Loading... Additional Content is being loaded

Windows Analysis Report
https://millerinsurance--uat.sandbox.my.salesforce.com/

Overview

General Information

Sample URL:	https://millerinsurance--uat.sandbox.my.salesforce.com/
Analysis ID:	1531604

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

HTML body contains low number of good links

HTML page contains hidden javascript code

Stores files to the Windows start menu directory

Classification

Signatures

HTML body contains low number of good links

Source: https://millerinsurance--uat.sandbox.my.salesforce.com/

HTTP Parser: Number of links: 1

HTML page contains hidden javascript code

Source: https://millerinsurance--uat.sandbox.my.salesforce.com/

HTTP Parser: Base64 decoded: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" width="47.971" height="47.971" viewBox="0 0 47.971 47.971" style="enable-background:new 0 0 47.971 47.971;" xml:space="preserve"><g><path d="M28.228,23.986L...

Source: https://millerinsurance--uat.sandbox.my.salesforce.com/	HTTP Parser: Iframe src: https://c.salesforce.com/login-messages/promos.html
Source: https://millerinsurance--uat.sandbox.my.salesforce.com/	HTTP Parser: Iframe src: https://test.salesforce.com/login/sessionserver212.html

Source: https://millerinsurance--uat.sandbox.my.salesforce.com/

HTTP Parser: <input type="password" .../> found

Source: https://millerinsurance--uat.sandbox.my.salesforce.com/	HTTP Parser: No favicon
Source: https://millerinsurance--uat.sandbox.my.salesforce.com/	HTTP Parser: No favicon
Source: https://millerinsurance--uat.sandbox.my.salesforce.com/	HTTP Parser: No favicon
Source: https://millerinsurance--uat.sandbox.my.salesforce.com/	HTTP Parser: No favicon
Source: https://millerinsurance--uat.sandbox.my.salesforce.com/	HTTP Parser: No favicon
Source: https://millerinsurance--uat.sandbox.my.salesforce.com/	HTTP Parser: No favicon

Source: https://millerinsurance--uat.sandbox.my.salesforce.com/

HTTP Parser: No <meta name="author".. found

Source: https://millerinsurance--uat.sandbox.my.salesforce.com/

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.60.203.209:443 -> 192.168.2.16:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.60.203.209:443 -> 192.168.2.16:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.16:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.16:49873 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: millerinsurance--uat.sandbox.my.salesforce.com
Source: global traffic	DNS traffic detected: DNS query: test.salesforce.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: c.salesforce.com
Source: global traffic	DNS traffic detected: DNS query: cdn.evgnet.com
Source: global traffic	DNS traffic detected: DNS query: salesforce.us-1.evergage.com
Source: global traffic	DNS traffic detected: DNS query: www.salesforce.com
Source: global traffic	DNS traffic detected: DNS query: a.sfdcstatic.com
Source: global traffic	DNS traffic detected: DNS query: geolocation.onetrust.com
Source: global traffic	DNS traffic detected: DNS query: 11463663.fls.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: adservice.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866

Source: unknown	HTTPS traffic detected: 23.60.203.209:443 -> 192.168.2.16:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.60.203.209:443 -> 192.168.2.16:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.16:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.16:49873 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@18/70@40/294

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=2004,i,13107594475335030216,4778087365314127128,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://millerinsurance--uat.sandbox.my.salesforce.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=2004,i,13107594475335030216,4778087365314127128,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Source: Window Recorder

