Automated Malware Analysis IOC Report for

Details

Filetype:	URL
Filename:	https://form.jotform.com/212098216135047

Signature Hits	Behavior Group	Mitre Attack
Downloads files from webservers via HTTP	Networking	Ingress Tool Transfer
Performs DNS lookups	Networking	Non-Application Layer Protocol
Classification label	System Summary
Creates files inside the program directory	System Summary	Masquerading
Uses HTTPS	Networking	Encrypted Channel Application Layer Protocol
Spawns processes	System Summary	Process Injection
Posts data to webserver	Networking
Creates a directory in C:\Program Files	Compliance, System Summary
Uses secure TLS version for HTTPS connections	Compliance, Networking
Found graphical window changes (likely an installer)	System Summary
Found GUI installer (many successful clicks)	System Summary

Details

Name:	https://cdn01.jotfor.ms/assets/img/jfHeader/v2/integrations/engagebay.svg
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://cdn01.jotfor.ms/assets/img/jfHeader/v2/integrations/icontact.svg
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://cdn.linkedin.oribi.io/partner/456249/domain/jotform.com/token
IP:	13.227.153.59
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Details

Name:	https://www.google.com/pagead/1p-user-list/1072355558/?random=1674637559574&cv=11&fst=1674637200000&bg=ffffff&guid=ON&async=1&gtm=2wg1n0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.jotform.com%2F%3Futm_source%3Dformfooter%26utm_medium%3Dbanner%26utm_term%3D212098216135047%26utm_content%3Djotform_logo%26utm_campaign%3Dpowered_by_jotform_le&tiba=Free%20Online%20Form%20Builder%20%26%20Form%20Creator%20%7C%20Jotform&fmt=3&is_vtc=1&random=2019681976&rmt_tld=0&ipr=y
IP:	142.250.203.100
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Details

Name:	https://www.google.com/pagead/1p-user-list/1072355558/?random=1674637547858&cv=11&fst=1674637200000&bg=ffffff&guid=ON&async=1&gtm=2wg1n0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.jotform.com%2F%3Futm_source%3Dformfooter%26utm_medium%3Dbanner%26utm_term%3D212098216135047%26utm_content%3Djotform_button%26utm_campaign%3Dpowered_by_jotform_le&tiba=Free%20Online%20Form%20Builder%20%26%20Form%20Creator%20%7C%20Jotform&fmt=3&is_vtc=1&random=911893113&rmt_tld=0&ipr=y
IP:	142.250.203.100
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Details

Name:	https://cdn01.jotfor.ms/assets/img/jfHeader/v2/integrations/pipedrive.svg
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://cdn01.jotfor.ms/assets/img/jfHeader/v2/integrations/box.svg
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://cdn.jotfor.ms/fonts/?family=Bungee
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=G100&rnd=1145008512.1674637576&url=https%3A%2F%2Fwww.jotform.com%2F&gtm=2wg1n0TDFT5J&auid=1369310389.1674637548
IP:	172.217.168.2
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Details

Name:	https://cdn01.jotfor.ms/assets/img/jfHeader/v2/integrations/keap.svg
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://cdn01.jotfor.ms/assets/img/jfHeader/v2/products/approvals.svg
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://cdn01.jotfor.ms/assets/img/jfHeader/v2/products/pdf-editor.svg
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://accounts.google.com/gsi/style
IP:	142.250.203.109
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Details

Name:	https://cdn01.jotfor.ms/assets/img/jfHeader/v2/integrations/active-campaign.svg
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://cdn.jotfor.ms/assets/img/favicons/favicon-2021-light.ico
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://cdn.jotfor.ms/fonts/inter/fonts/Inter-LightBETA.woff2
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.AMZ27oQJoUI.O/m=client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/cb=gapi.loaded_0?le=scs
IP:	172.217.168.78
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Details

Name:	https://cdn02.jotfor.ms/js/vendor/jquery-1.8.0.min.js?v=3.3.36690
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://cdn01.jotfor.ms/js/vendor/jotform.signaturepad.js?3.3.36690
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://accounts.google.com/gsi/client
IP:	142.250.203.109
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Details

Name:	https://form.jotform.com/212098216135047
IP:	35.201.118.58
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Spawns processes	System Summary	Process Injection

