Windows Analysis Report
https://idp.accreditor.com:8443/realms/ACEP/protocol/openid-connect/auth?client_id=survey_spa&redirect_uri=https%3A%2F%2Facep.accreditor.com%2Flogin%2Fcallback&state=bed2bb9f-0f49-4e40-b2dc-a9bd88fa3533&response_mode=fragment&response_type=code&scope=openid&nonce=6d8857dc-4652-434f-938f-d5340af9b3da

ID:	1624483
Product:	CloudBasic
Start time:	10:03:32
Start date:	26.02.2025
Cookbook:	browseurl.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Feb 26 08:04:32 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	5733073F881BAF50F2BE99330D627B3B	9E508FAC6F1925D97D549A9898FA378E9B2412BF	3E44491C3A318E9A29ED22378F8A3F17C35FFD062F5FE06D1F831C8ABD55BA2B
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Feb 26 08:04:32 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	90866952E033D0FF31E351DA42F33D90	AEAF2321E839573AD77C30A390ADB604F7E53006	32E9D192677A26C19FFA7732BE2F8B5132F22EE307A8AE2D51A665B006FFAF49
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 07:00:51 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	9479DB96EEEB74F63C247C4C407172E8	3D5240A966E5584E3FD1A36528F4B52821949D84	D9591729CEEF170EC74D5FA0C38B4EA6CCAE1145F2E92DB9106BA353ABB0D80C
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Feb 26 08:04:32 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	E4011C2AB6AD99996E33DFEC33093634	23698C0D50DE4A1B2BC1DCF732623149C45B67E7	76AD4F46AF7B9894A1991CF8BA28C1D5230D6FD5355C695646CD99D3AF81F53E
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Feb 26 08:04:32 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	4123A9DDDFE4112D451E64105434CF94	47CA3C28D172F9144F155889AF9F4045C55C3745	69FD8CBFDD2A71DDBD3CA3B114F9C5FF1DE9FEA95086477BAE9E4E0CD51FC3E1
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Feb 26 08:04:32 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	557A91ADF16FE4AF036BFE106782FB30	EEDECDAD6D2C81A3E27C90BA53EE4EAC1390CDBD	66CBEA95CE0123D5082369A370F1EABE8A622F62E3F7A6BE78EF1CA51DF9001A
Chrome Cache Entry: 100	gzip compressed data, original size modulo 2^32 1930	AAF320A149734C583F9D05B590014E1B	1E9BEE2D2A7E8290EB39B0385A96463802DD20BF	20434B3D28E4C0A534F874D015C0727866C27BAF0E119460223B0458C008390C
Chrome Cache Entry: 101	gzip compressed data, original size modulo 2^32 1421960	33CE979B4152273BCD2773FA5E3924BC	F3F9C9FDE7923637CF13C0079C0AF5B2C04D98C6	C76A8A283700B07F121215F164296216CD1899436FD5A80DC00067C0133131BA
Chrome Cache Entry: 102	ASCII text, with very long lines (490), with CRLF line terminators	EF48DDDF92C1B66CF41F3E86B5E345A1	5CC9A64A3176C93B3495BF5E09A88314203B58A8	7341BF4DBE099D48235CC5F2A231D1F0D09F9A946A2D2DC67148347D08D39346
Chrome Cache Entry: 103	gzip compressed data, original size modulo 2^32 225030	BD7FC8ADFE4D14C96E6379C6CE8EB4BC	7E9FADDE2FDF4DC16FA1C07F26B2049BD61C443B	F1828CB24F4AAC08057CB5976C9CB88AF23CDA953FD920074C31643D2FB47799
Chrome Cache Entry: 104	gzip compressed data, original size modulo 2^32 627	1A971019A10CFB8A19FC0D63C8AA35D8	1FEBCAE94F7720D4B612584D35BB8A786500C4DA	453867BC8BADE98D1386E486C11EC291EE4B664F86AA2E467B93652D38BD52C8
Chrome Cache Entry: 105	PNG image data, 1920 x 1080, 8-bit/color RGB, non-interlaced	9665E5F5DEBF61A1E74F6CB4A5D3B31F	880CAA4DA123020770FD192AB13FAEF39CC1DD10	0825175291BE11F7689E8718295E422BB6FA4F8FEFCCC5610292B720C701AC4E