Window detected: More than 3 window changes detected

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Screenshots

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
151.101.64.114	cdn.evgnet.com	United States		54113	FASTLYUS	false
172.217.18.14	unknown	United States		15169	GOOGLEUS	false
142.250.185.200	unknown	United States		15169	GOOGLEUS	false
142.250.185.166	ad.doubleclick.net	United States		15169	GOOGLEUS	false
104.18.32.137	unknown	United States		13335	CLOUDFLARENETUS	false
142.250.185.163	unknown	United States		15169	GOOGLEUS	false
184.86.103.199	unknown	United States		20940	AKAMAI-ASN1EU	false
142.250.185.162	td.doubleclick.net	United States		15169	GOOGLEUS	false
54.164.43.100	salesforce.us-1.evergage.com	United States		14618	AMAZON-AESUS	false
184.86.103.196	unknown	United States		20940	AKAMAI-ASN1EU	false
142.250.184.200	unknown	United States		15169	GOOGLEUS	false
160.8.235.0	test.l2.salesforce.com	Sweden		14340	SALESFORCEUS	false
142.250.186.138	unknown	United States		15169	GOOGLEUS	false
142.250.186.34	adservice.google.com	United States		15169	GOOGLEUS	false
142.250.185.68	www.google.com	United States		15169	GOOGLEUS	false
142.250.184.230	unknown	United States		15169	GOOGLEUS	false
1.1.1.1	unknown	Australia		13335	CLOUDFLARENETUS	false
160.8.238.0	unknown	Sweden		14340	SALESFORCEUS	false
172.64.155.119	geolocation.onetrust.com	United States		13335	CLOUDFLARENETUS	false
35.158.127.51	st1.edge.sfdc-yzvdd4.edge2.salesforce.com	United States		16509	AMAZON-02US	false
64.233.167.84	unknown	United States		15169	GOOGLEUS	false
2.16.1.243	unknown	European Union		20940	AKAMAI-ASN1EU	false
239.255.255.250	unknown	Reserved		unknown	unknown	false
142.250.186.142	unknown	United States		15169	GOOGLEUS	false
142.250.184.238	unknown	United States		15169	GOOGLEUS	false
142.250.186.102	dart.l.doubleclick.net	United States		15169	GOOGLEUS	false
172.217.16.195	unknown	United States		15169	GOOGLEUS	false
142.250.186.66	unknown	United States		15169	GOOGLEUS	false

Private

IP
192.168.2.16

Contacted Domains

Name	IP	Active
dart.l.doubleclick.net	142.250.186.102	true
cdn.evgnet.com	151.101.64.114	true
ad.doubleclick.net	142.250.185.166	true
test.l2.salesforce.com	160.8.235.0	true
www.google.com	142.250.185.68	true
td.doubleclick.net	142.250.185.162	true
adservice.google.com	142.250.186.34	true
salesforce.us-1.evergage.com	54.164.43.100	true
geolocation.onetrust.com	172.64.155.119	true
st1.edge.sfdc-yzvdd4.edge2.salesforce.com	35.158.127.51	true
test.salesforce.com	unknown	unknown
11463663.fls.doubleclick.net	unknown	unknown
millerinsurance--uat.sandbox.my.salesforce.com	unknown	unknown
c.salesforce.com	unknown	unknown
a.sfdcstatic.com	unknown	unknown
www.salesforce.com	unknown	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://millerinsurance--uat.sandbox.my.salesforce.com/	false		unknown