Details

Name:	https://cdn01.jotfor.ms/assets/img/jfHeader/v2/products/inbox.svg
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://cdn.jotfor.ms/assets/img/favicons/favicon-2021.svg
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://cdn.jotfor.ms/fonts/circular/fonts/Circular-Bold.woff2
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://cdn01.jotfor.ms/assets/img/jfHeader/v2/integrations/paypal.svg
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://cdn01.jotfor.ms/assets/img/jfHeader/v2/integrations/aweber.svg
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://cdn01.jotfor.ms/assets/img/jfHeader/v2/products/sign.svg
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://cdn.jotfor.ms/fonts/inter/fonts/Inter-Regular.woff2
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://connect.facebook.net/en_US/sdk.js
IP:	157.240.17.15
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Details

Name:	https://apis.google.com/js/api:client.js
IP:	172.217.168.78
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Details

Name:	https://cdn02.jotfor.ms/css/styles/payment/payment_styles.css?3.3.36690
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://cdn03.jotfor.ms/css/styles/payment/payment_feature.css?3.3.36690
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://www.google.hr/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-1170872-7&cid=1185282682.1674637540&jid=1853099103&_u=6GhACEAjBAAAACAAIk~&z=703921855
IP:	172.217.168.67
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Details

Name:	https://connect.facebook.net/en_US/fbevents.js
IP:	157.240.17.15
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Details

Name:	https://cdn01.jotfor.ms/assets/img/jfHeader/v2/templates/app.svg
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://cdn01.jotfor.ms/themes/CSS/5e6b428acc8c4e222d1beb91.css?themeRevisionID=5f7ed99c2c2c7240ba580251
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://www.google.com/pagead/1p-user-list/1072355558/?random=1674637576284&cv=11&fst=1674637200000&bg=ffffff&guid=ON&async=1&gtm=2wg1n0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.jotform.com%2F%3Futm_source%3Dformfooter%26utm_medium%3Dbanner%26utm_term%3D212098216135047%26utm_content%3Djotform_button%26utm_campaign%3Dpowered_by_jotform_le&tiba=Free%20Online%20Form%20Builder%20%26%20Form%20Creator%20%7C%20Jotform&fmt=3&is_vtc=1&random=2685069636&rmt_tld=0&ipr=y
IP:	142.250.203.100
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Details

Name:	https://cdn.jotfor.ms/assets/js/actions.js
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=104.0.5112.81&lang=en-GB&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1
IP:	216.58.215.238
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Details

Name:	https://cdn.jotfor.ms/uploads/frollins26/form_files/pfc_610363c22ed58_BENEFIT_fORM.pdf
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://accounts.google.com/gsi/status?client_id=172124630376-qk1qmdfmur2ojaf39e070iqhpt2foaip.apps.googleusercontent.com&as=KsbQTdHX8hlvNPEAAIZo8Q
IP:	142.250.203.109
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Details

Name:	https://www.google.com/pagead/landing?gcs=G111&gcu=1&gcd=G100&rnd=843949881.1674637540&url=https%3A%2F%2Fwww.jotform.com%2F&gtm=2wg1n0TDFT5J&auid=1369310389.1674637548
IP:	142.250.203.100
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Details

Name:	https://cdn01.jotfor.ms/assets/img/jfHeader/v2/products/store-builder.svg?v=1.0
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://accounts.google.com/gsi/status?client_id=172124630376-qk1qmdfmur2ojaf39e070iqhpt2foaip.apps.googleusercontent.com&as=Fs1AP4cRUIJwxS4xVC9y2A
IP:	142.250.203.109
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Details

Name:	https://cdn01.jotfor.ms/assets/img/jfHeader/v2/integrations/galleria.png
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://www.google.hr/pagead/1p-user-list/1072355558/?random=1674637559574&cv=11&fst=1674637200000&bg=ffffff&guid=ON&async=1&gtm=2wg1n0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.jotform.com%2F%3Futm_source%3Dformfooter%26utm_medium%3Dbanner%26utm_term%3D212098216135047%26utm_content%3Djotform_logo%26utm_campaign%3Dpowered_by_jotform_le&tiba=Free%20Online%20Form%20Builder%20%26%20Form%20Creator%20%7C%20Jotform&fmt=3&is_vtc=1&random=2019681976&rmt_tld=1&ipr=y
IP:	172.217.168.67
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Details