Chrome Cache Entry: 106	Unicode text, UTF-8 text, with very long lines (65533), with no line terminators	D50CDE39FD1059AB36B6A7DE31832CF7	27997D6F1AD37DF7602FF8A6BF56E92C3BEA1ABC	646281E71A6BE0DCEF47B687BCA536C6B53F47CAE0966E9E6965B7E1C0D6E49E
Chrome Cache Entry: 107	gzip compressed data, original size modulo 2^32 627	1A971019A10CFB8A19FC0D63C8AA35D8	1FEBCAE94F7720D4B612584D35BB8A786500C4DA	453867BC8BADE98D1386E486C11EC291EE4B664F86AA2E467B93652D38BD52C8
Chrome Cache Entry: 108	Unicode text, UTF-8 text, with very long lines (65134), with no line terminators	D42EA95BEFCD41D418BC8E91A7D56A17	BDBE91CBA7DD3E1769214A12BACDDC6741B86B3A	1310367BE4C03E75F9F6C2F4E60577A94F475595C7376DBDCFD04AB1AC3BF929
Chrome Cache Entry: 109	Unicode text, UTF-8 text, with very long lines (20572), with no line terminators	7F5BA856DC1216537503184C436B3515	8E3AADB826DCD900AA58A0BD8A7D93A0186C7171	E999DA34EA7FB071C045E99E4BA376E1BC0DEA6A433E800E0E1CDF363CF33863
Chrome Cache Entry: 110	SVG Scalable Vector Graphics image	964CE75614862A0350F4E1043B6C0C30	3D2DCA1F735281C37AF31318D8150F97D2890134	9C1A0220BC6468C6C7F7C8B5320B42813290CADAF727E6002DC96D5446220BDA
Chrome Cache Entry: 111	gzip compressed data, original size modulo 2^32 540	7975EF391455072E62F30E48E679394E	CA7F020A4FAAF760E8AB7CCFAFD91CA43408F22A	788C924FACF56B876CA5B6D3B9C033A05EAF9AC79A14215D9BBABBEB63E020C5
Chrome Cache Entry: 112	Web Open Font Format, TrueType, length 65452, version 1.0	D95D6F5D5AB7CFEFD09651800B69BD54	7D65E0227D0D7CDC1718119CD2A7DCE0638F151C	199411F659F41AACCB959BACB1B0DE30E54F244352A48C6F9894E65AE0F8A9A1
Chrome Cache Entry: 113	ASCII text, with no line terminators	494DD357FAEC687E55EA7E946207BB68	039BAE22F510602B78BCC3E6B1215D061F54C140	B70B9FCF8B3CFB44E84EC45462F9AA98B124CAE62B7CE99FE6EDE83D4A87562B
Chrome Cache Entry: 114	gzip compressed data, original size modulo 2^32 7518	07CAF5F366523382870D899F586B4248	712BE456BCB6399469ECA43C0EFFA67D9EC9477C	1BC7CBCED1FBDC79D73EA2E0F87FF0C72FD8962286A8339609C70FEF9908FFCE
Chrome Cache Entry: 115	PNG image data, 333 x 101, 8-bit/color RGBA, non-interlaced	37D38FF139811257A0A6F7B5F47CDBF7	C1F08D556016BF4C6C9FFD65D5E7053E260776F9	BD6FA4A8853772DF16A78BC3441FCAC97430E57C6414973DD45982210C8EC632
Chrome Cache Entry: 116	HTML document, ASCII text, with very long lines (1046)	167928194112112FAF6971D6F98BE632	CA34DEDA3A38734B78FD96AC5A629E75F1627FDC	44B2C7A0E6701D3C5AA3BDCA09C97D4D420C8B5B567F560EC3988B3737675816
Chrome Cache Entry: 81	Web Open Font Format (Version 2), TrueType, length 16324, version 1.0	F43FA5B4F6366EAE0039E4E49DB645DE	D7FEC074BA8B6E69BEC4A995EA722D3D1513AD43	0AA6A7045A55DDCB25BBEE4D1EDCB864081CF59F7FC9BDC1ADA22A32ED4AD3AD
Chrome Cache Entry: 82	gzip compressed data, original size modulo 2^32 1930	AAF320A149734C583F9D05B590014E1B	1E9BEE2D2A7E8290EB39B0385A96463802DD20BF	20434B3D28E4C0A534F874D015C0727866C27BAF0E119460223B0458C008390C
Chrome Cache Entry: 83	PNG image data, 1920 x 1080, 8-bit/color RGB, non-interlaced	9665E5F5DEBF61A1E74F6CB4A5D3B31F	880CAA4DA123020770FD192AB13FAEF39CC1DD10	0825175291BE11F7689E8718295E422BB6FA4F8FEFCCC5610292B720C701AC4E
Chrome Cache Entry: 84	HTML document, ASCII text, with very long lines (2110), with CRLF, LF line terminators	0DB46D397C96498F16120FB9DEB1F115	87BE859372D1620EC03E49C099877BD1DDB2171A	E0D847F8D7929986107F337B9E72336E852D625A2E37391E614BA2D96EBF238E