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 11 09:48:38 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	87EA569E6B2231258541DC45F0F1EFE6	1282BF6A00076FA632411D089E39CE7BEEC6992D	D69F6EA3A5D59184468AABE21FE845C1B7EBE7BBCADF1A1082CFAC5A45D3E621
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 11 09:48:38 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	07C34CF62FC3AC566FD881F2AC268849	6C1E7844C4014C5BE92E9FEC944EE84F23F777EC	7D36AFB2291B4F959F227E1631F5902F939C13CFB3F9B07104739BDCA2C97F73
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	3DF66C5C21E49EDC8EAF3BA533ACCBD6	88CD6B2541C201000AC2C8534F1B113FEF3FE147	A87813210BAD3CA292BF262E6FC7F30CDFD85A9530A509EC8914469316947750
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 11 09:48:38 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	9CDE522B8AF3496D5B939877079B672F	07F040DBB571D960696886287ECC0501DCE8F285	EA6F89746EDF8B75D1B47A1586279072563946039F06D3D536CA0F11A5796CA0
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 11 09:48:38 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	33A3829D6FCFAF27229A77C3ED432F28	14705319DB9C78AE895B6226A7B158F95A1D04A4	FF60CD0B64CED5F8F0DB0671A2ECFE6C538BB8A216A8CBC9E0A1E7B4CB071747
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 11 09:48:38 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	1778B88BB95D1D11E2EAED6A1507AFEF	953B6DE014EDBDA5BD85E21EB17D470E29A5DD03	FFDEF939B06601543032C505610EA475E1055F36D2242F6C1C832067F6352DDD
Chrome Cache Entry: 115	ASCII text, with very long lines (1077)	25DD784C516DF5FC282A0C14E87D75E6	584C0BF7919E2F0AD95406B80B4DA38DCEFBDABB	1FB687F22BDFF0CA721F72B316FD24FE5CDB287BE46DEEC151F9F5C91DC036DF
Chrome Cache Entry: 119	Web Open Font Format (Version 2), TrueType, length 27736, version 1.0	F4C092CDA9A56B8E26CC307F208949B4	DAC76C1196988545BC7C7609D609FDC58CF079E5	B7DF2D6CB9D0ECDA707A1DE1302B3C9D9BDA16247DC382E696579A8308D49771
Chrome Cache Entry: 120	Web Open Font Format (Version 2), TrueType, length 27684, version 1.655	AA41AFDACEB8B78C56529555448BCF44	03D934B119785F6130103507ECFF57EB19F05BE9	6F2251079DB9FDE7D456BA66A9294899F3024DAC928BEC71B3CE42E1568F304F
Chrome Cache Entry: 121	PNG image data, 33 x 43, 8-bit/color RGBA, non-interlaced	0B76CFE389E0720A22E73E9A1F63351F	C3F0A7E6547E3997F8C9574A011005DE748181EE	1F21E5ACA5794286008FF7BD98038E525E047E36490747681A6EA396A52FD24B
Chrome Cache Entry: 122	ASCII text, with no line terminators	DD9B395C741CE2784096E26619E14910	D691792F378240F80919BEDA895262C509D22B75	C084B47104C493FB377B6D35D8C08DF67D773F6DCF8294C0A7360710CD8CACBD
Chrome Cache Entry: 127	ASCII text, with no line terminators	1AE6B27EBA211F4CFCD99B904DA88BB7	53CA38F083C4A21F2EDA633EC304CB4582EDEDA2	961635B4E9661208EC118D285B3AC1DBF9F3CC96CDDC97F30E55CD2C6566448C
Chrome Cache Entry: 128	ASCII text, with very long lines (25649)	191642E689E8D1A48B942F4EB05A6BD7	CCF4028384AE9D2D7D189684E1F6C4E74196D39D	BFFC65F144AA766DDC7E135BC01B50F379F2541405E336C99BED9830748F1846
Chrome Cache Entry: 129	ASCII text, with very long lines (65316)	14D67167E09775DAABA032E4B5C61062	AEAC6D9CA79E356BDED1EBCF695A53472BCC97E6	7A755BE75F72C8A7BB02C9BDCAEE63B468B78A4097B8CE2B648081EFD6B68989
Chrome Cache Entry: 130	ASCII text, with very long lines (550)	4A192B590A2C2926FB000264370C0588	645FB2679EDCB7448BD051EE2447AA23B73E243B	06BFF916CEFA0E2D5595EE421E0E8652F349E85C0A14A6E6921F4368200A9629
Chrome Cache Entry: 131	ASCII text, with very long lines (28585), with no line terminators	D52E7DB2342BAC011DE5368B8A2BF23F	D461053446D65208B0293B5A7D1166F451FDAED8	499655A5DCD35AB83403416B2CE987003E96DE7108AF3DC1F617B0450C71740C
Chrome Cache Entry: 132	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 840x1050, components 3	C40450C729A172664F33EA6F35A54AE3	51CF54E556B395E1C23309AB112D84CC3F1EEB72	FE06A0CF147E4BB1FE9B5F398DB8E5DD133FDDCC437E0FE532507B3691659B77
Chrome Cache Entry: 133	ASCII text, with very long lines (7711)	2B301EF8CF0F0E02CDAA2B149724BE02	B012EA4FAF6DF1F1A6789C90ACCB38821D90E42B	ADF2524F730260A464177AEF8E789FA953D8DA3B7C8D7A3B861D5B8BB951E265
Chrome Cache Entry: 134	ASCII text, with very long lines (65536), with no line terminators	94A872D47033C8E61157BAD40E23A633	3837DE6789E702C07EEECAD3ABF60C2CFBB377CD	ED937E1B19D94E363411CBBCB166C97511C800C07F834B417E15A2EACC9D1022
Chrome Cache Entry: 140	JSON data	1910CBC9B9B6F0EB5C9B3F9932451967	DB2B5C95E8E65F3C32A6213DC2CAD3C62180D5BF	FDCC54378CEDF65AFB2ED3F7C5950737BEC3E28E3ABF5A8E5F29596845C3E996
Chrome Cache Entry: 141	PNG image data, 16 x 14, 8-bit/color RGBA, non-interlaced	29E1BE7C54B75FA44284678E1F3A32A9	48EE3E64D70367C071970300E94BF7F5052FB129	BE48EB77224CD798F343705EE369AE4C051525F46AB07C7AC123C23BEABE6D2A
Chrome Cache Entry: 145	ASCII text, with very long lines (65536), with no line terminators	27BDAEE9C74D15A48038005F2CF4CA14	ED1D404CEF56AEC68F77DAB571240202B728D7F0	8B9C330213624EF09750CEDDF1B8284E567EFEFEA64AD13FA1F6855103C04E3B
Chrome Cache Entry: 147	ASCII text, with very long lines (4201)	371A49734F0869D43CB330E05AEAA0C6	D6EE9E67A412CF375591B66112CB56C3EE461CD2	D371AB5E22FFFF9F8A3C1F0DC7E85DCF866C3474924938FEC3A3D416F9189F5E
Chrome Cache Entry: 148	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel	CCDA8DF05E9A37B3131AFD4D451B44EC	ED9D0F9C4224FBD4C768BE237B4B59F27F1B718C	92842FC6C2F66B46F69458C14621FC2ECA5D6C02D7937F9124FE8A3A9A55BC91
Chrome Cache Entry: 149	Unicode text, UTF-8 text, with very long lines (9191), with NEL line terminators	E24FD59D3066FB339AA8D54B8F722205	CBB461D28E26EB3711C4F8A21C0B7CBFD1A5FC6C	0FD094515951481AD5C56871A15A4F3C4167F28DC1F91E302FA25552218D6345
Chrome Cache Entry: 151	ASCII text, with very long lines (558)	CF6EAB064CE4DFA0256A84FDB9607F4B	B1E808D24E487E1A0549B119D6EEB21345898202	6B0F76F52780C5878D8DF47CD689DB96016FEDF092CBEADDC84B8E7CFBBC9349
Chrome Cache Entry: 152	JSON data	B04CD3F8043EF04F417D4B0E4BCBBC03	88F259A4AE3045409B3657E7D7A791D321BA9DCE	59E58524340CD7AD353BE010374B124C242FDDE10A0ED41047FE2FD4BB9E5A2E