Name:	https://cdn01.jotfor.ms/assets/img/jfHeader/v2/products/enterprise.svg
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-1170872-7&cid=1185282682.1674637540&jid=1853099103&_u=6GhACEAjBAAAACAAIk~&z=703921855
IP:	142.250.203.100
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Details

Name:	https://www.google.hr/pagead/1p-user-list/1072355558/?random=1674637576284&cv=11&fst=1674637200000&bg=ffffff&guid=ON&async=1&gtm=2wg1n0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.jotform.com%2F%3Futm_source%3Dformfooter%26utm_medium%3Dbanner%26utm_term%3D212098216135047%26utm_content%3Djotform_button%26utm_campaign%3Dpowered_by_jotform_le&tiba=Free%20Online%20Form%20Builder%20%26%20Form%20Creator%20%7C%20Jotform&fmt=3&is_vtc=1&random=2685069636&rmt_tld=1&ipr=y
IP:	172.217.168.67
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Details

Name:	https://www.google.com/pagead/1p-user-list/798881193/?random=1674637576291&cv=11&fst=1674637200000&bg=ffffff&guid=ON&async=1&gtm=2wg1n0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.jotform.com%2F%3Futm_source%3Dformfooter%26utm_medium%3Dbanner%26utm_term%3D212098216135047%26utm_content%3Djotform_button%26utm_campaign%3Dpowered_by_jotform_le&tiba=Free%20Online%20Form%20Builder%20%26%20Form%20Creator%20%7C%20Jotform&fmt=3&is_vtc=1&random=283207255&rmt_tld=0&ipr=y
IP:	142.250.203.100
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Details

Name:	https://cdn.jotfor.ms/js/pdfjs/pdf.min.js
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://cdn01.jotfor.ms/assets/img/jfHeader/v2/templates/form.svg
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D456249%26time%3D1674637548301%26url%3Dhttps%253A%252F%252Fwww.jotform.com%252F%253Futm_source%253Dformfooter%2526utm_medium%253Dbanner%2526utm_term%253D212098216135047%2526utm_content%253Djotform_button%2526utm_campaign%253Dpowered_by_jotform_le%26liSync%3Dtrue
IP:	144.2.14.1
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Details

Name:	https://cdn01.jotfor.ms/assets/img/jfHeader/v2/integrations/google-sheets.svg
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://cdn01.jotfor.ms/assets/img/jfHeader/v2/integrations/google-contacts.svg
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://cdn.jotfor.ms/fonts/inter/fonts/Inter-SemiBold.woff2
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://cdn.jotfor.ms/p/homepage/homepage_2021/assets/img-min/line-sprite-6.png
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://cdn01.jotfor.ms/assets/img/jfHeader/v2/integrations/mad-mimi.png
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://cdn01.jotfor.ms/assets/img/jfHeader/v2/templates/card-form.svg
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://cdn01.jotfor.ms/assets/img/jfHeader/v2/templates/sign.svg
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-1170872-7&cid=1185282682.1674637540&jid=1853099103&gjid=297743839&_gid=349534628.1674637548&_u=6GhACEAjBAAAACAAIk~&z=1730541105
IP:	142.250.153.157
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Details

Name:	https://form.jotform.com/212098216135047
TargetID:	0
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	browser
Reputation:	high

Details

Name:	https://cdn01.jotfor.ms/assets/img/jfHeader/v2/products/form-builder.svg
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://www.jotform.com/API/user/combinedinfo?loc=1&campaign=1
IP:	104.23.133.11
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Details

Name:	https://www.jotform.com/?utm_source=formfooter&utm_medium=banner&utm_term=212098216135047&utm_content=jotform_logo&utm_campaign=powered_by_jotform_le
TargetID:	0
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	browser
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Downloads files from webservers via HTTP	Networking	Application Layer Protocol Non-Application Layer Protocol Ingress Tool Transfer

Details

Name:	https://cdn01.jotfor.ms/assets/img/jfHeader/v2/integrations/hubspot.svg
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://www.jotform.com/js/msal/msal-browser.js
IP:	104.23.133.11
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Details

Name:	https://cdn01.jotfor.ms/assets/img/jfHeader/v2/integrations/ftp.png
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://events.jotform.com/action?actor=guest_daabb2167be0213a&action=open&target=google&project=LoginFlowCommonHeader&ref=https:%2F%2Fwww.jotform.com%2F%3Futm_source%3Dformfooter%26utm_medium%3Dbanner%26utm_term%3D212098216135047%26utm_content%3Djotform_logo%26utm_campaign%3Dpowered_by_jotform_le
IP:	104.23.134.11
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://www.facebook.com/tr/
IP:	157.240.253.35
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Details

Name:	https://cdn01.jotfor.ms/assets/img/jfHeader/v2/products/mobile-app.svg
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://cdn01.jotfor.ms/assets/img/jfHeader/v2/integrations/apple-pay-google-pay.svg
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://cdn.jotfor.ms/common-header/assets/4.css?ver=67877c179063e00d5790
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://cdn01.jotfor.ms/assets/img/jfHeader/v2/templates/pdf.svg
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://cdn01.jotfor.ms/assets/img/jfHeader/v2/integrations/constant-contact.svg
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://accounts.google.com/gsi/status?client_id=172124630376-qk1qmdfmur2ojaf39e070iqhpt2foaip.apps.googleusercontent.com&as=Y4IaBnSX2yPSQNvXjJusTw
IP:	142.250.203.109
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Details

Name:	https://cdn01.jotfor.ms/assets/img/jfHeader/v2/integrations/google-calendar.svg
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=456249&time=1674637560057&url=https%3A%2F%2Fwww.jotform.com%2F%3Futm_source%3Dformfooter%26utm_medium%3Dbanner%26utm_term%3D212098216135047%26utm_content%3Djotform_logo%26utm_campaign%3Dpowered_by_jotform_le
IP:	144.2.14.1
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Details

Name:	https://cdn01.jotfor.ms/assets/img/jfHeader/v2/integrations/zoom.svg
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=G100&rnd=346843685.1674637560&url=https%3A%2F%2Fwww.jotform.com%2F&gtm=2wg1n0TDFT5J&auid=1369310389.1674637548
IP:	172.217.168.2
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Details

Name:	https://cdn01.jotfor.ms/assets/img/jfHeader/v2/products/smart-pdf-forms.svg
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://connect.facebook.net/en_US/sdk.js?hash=25f8988cdf5585c46313068324a55308
IP:	157.240.17.15
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Details

Name:	https://consentcdn.cookiebot.com/sdk/bc-v4.min.html
TargetID:	0
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	browser
Reputation:	high

Details

Name:	https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=456249&time=1674637548301&url=https%3A%2F%2Fwww.jotform.com%2F%3Futm_source%3Dformfooter%26utm_medium%3Dbanner%26utm_term%3D212098216135047%26utm_content%3Djotform_button%26utm_campaign%3Dpowered_by_jotform_le&liSync=true
IP:	144.2.14.1
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Details

Name:	https://www.google.hr/pagead/1p-user-list/798881193/?random=1674637559580&cv=11&fst=1674637200000&bg=ffffff&guid=ON&async=1&gtm=2wg1n0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.jotform.com%2F%3Futm_source%3Dformfooter%26utm_medium%3Dbanner%26utm_term%3D212098216135047%26utm_content%3Djotform_logo%26utm_campaign%3Dpowered_by_jotform_le&tiba=Free%20Online%20Form%20Builder%20%26%20Form%20Creator%20%7C%20Jotform&fmt=3&is_vtc=1&random=2251312007&rmt_tld=1&ipr=y
IP:	172.217.168.67
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Details

Name:	https://cdn01.jotfor.ms/assets/img/jfHeader/v2/integrations/zendesk.svg
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://cdn01.jotfor.ms/assets/img/jfHeader/v2/integrations/paysafe.svg
IP:	104.22.72.81
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:

https://www.facebook.com/tr/?id=984998484932812&ev=PageView&dl=https%3A%2F%2Fwww.jotform.com%2F%3Futm_source%3Dformfooter%26utm_medium%3Dbanner%26utm_term%3D212098216135047%26utm_content%3Djotform_button%26utm_campaign%3Dpowered_by_jotform_le&rl=&if=false&ts=1674637577075&sw=1280&sh=1024&v=2.9.94&r=stable&ec=0&o=30&fbp=fb.1.1674637561179.1308954560&it=1674637576758&coo=false&dpo=LDU&dpoco=1&dpost=1000&rqm=GET

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

IOC Report
https://form.jotform.com/212098216135047

Processes

URLs

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

IOC Reporthttps://form.jotform.com/212098216135047

Processes

URLs

IOC Report
https://form.jotform.com/212098216135047