Chrome Cache Entry: 85	Unicode text, UTF-8 text, with very long lines (65533), with no line terminators	D50CDE39FD1059AB36B6A7DE31832CF7	27997D6F1AD37DF7602FF8A6BF56E92C3BEA1ABC	646281E71A6BE0DCEF47B687BCA536C6B53F47CAE0966E9E6965B7E1C0D6E49E
Chrome Cache Entry: 86	HTML document, ASCII text, with very long lines (10852), with no line terminators	7F05676F2CF3F1CB468C5D709B51E576	2626B717DD9EC434E29BE178297EB61CFE1CF836	7149DAC14B3BAC27DEA1B88FDF80C39D23CEFC547D698A54640DD36A7835D807
Chrome Cache Entry: 87	gzip compressed data, original size modulo 2^32 7518	07CAF5F366523382870D899F586B4248	712BE456BCB6399469ECA43C0EFFA67D9EC9477C	1BC7CBCED1FBDC79D73EA2E0F87FF0C72FD8962286A8339609C70FEF9908FFCE
Chrome Cache Entry: 88	ASCII text, with very long lines (35314), with no line terminators	8AD430779D9950693331E84D81762453	3A3DE2E1DF552A166F36110089F57619D699A4BF	6B1915A3AB2901DFE580FAD6672062A76DAF340A51A3577B2024201768367D58
Chrome Cache Entry: 89	gzip compressed data, original size modulo 2^32 61980	ABF44E6944F1595ECE862903C7EA9554	E424B5ED50F73A27F13C3F8F90C51F31C05D5F70	070664373859B25494720DC37A4C73BE54A2490A5CA37E7D2E42BF392F2252F1
Chrome Cache Entry: 90	SVG Scalable Vector Graphics image	964CE75614862A0350F4E1043B6C0C30	3D2DCA1F735281C37AF31318D8150F97D2890134	9C1A0220BC6468C6C7F7C8B5320B42813290CADAF727E6002DC96D5446220BDA
Chrome Cache Entry: 91	gzip compressed data, original size modulo 2^32 182755	102BA9B3EEA6216B957DBF9755461AF7	15091C88150165654A9133554771875C66AC83E8	4CB5D45072B3A73F6C5244A2962C48C53223AD2F3DCB93104FCCE40480397669
Chrome Cache Entry: 92	PNG image data, 333 x 101, 8-bit/color RGBA, non-interlaced	37D38FF139811257A0A6F7B5F47CDBF7	C1F08D556016BF4C6C9FFD65D5E7053E260776F9	BD6FA4A8853772DF16A78BC3441FCAC97430E57C6414973DD45982210C8EC632
Chrome Cache Entry: 93	gzip compressed data, original size modulo 2^32 10845	2D99A0CEE1E5CF49DA3D426C0554109B	FCB20B7DAEDAE9BE8D198C37CC6CE8D74AD5BFD7	848BCF7A1F08C3A8BD7B7EE2F039D66F449EE24696186358471FA9A022839727
Chrome Cache Entry: 94	ASCII text, with very long lines (35314), with no line terminators	8AD430779D9950693331E84D81762453	3A3DE2E1DF552A166F36110089F57619D699A4BF	6B1915A3AB2901DFE580FAD6672062A76DAF340A51A3577B2024201768367D58
Chrome Cache Entry: 95	HTML document, ASCII text, with very long lines (10852), with no line terminators	7F05676F2CF3F1CB468C5D709B51E576	2626B717DD9EC434E29BE178297EB61CFE1CF836	7149DAC14B3BAC27DEA1B88FDF80C39D23CEFC547D698A54640DD36A7835D807
Chrome Cache Entry: 96	Certificate, Version=3	98EB0B62C3FE53EAC8CAA8FDB58020EE	CBFE9EB43B3B37FE0DFBC4C2EB2D4E07D08BD8E8	4422E963EE53CD58CC9F85CD40BF5FFEC0095FDF1A154535661C1C06BCADC69B
Chrome Cache Entry: 97	gzip compressed data, original size modulo 2^32 63180	98FFEC659D9796D069E90C90D5BB65DF	71A0AB434079AE5CC21A60D640BC974020E9C305	902DA4D20C9E20844DF84FE5FA88842C505B4165204A36E0F98D1651404E1773
Chrome Cache Entry: 98	HTML document, ASCII text, with CRLF line terminators	5343C1A8B203C162A3BF3870D9F50FD4	04B5B886C20D88B57EEA6D8FF882624A4AC1E51D	DC1D54DAB6EC8C00F70137927504E4F222C8395F10760B6BEECFCFA94E08249F
Chrome Cache Entry: 99	ASCII text, with very long lines (1572)	6685A8CE160255174589BD5572450757	2F9EFE2561507C39254B3971F29650C5E4700E0C	4D5AF2BDB6CBC6FF0B5FC9ADA7067676ECBBEAA8A4FA0C5F54B44CD1ABCB0165

Phishing

Source: https://signin.acep.org/idp/Account/Login?ReturnUrl=%2fidp%2fSAML%2fSSOService&sp=https://idp.accreditor.com:8443/realms/ACEP

HTTP Parser: Please send an e-mail message to <a href='mailto:membership@acep.org'>membership@acep.org</a>. You may also call 800-798-1822, ext. 5 for Member Care Center.

Source: https://idp.accreditor.com:8443/realms/ACEP/broker/ACEP/login?session_code=t-28va_hgtXawpLA1MIwY_koblECmRrRIgsppjZhbQs&client_id=survey_spa&tab_id=1R2-RyxCrK4&client_data=eyJydSI6Imh0dHBzOi8vYWNlcC5hY2NyZWRpdG9yLmNvbS9sb2dpbi9jYWxsYmFjayIsInJ0IjoiY29kZSIsInJtIjoiZnJhZ21lbnQiLCJzdCI6ImJlZDJiYjlmLTBmNDktNGU0MC1iMmRjLWE5YmQ4OGZhMzUzMyJ9

HTTP Parser: Form action: https://signin.acep.org/idp/SAML/SSOService accreditor acep

Source: https://idp.accreditor.com:8443/realms/ACEP/broker/ACEP/login?session_code=t-28va_hgtXawpLA1MIwY_koblECmRrRIgsppjZhbQs&client_id=survey_spa&tab_id=1R2-RyxCrK4&client_data=eyJydSI6Imh0dHBzOi8vYWNlcC5hY2NyZWRpdG9yLmNvbS9sb2dpbi9jYWxsYmFjayIsInJ0IjoiY29kZSIsInJtIjoiZnJhZ21lbnQiLCJzdCI6ImJlZDJiYjlmLTBmNDktNGU0MC1iMmRjLWE5YmQ4OGZhMzUzMyJ9

HTTP Parser: Number of links: 0

Source: https://idp.accreditor.com:8443/realms/ACEP/broker/ACEP/login?session_code=t-28va_hgtXawpLA1MIwY_koblECmRrRIgsppjZhbQs&client_id=survey_spa&tab_id=1R2-RyxCrK4&client_data=eyJydSI6Imh0dHBzOi8vYWNlcC5hY2NyZWRpdG9yLmNvbS9sb2dpbi9jYWxsYmFjayIsInJ0IjoiY29kZSIsInJtIjoiZnJhZ21lbnQiLCJzdCI6ImJlZDJiYjlmLTBmNDktNGU0MC1iMmRjLWE5YmQ4OGZhMzUzMyJ9

HTTP Parser: Base64 decoded: {"ru":"https://acep.accreditor.com/login/callback","rt":"code","rm":"fragment","st":"bed2bb9f-0f49-4e40-b2dc-a9bd88fa3533"}

Source: https://idp.accreditor.com:8443/realms/ACEP/broker/ACEP/login?session_code=t-28va_hgtXawpLA1MIwY_koblECmRrRIgsppjZhbQs&client_id=survey_spa&tab_id=1R2-RyxCrK4&client_data=eyJydSI6Imh0dHBzOi8vYWNlcC5hY2NyZWRpdG9yLmNvbS9sb2dpbi9jYWxsYmFjayIsInJ0IjoiY29kZSIsInJtIjoiZnJhZ21lbnQiLCJzdCI6ImJlZDJiYjlmLTBmNDktNGU0MC1iMmRjLWE5YmQ4OGZhMzUzMyJ9

HTTP Parser: Title: Sign in to ACEP does not match URL

Source: https://signin.acep.org/idp/Account/Login?ReturnUrl=%2fidp%2fSAML%2fSSOService&sp=https://idp.accreditor.com:8443/realms/ACEP

HTTP Parser: <input type="password" .../> found

Source: https://signin.acep.org/idp/Account/Login?ReturnUrl=%2fidp%2fSAML%2fSSOService&sp=https://idp.accreditor.com:8443/realms/ACEP

HTTP Parser: No favicon

Source: https://idp.accreditor.com:8443/realms/ACEP/broker/ACEP/login?session_code=t-28va_hgtXawpLA1MIwY_koblECmRrRIgsppjZhbQs&client_id=survey_spa&tab_id=1R2-RyxCrK4&client_data=eyJydSI6Imh0dHBzOi8vYWNlcC5hY2NyZWRpdG9yLmNvbS9sb2dpbi9jYWxsYmFjayIsInJ0IjoiY29kZSIsInJtIjoiZnJhZ21lbnQiLCJzdCI6ImJlZDJiYjlmLTBmNDktNGU0MC1iMmRjLWE5YmQ4OGZhMzUzMyJ9	HTTP Parser: No <meta name="author".. found
Source: https://signin.acep.org/idp/Account/Login?ReturnUrl=%2fidp%2fSAML%2fSSOService&sp=https://idp.accreditor.com:8443/realms/ACEP	HTTP Parser: No <meta name="author".. found

Source: https://idp.accreditor.com:8443/realms/ACEP/broker/ACEP/login?session_code=t-28va_hgtXawpLA1MIwY_koblECmRrRIgsppjZhbQs&client_id=survey_spa&tab_id=1R2-RyxCrK4&client_data=eyJydSI6Imh0dHBzOi8vYWNlcC5hY2NyZWRpdG9yLmNvbS9sb2dpbi9jYWxsYmFjayIsInJ0IjoiY29kZSIsInJtIjoiZnJhZ21lbnQiLCJzdCI6ImJlZDJiYjlmLTBmNDktNGU0MC1iMmRjLWE5YmQ4OGZhMzUzMyJ9	HTTP Parser: No <meta name="copyright".. found
Source: https://signin.acep.org/idp/Account/Login?ReturnUrl=%2fidp%2fSAML%2fSSOService&sp=https://idp.accreditor.com:8443/realms/ACEP	HTTP Parser: No <meta name="copyright".. found

Compliance

Source: unknown

HTTPS traffic detected: 23.206.229.226:443 -> 192.168.2.8:49747 version: TLS 1.0

Software Vulnerabilities

Source: chrome.exe

Memory has grown: Private usage: 0MB later: 33MB

Networking

Source: unknown

HTTPS traffic detected: 23.206.229.226:443 -> 192.168.2.8:49747 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /idp/Account/Login?ReturnUrl=%2fidp%2fSAML%2fSSOService&sp=https://idp.accreditor.com:8443/realms/ACEP HTTP/1.1Host: signin.acep.orgConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=czv1t3g4wguzeq1xqfg5tcz5; SAML_SessionId=17a22497-9b52-4aea-9a39-d10cf2b0a709; AWSELB=FF158FE71C9A1A5DB86EA18188E1A82F856B389D4C5AC9FC0722AB58C0EB9D7F8A8F0DA0495E061B8B53CBA0482BD899E047670D581B4BC15A671299A7361D81BD2417DB5A; AWSELBCORS=FF158FE71C9A1A5DB86EA18188E1A82F856B389D4C5AC9FC0722AB58C0EB9D7F8A8F0DA0495E061B8B53CBA0482BD899E047670D581B4BC15A671299A7361D81BD2417DB5A
Source: global traffic	HTTP traffic detected: GET /idp/Shared/Plugins/bootstrap/css/bootstrap?v=vswpsa-6cYDdkhEXxzMMZINvA1I-oLa95OwEW8wuIGs1 HTTP/1.1Host: signin.acep.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://signin.acep.org/idp/Account/Login?ReturnUrl=%2fidp%2fSAML%2fSSOService&sp=https://idp.accreditor.com:8443/realms/ACEPAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=czv1t3g4wguzeq1xqfg5tcz5; SAML_SessionId=17a22497-9b52-4aea-9a39-d10cf2b0a709; AWSELB=FF158FE71C9A1A5DB86EA18188E1A82F856B389D4C5AC9FC0722AB58C0EB9D7F8A8F0DA0495E061B8B53CBA0482BD899E047670D581B4BC15A671299A7361D81BD2417DB5A; AWSELBCORS=FF158FE71C9A1A5DB86EA18188E1A82F856B389D4C5AC9FC0722AB58C0EB9D7F8A8F0DA0495E061B8B53CBA0482BD899E047670D581B4BC15A671299A7361D81BD2417DB5A
Source: global traffic	HTTP traffic detected: GET /idp/shared/plugins/font-awesome/css/fonts?v=X_airX47mKrD6g-ole8bweSNDfy9OJ22oLvff2HBjqA1 HTTP/1.1Host: signin.acep.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://signin.acep.org/idp/Account/Login?ReturnUrl=%2fidp%2fSAML%2fSSOService&sp=https://idp.accreditor.com:8443/realms/ACEPAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=czv1t3g4wguzeq1xqfg5tcz5; SAML_SessionId=17a22497-9b52-4aea-9a39-d10cf2b0a709; AWSELB=FF158FE71C9A1A5DB86EA18188E1A82F856B389D4C5AC9FC0722AB58C0EB9D7F8A8F0DA0495E061B8B53CBA0482BD899E047670D581B4BC15A671299A7361D81BD2417DB5A; AWSELBCORS=FF158FE71C9A1A5DB86EA18188E1A82F856B389D4C5AC9FC0722AB58C0EB9D7F8A8F0DA0495E061B8B53CBA0482BD899E047670D581B4BC15A671299A7361D81BD2417DB5A
Source: global traffic	HTTP traffic detected: GET /idp/bundles/js/modernizr?v=_crq2QUT7I_NAMAaEv7T-Hgr0jkqYYHmaNBKKo2em_Q1 HTTP/1.1Host: signin.acep.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://signin.acep.org/idp/Account/Login?ReturnUrl=%2fidp%2fSAML%2fSSOService&sp=https://idp.accreditor.com:8443/realms/ACEPAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=czv1t3g4wguzeq1xqfg5tcz5; SAML_SessionId=17a22497-9b52-4aea-9a39-d10cf2b0a709; AWSELB=FF158FE71C9A1A5DB86EA18188E1A82F856B389D4C5AC9FC0722AB58C0EB9D7F8A8F0DA0495E061B8B53CBA0482BD899E047670D581B4BC15A671299A7361D81BD2417DB5A; AWSELBCORS=FF158FE71C9A1A5DB86EA18188E1A82F856B389D4C5AC9FC0722AB58C0EB9D7F8A8F0DA0495E061B8B53CBA0482BD899E047670D581B4BC15A671299A7361D81BD2417DB5A
Source: global traffic	HTTP traffic detected: GET /idp/bundles/js/jquery?v=jphFfUbP7Hvea2DMaBYOvcAOrrN865neaas9rlTBs-c1 HTTP/1.1Host: signin.acep.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://signin.acep.org/idp/Account/Login?ReturnUrl=%2fidp%2fSAML%2fSSOService&sp=https://idp.accreditor.com:8443/realms/ACEPAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=czv1t3g4wguzeq1xqfg5tcz5; SAML_SessionId=17a22497-9b52-4aea-9a39-d10cf2b0a709; AWSELB=FF158FE71C9A1A5DB86EA18188E1A82F856B389D4C5AC9FC0722AB58C0EB9D7F8A8F0DA0495E061B8B53CBA0482BD899E047670D581B4BC15A671299A7361D81BD2417DB5A; AWSELBCORS=FF158FE71C9A1A5DB86EA18188E1A82F856B389D4C5AC9FC0722AB58C0EB9D7F8A8F0DA0495E061B8B53CBA0482BD899E047670D581B4BC15A671299A7361D81BD2417DB5A
Source: global traffic	HTTP traffic detected: GET /globalstyles/css/acep.css HTTP/1.1Host: webapps.acep.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://signin.acep.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /globalstyles/images/acep-logo.png HTTP/1.1Host: webapps.acep.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signin.acep.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /idp/bundles/js/modernizr?v=_crq2QUT7I_NAMAaEv7T-Hgr0jkqYYHmaNBKKo2em_Q1 HTTP/1.1Host: signin.acep.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=czv1t3g4wguzeq1xqfg5tcz5; SAML_SessionId=17a22497-9b52-4aea-9a39-d10cf2b0a709; AWSELB=FF158FE71C9A1A5DB86EA18188E1A82F856B389D4C5AC9FC0722AB58C0EB9D7F8A8F0DA0495E061B8B53CBA0482BD899E047670D581B4BC15A671299A7361D81BD2417DB5A; AWSELBCORS=FF158FE71C9A1A5DB86EA18188E1A82F856B389D4C5AC9FC0722AB58C0EB9D7F8A8F0DA0495E061B8B53CBA0482BD899E047670D581B4BC15A671299A7361D81BD2417DB5A
Source: global traffic	HTTP traffic detected: GET /idp/bundles/bootstrap?v=MeX_bfHhK447gKEr2glhx0uNfW_XPCNTRrilZVba_081 HTTP/1.1Host: signin.acep.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://signin.acep.org/idp/Account/Login?ReturnUrl=%2fidp%2fSAML%2fSSOService&sp=https://idp.accreditor.com:8443/realms/ACEPAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=czv1t3g4wguzeq1xqfg5tcz5; SAML_SessionId=17a22497-9b52-4aea-9a39-d10cf2b0a709; AWSELB=FF158FE71C9A1A5DB86EA18188E1A82F856B389D4C5AC9FC0722AB58C0EB9D7F8A8F0DA0495E061B8B53CBA0482BD899E047670D581B4BC15A671299A7361D81BD2417DB5A; AWSELBCORS=FF158FE71C9A1A5DB86EA18188E1A82F856B389D4C5AC9FC0722AB58C0EB9D7F8A8F0DA0495E061B8B53CBA0482BD899E047670D581B4BC15A671299A7361D81BD2417DB5A
Source: global traffic	HTTP traffic detected: GET /idp/bundles/js/jquery?v=jphFfUbP7Hvea2DMaBYOvcAOrrN865neaas9rlTBs-c1 HTTP/1.1Host: signin.acep.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=czv1t3g4wguzeq1xqfg5tcz5; SAML_SessionId=17a22497-9b52-4aea-9a39-d10cf2b0a709; AWSELB=FF158FE71C9A1A5DB86EA18188E1A82F856B389D4C5AC9FC0722AB58C0EB9D7F8A8F0DA0495E061B8B53CBA0482BD899E047670D581B4BC15A671299A7361D81BD2417DB5A; AWSELBCORS=FF158FE71C9A1A5DB86EA18188E1A82F856B389D4C5AC9FC0722AB58C0EB9D7F8A8F0DA0495E061B8B53CBA0482BD899E047670D581B4BC15A671299A7361D81BD2417DB5A
Source: global traffic	HTTP traffic detected: GET /globalstyles/images/acep-logo.png HTTP/1.1Host: webapps.acep.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSELB=FF158FE71C9A1A5DB86EA18188E1A82F856B389D4C5AC9FC0722AB58C0EB9D7F8A8F0DA049705593CA73A42706CE2B8AE11110C2271B4BC15A671299A7361D81BD2417DB5A; AWSELBCORS=FF158FE71C9A1A5DB86EA18188E1A82F856B389D4C5AC9FC0722AB58C0EB9D7F8A8F0DA049705593CA73A42706CE2B8AE11110C2271B4BC15A671299A7361D81BD2417DB5A
Source: global traffic	HTTP traffic detected: GET /idp/bundles/bootstrap?v=MeX_bfHhK447gKEr2glhx0uNfW_XPCNTRrilZVba_081 HTTP/1.1Host: signin.acep.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=czv1t3g4wguzeq1xqfg5tcz5; SAML_SessionId=17a22497-9b52-4aea-9a39-d10cf2b0a709; AWSELB=FF158FE71C9A1A5DB86EA18188E1A82F856B389D4C5AC9FC0722AB58C0EB9D7F8A8F0DA0495E061B8B53CBA0482BD899E047670D581B4BC15A671299A7361D81BD2417DB5A; AWSELBCORS=FF158FE71C9A1A5DB86EA18188E1A82F856B389D4C5AC9FC0722AB58C0EB9D7F8A8F0DA0495E061B8B53CBA0482BD899E047670D581B4BC15A671299A7361D81BD2417DB5A
Source: global traffic	HTTP traffic detected: GET /globalstyles/images/acep_logo.svg HTTP/1.1Host: webapps.acep.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://webapps.acep.org/globalstyles/css/acep.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSELB=FF158FE71C9A1A5DB86EA18188E1A82F856B389D4C5AC9FC0722AB58C0EB9D7F8A8F0DA049705593CA73A42706CE2B8AE11110C2271B4BC15A671299A7361D81BD2417DB5A; AWSELBCORS=FF158FE71C9A1A5DB86EA18188E1A82F856B389D4C5AC9FC0722AB58C0EB9D7F8A8F0DA049705593CA73A42706CE2B8AE11110C2271B4BC15A671299A7361D81BD2417DB5A
Source: global traffic	HTTP traffic detected: GET /idp/shared/plugins/font-awesome/fonts/fontawesome-webfont.woff?v=4.2.0 HTTP/1.1Host: signin.acep.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signin.acep.orgsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://signin.acep.org/idp/shared/plugins/font-awesome/css/fonts?v=X_airX47mKrD6g-ole8bweSNDfy9OJ22oLvff2HBjqA1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=czv1t3g4wguzeq1xqfg5tcz5; SAML_SessionId=17a22497-9b52-4aea-9a39-d10cf2b0a709; AWSELB=FF158FE71C9A1A5DB86EA18188E1A82F856B389D4C5AC9FC0722AB58C0EB9D7F8A8F0DA0495E061B8B53CBA0482BD899E047670D581B4BC15A671299A7361D81BD2417DB5A; AWSELBCORS=FF158FE71C9A1A5DB86EA18188E1A82F856B389D4C5AC9FC0722AB58C0EB9D7F8A8F0DA0495E061B8B53CBA0482BD899E047670D581B4BC15A671299A7361D81BD2417DB5A
Source: global traffic	HTTP traffic detected: GET /globalstyles/images/acep_logo.svg HTTP/1.1Host: webapps.acep.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSELB=FF158FE71C9A1A5DB86EA18188E1A82F856B389D4C5AC9FC0722AB58C0EB9D7F8A8F0DA049705593CA73A42706CE2B8AE11110C2271B4BC15A671299A7361D81BD2417DB5A; AWSELBCORS=FF158FE71C9A1A5DB86EA18188E1A82F856B389D4C5AC9FC0722AB58C0EB9D7F8A8F0DA049705593CA73A42706CE2B8AE11110C2271B4BC15A671299A7361D81BD2417DB5A
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: signin.acep.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signin.acep.org/idp/Account/Login?ReturnUrl=%2fidp%2fSAML%2fSSOService&sp=https://idp.accreditor.com:8443/realms/ACEPAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=czv1t3g4wguzeq1xqfg5tcz5; SAML_SessionId=17a22497-9b52-4aea-9a39-d10cf2b0a709; AWSELB=FF158FE71C9A1A5DB86EA18188E1A82F856B389D4C5AC9FC0722AB58C0EB9D7F8A8F0DA0495E061B8B53CBA0482BD899E047670D581B4BC15A671299A7361D81BD2417DB5A; AWSELBCORS=FF158FE71C9A1A5DB86EA18188E1A82F856B389D4C5AC9FC0722AB58C0EB9D7F8A8F0DA0495E061B8B53CBA0482BD899E047670D581B4BC15A671299A7361D81BD2417DB5A
Source: global traffic	HTTP traffic detected: GET /RapidSSLTLSRSACAG1.crt HTTP/1.1Host: cacerts.rapidssl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: idp.accreditor.com
Source: global traffic	DNS traffic detected: DNS query: _8443._https.idp.accreditor.com
Source: global traffic	DNS traffic detected: DNS query: cacerts.rapidssl.com
Source: global traffic	DNS traffic detected: DNS query: signin.acep.org
Source: global traffic	DNS traffic detected: DNS query: webapps.acep.org

Source: unknown

HTTP traffic detected: POST /idp/SAML/SSOService HTTP/1.1Host: signin.acep.orgConnection: keep-aliveContent-Length: 1090Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1Origin: nullContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlDate: Wed, 26 Feb 2025 09:04:43 GMTServer: Microsoft-IIS/10.0X-Powered-By: ASP.NETContent-Length: 1245Connection: Close

Source: chromecache_96.2.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootG2.crl0c
Source: chromecache_102.2.dr	String found in binary or memory: http://mdo.github.io/table-grid)
Source: chromecache_96.2.dr	String found in binary or memory: http://ocsp.digicert.com0B
Source: chromecache_102.2.dr	String found in binary or memory: https://chieffancypants.github.io/angular-loading-bar
Source: chromecache_102.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Open
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqW106F15M.woff2)
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWt06F15M.woff2)
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtE6F15M.woff2)
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtU6F15M.woff2)
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtk6F15M.woff2)
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWu06F15M.woff2)
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2)
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuk6F15M.woff2)
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWvU6F15M.woff2)
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWxU6F15M.woff2)
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v23/z7NFdQDnbTkabZAIOl9il_O6KJj73e7Ff0GmDuHMR6WR.woff2
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v23/z7NFdQDnbTkabZAIOl9il_O6KJj73e7Ff0GmDuXMRw.woff2)
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v23/z7NFdQDnbTkabZAIOl9il_O6KJj73e7Ff0GmDubMR6WR.woff2
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v23/z7NFdQDnbTkabZAIOl9il_O6KJj73e7Ff0GmDujMR6WR.woff2
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v23/z7NFdQDnbTkabZAIOl9il_O6KJj73e7Ff0GmDunMR6WR.woff2
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v23/z7NFdQDnbTkabZAIOl9il_O6KJj73e7Ff0GmDurMR6WR.woff2
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v23/z7NFdQDnbTkabZAIOl9il_O6KJj73e7Ff0GmDuvMR6WR.woff2
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v23/z7NFdQDnbTkabZAIOl9il_O6KJj73e7Ff1GhDuHMR6WR.woff2
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v23/z7NFdQDnbTkabZAIOl9il_O6KJj73e7Ff1GhDuXMRw.woff2)
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v23/z7NFdQDnbTkabZAIOl9il_O6KJj73e7Ff1GhDubMR6WR.woff2
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v23/z7NFdQDnbTkabZAIOl9il_O6KJj73e7Ff1GhDujMR6WR.woff2
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v23/z7NFdQDnbTkabZAIOl9il_O6KJj73e7Ff1GhDunMR6WR.woff2
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v23/z7NFdQDnbTkabZAIOl9il_O6KJj73e7Ff1GhDurMR6WR.woff2
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v23/z7NFdQDnbTkabZAIOl9il_O6KJj73e7Ff1GhDuvMR6WR.woff2
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v23/z7NHdQDnbTkabZAIOl9il_O6KJj73e7Fd_-7suD8Qb2V6As.wo
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v23/z7NHdQDnbTkabZAIOl9il_O6KJj73e7Fd_-7suD8Rb2V.woff2
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v23/z7NHdQDnbTkabZAIOl9il_O6KJj73e7Fd_-7suD8Rr2V6As.wo
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v23/z7NHdQDnbTkabZAIOl9il_O6KJj73e7Fd_-7suD8S72V6As.wo
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v23/z7NHdQDnbTkabZAIOl9il_O6KJj73e7Fd_-7suD8SL2V6As.wo
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v23/z7NHdQDnbTkabZAIOl9il_O6KJj73e7Fd_-7suD8Sb2V6As.wo
Source: chromecache_99.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v23/z7NHdQDnbTkabZAIOl9il_O6KJj73e7Fd_-7suD8Sr2V6As.wo
Source: chromecache_102.2.dr	String found in binary or memory: https://github.com/nickpettit/glide
Source: chromecache_84.2.dr	String found in binary or memory: https://idp.accreditor.com:8443/realms/ACEP
Source: chromecache_102.2.dr	String found in binary or memory: https://s3.amazonaws.com/acep-assets/global/ACEP_Logo_WhiteBox.svg)
Source: chromecache_84.2.dr	String found in binary or memory: https://server.iad.liveperson.net/hc/55780551/?cmd=mTagRepstate&site=55780551&buttonID=2&divID=lpBut
Source: chromecache_116.2.dr	String found in binary or memory: https://signin.acep.org/idp/SAML/SSOService
Source: chromecache_84.2.dr	String found in binary or memory: https://webapps.acep.org/globalstyles/css/acep.css
Source: chromecache_84.2.dr	String found in binary or memory: https://webapps.acep.org/globalstyles/images/acep-logo.png
Source: chromecache_84.2.dr	String found in binary or memory: https://webapps.acep.org/membership/account/#home?org=ACEP
Source: chromecache_84.2.dr	String found in binary or memory: https://webapps.acep.org/membership/account/#signin-help?org=ACEP
Source: chromecache_84.2.dr	String found in binary or memory: https://www.acep.org
Source: chromecache_96.2.dr	String found in binary or memory: https://www.digicert.com/CPS0

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

System Summary

Source: classification engine

Classification label: clean3.win@17/69@16/6

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2200 --field-trial-handle=1996,i,6191952465394955606,14156056351467018374,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://idp.accreditor.com:8443/realms/ACEP/protocol/openid-connect/auth?client_id=survey_spa&redirect_uri=https%3A%2F%2Facep.accreditor.com%2Flogin%2Fcallback&state=bed2bb9f-0f49-4e40-b2dc-a9bd88fa3533&response_mode=fragment&response_type=code&scope=openid&nonce=6d8857dc-4652-434f-938f-d5340af9b3da&kc_idp_hint=ACEP"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2200 --field-trial-handle=1996,i,6191952465394955606,14156056351467018374,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Boot Survival

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk			Jump to behavior