Chrome Cache Entry: 153	ASCII text, with very long lines (7711)	8390907A6DE985FBFCB29EA0DEF3A4C3	2CB41BBD1FC40C3BC8B3ADACF69341FB415A0402	298E5E22BD018A12EA6A2D5519CC4B2A2CAE0A3D14A0A2FBAC714E197C2EFAB3
Chrome Cache Entry: 154	GIF image data, version 89a, 1 x 1	D3E941FE204D0A9CC5B92782BBF882C8	682A77B3DD546B61AE894285128FFBA13A33CF7D	281C5AE8BF152F644E12A943EC5D59681E1950C54FB6C0B3CC77539BF5E69340
Chrome Cache Entry: 155	ASCII text, with very long lines (549)	FD29CB67742C451E57954E9D95F2B9B5	1B1494265D5D13B8970836ACC05A8EA550C2B5F3	5987CB582397E67B5E854014D93AFA4B577095237A4ED5528D04BDD748BA0E35
Chrome Cache Entry: 156	ASCII text, with very long lines (21778), with no line terminators	73BC4067D312180A1B19A4D883F42D6A	AD328A9A572FBEA43F295E7769835FF08F6FF1FD	D3F7B0EC4DE079928A999641E781E80F33597A392A561BC460276DFB4EFB6EEC
Chrome Cache Entry: 157	ASCII text, with no line terminators	951E9158BCE73C569DE70B8E1231E398	EAE5A39A33FEEDDA5BD6E51816B5BFBB9D669931	98BC019FC376E7DCC4605014CE51FEB64FE6B6767C3EAE712CED9AB2AE7D2244
Chrome Cache Entry: 158	ASCII text, with very long lines (651)	CEE8557E8779D371FE722BBCDD3B3EB7	73C8A8E4E812E4BABC0E9937A49DB89841352794	D8A75D918DDD574026D721058790DD07FC7424AD500E3D9F5BE856E921BE08F1
Chrome Cache Entry: 159	ASCII text, with very long lines (511)	AA7120617BE6552D18958A4F2126E31C	AC4CD593A586E9ED6A1E594C6CFD16C29CEFE10C	E1457F4E0FC2F7491437A31828D6354CB60E1F246DFB793878590A7F8A0C73CC
Chrome Cache Entry: 162	HTML document, ASCII text	F1375EF84643A5974D735836E66D3829	A8EA06A865B284D2965AEB5108C445FF53E5A285	DB743DBD91A699D36F6A755AD2C8EEC5CE0D1B3715DF50A651B7C24DE11C1811
Chrome Cache Entry: 165	Unicode text, UTF-8 text, with very long lines (26822), with no line terminators	B85F60EC3F09E45316DA0CCB63ECBDCD	389FDBD5BB343FA445C9BE904E981A93C691E0FE	B809D692A6404CE51D07DAF3EAB0C84F6EE46895B07B9197B11DF82AEEBEF485
Chrome Cache Entry: 166	GIF image data, version 89a, 1 x 1	D89746888DA2D9510B64A9F031EAECD5	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
Chrome Cache Entry: 167	ASCII text, with very long lines (640)	76136BA6E7C9276B178EDC785C389BA7	3BCCBE0D6AC5846C6C5E6C1B064694EF2C67F90A	D5347EC18832F33297C6E5C5C3D9751D3F7601A101F556011ED94F0032316951
Chrome Cache Entry: 168	ASCII text, with no line terminators	48BD60923F8CD5380404127CA1F20A2B	59BF9604B5A0D5FD5F1F0042BD1D03FF940E2C41	F67D04C2C8EA618E369AAC9FF5E81396F7A4D68EF066D24C26CF34DC03B6B7D8
Chrome Cache Entry: 170	HTML document, ASCII text, with no line terminators	C83301425B2AD1D496473A5FF3D9ECCA	941EFB7368E46B27B937D34B07FC4D41DA01B002	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
Chrome Cache Entry: 171	ASCII text, with very long lines (2474), with no line terminators	FF263CADE96158BCC03F7FEE08E278C1	8493E1E4E7987D1A6E288B741EEF44BFEF2A9FB8	C998753ED95EDE814FE148AD1D7144D43227E613826988C8EBD5EEC95110474D
Chrome Cache Entry: 173	Web Open Font Format (Version 2), TrueType, length 27580, version 1.0	3CCB7B03C77BB2A3E91F6A2FB4C211F8	AC4C4DF3C4BCC636190E4F94C7A80B81158D0517	1F1752651ACA663F40E45C60E182172FC426A40DF042098F6E68A56DB2C459F3
Chrome Cache Entry: 174	ASCII text, with very long lines (575)	95987C4FEB9EA689CDF01381184D9537	BC53F45D044CE7F6492232E66C7B144A0EB6C6A2	F4C4D1032D494E86C3BEE40B3631B28E94202F14EA851AC0E60F3609F3EA8918
Chrome Cache Entry: 175	ASCII text, with very long lines (6885)	9246F7FE813155D18E36DB3A4ABABF42	63A9353D43CC7A6C7C4C046173484556E264C5F9	2BF1C8E9548CED9FC3028B24A1FC5954DF024D9EF3F66DBF23AA931FB0499ACB
Chrome Cache Entry: 177	Unicode text, UTF-8 text, with very long lines (34276), with no line terminators	C449AC15E3AB97AAC1301ADD61F0D364	BFE531C19BA4D7D3ABF473DD3434B20093864AEB	73AD599ED225F6DCAD48D37DAD298419BCED042A26458DC98B8A4094E50FEE55
Chrome Cache Entry: 178	ASCII text, with very long lines (13038), with no line terminators	F52DCBECFB9AD3BAFEE09BF811626BFF	A5C124CC4980FF38151EABEF1ED64B52D593A575	351A716A9987B334C576A764FC3807A78116B1049DE78CEE631170A6A828EA03
Chrome Cache Entry: 180	ASCII text, with very long lines (65536), with no line terminators	730E8CF49051050DAD016C07AD1C54F4	57D526FF85FA6B99AB0C7130AB503BBD6F468943	B5B4336DFB3D806BD95205C6BB568E5A1F961ED7D89034449480780F56A40496
Chrome Cache Entry: 181	PNG image data, 398 x 279, 8-bit colormap, non-interlaced	58CE4D66B1C7F253E02D4CAEBEC650A5	B791CE5F8FAC2168CBDF0B46E630D7129C51F83F	4ABCDA617812DF2679C50D148FFE64CC5D8FB5AFD9296E5CBD8970175625FE36
Chrome Cache Entry: 183	ASCII text, with very long lines (6885)	FF7E45E16DD9C7AC92F5223C856089E9	4DE42300C2B65ECE06B7AAE19A6F65483CB02D09	645071AE8AE47E32593263FFDC4916457120675B56F3FB7EB86DEE44D13FCD4F
Chrome Cache Entry: 184	ASCII text, with very long lines (575)	EEDE1B37A00F77C1143E618CF980B866	95388A2520CD89B8C9A837A336688520DEE7EF45	680EE03715036C635C33FDD03F1BA69538ED2AF3F569E2CC901C937653F90F06
Chrome Cache Entry: 185	JSON data	FFAD106072B6FD94E718EA00DDA1D0DF	94E3DA6E21A6223075C4A3C2BED4F840E803152D	8BABAC00AB0E764D6CF68A74D23ED8359ED23228D95C987F310E435A2E792101
Chrome Cache Entry: 186	Web Open Font Format (Version 2), CFF, length 68020, version 0.0	9C63B3C7D486337425FD8EBA72F19B2A	3B55CAF7071E741D43F0979643BFC9903EFF19D5	C9E4FA78C0C98DF6A1903D28156534861220FFABDC6491A028B2D77184B20ABC
Chrome Cache Entry: 187	ASCII text, with very long lines (21058)	A8E29BF94D254431FCE8BF32E1F37B1B	2FC06123924BF8C14DF92F80D62965167F84C94B	57B11ED0FEE3682145CEB1CE91696044B494262A69FAE0DCDA242B3AADB4A134
Chrome Cache Entry: 189	PNG image data, 32 x 32, 8-bit colormap, non-interlaced	1CC6FFEA5AC6B5C6E7D7B6B9B1A01E9F	A4FD54CC5E6CAC7E5FEE6F9832C817D5E58C7C10	DD464055BE78EADEE2D5D3ECC5380600B788883E462D9E77372877DC04110E6D
Chrome Cache Entry: 190	ASCII text, with very long lines (563)	547875D2F9214E977EB884FE01C9DBB6	4A6A7D8B5DE7ACBA7CFAAB4EF72D829886CC0D1B	BAC612E7507FAB8FA55F1B3AC17FC7AA90CA39C6826D22C9602C31F9BB4D271D
Chrome Cache Entry: 192	ASCII text, with very long lines (65451)	2D778FA676B76A6B5CD85070312CDEC1	DE1FB2F9CBFEAE5BD83078BD4AD1C2A004B6F398	619961CC5419607D2024E330D6C57C6574BF7610260FB43362FBBCC800854D5E
Chrome Cache Entry: 197	ASCII text	0B9D10B9AA8E8BFE500B29BBE449D5A3	E0EFB0D64A09FD7B6FCE516EF890A1A459D375CD	7AD3013AE1CC5D73BCFBDD08A0BD274C3A038C67A3AD08C742E0CCEEEEB94E61
Chrome Cache Entry: 198	ASCII text, with very long lines (559)	D2416BA9D293CFEEE10328340F1110AA	E9B6AF4500700BA97482FED0C5482255EEAE0DA0	CC67DFEBA43D6C94D69DD0C640CC261281A9884E91C933B3AA3E023FD14AD27D
Chrome Cache Entry: 199	GIF image data, version 89a, 1 x 1	FC94FB0C3ED8A8F909DBC7630A0987FF	56D45F8A17F5078A20AF9962C992CA4678450765	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
Chrome Cache Entry: 200	PNG image data, 688 x 438, 8-bit colormap, non-interlaced	DDF6A7904D6B06634E88DE890A4F5E32	EBF8FDAD1BF08B2474BCA1F982DD6CC7BA29823E	81CB2773A7F3BD4FD75FD2FBE7851099E7344FAF4CD4D4253BD66F566CA5FFA0
Chrome Cache Entry: 201	ASCII text	BED63259B4A066C035EFD00E67244BBC	5AA6A5719F31CCE5CB1E9C4DA2FD80D428FE0DAA	54D7DA7EA9A13351E5AC01A0BCE394B344A20D3EE1F008D29EEFD51C9359F310
Chrome Cache Entry: 202	ASCII text, with no line terminators	D31A023FE02C2AB10C62A0D91C01B910	5F28ED9838E33123CC65595840E6B7E36DA1F6AA	C8760FE4D682D373C9DE7DF7F8D89FDF035694CC095A7649A27FC4EBB5886D72
Chrome Cache Entry: 203	HTML document, ASCII text, with very long lines (1031), with no line terminators	70B0644107F97FD9391900013C530AE8	4B48771F28E8C6AAF3E7526B3FBCA745C02E4F4E	7F311D39C046324D6E4BD4009558FFFDE33DE63489AEDD3EAB3B3573B33593F7
Chrome Cache Entry: 204	SVG Scalable Vector Graphics image	2833432DBCD3A500A9B32628C5D91D0D	18AE542C01A2A81EB8B4C0F676CCF2E01BFB8A8E	A48F997FA23140662C20F7A46E93CEFCEF071FBF81CE038067582F2D822D86D5
Chrome Cache Entry: 208	ASCII text, with very long lines (4201)	BE18D7B3B4660E9FD0366679C6A371E5	B925FD6FEAAE5A35778B2C7C4CD07A96B62C886C	1DE982FBCF76B467BD3F4DFFBA8C92DFC73E43A40AC489339AAF361EFAC7570B
Chrome Cache Entry: 209	JSON data	9F6DB3C94478B9F7B6FC06290E368768	155F51C25C2AB85C46D56DF0938E784CABC2AA0E	6643868D5DFCCF567048ABB8E3377DDD7FF678FF48C535A8FCAA7436116A908C
Chrome Cache Entry: 211	JSON data	2A36C3BDA0421CA9B2DA8724D75A93E3	60BBE92C726900528BBC3A9D211777FDB84F7B45	CD1ED023B777163F0202AFDCC2052B61B4C9A432DCBDD00E3ABC258B1B608B63
Chrome Cache Entry: 214	ASCII text, with very long lines (65316)	FEC0B627CFC3E58C145ECE158B09E3A8	263D46685AEEF694291985410F8670463DC49981	034A66664BB13B36770A9554CA32D2D8805A9A50677BE71A3F501BFEEB5389FF
Chrome Cache Entry: 216	JSON data	9E2E1A2582CBA9594CBFAC094FE274D2	B5C7F2B94309FC23EBAABB4D35309B8A3B64D582	F5EE1E09868E4DB5EB8814BE31C1150FE6871712D8C649E38F9799A374B865DF
Chrome Cache Entry: 217	SVG Scalable Vector Graphics image	B57C99C9D1E3C50B2114C6DB053D7FF0	ADA8ABFED92BA8A545BBD9D299D74D5972CC4AE8	691DCDB24853A0F5CE4E6597E5713DEA66799B57FFE2C2A10F28F98E0B569B19

HTML body contains low number of good links

Source: https://millerinsurance--uat.sandbox.my.salesforce.com/

HTTP Parser: Number of links: 1

HTML page contains hidden javascript code

Source: https://millerinsurance--uat.sandbox.my.salesforce.com/

HTTP Parser: Base64 decoded: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" width="47.971" height="47.971" viewBox="0 0 47.971 47.971" style="enable-background:new 0 0 47.971 47.971;" xml:space="preserve"><g><path d="M28.228,23.986L...

Source: https://millerinsurance--uat.sandbox.my.salesforce.com/	HTTP Parser: Iframe src: https://c.salesforce.com/login-messages/promos.html
Source: https://millerinsurance--uat.sandbox.my.salesforce.com/	HTTP Parser: Iframe src: https://test.salesforce.com/login/sessionserver212.html

Source: https://millerinsurance--uat.sandbox.my.salesforce.com/

HTTP Parser: <input type="password" .../> found

Source: https://millerinsurance--uat.sandbox.my.salesforce.com/	HTTP Parser: No favicon
Source: https://millerinsurance--uat.sandbox.my.salesforce.com/	HTTP Parser: No favicon
Source: https://millerinsurance--uat.sandbox.my.salesforce.com/	HTTP Parser: No favicon
Source: https://millerinsurance--uat.sandbox.my.salesforce.com/	HTTP Parser: No favicon
Source: https://millerinsurance--uat.sandbox.my.salesforce.com/	HTTP Parser: No favicon
Source: https://millerinsurance--uat.sandbox.my.salesforce.com/	HTTP Parser: No favicon

Source: https://millerinsurance--uat.sandbox.my.salesforce.com/

HTTP Parser: No <meta name="author".. found

Source: https://millerinsurance--uat.sandbox.my.salesforce.com/

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.60.203.209:443 -> 192.168.2.16:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.60.203.209:443 -> 192.168.2.16:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.16:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.16:49873 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: millerinsurance--uat.sandbox.my.salesforce.com
Source: global traffic	DNS traffic detected: DNS query: test.salesforce.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: c.salesforce.com
Source: global traffic	DNS traffic detected: DNS query: cdn.evgnet.com
Source: global traffic	DNS traffic detected: DNS query: salesforce.us-1.evergage.com
Source: global traffic	DNS traffic detected: DNS query: www.salesforce.com
Source: global traffic	DNS traffic detected: DNS query: a.sfdcstatic.com
Source: global traffic	DNS traffic detected: DNS query: geolocation.onetrust.com
Source: global traffic	DNS traffic detected: DNS query: 11463663.fls.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: adservice.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866

Source: unknown	HTTPS traffic detected: 23.60.203.209:443 -> 192.168.2.16:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.60.203.209:443 -> 192.168.2.16:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.16:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.16:49873 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@18/70@40/294

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=2004,i,13107594475335030216,4778087365314127128,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://millerinsurance--uat.sandbox.my.salesforce.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=2004,i,13107594475335030216,4778087365314127128,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Source: Window Recorder

Window detected: More than 3 window changes detected

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk