Edit tour

Windows Analysis Report
https://form.jotform.me/92812002476452

Overview

General Information

Sample URL:	https://form.jotform.me/92812002476452
Analysis ID:	682136
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML body contains low number of good links

No HTML title found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6036 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 4136 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1544,17416894625862386819,122532231962354207,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1920 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 7644 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1544,17416894625862386819,122532231962354207,131072 --lang=en-US --service-sandbox-type=audio --enable-audio-service-sandbox --mojo-platform-channel-handle=3356 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 7660 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1544,17416894625862386819,122532231962354207,131072 --lang=en-US --service-sandbox-type=video_capture --enable-audio-service-sandbox --mojo-platform-channel-handle=3388 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 5212 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" "https://form.jotform.me/92812002476452 MD5: C139654B5C1438A95B321BB01AD63EF6)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://form.jotform.me/92812002476452	HTTP Parser: Number of links: 0
Source: https://form.jotform.me/92812002476452	HTTP Parser: Number of links: 0

Source: https://form.jotform.me/92812002476452	HTTP Parser: HTML title missing
Source: https://form.jotform.me/92812002476452	HTTP Parser: HTML title missing

Source: https://form.jotform.me/92812002476452	HTTP Parser: No <meta name="author".. found
Source: https://form.jotform.me/92812002476452	HTTP Parser: No <meta name="author".. found

Source: https://form.jotform.me/92812002476452	HTTP Parser: No <meta name="copyright".. found
Source: https://form.jotform.me/92812002476452	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic			Jump to behavior

Source: unknown	HTTPS traffic detected: 104.23.133.11:443 -> 192.168.2.3:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.3:49872 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.23.133.11:443 -> 192.168.2.3:49878 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.23.133.11:443 -> 192.168.2.3:49878 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.203.100:443 -> 192.168.2.3:50028 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.65:443 -> 192.168.2.3:50029 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.73.184:443 -> 192.168.2.3:50039 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.73.184:443 -> 192.168.2.3:50040 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.3:50243 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.3:50244 version: TLS 1.2

Source: unknown

DNS traffic detected: queries for: form.jotform.me

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50268 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 50209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50258 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 50166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50218
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50217
Source: unknown	Network traffic detected: HTTP traffic on port 50174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50214
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49694
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 50186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50223
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50248
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 49694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 50150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50243
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50244
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50205
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50207
Source: unknown	Network traffic detected: HTTP traffic on port 50196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50206
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50209
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50200
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50202
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50174
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50176
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50179
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50180
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50182
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50181
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50183
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50186
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50187
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50191
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50190
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50193
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 50159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50192
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50195
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50194
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50197
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50196
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50199
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50139
Source: unknown	Network traffic detected: HTTP traffic on port 50170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50138
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50130
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50134
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50137
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50136
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50140
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50149
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50141
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50143
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50145
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50148
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50147
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443

Source: global traffic	HTTP traffic detected: GET /92812002476452 HTTP/1.1Host: form.jotform.meConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=85.0.4183.121&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda,pkedcjkdefgpdelpbcmbmeomcjbeemfmX-Goog-Update-Updater: chromecrx-85.0.4183.121Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/formCss.css?3.3.34848 HTTP/1.1Host: cdn01.jotfor.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://form.jotform.me/92812002476452Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/styles/nova.css?3.3.34848 HTTP/1.1Host: cdn02.jotfor.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://form.jotform.me/92812002476452Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/prototype.forms.js?3.3.34848 HTTP/1.1Host: cdn02.jotfor.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://form.jotform.me/92812002476452Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/styles/payment/payment_feature.css?3.3.34848 HTTP/1.1Host: cdn01.jotfor.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://form.jotform.me/92812002476452Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/CSS/566a91c2977cdfcd478b4567.css? HTTP/1.1Host: cdn03.jotfor.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://form.jotform.me/92812002476452Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/jotform.forms.js?3.3.34848 HTTP/1.1Host: cdn03.jotfor.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://form.jotform.me/92812002476452Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: 2161041b-8d84-4fb7-9370-082b225f7393.tmp.1.dr

String found in binary or memory: {"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://ogs.google.com","supports_spdy":true},{"isolation":[],"server":"https://www.googleapis.com","supports_spdy":true},{"isolation":[],"server":"https://clients2.googleusercontent.com","supports_spdy":true},{"isolation":[],"server":"https://dns.google","supports_spdy":true},{"alternative_service":[{"advertised_versions":[50],"expiration":"13307285040692766","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://redirector.gvt1.com"},{"alternative_service":[{"advertised_versions":[50],"expiration":"13307285040890325","port":443,"protocol_str":"quic"},{"advertised_versions":[50],"expiration":"13307285040890328","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://r1---sn-4g5ednd7.gvt1.com"},{"alternative_service":[{"advertised_versions":[50],"expiration":"13307285068677407","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://www.gstatic.com","supports_spdy":true},{"alternative_service":[{"advertised_versions":[50],"expiration":"13307285068867850","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://lh3.googleusercontent.com"},{"alternative_service":[{"advertised_versions":[50],"expiration":"13307285073759818","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://accounts.youtube.com"},{"alternative_service":[{"advertised_versions":[50],"expiration":"13307285074288924","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://fonts.gstatic.com","supports_spdy":true},{"alternative_service":[{"advertised_versions":[50],"expiration":"13307285074450409","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://play.google.com","supports_spdy":true},{"alternative_service":[{"advertised_versions":[50],"expiration":"13307285047427811","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":32278},"server":"https://clients2.google.com","supports_spdy":true},{"alternative_service":[{"advertised_versions":[50],"expiration":"13307285059953904","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://stats.g.doubleclick.net"},{"alternative_service":[{"advertised_versions":[50],"expiration":"13307285080653045","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://apis.google.com","supports_spdy":true},{"alternative_service":[{"advertised_versions":[50],"expiration":"13307285074430855","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://ssl.gstatic.com","supports_spdy":true},{"alternative_service":[{"advertised_versions":[50],"expiration":"13307285096350731","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":32022},"server":"https://accounts.google.com","supports_spdy":true},{"alternative_service":[{"advertised_versions":[50],"expiration":"13307285097563209","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://www.googletagmanager.com"},{"alternative_service":[{"advertised_versions":[50],"expiration":"13

Source: e8159887-1a37-4df9-a1cf-da51a10e8b2f.tmp.1.dr, 2161041b-8d84-4fb7-9370-082b225f7393.tmp.1.dr	String found in binary or memory: https://accounts.google.com
Source: craw_window.js.0.dr	String found in binary or memory: https://accounts.google.com/MergeSession
Source: 2161041b-8d84-4fb7-9370-082b225f7393.tmp.1.dr	String found in binary or memory: https://accounts.youtube.com
Source: e8159887-1a37-4df9-a1cf-da51a10e8b2f.tmp.1.dr, 2161041b-8d84-4fb7-9370-082b225f7393.tmp.1.dr	String found in binary or memory: https://apis.google.com
Source: e8159887-1a37-4df9-a1cf-da51a10e8b2f.tmp.1.dr, 2161041b-8d84-4fb7-9370-082b225f7393.tmp.1.dr	String found in binary or memory: https://clients2.google.com
Source: manifest.json0.0.dr, manifest.json.0.dr	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: e8159887-1a37-4df9-a1cf-da51a10e8b2f.tmp.1.dr, 2161041b-8d84-4fb7-9370-082b225f7393.tmp.1.dr	String found in binary or memory: https://clients2.googleusercontent.com
Source: 2161041b-8d84-4fb7-9370-082b225f7393.tmp.1.dr	String found in binary or memory: https://content-autofill.googleapis.com
Source: 1c12fafa-be49-4eff-be2c-75170fe6a376.tmp.1.dr, e8159887-1a37-4df9-a1cf-da51a10e8b2f.tmp.1.dr, 2161041b-8d84-4fb7-9370-082b225f7393.tmp.1.dr	String found in binary or memory: https://dns.google
Source: e8159887-1a37-4df9-a1cf-da51a10e8b2f.tmp.1.dr	String found in binary or memory: https://fonts.googleapis.com
Source: e8159887-1a37-4df9-a1cf-da51a10e8b2f.tmp.1.dr, 2161041b-8d84-4fb7-9370-082b225f7393.tmp.1.dr	String found in binary or memory: https://fonts.gstatic.com
Source: History Provider Cache.0.dr	String found in binary or memory: https://form.jotform.me/928120024764522/Registration
Source: craw_window.js.0.dr, craw_background.js.0.dr	String found in binary or memory: https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p
Source: 2161041b-8d84-4fb7-9370-082b225f7393.tmp.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: 2161041b-8d84-4fb7-9370-082b225f7393.tmp.1.dr	String found in binary or memory: https://lh3.googleusercontent.com
Source: e8159887-1a37-4df9-a1cf-da51a10e8b2f.tmp.1.dr, 2161041b-8d84-4fb7-9370-082b225f7393.tmp.1.dr	String found in binary or memory: https://ogs.google.com
Source: craw_window.js.0.dr, manifest.json0.0.dr, manifest.json.0.dr	String found in binary or memory: https://payments.google.com/payments/v4/js/integrator.js
Source: e8159887-1a37-4df9-a1cf-da51a10e8b2f.tmp.1.dr, 2161041b-8d84-4fb7-9370-082b225f7393.tmp.1.dr	String found in binary or memory: https://play.google.com
Source: 2161041b-8d84-4fb7-9370-082b225f7393.tmp.1.dr	String found in binary or memory: https://r1---sn-4g5ednd7.gvt1.com
Source: 2161041b-8d84-4fb7-9370-082b225f7393.tmp.1.dr	String found in binary or memory: https://redirector.gvt1.com
Source: craw_window.js.0.dr, manifest.json0.0.dr, manifest.json.0.dr	String found in binary or memory: https://sandbox.google.com/payments/v4/js/integrator.js
Source: e8159887-1a37-4df9-a1cf-da51a10e8b2f.tmp.1.dr, 2161041b-8d84-4fb7-9370-082b225f7393.tmp.1.dr	String found in binary or memory: https://ssl.gstatic.com
Source: 2161041b-8d84-4fb7-9370-082b225f7393.tmp.1.dr	String found in binary or memory: https://stats.g.doubleclick.net
Source: craw_window.js.0.dr, craw_background.js.0.dr	String found in binary or memory: https://www-googleapis-staging.sandbox.google.com
Source: 2161041b-8d84-4fb7-9370-082b225f7393.tmp.1.dr	String found in binary or memory: https://www.google-analytics.com
Source: e8159887-1a37-4df9-a1cf-da51a10e8b2f.tmp.1.dr, 2161041b-8d84-4fb7-9370-082b225f7393.tmp.1.dr	String found in binary or memory: https://www.google.com
Source: manifest.json0.0.dr, manifest.json.0.dr	String found in binary or memory: https://www.google.com/
Source: craw_window.js.0.dr	String found in binary or memory: https://www.google.com/accounts/OAuthLogin?issueuberauth=1
Source: craw_window.js.0.dr	String found in binary or memory: https://www.google.com/images/cleardot.gif
Source: craw_window.js.0.dr	String found in binary or memory: https://www.google.com/images/dot2.gif
Source: craw_window.js.0.dr	String found in binary or memory: https://www.google.com/images/x2.gif
Source: craw_background.js.0.dr	String found in binary or memory: https://www.google.com/intl/en-US/chrome/blank.html
Source: 2161041b-8d84-4fb7-9370-082b225f7393.tmp.1.dr	String found in binary or memory: https://www.google.de
Source: 2161041b-8d84-4fb7-9370-082b225f7393.tmp.1.dr	String found in binary or memory: https://www.googleadservices.com
Source: e8159887-1a37-4df9-a1cf-da51a10e8b2f.tmp.1.dr, craw_window.js.0.dr, craw_background.js.0.dr, 2161041b-8d84-4fb7-9370-082b225f7393.tmp.1.dr	String found in binary or memory: https://www.googleapis.com
Source: manifest.json0.0.dr, manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/
Source: manifest.json0.0.dr, manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/chromewebstore
Source: manifest.json0.0.dr, manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/chromewebstore.readonly
Source: manifest.json0.0.dr, manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/sierra
Source: manifest.json0.0.dr, manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/sierrasandbox
Source: 2161041b-8d84-4fb7-9370-082b225f7393.tmp.1.dr	String found in binary or memory: https://www.googletagmanager.com
Source: e8159887-1a37-4df9-a1cf-da51a10e8b2f.tmp.1.dr, 2161041b-8d84-4fb7-9370-082b225f7393.tmp.1.dr	String found in binary or memory: https://www.gstatic.com

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1544,17416894625862386819,122532231962354207,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1920 /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "https://form.jotform.me/92812002476452
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1544,17416894625862386819,122532231962354207,131072 --lang=en-US --service-sandbox-type=audio --enable-audio-service-sandbox --mojo-platform-channel-handle=3356 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1544,17416894625862386819,122532231962354207,131072 --lang=en-US --service-sandbox-type=video_capture --enable-audio-service-sandbox --mojo-platform-channel-handle=3388 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1544,17416894625862386819,122532231962354207,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1920 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1544,17416894625862386819,122532231962354207,131072 --lang=en-US --service-sandbox-type=audio --enable-audio-service-sandbox --mojo-platform-channel-handle=3356 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1544,17416894625862386819,122532231962354207,131072 --lang=en-US --service-sandbox-type=video_capture --enable-audio-service-sandbox --mojo-platform-channel-handle=3388 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	3 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	3 Non-Application Layer Protocol	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	4 Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	1 Ingress Tool Transfer	SIM Card Swap		Carrier Billing Fraud

Source	Detection	Scanner	Label	Link
https://form.jotform.me/92812002476452	0%	Virustotal		Browse
https://form.jotform.me/92812002476452	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
gstaticadssl.l.google.com	172.217.168.3	true	false	high
cdn01.jotfor.ms	172.67.73.184	true	false	high
browser.sentry-cdn.com	151.101.194.217	true	false	unknown
cdn.jotfor.ms	104.26.6.134	true	false	high
js.jotform.com	104.23.134.11	true	false	high
scontent.xx.fbcdn.net	157.240.17.15	true	false	high
s3.amazonaws.com	54.231.33.202	true	false	high
go.lb.jotform.com	35.201.118.58	true	false	high
script.hotjar.com	54.230.206.101	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
www.google.com	142.250.203.100	true	false	high
polyfill.io	151.101.1.26	true	false	high
form.jotform.me	35.201.118.58	true	false	high
cdn02.jotfor.ms	104.26.6.134	true	false	high
o61806.ingest.sentry.io	34.120.195.249	true	false	high
static-cdn.hotjar.com	52.222.191.35	true	false	high
star-mini.c10r.facebook.com	157.240.17.35	true	false	high
www.google.de	172.217.168.35	true	false	high
accounts.google.com	142.250.203.109	true	false	high
plus.l.google.com	142.250.203.110	true	false	high
stats.l.doubleclick.net	108.177.127.154	true	false	high
dual-a-0001.a-msedge.net	204.79.197.200	true	false	unknown
www.gravatar.com	192.0.73.2	true	false	high
www-googletagmanager.l.google.com	172.217.168.40	true	false	high
fullstory.com	147.75.40.150	true	false	high
part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
edge.fullstory.com	35.201.112.186	true	false	high
i0.wp.com	192.0.77.2	true	false	high
www.jotform.com	104.23.133.11	true	false	high
insights.hotjar.com	52.85.92.79	true	false	high
vars.hotjar.com	52.222.191.99	true	false	high
go.files.jotform.com	35.190.41.132	true	false	high
s3-w.us-east-1.amazonaws.com	52.216.38.25	true	false	high
rs.fullstory.com	35.186.194.58	true	false	high
googleads.g.doubleclick.net	142.250.203.98	true	false	high
www3.l.google.com	172.217.168.78	true	false	high
play.google.com	216.58.215.238	true	false	high
cdn03.jotfor.ms	104.26.6.134	true	false	high
clients.l.google.com	172.217.168.14	true	false	high
events.jotform.com	104.23.134.11	true	false	high
googlehosted.l.googleusercontent.com	172.217.168.65	true	false	high
cms.jotform.com	unknown	unknown	false	high
lh3.googleusercontent.com	unknown	unknown	false	high
stats.g.doubleclick.net	unknown	unknown	false	high
jotform-common.s3.amazonaws.com	unknown	unknown	false	high
clients2.google.com	unknown	unknown	false	high
moodular.jotform.com	unknown	unknown	false	high
code.jquery.com	unknown	unknown	false	high
static.hotjar.com	unknown	unknown	false	high
www.facebook.com	unknown	unknown	false	high
use.typekit.net	unknown	unknown	false	high
www.linkedin.com	unknown	unknown	false	high
connect.facebook.net	unknown	unknown	false	high
px.ads.linkedin.com	unknown	unknown	false	high
p.typekit.net	unknown	unknown	false	high
accounts.youtube.com	unknown	unknown	false	high
snap.licdn.com	unknown	unknown	false	high
apis.google.com	unknown	unknown	false	high
files.jotform.com	unknown	unknown	false	high

Name	Malicious	Reputation
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=85.0.4183.121&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1	false	high
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard	false	high
https://cdn03.jotfor.ms/themes/CSS/566a91c2977cdfcd478b4567.css?	false	high
https://cdn02.jotfor.ms/css/styles/nova.css?3.3.34848	false	high
https://form.jotform.me/92812002476452	false	high
https://cdn01.jotfor.ms/static/formCss.css?3.3.34848	false	high
https://www.jotform.com/myforms/	false	high
https://cdn02.jotfor.ms/static/prototype.forms.js?3.3.34848	false	high
https://form.jotform.me/92812002476452	false	high
https://cdn03.jotfor.ms/static/jotform.forms.js?3.3.34848	false	high
https://accounts.google.com/o/oauth2/auth/identifier?redirect_uri=storagerelay%3A%2F%2Fhttps%2Fwww.jotform.com%3Fid%3Dauth663659&response_type=permission%20id_token&scope=email%20profile%20openid&openid.realm&include_granted_scopes=true&client_id=172124630376-qk1qmdfmur2ojaf39e070iqhpt2foaip.apps.googleusercontent.com&ss_domain=https%3A%2F%2Fwww.jotform.com&fetch_basic_profile=true&gsiwebsdk=2&flowName=GeneralOAuthFlow	false	high
https://www.jotform.com/?utm_source=powered_by_jotform&utm_medium=banner&utm_term=92812002476452&utm_content=powered_by_jotform_text&utm_campaign=powered_by_jotform_signup_hp	false	high
https://www.jotform.com/	false	high
https://www.jotform.com/enterprise/?utm_medium=referral&utm_source=jotform.com&utm_content=Jotform_Enterprise_Header&utm_campaign=enterprise_common_header	false	high
https://cdn01.jotfor.ms/css/styles/payment/payment_feature.css?3.3.34848	false	high

Name	Source	Malicious	Antivirus Detection	Reputation
https://dns.google	1c12fafa-be49-4eff-be2c-75170fe6a376.tmp.1.dr, e8159887-1a37-4df9-a1cf-da51a10e8b2f.tmp.1.dr, 2161041b-8d84-4fb7-9370-082b225f7393.tmp.1.dr	false	URL Reputation: safe	unknown
https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p	craw_window.js.0.dr, craw_background.js.0.dr	false		high
https://www.google.com/intl/en-US/chrome/blank.html	craw_background.js.0.dr	false		high
https://ogs.google.com	e8159887-1a37-4df9-a1cf-da51a10e8b2f.tmp.1.dr, 2161041b-8d84-4fb7-9370-082b225f7393.tmp.1.dr	false		high
https://stats.g.doubleclick.net	2161041b-8d84-4fb7-9370-082b225f7393.tmp.1.dr	false		high
https://www.google.com/images/cleardot.gif	craw_window.js.0.dr	false		high
https://play.google.com	e8159887-1a37-4df9-a1cf-da51a10e8b2f.tmp.1.dr, 2161041b-8d84-4fb7-9370-082b225f7393.tmp.1.dr	false		high
https://payments.google.com/payments/v4/js/integrator.js	craw_window.js.0.dr, manifest.json0.0.dr, manifest.json.0.dr	false		high
https://lh3.googleusercontent.com	2161041b-8d84-4fb7-9370-082b225f7393.tmp.1.dr	false		high
https://googleads.g.doubleclick.net	2161041b-8d84-4fb7-9370-082b225f7393.tmp.1.dr	false		high
https://accounts.youtube.com	2161041b-8d84-4fb7-9370-082b225f7393.tmp.1.dr	false		high
https://form.jotform.me/928120024764522/Registration	History Provider Cache.0.dr	false		high
https://sandbox.google.com/payments/v4/js/integrator.js	craw_window.js.0.dr, manifest.json0.0.dr, manifest.json.0.dr	false		high
https://www.google.com/images/x2.gif	craw_window.js.0.dr	false		high
https://accounts.google.com/MergeSession	craw_window.js.0.dr	false		high
https://www.google.com	e8159887-1a37-4df9-a1cf-da51a10e8b2f.tmp.1.dr, 2161041b-8d84-4fb7-9370-082b225f7393.tmp.1.dr	false		high
https://www.google.com/images/dot2.gif	craw_window.js.0.dr	false		high
https://www.google.de	2161041b-8d84-4fb7-9370-082b225f7393.tmp.1.dr	false		high
https://accounts.google.com	e8159887-1a37-4df9-a1cf-da51a10e8b2f.tmp.1.dr, 2161041b-8d84-4fb7-9370-082b225f7393.tmp.1.dr	false		high
https://clients2.googleusercontent.com	e8159887-1a37-4df9-a1cf-da51a10e8b2f.tmp.1.dr, 2161041b-8d84-4fb7-9370-082b225f7393.tmp.1.dr	false		high
https://apis.google.com	e8159887-1a37-4df9-a1cf-da51a10e8b2f.tmp.1.dr, 2161041b-8d84-4fb7-9370-082b225f7393.tmp.1.dr	false		high
https://www.google.com/accounts/OAuthLogin?issueuberauth=1	craw_window.js.0.dr	false		high
https://www.google.com/	manifest.json0.0.dr, manifest.json.0.dr	false		high
https://www-googleapis-staging.sandbox.google.com	craw_window.js.0.dr, craw_background.js.0.dr	false		high
https://clients2.google.com	e8159887-1a37-4df9-a1cf-da51a10e8b2f.tmp.1.dr, 2161041b-8d84-4fb7-9370-082b225f7393.tmp.1.dr	false		high
https://clients2.google.com/service/update2/crx	manifest.json0.0.dr, manifest.json.0.dr	false		high

IP	Domain	Country	ASN	ASN Name	Malicious
204.79.197.200	dual-a-0001.a-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
52.222.191.35	static-cdn.hotjar.com	United States	16509	AMAZON-02US	false
35.186.194.58	rs.fullstory.com	United States	15169	GOOGLEUS	false
172.217.168.40	www-googletagmanager.l.google.com	United States	15169	GOOGLEUS	false
157.240.17.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
172.67.73.184	cdn01.jotfor.ms	United States	13335	CLOUDFLARENETUS	false
52.216.38.25	s3-w.us-east-1.amazonaws.com	United States	16509	AMAZON-02US	false
147.75.40.150	fullstory.com	Switzerland	54825	PACKETUS	false
142.250.203.98	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
108.177.127.154	stats.l.doubleclick.net	United States	15169	GOOGLEUS	false
192.0.77.2	i0.wp.com	United States	2635	AUTOMATTICUS	false
192.0.73.2	www.gravatar.com	United States	2635	AUTOMATTICUS	false
172.217.168.14	clients.l.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
52.222.191.99	vars.hotjar.com	United States	16509	AMAZON-02US	false
13.107.246.60	part-0032.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
157.240.17.15	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
172.217.168.3	gstaticadssl.l.google.com	United States	15169	GOOGLEUS	false
151.101.194.217	browser.sentry-cdn.com	United States	54113	FASTLYUS	false
104.23.133.11	www.jotform.com	United States	13335	CLOUDFLARENETUS	false
172.217.168.65	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
142.250.203.109	accounts.google.com	United States	15169	GOOGLEUS	false
54.231.33.202	s3.amazonaws.com	United States	16509	AMAZON-02US	false
142.250.203.100	www.google.com	United States	15169	GOOGLEUS	false
35.201.118.58	go.lb.jotform.com	United States	15169	GOOGLEUS	false
151.101.1.26	polyfill.io	United States	54113	FASTLYUS	false
172.217.168.35	www.google.de	United States	15169	GOOGLEUS	false
35.190.41.132	go.files.jotform.com	United States	15169	GOOGLEUS	false
172.217.168.78	www3.l.google.com	United States	15169	GOOGLEUS	false
35.201.112.186	edge.fullstory.com	United States	15169	GOOGLEUS	false
52.85.92.79	insights.hotjar.com	United States	16509	AMAZON-02US	false
104.23.134.11	js.jotform.com	United States	13335	CLOUDFLARENETUS	false
54.230.206.101	script.hotjar.com	United States	16509	AMAZON-02US	false
104.26.6.134	cdn.jotfor.ms	United States	13335	CLOUDFLARENETUS	false
34.120.195.249	o61806.ingest.sentry.io	United States	15169	GOOGLEUS	false

Joe Sandbox Version:	35.0.0 Citrine
Analysis ID:	682136
Start date and time:	2022-08-11 05:03:00 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 5m 17s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://form.jotform.me/92812002476452
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	25
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@43/119@58/38
EGA Information:	Failed
HDC Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Adjust boot time Enable AMSI Browse: https://www.jotform.com/?utm_source=powered_by_jotform&utm_medium=banner&utm_term=92812002476452&utm_content=powered_by_jotform_text&utm_campaign=powered_by_jotform_signup_hp Browse: https://www.jotform.com/ Browse: https://www.jotform.com/myforms/ Browse: https://www.jotform.com/enterprise/?utm_medium=referral&utm_source=jotform.com&utm_content=Jotform_Enterprise_Header&utm_campaign=enterprise_common_header Browse: https://www.jotform.com/pricing/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	451603
Entropy (8bit):	5.009711072558331
Encrypted:	false
SSDEEP:	12288:ZHfRTyGZ6lup8Cfrvq4JBPKh+FBlESBw4p6:NfOCzvRKhGvwJ
MD5:	A78AD14E77147E7DE3647E61964C0335
SHA1:	CECC3DD41F4CEA0192B24300C71E1911BD4FCE45
SHA-256:	0D6803758FF8F87081FAFD62E90F0950DFB2DD7991E9607FE76A8F92D0E893FA
SHA-512:	DDE24D5AD50D68FC91E9E325D31E66EF8F624B6BB3A07D14FFED1104D3AB5F4EF1D7969A5CDE0DFBB19CB31C506F7DE97AF67C2F244F7E7E8E10648EA8321101
Malicious:	false
Reputation:	low
Preview:	BDic.... ....6...."..Z..4g....6.2...{/...3...5....AF 1363.AF nm.AF pt.AF n1.AF p.AF tc.AF SM.AF M.AF S.AF MS.AF MNR.AF GDS.AF MNT.AF MH.AF MR.AF SZMR.AF MJ.AF MT.AF MY.AF MRZ.AF MN.AF MG.AF RM.AF N.AF MV.AF XM.AF DSM.AF SD.AF G.AF R.AF MNX.AF MRS.AF MD.AF MNRB.AF B.AF ZSMR.AF PM.AF SMNGJ.AF SMN.AF ZMR.AF SMGB.AF MZR.AF GM.AF SMR.AF SMDG.AF RMZ.AF ZM.AF MDG.AF MDT.AF SMNXT.AF SDY.AF LSDG.AF LGDS.AF GLDS.AF UY.AF U.AF DSGNX.AF GNDSX.AF DSG.AF Y.AF GS.AF IEMS.AF YP.AF ZGDRS.AF XGNVDS.AF UT.AF GNDS.AF GVDS.AF MYPS.AF XGNDS.AF TPRY.AF MDSG.AF ZGSDR.AF DYSG.AF PMYTNS.AF AGDS.AF DRZGS.AF PY.AF GSPMDY.AF EGVDS.AF SL.AF GNXDS.AF DSBG.AF IM.AF I.AF MDGS.AF SMY.AF DSGN.AF DSLG.AF GMDS.AF MDSBG.AF SGD.AF IY.AF P.AF DSMG.AF BLZGDRS.AF TR.AF AGSD.AF ZGBDRSL.AF PTRY.AF ASDGV.AF ASM.AF ICANGSD.AF ICAM.AF IKY.AF AMS.AF PMYTRS.AF BZGVDRS.AF SDRBZG.AF GVMDS.AF PSM.AF DGLS.AF GNVXDS.AF AGDSL.AF DGS.AF XDSGNV.AF BZGDRS.AF AM.AF AS.AF A.AF LDSG.AF AGVDS.AF SDG.AF LDSMG.AF EDSMG.AF EY.AF DRSMZG.AF PRYT.AF LZ

IP
192.168.2.1
127.0.0.1

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Aug 11, 2022 05:04:00.509530067 CEST	192.168.2.3	8.8.8.8	0x4d92	Standard query (0)	form.jotform.me	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:00.511121988 CEST	192.168.2.3	8.8.8.8	0x1880	Standard query (0)	clients2.google.com	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:00.548037052 CEST	192.168.2.3	8.8.8.8	0x3ba7	Standard query (0)	accounts.google.com	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:01.117296934 CEST	192.168.2.3	8.8.8.8	0xc2a4	Standard query (0)	cdn02.jotfor.ms	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:01.117429972 CEST	192.168.2.3	8.8.8.8	0xfc87	Standard query (0)	cdn01.jotfor.ms	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:01.118097067 CEST	192.168.2.3	8.8.8.8	0x88a3	Standard query (0)	cdn03.jotfor.ms	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:01.610100031 CEST	192.168.2.3	8.8.8.8	0x59ea	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:02.269263983 CEST	192.168.2.3	8.8.8.8	0x4e49	Standard query (0)	events.jotform.com	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:02.586843967 CEST	192.168.2.3	8.8.8.8	0x1434	Standard query (0)	cdn.jotfor.ms	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:03.771295071 CEST	192.168.2.3	8.8.8.8	0x5b3a	Standard query (0)	cdn.jotfor.ms	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:04.045850039 CEST	192.168.2.3	8.8.8.8	0x680f	Standard query (0)	events.jotform.com	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:14.181643009 CEST	192.168.2.3	8.8.8.8	0xc45e	Standard query (0)	www.jotform.com	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.302270889 CEST	192.168.2.3	8.8.8.8	0x80d6	Standard query (0)	js.jotform.com	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.355212927 CEST	192.168.2.3	8.8.8.8	0xc88	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.355861902 CEST	192.168.2.3	8.8.8.8	0xc3b3	Standard query (0)	cms.jotform.com	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.362755060 CEST	192.168.2.3	8.8.8.8	0x82d5	Standard query (0)	rs.fullstory.com	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.388808012 CEST	192.168.2.3	8.8.8.8	0x2f94	Standard query (0)	edge.fullstory.com	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.395037889 CEST	192.168.2.3	8.8.8.8	0x8121	Standard query (0)	fullstory.com	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.396740913 CEST	192.168.2.3	8.8.8.8	0x4366	Standard query (0)	insights.hotjar.com	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.453165054 CEST	192.168.2.3	8.8.8.8	0x1c	Standard query (0)	vars.hotjar.com	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.462857008 CEST	192.168.2.3	8.8.8.8	0x164b	Standard query (0)	script.hotjar.com	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.462901115 CEST	192.168.2.3	8.8.8.8	0x6cea	Standard query (0)	static.hotjar.com	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.509538889 CEST	192.168.2.3	8.8.8.8	0x3bdc	Standard query (0)	p.typekit.net	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.644633055 CEST	192.168.2.3	8.8.8.8	0xfb24	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.648922920 CEST	192.168.2.3	8.8.8.8	0x8f8	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.651932955 CEST	192.168.2.3	8.8.8.8	0x2a	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.672013998 CEST	192.168.2.3	8.8.8.8	0x78fe	Standard query (0)	browser.sentry-cdn.com	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.683590889 CEST	192.168.2.3	8.8.8.8	0x6515	Standard query (0)	polyfill.io	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.700411081 CEST	192.168.2.3	8.8.8.8	0x90de	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.749593019 CEST	192.168.2.3	8.8.8.8	0x49f	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.773092985 CEST	192.168.2.3	8.8.8.8	0xd1a2	Standard query (0)	i0.wp.com	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.849281073 CEST	192.168.2.3	8.8.8.8	0x3c1c	Standard query (0)	files.jotform.com	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.856199980 CEST	192.168.2.3	8.8.8.8	0x6ab1	Standard query (0)	s3.amazonaws.com	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.856411934 CEST	192.168.2.3	8.8.8.8	0xef48	Standard query (0)	use.typekit.net	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.951144934 CEST	192.168.2.3	8.8.8.8	0x7dc0	Standard query (0)	www.gravatar.com	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:19.380707979 CEST	192.168.2.3	8.8.8.8	0x915	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:19.598388910 CEST	192.168.2.3	8.8.8.8	0x8375	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:19.759407997 CEST	192.168.2.3	8.8.8.8	0x1952	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:20.083935022 CEST	192.168.2.3	8.8.8.8	0xed4c	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:20.129261971 CEST	192.168.2.3	8.8.8.8	0x6f26	Standard query (0)	www.google.de	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:25.667119980 CEST	192.168.2.3	8.8.8.8	0xc5db	Standard query (0)	www.jotform.com	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:28.889178038 CEST	192.168.2.3	8.8.8.8	0x884c	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:33.540908098 CEST	192.168.2.3	8.8.8.8	0x73c9	Standard query (0)	accounts.youtube.com	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:34.409881115 CEST	192.168.2.3	8.8.8.8	0x1004	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:42.297564030 CEST	192.168.2.3	8.8.8.8	0x8bac	Standard query (0)	moodular.jotform.com	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:46.315968037 CEST	192.168.2.3	8.8.8.8	0x5aa4	Standard query (0)	o61806.ingest.sentry.io	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:46.348643064 CEST	192.168.2.3	8.8.8.8	0x201f	Standard query (0)	jotform-common.s3.amazonaws.com	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:50.783113956 CEST	192.168.2.3	8.8.8.8	0xe009	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:50.808546066 CEST	192.168.2.3	8.8.8.8	0xee71	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:54.015194893 CEST	192.168.2.3	8.8.8.8	0x4979	Standard query (0)	cdn01.jotfor.ms	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:54.797056913 CEST	192.168.2.3	8.8.8.8	0x898	Standard query (0)	jotform-common.s3.amazonaws.com	A (IP address)	IN (0x0001)
Aug 11, 2022 05:05:02.042849064 CEST	192.168.2.3	8.8.8.8	0xe2ed	Standard query (0)	cdn01.jotfor.ms	A (IP address)	IN (0x0001)
Aug 11, 2022 05:05:02.470283031 CEST	192.168.2.3	8.8.8.8	0x3d94	Standard query (0)	cdn02.jotfor.ms	A (IP address)	IN (0x0001)
Aug 11, 2022 05:05:02.473059893 CEST	192.168.2.3	8.8.8.8	0xecc5	Standard query (0)	cdn03.jotfor.ms	A (IP address)	IN (0x0001)
Aug 11, 2022 05:05:02.763761044 CEST	192.168.2.3	8.8.8.8	0x3655	Standard query (0)	accounts.google.com	A (IP address)	IN (0x0001)
Aug 11, 2022 05:05:04.876593113 CEST	192.168.2.3	8.8.8.8	0xf576	Standard query (0)	cdn.jotfor.ms	A (IP address)	IN (0x0001)
Aug 11, 2022 05:05:09.626346111 CEST	192.168.2.3	8.8.8.8	0x2480	Standard query (0)	events.jotform.com	A (IP address)	IN (0x0001)
Aug 11, 2022 05:05:19.253211975 CEST	192.168.2.3	8.8.8.8	0xd32f	Standard query (0)	rs.fullstory.com	A (IP address)	IN (0x0001)

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Aug 11, 2022 05:04:00.529411077 CEST	8.8.8.8	192.168.2.3	0x4d92	No error (0)	form.jotform.me		35.201.118.58	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:00.538847923 CEST	8.8.8.8	192.168.2.3	0x1880	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)
Aug 11, 2022 05:04:00.538847923 CEST	8.8.8.8	192.168.2.3	0x1880	No error (0)	clients.l.google.com		172.217.168.14	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:00.573838949 CEST	8.8.8.8	192.168.2.3	0x3ba7	No error (0)	accounts.google.com		142.250.203.109	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:01.138194084 CEST	8.8.8.8	192.168.2.3	0xc2a4	No error (0)	cdn02.jotfor.ms		104.26.6.134	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:01.138194084 CEST	8.8.8.8	192.168.2.3	0xc2a4	No error (0)	cdn02.jotfor.ms		172.67.73.184	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:01.138194084 CEST	8.8.8.8	192.168.2.3	0xc2a4	No error (0)	cdn02.jotfor.ms		104.26.7.134	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:01.138422012 CEST	8.8.8.8	192.168.2.3	0xfc87	No error (0)	cdn01.jotfor.ms		172.67.73.184	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:01.138422012 CEST	8.8.8.8	192.168.2.3	0xfc87	No error (0)	cdn01.jotfor.ms		104.26.6.134	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:01.138422012 CEST	8.8.8.8	192.168.2.3	0xfc87	No error (0)	cdn01.jotfor.ms		104.26.7.134	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:01.139286995 CEST	8.8.8.8	192.168.2.3	0x88a3	No error (0)	cdn03.jotfor.ms		104.26.6.134	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:01.139286995 CEST	8.8.8.8	192.168.2.3	0x88a3	No error (0)	cdn03.jotfor.ms		104.26.7.134	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:01.139286995 CEST	8.8.8.8	192.168.2.3	0x88a3	No error (0)	cdn03.jotfor.ms		172.67.73.184	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:01.630094051 CEST	8.8.8.8	192.168.2.3	0x59ea	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:01.630094051 CEST	8.8.8.8	192.168.2.3	0x59ea	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:02.290879011 CEST	8.8.8.8	192.168.2.3	0x4e49	No error (0)	events.jotform.com		104.23.134.11	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:02.290879011 CEST	8.8.8.8	192.168.2.3	0x4e49	No error (0)	events.jotform.com		104.23.133.11	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:02.606447935 CEST	8.8.8.8	192.168.2.3	0x1434	No error (0)	cdn.jotfor.ms		104.26.6.134	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:02.606447935 CEST	8.8.8.8	192.168.2.3	0x1434	No error (0)	cdn.jotfor.ms		172.67.73.184	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:02.606447935 CEST	8.8.8.8	192.168.2.3	0x1434	No error (0)	cdn.jotfor.ms		104.26.7.134	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:03.792912006 CEST	8.8.8.8	192.168.2.3	0x5b3a	No error (0)	cdn.jotfor.ms		104.26.7.134	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:03.792912006 CEST	8.8.8.8	192.168.2.3	0x5b3a	No error (0)	cdn.jotfor.ms		104.26.6.134	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:03.792912006 CEST	8.8.8.8	192.168.2.3	0x5b3a	No error (0)	cdn.jotfor.ms		172.67.73.184	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:04.067620993 CEST	8.8.8.8	192.168.2.3	0x680f	No error (0)	events.jotform.com		104.23.133.11	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:04.067620993 CEST	8.8.8.8	192.168.2.3	0x680f	No error (0)	events.jotform.com		104.23.134.11	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:14.201112986 CEST	8.8.8.8	192.168.2.3	0xc45e	No error (0)	www.jotform.com		104.23.133.11	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:14.201112986 CEST	8.8.8.8	192.168.2.3	0xc45e	No error (0)	www.jotform.com		104.23.134.11	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.323926926 CEST	8.8.8.8	192.168.2.3	0x80d6	No error (0)	js.jotform.com		104.23.134.11	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.323926926 CEST	8.8.8.8	192.168.2.3	0x80d6	No error (0)	js.jotform.com		104.23.133.11	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.376123905 CEST	8.8.8.8	192.168.2.3	0xc88	No error (0)	code.jquery.com	cds.s5x3j6q5.hwcdn.net		CNAME (Canonical name)	IN (0x0001)
Aug 11, 2022 05:04:17.376172066 CEST	8.8.8.8	192.168.2.3	0xc3b3	No error (0)	cms.jotform.com	go.lb.jotform.com		CNAME (Canonical name)	IN (0x0001)
Aug 11, 2022 05:04:17.376172066 CEST	8.8.8.8	192.168.2.3	0xc3b3	No error (0)	go.lb.jotform.com		35.201.118.58	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.381819010 CEST	8.8.8.8	192.168.2.3	0x82d5	No error (0)	rs.fullstory.com		35.186.194.58	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.407500029 CEST	8.8.8.8	192.168.2.3	0x2f94	No error (0)	edge.fullstory.com		35.201.112.186	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.413944960 CEST	8.8.8.8	192.168.2.3	0x8121	No error (0)	fullstory.com		147.75.40.150	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.420758009 CEST	8.8.8.8	192.168.2.3	0x4366	No error (0)	insights.hotjar.com		52.85.92.79	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.420758009 CEST	8.8.8.8	192.168.2.3	0x4366	No error (0)	insights.hotjar.com		52.85.92.34	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.420758009 CEST	8.8.8.8	192.168.2.3	0x4366	No error (0)	insights.hotjar.com		52.85.92.44	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.420758009 CEST	8.8.8.8	192.168.2.3	0x4366	No error (0)	insights.hotjar.com		52.85.92.4	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.486505985 CEST	8.8.8.8	192.168.2.3	0x164b	No error (0)	script.hotjar.com		54.230.206.101	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.486505985 CEST	8.8.8.8	192.168.2.3	0x164b	No error (0)	script.hotjar.com		54.230.206.27	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.486505985 CEST	8.8.8.8	192.168.2.3	0x164b	No error (0)	script.hotjar.com		54.230.206.30	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.486505985 CEST	8.8.8.8	192.168.2.3	0x164b	No error (0)	script.hotjar.com		54.230.206.71	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.487385035 CEST	8.8.8.8	192.168.2.3	0x1c	No error (0)	vars.hotjar.com		52.222.191.99	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.487385035 CEST	8.8.8.8	192.168.2.3	0x1c	No error (0)	vars.hotjar.com		52.222.191.120	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.487385035 CEST	8.8.8.8	192.168.2.3	0x1c	No error (0)	vars.hotjar.com		52.222.191.20	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.487385035 CEST	8.8.8.8	192.168.2.3	0x1c	No error (0)	vars.hotjar.com		52.222.191.59	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.503123045 CEST	8.8.8.8	192.168.2.3	0x6cea	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)
Aug 11, 2022 05:04:17.503123045 CEST	8.8.8.8	192.168.2.3	0x6cea	No error (0)	static-cdn.hotjar.com		52.222.191.35	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.503123045 CEST	8.8.8.8	192.168.2.3	0x6cea	No error (0)	static-cdn.hotjar.com		52.222.191.44	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.503123045 CEST	8.8.8.8	192.168.2.3	0x6cea	No error (0)	static-cdn.hotjar.com		52.222.191.120	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.503123045 CEST	8.8.8.8	192.168.2.3	0x6cea	No error (0)	static-cdn.hotjar.com		52.222.191.25	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.530404091 CEST	8.8.8.8	192.168.2.3	0x3bdc	No error (0)	p.typekit.net	p.typekit.net-stls-v3.edgesuite.net		CNAME (Canonical name)	IN (0x0001)
Aug 11, 2022 05:04:17.665916920 CEST	8.8.8.8	192.168.2.3	0x8f8	No error (0)	www.google.com		142.250.203.100	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.671979904 CEST	8.8.8.8	192.168.2.3	0xfb24	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)
Aug 11, 2022 05:04:17.671979904 CEST	8.8.8.8	192.168.2.3	0xfb24	No error (0)	plus.l.google.com		142.250.203.110	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.672971010 CEST	8.8.8.8	192.168.2.3	0x2a	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)
Aug 11, 2022 05:04:17.672971010 CEST	8.8.8.8	192.168.2.3	0x2a	No error (0)	star-mini.c10r.facebook.com		157.240.17.35	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.688669920 CEST	8.8.8.8	192.168.2.3	0x78fe	No error (0)	browser.sentry-cdn.com		151.101.194.217	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.688669920 CEST	8.8.8.8	192.168.2.3	0x78fe	No error (0)	browser.sentry-cdn.com		151.101.130.217	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.688669920 CEST	8.8.8.8	192.168.2.3	0x78fe	No error (0)	browser.sentry-cdn.com		151.101.2.217	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.688669920 CEST	8.8.8.8	192.168.2.3	0x78fe	No error (0)	browser.sentry-cdn.com		151.101.66.217	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.702481031 CEST	8.8.8.8	192.168.2.3	0x6515	No error (0)	polyfill.io		151.101.1.26	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.702481031 CEST	8.8.8.8	192.168.2.3	0x6515	No error (0)	polyfill.io		151.101.65.26	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.702481031 CEST	8.8.8.8	192.168.2.3	0x6515	No error (0)	polyfill.io		151.101.129.26	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.702481031 CEST	8.8.8.8	192.168.2.3	0x6515	No error (0)	polyfill.io		151.101.193.26	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.728120089 CEST	8.8.8.8	192.168.2.3	0x90de	No error (0)	stats.g.doubleclick.net	stats.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)
Aug 11, 2022 05:04:17.728120089 CEST	8.8.8.8	192.168.2.3	0x90de	No error (0)	stats.l.doubleclick.net		108.177.127.154	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.728120089 CEST	8.8.8.8	192.168.2.3	0x90de	No error (0)	stats.l.doubleclick.net		108.177.127.155	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.728120089 CEST	8.8.8.8	192.168.2.3	0x90de	No error (0)	stats.l.doubleclick.net		108.177.127.157	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.728120089 CEST	8.8.8.8	192.168.2.3	0x90de	No error (0)	stats.l.doubleclick.net		108.177.127.156	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.769750118 CEST	8.8.8.8	192.168.2.3	0x49f	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)
Aug 11, 2022 05:04:17.769750118 CEST	8.8.8.8	192.168.2.3	0x49f	No error (0)	scontent.xx.fbcdn.net		157.240.17.15	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.791996956 CEST	8.8.8.8	192.168.2.3	0xd1a2	No error (0)	i0.wp.com		192.0.77.2	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.870806932 CEST	8.8.8.8	192.168.2.3	0x3c1c	No error (0)	files.jotform.com	go.files.jotform.com		CNAME (Canonical name)	IN (0x0001)
Aug 11, 2022 05:04:17.870806932 CEST	8.8.8.8	192.168.2.3	0x3c1c	No error (0)	go.files.jotform.com		35.190.41.132	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.875353098 CEST	8.8.8.8	192.168.2.3	0x6ab1	No error (0)	s3.amazonaws.com		54.231.33.202	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:17.877540112 CEST	8.8.8.8	192.168.2.3	0xef48	No error (0)	use.typekit.net	use-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)
Aug 11, 2022 05:04:17.968039989 CEST	8.8.8.8	192.168.2.3	0x7dc0	No error (0)	www.gravatar.com		192.0.73.2	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:18.606389999 CEST	8.8.8.8	192.168.2.3	0x8d3	No error (0)	www-googletagmanager.l.google.com		172.217.168.40	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:19.395440102 CEST	8.8.8.8	192.168.2.3	0x6fcf	No error (0)	bat-bing-com.a-0001.a-msedge.net	dual-a-0001.a-msedge.net		CNAME (Canonical name)	IN (0x0001)
Aug 11, 2022 05:04:19.395440102 CEST	8.8.8.8	192.168.2.3	0x6fcf	No error (0)	dual-a-0001.a-msedge.net		204.79.197.200	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:19.395440102 CEST	8.8.8.8	192.168.2.3	0x6fcf	No error (0)	dual-a-0001.a-msedge.net		13.107.21.200	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:19.403506041 CEST	8.8.8.8	192.168.2.3	0x915	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)
Aug 11, 2022 05:04:19.620194912 CEST	8.8.8.8	192.168.2.3	0x8375	No error (0)	px.ads.linkedin.com	www.linkedin.com		CNAME (Canonical name)	IN (0x0001)
Aug 11, 2022 05:04:19.620194912 CEST	8.8.8.8	192.168.2.3	0x8375	No error (0)	www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)
Aug 11, 2022 05:04:19.784720898 CEST	8.8.8.8	192.168.2.3	0x1952	No error (0)	googleads.g.doubleclick.net		142.250.203.98	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:20.102726936 CEST	8.8.8.8	192.168.2.3	0xed4c	No error (0)	www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)
Aug 11, 2022 05:04:20.169512033 CEST	8.8.8.8	192.168.2.3	0x6f26	No error (0)	www.google.de		172.217.168.35	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:24.898981094 CEST	8.8.8.8	192.168.2.3	0x7fac	No error (0)	dual.part-0032.t-0009.t-msedge.net	part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)
Aug 11, 2022 05:04:24.898981094 CEST	8.8.8.8	192.168.2.3	0x7fac	No error (0)	part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:24.898981094 CEST	8.8.8.8	192.168.2.3	0x7fac	No error (0)	part-0032.t-0009.t-msedge.net		13.107.213.60	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:25.589394093 CEST	8.8.8.8	192.168.2.3	0xc5fd	No error (0)	bat-bing-com.a-0001.a-msedge.net	dual-a-0001.a-msedge.net		CNAME (Canonical name)	IN (0x0001)
Aug 11, 2022 05:04:25.589394093 CEST	8.8.8.8	192.168.2.3	0xc5fd	No error (0)	dual-a-0001.a-msedge.net		204.79.197.200	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:25.589394093 CEST	8.8.8.8	192.168.2.3	0xc5fd	No error (0)	dual-a-0001.a-msedge.net		13.107.21.200	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:25.686852932 CEST	8.8.8.8	192.168.2.3	0xc5db	No error (0)	www.jotform.com		104.23.133.11	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:25.686852932 CEST	8.8.8.8	192.168.2.3	0xc5db	No error (0)	www.jotform.com		104.23.134.11	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:28.916733027 CEST	8.8.8.8	192.168.2.3	0x884c	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)
Aug 11, 2022 05:04:28.916733027 CEST	8.8.8.8	192.168.2.3	0x884c	No error (0)	googlehosted.l.googleusercontent.com		172.217.168.65	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:32.368542910 CEST	8.8.8.8	192.168.2.3	0xeae0	No error (0)	gstaticadssl.l.google.com		172.217.168.3	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:33.568780899 CEST	8.8.8.8	192.168.2.3	0x73c9	No error (0)	accounts.youtube.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)
Aug 11, 2022 05:04:33.568780899 CEST	8.8.8.8	192.168.2.3	0x73c9	No error (0)	www3.l.google.com		172.217.168.78	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:34.437689066 CEST	8.8.8.8	192.168.2.3	0x1004	No error (0)	play.google.com		216.58.215.238	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:42.319211006 CEST	8.8.8.8	192.168.2.3	0x8bac	No error (0)	moodular.jotform.com	cdn.jotform.com		CNAME (Canonical name)	IN (0x0001)
Aug 11, 2022 05:04:42.319211006 CEST	8.8.8.8	192.168.2.3	0x8bac	No error (0)	cdn.jotform.com	go.lb.jotform.com		CNAME (Canonical name)	IN (0x0001)
Aug 11, 2022 05:04:42.319211006 CEST	8.8.8.8	192.168.2.3	0x8bac	No error (0)	go.lb.jotform.com		35.201.118.58	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:46.345835924 CEST	8.8.8.8	192.168.2.3	0x5aa4	No error (0)	o61806.ingest.sentry.io		34.120.195.249	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:46.370120049 CEST	8.8.8.8	192.168.2.3	0x201f	No error (0)	jotform-common.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Aug 11, 2022 05:04:46.370120049 CEST	8.8.8.8	192.168.2.3	0x201f	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Aug 11, 2022 05:04:46.370120049 CEST	8.8.8.8	192.168.2.3	0x201f	No error (0)	s3-w.us-east-1.amazonaws.com		52.216.38.25	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:50.802742958 CEST	8.8.8.8	192.168.2.3	0xe009	No error (0)	www.google.com		142.250.203.100	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:50.827697039 CEST	8.8.8.8	192.168.2.3	0xee71	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)
Aug 11, 2022 05:04:50.827697039 CEST	8.8.8.8	192.168.2.3	0xee71	No error (0)	googlehosted.l.googleusercontent.com		172.217.168.65	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:54.034854889 CEST	8.8.8.8	192.168.2.3	0x4979	No error (0)	cdn01.jotfor.ms		172.67.73.184	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:54.034854889 CEST	8.8.8.8	192.168.2.3	0x4979	No error (0)	cdn01.jotfor.ms		104.26.6.134	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:54.034854889 CEST	8.8.8.8	192.168.2.3	0x4979	No error (0)	cdn01.jotfor.ms		104.26.7.134	A (IP address)	IN (0x0001)
Aug 11, 2022 05:04:54.819120884 CEST	8.8.8.8	192.168.2.3	0x898	No error (0)	jotform-common.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Aug 11, 2022 05:04:54.819120884 CEST	8.8.8.8	192.168.2.3	0x898	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Aug 11, 2022 05:04:54.819120884 CEST	8.8.8.8	192.168.2.3	0x898	No error (0)	s3-w.us-east-1.amazonaws.com		54.231.170.1	A (IP address)	IN (0x0001)
Aug 11, 2022 05:05:02.062345982 CEST	8.8.8.8	192.168.2.3	0xe2ed	No error (0)	cdn01.jotfor.ms		172.67.73.184	A (IP address)	IN (0x0001)
Aug 11, 2022 05:05:02.062345982 CEST	8.8.8.8	192.168.2.3	0xe2ed	No error (0)	cdn01.jotfor.ms		104.26.6.134	A (IP address)	IN (0x0001)
Aug 11, 2022 05:05:02.062345982 CEST	8.8.8.8	192.168.2.3	0xe2ed	No error (0)	cdn01.jotfor.ms		104.26.7.134	A (IP address)	IN (0x0001)
Aug 11, 2022 05:05:02.489959002 CEST	8.8.8.8	192.168.2.3	0x3d94	No error (0)	cdn02.jotfor.ms		172.67.73.184	A (IP address)	IN (0x0001)
Aug 11, 2022 05:05:02.489959002 CEST	8.8.8.8	192.168.2.3	0x3d94	No error (0)	cdn02.jotfor.ms		104.26.6.134	A (IP address)	IN (0x0001)
Aug 11, 2022 05:05:02.489959002 CEST	8.8.8.8	192.168.2.3	0x3d94	No error (0)	cdn02.jotfor.ms		104.26.7.134	A (IP address)	IN (0x0001)
Aug 11, 2022 05:05:02.492129087 CEST	8.8.8.8	192.168.2.3	0xecc5	No error (0)	cdn03.jotfor.ms		104.26.6.134	A (IP address)	IN (0x0001)
Aug 11, 2022 05:05:02.492129087 CEST	8.8.8.8	192.168.2.3	0xecc5	No error (0)	cdn03.jotfor.ms		104.26.7.134	A (IP address)	IN (0x0001)
Aug 11, 2022 05:05:02.492129087 CEST	8.8.8.8	192.168.2.3	0xecc5	No error (0)	cdn03.jotfor.ms		172.67.73.184	A (IP address)	IN (0x0001)
Aug 11, 2022 05:05:02.784168005 CEST	8.8.8.8	192.168.2.3	0x3655	No error (0)	accounts.google.com		142.250.203.109	A (IP address)	IN (0x0001)
Aug 11, 2022 05:05:04.897798061 CEST	8.8.8.8	192.168.2.3	0xf576	No error (0)	cdn.jotfor.ms		172.67.73.184	A (IP address)	IN (0x0001)
Aug 11, 2022 05:05:04.897798061 CEST	8.8.8.8	192.168.2.3	0xf576	No error (0)	cdn.jotfor.ms		104.26.7.134	A (IP address)	IN (0x0001)
Aug 11, 2022 05:05:04.897798061 CEST	8.8.8.8	192.168.2.3	0xf576	No error (0)	cdn.jotfor.ms		104.26.6.134	A (IP address)	IN (0x0001)
Aug 11, 2022 05:05:09.645725965 CEST	8.8.8.8	192.168.2.3	0x2480	No error (0)	events.jotform.com		104.23.133.11	A (IP address)	IN (0x0001)
Aug 11, 2022 05:05:09.645725965 CEST	8.8.8.8	192.168.2.3	0x2480	No error (0)	events.jotform.com		104.23.134.11	A (IP address)	IN (0x0001)
Aug 11, 2022 05:05:19.272700071 CEST	8.8.8.8	192.168.2.3	0xd32f	No error (0)	rs.fullstory.com		35.186.194.58	A (IP address)	IN (0x0001)

Timestamp	kBytes transferred	Direction	Data
2022-08-11 03:04:00 UTC	0	OUT	GET /92812002476452 HTTP/1.1 Host: form.jotform.me Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-08-11 03:04:01 UTC	5	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Cache-Control: no-cache Cache-Hit: 1 Content-Type: text/html; charset=utf-8 Expires: Thu, 01 Jan 1970 00:00:01 GMT Server: CacheX v2.1 Vary: Accept-Encoding Date: Thu, 11 Aug 2022 03:04:00 GMT Transfer-Encoding: chunked Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2022-08-11 03:04:01 UTC	5	IN	Data Raw: 38 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 20 63 6c 61 73 73 3d 22 73 75 70 65 72 6e 6f 76 61 22 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e Data Ascii: 800<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html lang="en-US" class="supernova"><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><link rel="alternate" type="application/json
2022-08-11 03:04:01 UTC	6	IN	Data Raw: 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 6f 74 66 6f 72 2e 6d 73 2f 61 73 73 65 74 73 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 73 2f 66 61 76 69 63 6f 6e 2d 32 30 32 31 2e 73 76 67 22 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 6f 74 66 6f 72 2e 6d 73 2f 61 73 73 65 74 73 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 73 2f 66 61 76 69 63 6f 6e 2d 32 30 32 31 2e 73 76 67 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 63 61 6e 6f 6e 69 63 61 6c 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 72 6d 2e 6a 6f 74 66 6f 72 6d 2e 6d 65 2f 39 32 38 31 32 30 30 32 34 37 36 34 35 32 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f Data Ascii: href="https://cdn.jotfor.ms/assets/img/favicons/favicon-2021.svg"><meta property="og:image" content="https://cdn.jotfor.ms/assets/img/favicons/favicon-2021.svg" /><link rel="canonical" href="https://form.jotform.me/92812002476452" /><meta name="viewpo
2022-08-11 03:04:01 UTC	7	IN	Data Raw: 3b 0a 20 20 20 20 7d 0a 20 20 20 20 62 6f 64 79 2c 20 68 74 6d 6c 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 30 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 30 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 66 6f 72 6d 2d 61 6c 6c 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 30 70 78 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 30 70 78 3b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 36 39 30 70 78 3b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 23 35 35 35 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 20 22 4c 75 63 69 64 61 20 Data Ascii: ; } body, html{ margin:0; padding:0; background:#fff; } .form-all{ margin:0px auto; padding-top:0px; width:690px; color:#555 !important; font-family:"Lucida Grande", "Lucida
2022-08-11 03:04:01 UTC	9	IN	Data Raw: 69 62 75 74 65 28 27 74 61 62 69 6e 64 65 78 27 2c 30 29 3b 0a 69 66 20 28 77 69 6e 64 6f 77 2e 4a 6f 74 46 6f 72 6d 20 26 26 20 4a 6f 74 46 6f 72 6d 2e 61 63 63 65 73 73 69 62 6c 65 29 20 24 28 27 69 6e 70 75 74 5f 31 31 27 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 74 61 62 69 6e 64 65 78 27 2c 30 29 3b 0a 69 66 20 28 77 69 6e 64 6f 77 2e 4a 6f 74 46 6f 72 6d 20 26 26 20 4a 6f 74 46 6f 72 6d 2e 61 63 63 65 73 73 69 62 6c 65 29 20 24 28 27 69 6e 70 75 74 5f 39 27 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 74 61 62 69 6e 64 65 78 27 2c 30 29 3b 0a 69 66 20 28 77 69 6e 64 6f 77 2e 4a 6f 74 46 6f 72 6d 20 26 26 20 4a 6f 74 46 6f 72 6d 2e 61 63 63 65 73 73 69 62 6c 65 29 20 24 28 27 69 6e 70 75 74 5f 31 30 27 29 2e 73 65 74 41 74 74 72 69 62 75 74 Data Ascii: ibute('tabindex',0);if (window.JotForm && JotForm.accessible) $('input_11').setAttribute('tabindex',0);if (window.JotForm && JotForm.accessible) $('input_9').setAttribute('tabindex',0);if (window.JotForm && JotForm.accessible) $('input_10').setAttribut
2022-08-11 03:04:01 UTC	9	IN	Data Raw: 20 4a 6f 74 46 6f 72 6d 2e 61 6c 74 65 72 54 65 78 74 73 28 75 6e 64 65 66 69 6e 65 64 29 3b 0a 09 2f 2a 49 4e 49 54 2d 45 4e 44 2a 2f 0a 09 7d 29 3b 0a 0a 20 20 20 4a 6f 74 46 6f 72 6d 2e 70 72 65 70 61 72 65 43 61 6c 63 75 6c 61 74 69 6f 6e 73 4f 6e 54 68 65 46 6c 79 28 5b 6e 75 6c 6c 2c 7b 22 6e 61 6d 65 22 3a 22 72 65 67 69 73 74 72 61 74 69 6f 6e 41 64 6f 62 65 22 2c 22 71 69 64 22 3a 22 31 22 2c 22 74 65 78 74 22 3a 22 52 65 67 69 73 74 72 61 74 69 6f 6e 3a 20 41 64 6f 62 65 20 57 6f 72 6b 70 6c 61 63 65 20 45 76 65 6e 74 20 48 6f 6e 67 20 4b 6f 6e 67 20 7c 20 32 30 32 32 22 2c 22 74 79 70 65 22 3a 22 63 6f 6e 74 72 6f 6c 5f 68 65 61 64 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 73 75 62 6d 69 74 32 22 2c 22 71 69 64 22 3a 22 32 22 2c 22 74 65 78 74 22 3a Data Ascii: JotForm.alterTexts(undefined);/INIT-END/}); JotForm.prepareCalculationsOnTheFly([null,{"name":"registrationAdobe","qid":"1","text":"Registration: Adobe Workplace Event Hong Kong \| 2022","type":"control_head"},{"name":"submit2","qid":"2","text":
2022-08-11 03:04:01 UTC	10	IN	Data Raw: 6f 78 22 7d 2c 7b 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 6e 61 6d 65 22 3a 22 63 6f 6d 70 61 6e 79 4e 61 6d 65 22 2c 22 71 69 64 22 3a 22 31 31 22 2c 22 73 75 62 4c 61 62 65 6c 22 3a 22 22 2c 22 74 65 78 74 22 3a 22 43 6f 6d 70 61 6e 79 20 4e 61 6d 65 22 2c 22 74 79 70 65 22 3a 22 63 6f 6e 74 72 6f 6c 5f 74 65 78 74 62 6f 78 22 7d 5d 29 3b 0a 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 4a 6f 74 46 6f 72 6d 2e 70 61 79 6d 65 6e 74 45 78 74 72 61 73 4f 6e 54 68 65 46 6c 79 28 5b 6e 75 6c 6c 2c 7b 22 6e 61 6d 65 22 3a 22 72 65 67 69 73 74 72 61 74 69 6f 6e 41 64 6f 62 65 22 2c 22 71 69 64 22 3a 22 31 22 2c 22 74 65 78 74 22 3a 22 52 65 67 69 73 74 72 61 74 69 6f 6e 3a 20 41 64 6f 62 65 20 57 6f 72 6b 70 6c Data Ascii: ox"},{"description":"","name":"companyName","qid":"11","subLabel":"","text":"Company Name","type":"control_textbox"}]); setTimeout(function() {JotForm.paymentExtrasOnTheFly([null,{"name":"registrationAdobe","qid":"1","text":"Registration: Adobe Workpl
2022-08-11 03:04:01 UTC	11	IN	Data Raw: 62 4c 61 62 65 6c 22 3a 22 22 2c 22 74 65 78 74 22 3a 22 45 6d 70 6c 6f 79 65 65 20 73 69 7a 65 20 28 32 30 2d 35 30 2c 20 31 30 30 2c 20 32 30 30 2c 20 31 30 30 30 2e 2e 2e 65 74 63 2e 29 22 2c 22 74 79 70 65 22 3a 22 63 6f 6e 74 72 6f 6c 5f 74 65 78 74 62 6f 78 22 7d 2c 7b 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 6e 61 6d 65 22 3a 22 63 6f 6d 70 61 6e 79 4e 61 6d 65 22 2c 22 71 69 64 22 3a 22 31 31 22 2c 22 73 75 62 4c 61 62 65 6c 22 3a 22 22 2c 22 74 65 78 74 22 3a 22 43 6f 6d 70 61 6e 79 20 4e 61 6d 65 22 2c 22 74 79 70 65 22 3a 22 63 6f 6e 74 72 6f 6c 5f 74 65 78 74 62 6f 78 22 7d 5d 29 3b 7d 2c 20 32 30 29 3b 20 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 66 6f 72 6d 20 63 6c 61 73 73 3d 22 6a 6f 74 Data Ascii: bLabel":"","text":"Employee size (20-50, 100, 200, 1000...etc.)","type":"control_textbox"},{"description":"","name":"companyName","qid":"11","subLabel":"","text":"Company Name","type":"control_textbox"}]);}, 20); </script></head><body><form class="jot
2022-08-11 03:04:01 UTC	13	IN	Data Raw: 74 22 20 69 64 3d 22 69 64 5f 33 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 63 69 64 5f 33 22 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 69 6e 70 75 74 2d 77 69 64 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 74 65 78 74 5f 33 22 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 68 74 6d 6c 22 20 64 61 74 61 2d 63 6f 6d 70 6f 6e 65 6e 74 3d 22 74 65 78 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 3c 73 74 72 6f 6e 67 3e 44 61 74 65 3a 20 31 32 74 68 20 41 75 67 75 73 74 20 32 30 32 32 2c 20 46 72 69 64 61 79 Data Ascii: t" id="id_3"> <div id="cid_3" class="form-input-wide"> <div id="text_3" class="form-html" data-component="text"> <p><strong>Date: 12th August 2022, Friday
2022-08-11 03:04:01 UTC	13	IN	Data Raw: 3c 2f 73 74 72 6f 6e 67 3e 3c 62 72 20 2f 3e 3c 73 74 72 6f 6e 67 3e 54 69 6d 65 3a 3c 2f 73 74 72 6f 6e 67 3e 20 33 3a 33 30 70 6d 20 2d 20 35 3a 30 30 70 6d 2c c2 a0 3c 73 74 72 6f 6e 67 3e 43 61 6e 74 6f 6e 65 73 65 3c 2f 73 74 72 6f 6e 67 3e 3c 62 72 20 2f 3e 3c 73 74 72 6f 6e 67 3e 53 70 65 61 6b 65 72 73 3a 3c 2f 73 74 72 6f 6e 67 3e 20 41 64 6f 62 65 20 48 6f 6e 67 20 4b 6f 6e 67 2c 20 41 6e 74 65 6c 6f 70 65 20 52 50 41 20 41 70 70 20 61 6e 64 20 43 61 6e 6f 6e 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 3c 73 74 72 6f 6e 67 3e 56 65 6e 75 65 3a 3c 2f 73 74 72 6f 6e 67 3e 20 46 49 4e 44 53 2c 20 31 2f 46 2c 20 54 68 65 20 4c 75 78 65 20 4d 61 6e 6f 72 2c 20 33 39 20 4b 69 6d 62 65 72 6c 65 79 20 52 6f 61 64 2c 20 54 53 54 20 e5 b0 Data Ascii: </strong><br /><strong>Time:</strong> 3:30pm - 5:00pm,<strong>Cantonese</strong><br /><strong>Speakers:</strong> Adobe Hong Kong, Antelope RPA App and Canon</p> <p><strong>Venue:</strong> FINDS, 1/F, The Luxe Manor, 39 Kimberley Road, TST
2022-08-11 03:04:01 UTC	14	IN	Data Raw: 2d 64 65 66 61 75 6c 74 76 61 6c 75 65 3d 22 22 20 61 75 74 6f 43 6f 6d 70 6c 65 74 65 3d 22 73 65 63 74 69 6f 6e 2d 69 6e 70 75 74 5f 34 20 66 61 6d 69 6c 79 2d 6e 61 6d 65 22 20 73 69 7a 65 3d 22 31 35 22 20 76 61 6c 75 65 3d 22 22 20 64 61 74 61 2d 63 6f 6d 70 6f 6e 65 6e 74 3d 22 6c 61 73 74 22 20 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 3d 22 6c 61 62 65 6c 5f 34 20 73 75 62 6c 61 62 65 6c 5f 34 5f 6c 61 73 74 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 73 75 62 2d 6c 61 62 65 6c 22 20 66 6f 72 3d 22 6c 61 73 74 5f 34 22 20 69 64 3d 22 73 75 62 6c 61 62 65 6c 5f 34 5f 6c 61 73 74 22 20 73 74 79 6c 65 3d 22 6d 69 6e 2d 68 65 69 67 68 74 3a 31 33 70 78 22 20 61 72 69 61 2d 68 69 Data Ascii: -defaultvalue="" autoComplete="section-input_4 family-name" size="15" value="" data-component="last" aria-labelledby="label_4 sublabel_4_last" /> <label class="form-sub-label" for="last_4" id="sublabel_4_last" style="min-height:13px" aria-hi
2022-08-11 03:04:01 UTC	15	IN	Data Raw: 61 62 65 6c 20 66 6f 72 6d 2d 6c 61 62 65 6c 2d 74 6f 70 20 66 6f 72 6d 2d 6c 61 62 65 6c 2d 61 75 74 6f 22 20 69 64 3d 22 6c 61 62 65 6c 5f 36 22 20 66 6f 72 3d 22 69 6e 70 75 74 5f 36 22 3e 0a 20 20 20 20 20 20 20 20 20 20 4a 6f 62 20 54 69 74 6c 65 0a 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 72 65 71 75 69 72 65 64 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 2a 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 3c 2f 6c 61 62 65 6c 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 63 69 64 5f 36 22 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 69 6e 70 75 74 2d 77 69 64 65 20 6a 66 2d 72 65 71 75 69 72 65 64 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 Data Ascii: abel form-label-top form-label-auto" id="label_6" for="input_6"> Job Title <span class="form-required"> * </span> </label> <div id="cid_6" class="form-input-wide jf-required"> <input type
2022-08-11 03:04:01 UTC	17	IN	Data Raw: 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 74 65 78 74 22 20 69 64 3d 22 69 6e 70 75 74 5f 31 31 22 20 6e 61 6d 65 3d 22 71 31 31 5f 63 6f 6d 70 61 6e 79 4e 61 6d 65 22 20 64 61 74 61 2d 74 79 70 65 3d 22 69 6e 70 75 74 2d 74 65 78 74 62 6f 78 22 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 74 65 78 74 62 6f 78 20 76 61 6c 69 64 61 74 65 5b 72 65 71 75 69 72 65 64 5d 22 20 64 61 74 61 2d 64 65 66 61 75 6c 74 76 61 6c 75 65 3d 22 22 20 73 69 7a 65 3d 22 32 30 22 20 76 61 6c 75 65 3d 22 22 20 64 61 74 61 2d 63 6f 6d 70 6f 6e 65 6e 74 3d 22 74 65 78 74 Data Ascii: <input type="text" id="input_11" name="q11_companyName" data-type="input-textbox" class="form-textbox validate[required]" data-defaultvalue="" size="20" value="" data-component="text
2022-08-11 03:04:01 UTC	17	IN	Data Raw: 62 6f 78 22 20 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 3d 22 6c 61 62 65 6c 5f 31 31 22 20 72 65 71 75 69 72 65 64 3d 22 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 6c 69 6e 65 20 6a 66 2d 72 65 71 75 69 72 65 64 22 20 64 61 74 61 2d 74 79 70 65 3d 22 63 6f 6e 74 72 6f 6c 5f 70 68 6f 6e 65 22 20 69 64 3d 22 69 64 5f 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 6c 61 62 65 6c 20 66 6f 72 6d 2d 6c 61 62 65 6c 2d 74 6f 70 20 66 6f 72 6d 2d 6c 61 62 65 6c 2d 61 75 74 6f 22 20 69 64 3d 22 6c 61 62 65 6c 5f 38 22 20 66 6f 72 3d 22 69 6e 70 75 74 5f 38 5f 61 72 65 61 22 3e 0a 20 20 20 20 20 20 Data Ascii: box" aria-labelledby="label_11" required="" /> </div> </li> <li class="form-line jf-required" data-type="control_phone" id="id_8"> <label class="form-label form-label-top form-label-auto" id="label_8" for="input_8_area">
2022-08-11 03:04:01 UTC	18	IN	Data Raw: 65 5d 22 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 74 65 78 74 62 6f 78 20 76 61 6c 69 64 61 74 65 5b 72 65 71 75 69 72 65 64 5d 22 20 64 61 74 61 2d 64 65 66 61 75 6c 74 76 61 6c 75 65 3d 22 22 20 61 75 74 6f 43 6f 6d 70 6c 65 74 65 3d 22 73 65 63 74 69 6f 6e 2d 69 6e 70 75 74 5f 38 20 74 65 6c 2d 6c 6f 63 61 6c Data Ascii: e]" class="form-textbox validate[required]" data-defaultvalue="" autoComplete="section-input_8 tel-local
2022-08-11 03:04:01 UTC	18	IN	Data Raw: 22 20 76 61 6c 75 65 3d 22 22 20 64 61 74 61 2d 63 6f 6d 70 6f 6e 65 6e 74 3d 22 70 68 6f 6e 65 22 20 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 3d 22 6c 61 62 65 6c 5f 38 20 73 75 62 6c 61 62 65 6c 5f 38 5f 70 68 6f 6e 65 22 20 72 65 71 75 69 72 65 64 3d 22 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 73 75 62 2d 6c 61 62 65 6c 22 20 66 6f 72 3d 22 69 6e 70 75 74 5f 38 5f 70 68 6f 6e 65 22 20 69 64 3d 22 73 75 62 6c 61 62 65 6c 5f 38 5f 70 68 6f 6e 65 22 20 73 74 79 6c 65 3d 22 6d 69 6e 2d 68 65 69 67 68 74 3a 31 33 70 78 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 66 61 6c 73 65 22 3e 20 50 68 6f 6e 65 20 4e 75 6d 62 65 72 20 3c 2f 6c 61 62 65 6c 3e 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: " value="" data-component="phone" aria-labelledby="label_8 sublabel_8_phone" required="" /> <label class="form-sub-label" for="input_8_phone" id="sublabel_8_phone" style="min-height:13px" aria-hidden="false"> Phone Number </label>
2022-08-11 03:04:01 UTC	20	IN	Data Raw: 79 70 65 3d 22 63 6f 6e 74 72 6f 6c 5f 62 75 74 74 6f 6e 22 20 69 64 3d 22 69 64 5f 32 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 63 69 64 5f 32 22 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 69 6e 70 75 74 2d 77 69 64 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 35 36 70 78 22 20 64 61 74 61 2d 61 6c 69 67 6e 3d 22 61 75 74 6f 22 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 66 6f 72 6d 2d 62 75 74 74 6f 6e 73 2d 61 75 74 6f 20 20 20 6a 73 54 65 73 74 2d 62 75 74 74 6f 6e 2d 77 72 61 70 70 65 72 46 69 65 6c 64 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 69 64 3d 22 69 6e 70 75 74 5f 32 22 20 74 79 70 65 3d Data Ascii: ype="control_button" id="id_2"> <div id="cid_2" class="form-input-wide"> <div style="margin-left:156px" data-align="auto" class="form-buttons-wrapper form-buttons-auto jsTest-button-wrapperField"> <button id="input_2" type=

Timestamp	kBytes transferred	Direction	Data
2022-08-11 03:04:00 UTC	0	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=85.0.4183.121&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda,pkedcjkdefgpdelpbcmbmeomcjbeemfm X-Goog-Update-Updater: chromecrx-85.0.4183.121 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-08-11 03:04:00 UTC	1	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-lgD57KP-IJDG9upZQvBpaQ' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 11 Aug 2022 03:04:00 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 5700 X-Daystart: 72240 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-08-11 03:04:00 UTC	2	IN	Data Raw: 33 31 61 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 35 37 30 30 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 37 32 32 34 30 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 31a<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="5700" elapsed_seconds="72240"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2022-08-11 03:04:00 UTC	3	IN	Data Raw: 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 2e 63 72 78 22 20 66 70 3d 22 31 2e 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 61 70 Data Ascii: mhkkegccagdldgiimedpiccmgmieda.crx" fp="1.81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app><ap
2022-08-11 03:04:00 UTC	3	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	kBytes transferred	Direction	Data
2022-08-11 03:04:00 UTC	1	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-08-11 03:04:00 UTC	1	OUT	Data Raw: 20 Data Ascii:
2022-08-11 03:04:00 UTC	3	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 11 Aug 2022 03:04:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-w3acUcaw1Ya4xyVyJg5Kvg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'nonce-w3acUcaw1Ya4xyVyJg5Kvg' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityListAccountsHttp/cspreport Report-To: {"group":"IdentityListAccountsHttp","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/IdentityListAccountsHttp/external"}]} Cross-Origin-Opener-Policy: same-origin; report-to="IdentityListAccountsHttp" Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-08-11 03:04:00 UTC	5	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2022-08-11 03:04:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	05:03:56
Start date:	11/08/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Imagebase:	0x7ff7f6290000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Target ID:	1
Start time:	05:03:58
Start date:	11/08/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1544,17416894625862386819,122532231962354207,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1920 /prefetch:8
Imagebase:	0x7ff7f6290000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Target ID:	9
Start time:	05:04:36
Start date:	11/08/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1544,17416894625862386819,122532231962354207,131072 --lang=en-US --service-sandbox-type=audio --enable-audio-service-sandbox --mojo-platform-channel-handle=3356 /prefetch:8
Imagebase:	0x7ff7f6290000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low

Target ID:	10
Start time:	05:04:37
Start date:	11/08/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1544,17416894625862386819,122532231962354207,131072 --lang=en-US --service-sandbox-type=video_capture --enable-audio-service-sandbox --mojo-platform-channel-handle=3388 /prefetch:8
Imagebase:	0x7ff7f6290000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://form.jotform.me/92812002476452

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic

C:\Users\user\AppData\Local\Google\Chrome\User Data\0f79bc6b-7e3b-49f6-98a7-b3ce8ff15eb0.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\667b3dc1-101b-4bda-9b4c-0f50a2b5580e.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\6dd3b84d-d457-4f4b-9d79-fe4291f85600.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\70d63fda-fab7-4191-bad1-942c90786c29.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\8dfd8790-35fa-4838-b8a6-7d2e5548a5b4.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\04e78ca2-c531-4f71-a2c1-4ff5428ac00e.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\2161041b-8d84-4fb7-9370-082b225f7393.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\22462c64-0211-47cb-9349-e20b466a435c.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\321de2f9-c349-451a-87f2-bfd9aa3e8003.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\45523841-d29b-49d5-905e-ddd38af61720.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\59b06cc5-4b05-4c7b-a1e3-9987925734da.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\7f48e7c1-a911-4a19-acd0-bed3724d0c95.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\8353cdfc-d439-4863-8919-8d6534482963.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\97fcfab9-ce02-40e9-93d0-564389072a3e.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG.old (copy)

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent State (copy)

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences (copy)

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences (copy)

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\1c12fafa-be49-4eff-be2c-75170fe6a376.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Network Persistent State (copy)

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\TransportSecurity (copy)

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\b2b19eb1-0967-47eb-8c6b-e04d4886b75f.tmp

Windows Analysis Report
https://form.jotform.me/92812002476452

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre