HTML document, ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\widget_v2.329[1].js
UTF-8 Unicode text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\2WGlugEHgFmrrwWlg64YMgqz2UEQeOt7[1].json
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\ProbaPro-Regular-d2e3f1204c73fba7806a19c43f5ab19877e836dc75ff9b631d00e39db3408cea[1].otf
OpenType font data
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\application_pol-7fadf2bc209737dcd407e2585571686a2c80b4f2ac6c2acf8f6dc9b54735ff65[1].css
UTF-8 Unicode (with BOM) text, with very long lines
#