{ "type": "Domain", "indicator": "tizermedias.com", "general": { "sections": [ "general", "geo", "url_list", "passive_dns", "malware", "whois", "http_scans" ], "whois": "http://whois.domaintools.com/tizermedias.com", "alexa": "http://www.alexa.com/siteinfo/tizermedias.com", "indicator": "tizermedias.com", "type": "domain", "type_title": "Domain", "validation": [], "base_indicator": { "id": 2186237616, "indicator": "tizermedias.com", "type": "domain", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 9, "pulses": [ { "id": "6a09b3b462c09a8bf0daa85b", "name": "Credit: Disable_Duck [\"UAlberta alfresco management\"]", "description": "", "modified": "2026-05-17T12:25:24.282000", "created": "2026-05-17T12:25:24.282000", "tags": [ "note", "home", "lucene paths", "json descriptor", "lucene path", "company home", "actividades", "pageuser", "sie knnen", "sie auf", "link klicken", "recente", "u kunt", "attivit", "possibile", "activits", "vous", "report", "web link", "cvs report", "link", "chs placement", "chs student", "placement", "team", "google form", "university", "alberta", "automation", "please", "following", "followers", "ihnen", "mitarbeitern", "mitarbeiter", "hello", "foreign visitor", "fvca", "human resource", "fvca assessment", "incomplete", "regards", "klik", "wachtwoord", "mijn profiel", "klik op", "hoogachtend", "alfresco", "bonjour", "cliquez sur", "nous", "pour ce", "mon profil", "changer", "invito", "caro", "fare", "password", "il mio", "cambia password", "per rifiutare", "cordiali saluti", "my profile", "change password", "konto", "sie erstellt", "passwort", "wir legen", "ihnen nahe", "passwort bei", "anmeldung zu", "ndern", "gehen sie", "mmm yyyy", "nome utente", "nombre", "contrasea", "para hacerlo", "mi perfil", "atentamente", "account", "alfresco share", "hola", "haga", "los datos", "y seleccione", "si desea", "click", "einladung von", "hallo", "sie eingeladen", "site", "klicken sie", "konto fr", "alfresco client", "kofax index", "inhaltselement", "zur site", "gren alfresco", "pledged gift", "office", "advancement", "datetime", "university vpn", "date", "shared", "support", "auxiliary", "process", "priority", "medium high", "pay action", "sincerely", "uofa ecm", "link um", "aufgaben stehen", "verfgung", "prioritt", "niedrig mittel", "hoch", "klicken", "aufgabe zu", "il seguente", "disponibile", "priorit", "bassa media", "alta", "clicca", "clicca su", "la tche", "tre rcupre", "basse moyenne", "leve", "cliquez", "cordialement", "prioriteit", "laag gemiddeld", "hoog", "la siguiente", "prioridad", "media alta", "saludos", "kb content", "links content", "content url", "download url", "webdav url", "ttulo", "descripcin", "ninguno", "ninguna", "creador", "creado", "modificador", "modificado", "tamao", "webdav", "titre", "aucun", "aucune", "modificateur", "modifi", "taille", "ko liens", "du contenu", "dossier du", "url webdav", "titolo", "nessuno", "nessuna", "creato", "modificato", "dimensioni", "kb link", "al contenuto", "cartella", "ingen", "beskrivelse", "tittel", "opprettet", "modifikator", "modifisert", "strrelse", "lenker for", "innhold mappe", "descrio", "nome", "nenhum", "nenhuma", "criador", "criado", "tamanho", "geen", "beschrijving", "titel", "maker", "gemaakt", "gewijzigd", "grootte", "contenturl", "downloadurl", "beschreibung", "url zum", "keiner", "keine", "ersteller", "erstellt", "bearbeiter", "gendert", "kb links", "download", "navigatebrowse", "pagesite", "readme file", "yesno", "user name", "main", "function", "log debug", "record", "sample rm", "import", "njson", "forms", "sites", "documenttype", "commonfolder", "error", "value", "jsonfile", "service", "false", "moving", "prop", "null", "bearer", "uappol", "uappol function", "contentid", "param", "id var", "call", "post request", "json", "config", "coveo", "uappol metadata", "content id", "and not", "loads", "update", "uploader", "inbox", "rnrn", "create", "contenteml", "inbox folder", "number", "normal", "textpart", "backup", "createchildren", "backupname", "childlist", "name", "content", "array", "write", "childname2", "childname3", "childname4", "reviewgroup", "groupsite", "starting", "started", "delete email", "command", "found", "create content", "resources", "unknown command", "globals", "var title", "rnrncopyright", "copyright", "csvtoarray", "regexp", "jsonstr", "daily", "review", "az09", "format", "hrsfilescanner", "hrs document", "fromscanner", "not type", "matches1", "employee id", "third", "tempfilename", "ldap", "version", "this", "file share", "folder", "trimlr", "namearr", "personid", "document name", "ales file", "scanned", "shared drive", "last", "document type", "document", "advising notes", "debug", "debugstr", "schedule", "descriptorpath", "web service", "inbound rule", "web services", "collaborator", "groupeveryone", "check", "index", "taskassignee", "taskenddate", "filename", "localisotime", "startdatetime", "timeperiod", "uofa edrms", "author", "descommonnode", "nomatch", "iddocumenttype", "siteid", "span", "path", "term", "core", "cap report", "template", "object", "cap mail", "dev testing", "application", "aps status", "cap generate", "monthly report", "extension", "alfresco locale", "september", "pm mdt", "school", "didx", "json response", "cap final", "rebcapiddict", "finalcapiddict", "aps process", "trigger", "chsdocument", "message", "func", "msgstr", "emailobj", "emailtemplate", "emailsubject", "sitepath", "chs docs", "studentfiles", "faculty", "true", "chssiteid", "type", "aspect", "chsdocs", "nodeidx", "find", "expired", "chs school", "defunc", "facultykey", "program", "spasite", "ldapperson", "parent name", "securitytype", "formsengg", "limit", "enggfilescanner", "stuccid", "csv file", "studdept", "supccid", "supdept", "cosupccid", "relocation", "fgsr", "records site", "fgsr doc", "department", "start fgsr", "department doc", "completion of", "oral hlth", "form", "application for", "report of", "admission", "master", "music", "unknown", "comp", "class", "leave", "supervisor", "currentline", "return", "studentid", "superccid", "revdate", "code", "apstaskproperty", "converttocsv", "aps guideline", "aps task", "newdata", "hyperlink", "certificate", "first", "info", "procid", "filecontentstr", "query sort", "create header", "person id", "subject title", "node", "studentccid", "yyyymmdd", "lookupjson", "propidx", "input date", "iso format", "folder level", "query", "duedate", "test java", "dailyschedule", "upload", "ro adm", "workflow", "offset", "adm workflow", "data length", "startindex", "json object", "aps group", "acs site", "user", "getgroupid", "am mst", "acsaps group", "user sync", "january", "start january", "february", "start february", "december", "start december", "march", "start march", "am mdt", "consumer march", "aps student", "april", "start april", "june", "start june", "pm mst", "ro backscan", "edrmsteam", "group", "group december", "aps ro", "copy file", "aps api", "maxfile", "creator", "rand", "hrsbs", "july", "august", "hrsbssyncccids", "zhrroleuserresp", "edrms", "ccids", "prefix", "createdirectory", "directory", "actionreason", "safefilename", "employeeclass", "carry", "csv data", "host", "bachelor", "college level", "mike", "propname", "maxitems", "currjson", "fvca status", "important", "prod", "manual data", "doctoratephd", "medicine", "nodename", "employeeccid", "managerccid", "employeeid", "workingtitle", "regtempdescr", "findkey", "email", "new document", "doctypelabel", "competitive bid", "bid exception", "pcm competitive", "and aspect", "competitive", "nodes", "bid update", "acommonfolder", "formspcm", "peoplesoft", "no data", "qaselectednode", "qaselected", "qanotselected", "qa folder", "preqa", "qa var", "documentcount", "passcount", "qadocument", "qa selected", "moved", "attempts", "accepted", "rm file", "plan", "rm filing", "min to", "rm system", "batch", "time limit", "rmcfg", "string", "already", "load", "valid", "graddate", "uathdep", "ccid", "title", "abstract", "embargo", "datestr", "searchresult", "alfresco afa", "admissions", "student case", "files", "and type", "institution", "inst", "json config", "institution not", "if file", "logger", "needle", "xmlstr", "staus", "document linkn", "getlogfile", "documentlist", "xml field", "not found", "addaspect", "move aspect", "duplicate file", "makes", "to max", "checks", "workflow name", "workflow link", "emplid", "due daten", "total afa", "not path", "afabundling", "change", "not aspect", "logs", "ephesoft", "document moved", "epehsoft", "xmlsourcenode", "batchsize", "filemappingpdf", "entry", "move file", "getcsvfile", "batchprocess", "logging", "completed", "document link", "groupn", "created date", "stdapl", "person", "workflow desc", "json file", "list", "lastmonth", "daily qa", "default", "qastartdate", "query language", "finished", "afa bundle", "transcriptarr", "lucene query", "qacounter", "rrfgroupname", "uaroemplid", "uaropriority", "uaroduedate", "documentlistarr", "uarmm", "profile", "courseauditform", "status", "jile", "searchmatchmove", "logfoldername", "backscanreview", "smfstr", "rosm", "converter", "shortxml", "failedcsvfolder", "xml file", "qaoperatorindex", "qaoperatorlabel", "script", "suresh", "aws promotion", "file", "tasks", "bundlingprop", "tasktype", "grps2", "uarotasktype", "comments", "test", "ro scripts", "xmlnode", "shortdescr", "xmlcont", "firstname", "orgid", "middlename", "lastname", "middle", "final", "script started", "to now", "received date", "first name", "receiveddatestr", "dateofbirthstr", "getdefination", "2005 aug", "dropbox", "foldercreate", "scan doc", "officiality", "search match", "running script", "materialextid", "studentref", "ceeb", "materialcode", "memo", "jsoncontent", "ro document", "paperfileutils", "afaconfig", "ro workflow", "paperfileconfig", "applicationjson", "formsrso", "targetfile", "property name", "pinames today", "addp", "science addp", "addp move", "ro code", "scifilescanner", "desconfnode", "grabnodeprop", "copy", "consumer", "initiators", "hiring", "consigno", "offer letter", "match", "apsmaster", "match2", "reappointment", "expiry date", "today", "finaldate", "task info", "psperson", "complete basic", "hiring info", "employee", "resultdata", "delegategroup", "delegate group", "verify", "bind", "aps appointment", "trevor report", "sfsussl", "drawdown", "refund", "reporttype", "var document", "shareurl", "newgroup", "parentgrp", "group created", "var logfile", "rule folder", "site running", "report on", "get site", "foldername", "create file", "reportlogslogs", "reportlogs", "ist site", "running report", "count", "tran", "var csvfile", "result length", "processid", "process id", "delimiters", "quoted", "standard", "starting name", "morechildren", "pdf var", "length", "newname", "fiscal", "docnamearr", "filenode", "calendar year", "versionhistory", "new doc", "web deployed", "var startdate", "startdate", "maxcount", "prevmonth", "monthcount", "application id", "delete", "get path", "if node", "search length", "arra y", "if csv", "version history", "graduate", "graduate folder", "children", "graduate file", "searchmatchdob", "career", "appl nbr", "jan04 now", "counter", "thesis", "runyear", "spring", "service log", "everything", "this determine", "thesis deposit", "archival", "problem", "filepath", "md import", "arraytocsv", "found document", "start", "food", "yumna", "start kofax", "kofax", "admin", "subject", "sample email", "execute", "koafx", "apasresponseid", "merge", "recruitment", "transcripts", "review request", "admindate", "requesteddate", "approveddate", "approvereject", "getemailbody", "taskid", "sendemail", "request status", "siteconsumer", "sitemanager", "eval", "acshost", "global env", "config file", "apsprod", "params", "alloc", "checkpath", "newpath", "adding entity", "surnamechar", "adding person", "jsonfunction", "text", "syntaxerror", "arraytoxml", "xml related", "change xml", "xmltoarray", "xmlutil", "common folder", "random2digit", "maxlimit", "jsonarchive", "very", "returns", "sitecontext", "arrcounter", "node id", "items", "array length", "therecord", "award sponsor", "rso project", "res0012345", "iso88591", "util function", "project id", "proposal id", "doc name", "newdocname", "prod url", "199899", "property", "typeprop", "barcode", "accepts", "parent", "xmlfilename", "siteconfigjson", "qabatchgrp", "signeddate", "ephdocumenttype", "json document", "qapercentage", "entity", "broker", "add error", "getexecutetime", "qaoperator", "retain title", "idnumber", "assocname", "metaarr", "fund report", "csvcontent", "input folder", "doc00c200004txg", "xmlfile", "node1", "node2", "540am", "240pm", "metadata", "var folder", "filter", "mappedobj", "09azaz", "conditionval", "foldercondition", "file name", "xmlfileobj", "alfresco prop", "setup error", "formatjson", "id property", "move", "getrandomnumber", "result", "newdoctype", "no title", "clioacs update", "clio", "patch", "system overview", "system", "overview", "purpose", "aims", "objectives", "prerequisites", "total", "expected effort", "domain", "urls", "dept param", "department name", "done", "submit form", "saving", "label", "input", "approvers", "information", "user group", "request", "group request", "users", "single family", "edmonton ab", "coverage", "common law", "step workflow", "care", "dental benefits", "direct", "web scripts", "get http", "documentation", "web script", "http method", "http", "apis", "development", "knowledge", "java", "empty argument", "e1234", "im system", "lookupentity", "configfilename", "namespace", "searchterm", "access", "jsonuser", "alfresco search", "page search", "expires", "signer", "reason", "utf8", "stripcharacter", "pull hiring", "getapsdbid", "save", "processsetidset", "saved", "returndata", "boolean", "start building", "varname", "fill", "time click", "initiated all", "submissions", "all submissions", "process landing", "page", "initiators all", "maps initiated", "post doc", "student term", "start form", "middle name", "email address", "retype", "cell", "phone no", "fellow", "secureorigin", "expand", "thank", "here", "please check", "aps list", "pang", "subset", "display", "args", "task", "username", "save form", "data need", "cdkey", "checkdict", "item", "column", "anchor", "multi", "tasks filter", "search", "trigger aps", "process api", "apsprocess", "authentication", "webscript", "getapsperson", "process info", "initsavestatus", "step0statusfail", "signer1", "signer2", "appointment", "taskjson", "groupapiaccess", "checkapiuser", "fgsrpr", "psaudit", "statusname", "unsuccessful1", "apptreappt", "emplobject", "caps aps", "cap epsb", "applicant", "form submitted", "board review", "form applicant", "school district", "start date", "cap application", "home help", "pdfa format", "larger", "upload file", "please click", "uofacap", "applications", "jstr", "processjson", "invalid url", "associate dean", "edmonton public", "october", "elk island", "reutrn false", "mapdoctypeurl", "doctype", "cap document", "doctypes", "doctypemap", "schools", "public schools", "foip", "edmonton area", "epsb", "capid", "server", "aps user", "groupcapadmin", "assignuser", "cap ea", "successfully", "please wait", "successfully ea", "apsservice", "apsserviceprod", "requireddate", "bibliography", "reb approval", "letter", "cprbls", "ahsrespect", "ahscon", "immformdocs", "picvsc", "whmis", "condissi", "hspnet", "conphoto", "conclin", "college", "health", "submission date", "effective date", "expiration date", "chs admin", "student view", "typekey", "placementdocs", "warning", "jobj", "abraniuk", "wendy", "terry harris", "directorhrsbs", "level", "holiday pay", "part time", "payroll", "salariedreg aux", "cheat", "paramname", "getallurlparams", "hrsbs config", "data dictionary", "field", "responsejson", "workflowid", "workflow id", "context", "event", "statusevent", "uaesign", "success", "permission", "progress report", "postdoctoral", "sorry", "deptjson", "fgsr student", "process status", "select", "currentuser", "reports", "student ccid", "populated", "invalid student", "supervisor ccid", "co supervisor", "due date", "freedom", "report process", "fgsr forms", "list fgsr", "report fgsr", "report sorry", "review process", "fgsr supervisor", "thesis programs", "programs", "please enter", "student id", "submit button", "var taskid", "var currentuser", "review sorry", "raheel", "added", "urlorigin", "need", "raheel var", "elmid", "commentkeyarr", "override", "menu", "colour bar", "mdphd", "absence", "completion", "mbameng", "mbamsc", "meng", "jason", "acs property", "available", "subdoctype", "test person", "test effective", "modelnodepath", "sitename", "metadatamap", "sitefile", "google addon", "gtagra", "gta gra", "zhreformengresp", "id otherwise", "university home", "indicate", "monday", "tuesday", "wednesday", "thursday", "friday", "na note", "services", "please contact", "documentname", "time", "docs", "documentlink", "employee ccid", "conflict", "task assigned", "ist coi", "declaration", "jsonobj3", "parse", "stringify", "grouplist", "json post", "taskfilter", "applies", "assigntogroup", "retrieves", "assignee", "queries", "expects", "uri args", "json containing", "applyfilter", "assignment", "avm folder", "avm store", "store id", "fullpath", "store", "storeid", "avm stores", "search term", "blog query", "category", "api call", "returns json", "cached data", "keylabel", "rest", "ldap query", "resultstr", "jsonoutput", "campusid", "jsonobj", "suresh joshee", "raheel bhojani", "desrochers", "first check", "set message", "materialkey", "acommonfolderid", "hasaccess", "siteconfig", "unprocesseddata", "savemetadata", "getcustomscript", "sitetitle", "error occured", "afa admission", "afas", "change log", "date name", "description", "ebeaton script", "tfrith", "afa main", "runasuser", "afas name", "afa paper", "file test", "utility enter", "does", "student", "bad query", "parameters", "add all", "or condition", "batch ids", "case files", "batchid", "afns", "agricultural", "anaesthes", "life", "environmental", "anaesthesiology", "uappol content", "deanaheed", "programyear", "province", "agreementtype", "safety manual", "mtis", "cree", "blackfoot", "nakota sioux", "iroquois", "dene", "treaties", "first nations", "next", "refresh", "site viewer", "facetkey", "sortparameter", "textjavascript", "public site", "viewer access", "acs cron", "job error", "alfrescos", "unauthorized", "enter", "bear tracks", "main department", "choose", "library", "john", "reviewer", "embargodate", "actiondate", "convocation", "graduation", "nodeid", "thesis status", "match result", "match list", "name dob", "view", "searchcriteria", "main function", "method", "chs upload", "stuln", "filetype", "stuid", "chs agreement", "health sciences", "recreation fomd", "dentistry fomd", "fomd", "therapy fomd", "consent for", "disclosure of", "alberta freedom", "protection", "privacy act", "alberta health", "chs form", "intake", "tasks dashlet", "doccd", "val2", "a my", "view error", "view warning", "keyword search", "refresh list" ], "references": [ "old-AlfrescoToolkit.conf", "AlfrescoToolkit.info", "AlfrescoToolkit.conf", "activities-email_es.ftl", "activities-email_ja.ftl", "activities-email_de.ftl", "activities-email_nl.ftl", "activities-email.ftl", "activities-email_it.ftl", "activities-email_fr.ftl", "CAP-notify-monthly-report.ftl", "chs-commentUpdate.ftl", "chs-studentUploadNotification.ftl", "chs-Invalid.ftl", "chs-studentExpireSoon.ftl", "chs-studentExpired.ftl", "following-email.html_it.ftl", "following-email.html_fr.ftl", "following-email.html_ja.ftl", "following-email.html_nl.ftl", "following-email_de.html.ftl", "following-email_fr.html.ftl", "following-email_ja.html.ftl", "following-email_it.html.ftl", "following-email_nl.html.ftl", "following-email.html.ftl", "following-email.html_de.ftl", "fvca-reminder-email.ftl", "fvca-corrections-email.ftl", "invite-email_nl.html.ftl", "invite-email-add-direct.html.ftl", "invite-email-add-direct.html_fr.ftl", "invite-email_fr.html.ftl", "invite-email_it.html.ftl", "invite-email-add-direct.html_es.ftl", "invite-email-add-direct.html_de.ftl", "invite-email_ja.html.ftl", "invite-email-add-direct.html_nl.ftl", "new-user-email.html.ftl", "new-user-email_de.html.ftl", "invite-email-add-direct.html_ja.ftl", "invite-email-moderated.html.ftl", "new-user-email_fr.html.ftl", "new-user-email_it.html.ftl", "new-user-email_ja.html.ftl", "new-user-email_es.html.ftl", "new-user-email_nl.html.ftl", "invite-email-add-direct.html_it.ftl", "new-user-email_nl.html", "invite-email.html_nl.ftl", "invite-email.ftl", "invite-email_es.html.ftl", "invite-email.html.ftl", "invite-email_de.html.ftl", "invite_user_email.ftl", "kofaxFailedEmailTemplate.ftl", "notify_user_email.ftl", "notify_nl.htm", "notify_user_email_es.html.ftl", "notify_user_email_de.html.ftl", "notify_user_email_ooa_failed.ftl", "notify_user_email.html.ftl", "notify_user_email_it.html.ftl", "notify_user_email_e-transcript_failed.ftl", "notify_user_email_ja.html.ftl", "notify_user_email_fr.html.ftl", "notify_user_email_nl.html.ftl", "OOA-notify-email-template.ftl", "ADV-notify-terms-types.ftl", "appt-final-reminder.ftl", "appt-halfway-reminder.ftl", "sfs-wf-email.html.ftl", "sfs-wf-completed-email.html.ftl", "payActionDecision.html.ftl", "departmentAdhocTask.html.ftl", "wf-email.html_de.ftl", "wf-email.html.ftl", "wf-email_it.html.ftl", "wf-email_fr.html.ftl", "wf-email_nl.html.ftl", "wf-email_ja.html.ftl", "wf-email.html_fr.ftl", "wf-email.html_nl.ftl", "wf-email_es.html.ftl", "wf-email.html_ja.ftl", "wf-email.html_it.ftl", "wf-email_de.html.ftl", "wf-email.html_es.ftl", "emailbody_textplain_alfresco.ftl", "emailbody_textplain_alfresco_es.ftl", "emailbody_textplain_alfresco_fr.ftl", "emailbody_textplain_alfresco_it.ftl", "emailbody_textplain_alfresco_ja.ftl", "emailbody_textplain_alfresco_nb.ftl", "emailbody_textplain_alfresco_pt_BR.ftl", "emailbody_textplain_alfresco_nl.ftl", "emailbody_textplain_alfresco_ru.ftl", "emailbody_textplain_alfresco_zh_CN.ftl", "emailbody_textplain_share.ftl", "emailbody_textplain_share_de.ftl", "emailbody_textplain_share_es.ftl", "emailbody_textplain_share_it.ftl", "emailbody_textplain_share_ja.ftl", "emailbody_textplain_share_nb.ftl", "emailbody_textplain_share_nl.ftl", "emailbody_textplain_share_ru.ftl", "emailbody-alfresco-textplain.ftl", "emailbody-share-textplain.ftl", "emailbody_textplain_alfresco_de.ftl", "emailbody_textplain_share_zh_CN.ftl", "emailbody_textplain_share_fr.ftl", "emailbody_textplain_share_pt_BR.ftl", "uofa-pc-model.xml", "uofa-pllc-model.xml", "uofa-science-model.xml", "uofa-rso-model.xml", "uofa-set-model.xml", "uofa-sfs-model.xml", "uofa-slate-model.xml", "uofa-uappol-model.xml", "advext-model.xml", "assocModel.xml", "adv-model.xml", "cbsr-model.xml", "dynamicSecurityMarksModel", "ephesoft-educational.xml", "facopr-model.xml", "fgsr-model.xml", "faculty-model.xml", "psAudit-model.xml", "FVCA.xml", "roDocProcessing-model.xml", "ro-model.xml", "fgsr-thesis-deposit.xml", "security-group-model.xml", "ua-audit-generic-model.xml", "ua-dummy.xml", "calendar-year-model.xml", "ua-error-model.xml", "uafgsrsup-model.xml", "uaqa-model.xml", "transcript-model.xml", "uAlbertaWorkflowGeneral.xml", "uarmm-supplement-scanning.xml", "uarm-rma-filing-model.xml", "ua-search-model.xml", "ro-search-match.xml", "uatraining.xml", "uofa-ales-model.xml", "uofa-arts-model.xml", "uofa-aps-model.xml", "uofa-base-model.xml", "uawfh-model.xml", "uofa-augustana-model.xml", "uofa-business-model.xml", "uarmTempModel.xml", "uofa-cap-model.xml", "uofa-chs-model.xml", "uofa-chs-agreements-model.xml", "uofa-common-model.xml", "uofa-education-model.xml", "tamis-model.xml", "uofa-engg-coop-model.xml", "uofa-engg-model.xml", "uofa-fo-model.xml", "uofa-extension-model.xml", "uofa-esign-model.xml", "uofa-hrsbs-model.xml", "uofa-law-model.xml", "uofa-caps-model.xml", "uofa-hrs-model.xml", "uofa-native-studies-model.xml", "uofa-pllc-model.json", "uofa-rso-model.json", "uofa-pc-model.json", "uofa-native-studies-model.json", "uofa-slate-model.json", "uofa-uappol-model.json", "uofa-science-model.json", "uofa-workflowGeneral.json", "uofa-sfs-model.json", "adv-model.json", "advext-model.json", "assocModel.json", "calendar-year-model.json", "facopr-model.json", "cbsr-model.json", "ephesoft-educational.json", "faculty-model.json", "faculty-model.xml.json", "rma-model.json", "fgsr-model.json", "FVCA.json", "psAudit-model.json", "ro-aug-model.json", "ro-search-match.json", "tamis-model.json", "security-group-model.json", "fgsr-thesis-deposit.json", "transcript-model.json", "ro-model.json", "ua-audit-generic-model.json", "uafgsrsup-model.json", "uaqa-model.json", "uarmm-supplement-scanning.json", "uAlbertaWorkflowGeneral.json", "ua-error-model.json", "uofa-ales-model.json", "ua-search-model.json", "uarmTempModel.json", "uofa-aps-model.json", "uawfh-model.json", "uofa-arts-model.json", "uofa-cap-model.json", "uofa-chs-agreements-model.json", "uofa-augustana-model.json", "uofa-base-model.json", "uofa-chs-model.json", "uofa-engg-coop-model.json", "uofa-common-model.json", "uofa-engg-model.json", "uofa-extension-model.json", "uofa-hrsbs-model.json", "uofa-fo-model.json", "uofa-education-model.json", "uofa-law-model.json", "uofa-hrs-model.json", "uofa-esign-model.json", "uofa-business-model.json", "faculty-of-science-site.json", "FandO-Organizations.json", "FandO-Programs.json", "fgsr-awards.json", "fgsr-category-list.json", "fgsr-exam-list.json", "fgsr-official-list.json", "fgsr-programOfStudy.json", "fgsr-site.json", "fo-emergency-response-manual.json", "graduate-student-records-site.json", "fo-site.json", "fo-utilities.json", "hrs-benefits.json", "hrsbs-action-reasons.json", "graduate-student-records-v2-site.json", "hrsbs-doc-list.json", "hrsbs-file-structure.json", "hrsbs-owner-details.json", "hrsbs-functionalroles.json", "hrsbs-function-module.json", "hrsbs-review-month.json", "hrsbs-security-class.json", "hrsbs-site.json", "hrs-employeeApprovedDeductions.json", "hrs-bulkId.json", "hrsbs-review-cycle.json", "hrs-employmentFinancial.json", "hrs-personalInformation.json", "hrs-pension.json", "hrs-security-list.json", "hrs-leaves.json", "Institutions.json", "ist-site.json", "hrs-site.json", "my-site-site.json", "law-security-list.json", "native-studies-doc-list.json", "fgsr-credential-list.json", "law-doc-list.json", "native-studies-security-list.json", "office-of-advancement-record-types.json", "office-of-advancement-site.json", "pcm-category.json", "pllc-doc-list.json", "ro-academic-pre-pro-programs.json", "pllc-security-list.json", "ro-acad-group.json", "ro-admitType.json", "ro-applicant-type.json", "ro-campusSolutionsTerm.json", "hrsbs-employee-class.json", "pllc-site.json", "ro-indigenous-type.json", "ro-doctypes.json", "pcm-site.json", "ro-official.json", "ro-org-desc.json", "ro-related-record-types.json", "ro-relationship-to-institution.json", "ro-search-match-status.json", "ro-authenticity.json", "ro-slate-folio-material-non-school-scope.json", "ro-slate-institution-material.json", "ro-slate-folio-material-school-scope.json", "ro-method-receipt.json", "ro-slate-institutions.json", "ro-test-id.json", "rso-accounts-receivable-accounts-payable-doc-type.json", "rso-agreements-doc-category.json", "rso-bulk-scan-doc-type.json", "rso-cfi-purchasing-doc-type.json", "rso-cfi-financials-doc-type.json", "rso-financial-reconciliation-doc-type.json", "rso-financial-reporting-doc-type.json", "rso-financials-doc-type.json", "rso-mask.json", "rso-site.json", "rso-sponsor-names.json", "science-doc-list.json", "science-security-list.json", "school-of-business-site.json", "sfs-ussl-report-status.json", "staff-training-site.json", "student-financial-services-doc-list.json", "student-financial-services-site.json", "student-records-bulk-load-testing-site.json", "student-records-training-site.json", "student-records-site.json", "student-transcripts-site.json", "rso-forms-form-type.json", "support-documentation-site.json", "test-site-site.json", "uappol-category-heirarchy.json", "uappol-type.json", "uappol-site.json", "uoda-faculties.json", "academic-department.json", "adv-correspondence-type.json", "uoda-departments.json", "advsearch.json", "ales-security-list.json", "ales-doc-list.json", "arts-doc-list.json", "arts-security-list.json", "augustana-security-list.json", "augustana-site.json", "augustana-legacy-transcript-doc-list.json", "rso-activation-report-doc-type.json", "business-doc-list.json", "business-security-list.json", "bulkload-testing-site.json", "cap-site.json", "caps-school-board-list.json", "cbsrsite-site.json", "cbsrsite-sopTypes.json", "cbsr-study.json", "cbsr-worksheetType.json", "augustana-doc-list.json", "chs-ag-type.json", "chs-agreements-site.json", "chs-campus-list.json", "chs-degProgram-list.json", "chs-emailNotification.json", "chs-document-status.json", "chs-faculty-list.json", "chs-programYear-list.json", "chs-program-list.json", "canada-provinces-list.json", "demo-site-site.json", "education-doc-list.json", "department.json", "education-security-list.json", "chs-stuEmailNotification.json", "college-of-health-sciences-site.json", "chs-provinces-list.json", "engineering-coop-doc-list.json", "engineering-coop-security-list.json", "engineering-co-op-site.json", "engineering-doc-list.json", "extension-doc-list.json", "extension-security-list.json", "facopr-planTypes.json", "facopr-supportinDocField.json", "faculty-of-ales-site.json", "engineering-security-list.json", "faculty-of-education-site.json", "faculty-of-extension-site.json", "faculty-of-native-studies-site.json", "faculty-of-law-site.json", "faculty-of-arts-site.json", "faculty-of-engineering-site.json", "my_docs_inline.ftl", "my_docs.ftl", "my_spaces.ftl", "recent_docs.ftl", "translatable.ftl", "readme.ftl", "show_audit.ftl", "general_example.ftl", "my_summary.ftl", "doc_info.ftl", "localizable.ftl", "recordsCustomModel.xml", "imapConfig.json", "rm_event_config.json", "rmScriptThrowError.js", "report_rmr_transferReport.html.ftl", "report_rmr_destructionReport.html.ftl", "report_rmr_holdReport.html.ftl", "notify-records-due-for-review-email.ftl", "record-rejected-email.ftl", "record-superseded-email.ftl", "onCreate_supersedes.js", "rma_isClosed.js", "PaperFileconfig.json", "MyTasks-config.json", "AFAconfig.json", "roDocumentTypes.json", "uappol-upload-rule.js", "uappolCreateFolderRule.js", "uappolCreateFolder.js", "uappol-api.js", "uappol-functions.js", "command-utils.js", "backup and log.js", "backup.js", "example test script.js", "test return value.js", "start-pooled-review-workflow.js", "command-processor.js", "command-search.js", "alfresco docs.js", "append copyright.js", "createDepartmentJSON.js", "hrsDaily.js", "hrsFolderCreateSchedule.js", "hrsScanned.js", "hrsCreateFolder.js", "hrsFolderCreateRule.js", "hrsFileShareFolder.js", "alesCreateFolderRestricted.js", "alesCreateFolderSchedule.js", "alesBulkShareFolder.js", "alesFileScanned.js", "alesCreateFolder.js", "alesDaily.js", "alesFileShareFolder.js", "alesCreateFolderConfidential.js", "alesCreateAdvisingNotes.js", "alesFolderCreateSchedule.js", "deployWebServiceDescriptor.js", "taskReportCSV-Appointment-prod.js", "artsFileScanned.js", "artsCreateFolderRule.js", "artsCreateFolder.js", "artsCreateFolderRestricted.js", "augCreateFolderRestricted.js", "augCreateFolder.js", "businessCreateFolderRule.js", "businessCreateFolder.js", "businessCreateFolderSchedule.js", "businessBulkShareFolder.js", "businessFileShareFolder.js", "businessCreateFolderRestricted.js", "businessDaily.js", "businessCreateAdvisingNotes.js", "businessFileScanned.js", "CAPSendMonthlyReportEmail.js", "CAPGenerateMonthlyReport.js", "CapFinalReportSubmit.js", "chsCreateFolderRule.js", "chsEmailOnUpdateComment.js", "chsReport.js", "EmailNotifCHSStudent.js", "SetExpiryDate.js", "chsCreateFolder.js", "chsFacultyReport.js", "chsAgreementCreateFolderRule.js", "chsAgreementCreateFolder.js", "scheduleJobTest.js", "every52MinPastHour.js", "every46MinPastHourBetween4PM12PM.js", "every57MinPastHour.js", "every47MinPastHourBetween4PM12PM.js", "everyDay4H30MinAM.js", "everyDay7H45MinAM.js", "every10MinStartingAt5MinPastHour.js", "every38MinPastHourBetween4PM12PM.js", "every20MinStartingAt15MinPastHour.js", "everyDay2H05MinAM.js", "every2MinStartingAt1MinPastHour.js", "everyDay1H05MinAM.js", "everyDay12H30MinAM.js", "everyDay7H30MinPM.js", "every30MinStartingAt19MinPastHour.js", "every30MinStartingAt11MinPastHour.js", "everyDay2H35MinAM.js", "every30MinStartingAt26MinPastHour.js", "every16MinPastHour.js", "everyDay1H45MinAM.js", "everyDay2H45MinAM.js", "every29MinPastHour.js", "every22MinPastHour.js", "everyDay11H30MinPM.js", "educationCreateFolderRule.js", "educationCreateFolder.js", "educationCreateAdvisingNotes.js", "enggCoopCreateFolderRestricted.js", "enggCoopCreateFolderRule.js", "enggCoopBulkUpload.js", "enggCreateFolderRule.js", "enggCreateFolderRestricted.js", "enggCreateFolder.js", "engineeringCreateAdvisingNotes.js", "enggCoopCreateFolder.js", "enggFileScanned.js", "enggCoopFileScanned.js", "extensionFileScanned.js", "extensionCreateFolder.js", "extensionCreateFolderRule.js", "fgsrCreateGuidelineAPSProcessFromCSV.js", "fgsrDocRestructure.js", "fgsrMigrationScript.js", "fgsrDocRelocation.js", "fgsrCreateFolderFromCSV.js", "guideline-reports.js", "fgsrMigrationScript-withTerminationLogic.js", "modfiyOrUpdatePropertyfromCSV.js", "fgsr-case-file-report.js", "fgsrCreateAPSProcessFromFolder.js", "fgsrCreateFolder.js", "fgsrCopyMetadataToFolderLevel.js", "fgsrCreateAPSProcessFromCSV.js", "foCreateFolder.js", "foCreateFolderRule.js", "Script1.js", "Script2.js", "scheduleRunEvery2-10PM.js", "scheduleRunEvery5PMTo10PM.js", "scheduleRunEvery30Minutes.js", "scheduleRunEvery60Minutes.js", "scheduleRunEveryday3PMto11PM.js", "scheduleRunEveryday12AMto6AM.js", "scheduleRunEvery20Minutes.js", "scheduleRunEvery2AM.js", "acsToApsUserUpdate.js", "2024-01-13-log.txt", "2024-01-15-log.txt", "2024-01-20-log.txt", "2024-01-21-log.txt", "2024-01-22-log.txt", "2024-01-23-log.txt", "2024-02-04-log.txt", "2024-02-05-log.txt", "2024-02-06-log.txt", "2024-02-07-log.txt", "2024-02-08-log.txt", "2024-01-14-log.txt", "2024-01-18-log.txt", "2024-01-11-log.txt", "2024-01-16-log.txt", "2024-01-19-log.txt", "2024-01-26-log.txt", "2024-01-28-log.txt", "2024-01-30-log.txt", "2024-01-12-log.txt", "2024-01-29-log.txt", "2024-01-27-log.txt", "2024-01-31-log.txt", "2024-01-24-log.txt", "2024-02-09-log.txt", "2024-02-02-log.txt", "2024-01-09-log.txt", "2024-02-03-log.txt", "2024-01-05-log.txt", "2024-01-06-log.txt", "2024-01-04-log.txt", "2024-02-01-log.txt", "2024-01-07-log.txt", "2024-01-08-log.txt", "2024-02-10-log.txt", "2024-02-11-log.txt", "2024-02-12-log.txt", "2024-02-13-log.txt", "2023-12-31-log.txt", "2024-02-15-log.txt", "2024-02-16-log.txt", "2024-02-14-log.txt", "2024-02-18-log.txt", "2024-02-20-log.txt", "2024-01-17-log.txt", "2024-02-19-log.txt", "2024-01-10-log.txt", "2024-02-23-log.txt", "2024-02-25-log.txt", "2024-02-21-log.txt", "2024-01-25-log.txt", "2024-02-28-log.txt", "2024-02-22-log.txt", "2024-02-29-log.txt", "2024-03-02-log.txt", "2024-03-03-log.txt", "2024-02-26-log.txt", "2024-03-04-log.txt", "2024-03-06-log.txt", "2024-03-07-log.txt", "2024-03-05-log.txt", "2024-03-08-log.txt", "2024-03-09-log.txt", "2024-03-11-log.txt", "2024-03-10-log.txt", "2024-03-12-log.txt", "2024-03-13-log.txt", "2024-03-14-log.txt", "2024-03-15-log.txt", "2024-03-16-log.txt", "2024-03-17-log.txt", "2024-03-18-log.txt", "2024-03-20-log.txt", "2024-03-21-log.txt", "2024-03-22-log.txt", "2024-03-19-log.txt", "2024-03-23-log.txt", "2024-03-01-log.txt", "2024-03-26-log.txt", "2024-03-25-log.txt", "2024-03-28-log.txt", "2024-03-29-log.txt", "2024-03-27-log.txt", "2024-03-24-log.txt", "2024-03-30-log.txt", "2024-04-02-log.txt", "2024-04-03-log.txt", "2024-03-31-log.txt", "2024-04-05-log.txt", "2024-04-06-log.txt", "2024-04-07-log.txt", "2024-04-08-log.txt", "2024-04-09-log.txt", "2024-04-04-log.txt", "2024-04-11-log.txt", "2024-04-12-log.txt", "2024-04-13-log.txt", "2024-02-17-log.txt", "2024-04-01-log.txt", "2024-04-16-log.txt", "2024-04-15-log.txt", "2024-04-10-log.txt", "2024-04-17-log.txt", "2024-02-24-log.txt", "2024-04-14-log.txt", "2024-04-19-log.txt", "2024-04-21-log.txt", "2024-04-22-log.txt", "2024-04-23-log.txt", "2024-04-24-log.txt", "2024-04-26-log.txt", "2024-04-25-log.txt", "2024-04-29-log.txt", "2024-04-30-log.txt", "2024-05-01-log.txt", "2024-05-02-log.txt", "2024-05-03-log.txt", "2024-05-04-log.txt", "2024-05-05-log.txt", "2024-05-06-log.txt", "2024-04-28-log.txt", "2024-05-07-log.txt", "2024-04-18-log.txt", "2024-05-08-log.txt", "2024-05-09-log.txt", "2024-05-10-log.txt", "2024-05-12-log.txt", "2024-05-14-log.txt", "2024-05-11-log.txt", "2024-05-16-log.txt", "2024-04-27-log.txt", "2024-05-17-log.txt", "2024-05-15-log.txt", "2024-05-18-log.txt", "2024-05-20-log.txt", "2024-05-21-log.txt", "2024-05-19-log.txt", "2024-05-22-log.txt", "2024-05-23-log.txt", "2024-05-25-log.txt", "2024-05-24-log.txt", "2024-05-26-log.txt", "2024-05-27-log.txt", "2024-05-28-log.txt", "2024-05-29-log.txt", "2024-05-30-log.txt", "2024-06-02-log.txt", "2024-05-13-log.txt", "2024-06-01-log.txt", "2024-05-31-log.txt", "2024-04-20-log.txt", "2024-06-03-log.txt", "2024-06-04-log.txt", "2024-06-05-log.txt", "2023-12-30-log.txt", "2023-12-01-log.txt", "2024-02-27-log.txt", "2023-12-29-log.txt", "gtaGraProcessToCSV.js", "gtaGraProcessToCSV-2AM.js", "hrs-benefit-report.js", "westCanDocumentMove.js", "hrsbsReviewCycleReport.js", "hrsbsCreateFolderRule.js", "HRSBS-SyncCCIDs.js", "hrsbsCreateFolder.js", "FVCA-data-import.js", "FVCA-manual-property-update.js", "istPerformanceReviewCreateFolder.js", "lawCreateFolderRestricted.js", "lawFileScanned.js", "lawCreateFolder.js", "lawCreateFolderRule.js", "nativeStudiesCreateFolderRestricted.js", "nsFolderCreateSchedule.js", "nativeStudiesCreateFolder.js", "nativeStudiesCreateFolderRule.js", "ADV-notify-type-mapping.json", "OOA-notify-email.js", "ADV-notify-terms-types.js", "pcm-grab-competitive-noderefs.js", "pcm-update-competitive-noderefs.js", "pcmCreateFolder.js", "psUpdateAlfrescoDepartment.js", "pllcCreateFolder.js", "qaProcess.js", "qaRelease.js", "rmOOABackgroundInformationFiling.js", "rmFilingDoc.js", "rmSearchmatchNomatchFiling.js", "rmFilingConfig.json", "thesisDestructionReport.js", "rmThesis.js", "add_document_type_ro.js", "updateSearchMatchStatus.js", "searchmatchFullDob.js", "createROReconciliationReports.js", "eTranscriptInstList.js", "folder-create-ro.js", "augTranscript.js", "addTimeStamp.js", "missingDocumentList-csv.js", "roAddAspectAndMoveAFA.js", "myTaskDownload.js", "roAddAspectAndMoveTranscript.js", "roAddBundlingAspect.js", "roAddSearchMatchAspect.js", "roCopyEphesoftMetadataXML.js", "roBatchScript.js", "addSearchMatchDocumentType.js", "roCreateEducationalCSV.js", "roCopyOlderScannedDocument.js", "roDocumentListAPLSTD.js", "roCopyOlderScannedDocumentAdHoc.js", "roEtranscriptReport.js", "roDailyQA.js", "roEtranscriptsBundleTest.js", "roFolderCreateLDAPLookup_no_notificatiion.js", "roFolderCreateLDAPLookup.js", "roEtranscriptsBundle.js", "roAddComment.js", "roCopyEphesoftMetadataScanned.js", "roMoveCompleted.js", "roMoveCompletedBackScan.js", "roMoveCompletedSearchMatch.js", "roEtranscriptPDFConverter.js", "roScanningMetadata.js", "roScript1.js", "RORoutingWorkflowUtil.js", "roScript3.js", "roScript2.js", "roScanningMetadataBackScan.js", "roScript7.js", "roScript6.js", "roScript9.js", "roScript1BackScan.js", "roSearchMatchNoMatchReport.js", "roSearchMatchQuery.js", "RONotification.js", "roSlateDocumentExport.js", "roTagAndFileRenderedPDFs.js", "roScript4.js", "roScript5.js", "roScript8.js", "createSlateFolioMaterialDropdown.js", "createSlateApplicationsCSV.js", "LaunchWorkflowUtils.js", "PaperFileUtils.js", "GenerateSponsornamesAndPinames.js", "rsoCreateFolder.js", "sciCreateFolderConfidential.js", "sciCreateFolderPublic.js", "sciCreateFolder.js", "sciCreateFolderRestricted.js", "scienceASDocumentImport.js", "sciFileADDPFileTypes.js", "sciFileShareFolder.js", "sciFileScanned.js", "sciBulkShareFolder.js", "copy-signed-offer-letter.js", "dept-config.js", "reappointment-generate-schedule.js", "reappointment-reminder-schedule.js", "reappointment-generate-process.js", "manual-generate-script.js", "reappointment-reminder-process.js", "reminder-email-util.js", "reappointment-tracking-schedule.js", "reappointment-tracking-process.js", "appointment-report.js", "appointment-report-schedule.js", "manual-tracking-script.js", "sfsCreateFolder.js", "sfsWorkflowStatus.js", "security-group-user.js", "createReportPermissionsFoldersInASite.js", "siteMembersReport.js", "createReportRecursiveGroupsAndUsersInASite.js", "search-responses.js", "advChangeDocumentType.js", "addFolderMetadata.js", "advChangeDocumentType_confidential.js", "consignOInitiatorOfferLetterChange.js", "advChangeDocumentType_background.js", "transcriptResponse.js", "change-fgsr-pdf-file-name-with-date.js", "copy-fgsr-to-graduate-students-records.js", "ADVDonationCalendarToFiscal.js", "document-query.js", "deletingCompletingWorkflow.js", "eTranscriptTemp.js", "eTranscript-bundled-02-jan.js", "eTranscriptVersionModifierFix.js", "fixCheckout.js", "removeDonationGrp.js", "eTranscriptVersioningFix.js", "move-fgsr-folder.js", "search-match-dob-add.js", "thesisDepositArchival.js", "moveThesesForTransfer.js", "eraReportGeneration.js", "kofaxMetadataMerge.js", "kofaxMetadataMergeMissing.js", "generic2min.js", "kofaxSendEmail.js", "PeopleSoft-eTranscript-XML-PDF.js", "startBenefitWorkflow.js", "peoplesoftMetadataMergeMissing.js", "securityWorkflowUtil.js", "startPayActionWorkflow.js", "startDepartmentAdhocApprovalWorkflow.js", "convertTranscript.js", "CreateTranscriptUserMemberships.js", "startTwoStepWorkflow.js", "fix_employee_names.js", "env.js", "folderCreateUtil.js", "folderCreateUtilAA.js", "generalSchedule.js", "JSON.js", "xmlUtil.js", "addPersonAspect.js", "addTimeStampRandomFileName.js", "archiveDocument.js", "luceneUtil.js", "util.js", "archivedItems.js", "getProjectDetails.js", "ADVChangeAuthor.js", "ADVcalendarToFiscal.js", "symplexUtils.js", "advBatchProcessing.js", "advChangeDocumentName.js", "ADVEphesoftMove.js", "advCreateFolderScheduled.js", "advErrorMessageReset.js", "advMetadataUpdate.js", "advMoveToFoldersScheduled.js", "ADVendFundReportFiling.js", "advReconcilliation.js", "ADVmoveRecordsToPreQA.js", "advScanningMetadata.js", "advScript2.js", "advScript3.js", "advScript4.js", "advScript1.js", "advScript5.js", "advScriptDaily.js", "advScriptMonthly.js", "advScriptKofax.js", "ADVSiteContext.js", "advMoveToFolder.js", "deleteEphesoftDoc.js", "advUtils.js", "folderCreateADV.js", "advScriptDaily30minFreq.js", "jsonUtils.js", "advScanning.js", "folderCreateDocumentADV.js", "moveToFolders.js", "symplexMetadataUpdate.js", "OOA_SOT_Name_change.js", "moveToFoldersRetainTitle.js", "advScriptWeekly.js", "symplexMoveToFolder.js", "clioToAcsDocUpdate.js", "ClioUpdateScheduledJob.js", "smartFoldersExample.json", "system-overview.html", "businessDocSetup.json", "uappolDocSetup.json", "businessConfig.json", "augConfig.json", "augDocSetup.json", "lawConfig.json", "uappolConfig.json", "UAlbertaSettings.json", "hrsbsDocSetup.json", "advConfig.json", "hrsbsConfig.json", "hrsConfig.json", "hrsDocSetup.json", "advSimplexMapping.json", "advDocSetup.json", "artsDocSetup.json", "alesConfig.json", "alesDocSetup.json", "archiveFolder.json", "artsConfig.json", "advScanningMapping.json", "collegeOfHealthSciencesConfig.json", "chsAgreementsConfig.json", "dropboxCommonAspects.json", "collegeOfHealthSciencesDocSetup.json", "chsAgreementsDocSetup.json", "educationConfig.json", "extensionConfig.json", "fgsrv2DocSetup.json", "foConfig.json", "foDocSetup.json", "educationDocSetup.json", "lawDocSetup.json", "nativeStudiesDocSetup.json", "pllcConfig.json", "pllcDocSetup.json", "roConfig.json", "fgsrv2Config.json", "rsoConfig.json", "rsoDocSetup.json", "sciConfig.json", "eTranscriptConfig.json", "sciDocSetup.json", "roDocSetup.json", "sfsDocSetup.json", "UAlbertaSettings.conf", "student-recordsConfig.json", "securityWorkflowSetting.json", "thesisDepositConfig.json", "globalHeader.html.ftl", "webFormDialog.html.ftl", "alfrescoUserGroupRequest.ftl", "pensionBenefit.html.ftl", "pinames.json", "sponsornames.json", "searchPageConfig.json", "pcmDocSetup.json", "pcmConfig.json", "qaConfig.json", "apsAppConfig.json", "fgsrCreateApsFromCSV.json", "fgsrCopyMetadata.json", "enggCoopDocSetup.json", "enggDocSetup.json", "enggConfig.json", "enggCoopConfig.json", "CapApsConfig.json", "extensionDocSetup.json", "readme.html", "readme_de.html", "readme_ja.html", "readme_fr.html", "advEndowmentName.get.desc.xml", "advEndowmentName.get.json.ftl", "advEndowmentName.get.js", "advEntityName.get.desc.xml", "advEntityName.get.js", "advEntityName.get.html.ftl", "search.get.desc.xml", "search.get.js", "search.get.html.ftl", "changeInitiatorAppt.put.desc.xml", "eSignatureStatusHistory.get.html.ftl", "changeInitiatorAppt.put.json.ftl", "eSignatureStatusHistory.get.desc.xml", "appointmentSubmit.get.js", "processIdProps.get.desc.xml", "changeInitiatorAppt.put.js", "processIdProps.get.json.ftl", "processIdProps.get.js", "appointmentLandingPage.get.desc.xml", "appointmentLandingPage.get.js", "appointmentLandingPage.get.html.ftl", "appointmentStart.get.desc.xml", "appointmentStart.get.html.ftl", "appointmentStart.get.js", "appointmentStartTest.get.desc.xml", "appointmentStartTest.get.js", "appointmentStartTest.get.html.ftl", "appointmentSubmit.get.desc.xml", "appointmentSubmit.get.html.ftl", "eSignatureStatusHistory.get.js", "apsApplicationList.get.desc.xml", "apsApplicationList.get.html.ftl", "assignuser.put.js", "assignuser.put.json.ftl", "claimtask.put.desc.xml", "claimtask.put.js", "claimtask.put.json.ftl", "completetask.post.desc.xml", "completetask.post.json.ftl", "completetask.post.js", "getapsdbid.get.desc.xml", "getapsdbid.get.json.ftl", "gettasks.get.desc.xml", "gettasks.get.json.ftl", "assignuser.put.desc.xml", "gettasks.get.js", "savetask.post.desc.xml", "savetask.post.js", "savetask.post.json.ftl", "taskForm.get.js", "taskForm.get.desc.xml", "tasklist.get.desc.xml", "apsApplicationList.get.js", "taskForm.get.json.ftl", "tasklist.get.html.ftl.jquery", "tasklist.get.html.ftl", "tasklist.get.js", "triggerapsprocess.post.desc.xml", "triggerapsprocess.post.js", "updatevariables.post.desc.xml.notused", "triggerapsprocess.post.json.ftl", "updatevariables.post.json.ftl.notused", "getapsdbid.get.js", "updatevariables.post.js.notused", "taskUtils.js", "apsGroupsConfig.json", "apsSitesConfig.json", "apptStepZeroStarter.post.desc.xml", "apptStepZeroStarter.post.json.ftl", "apptStepZeroStarter.post.js", "apptStepOneStarter.post.desc.xml", "apptStepOneStarter.post.js", "apptStepOneStarter.post.json.ftl", "apptStepOneSave.post.json.ftl", "apptStepOneSave.post.desc.xml", "apptStepOneSave.post.js", "apptStatusDocUpdate.post.desc.xml", "apptStatusDocUpdate.post.json.ftl", "apptStatusDocUpdate.post.js", "APSWorkflowStatus.get.desc.xml", "APSWorkflowStatus.put.html.ftl", "APSWorkflowStatus.get.html.ftl", "APSWorkflowInfo.put.html.ftl", "APSWorkflowStatus.put.desc.xml", "APSWorkflowInfo.put.desc.xml", "APSWorkflowStatus.get.js", "APSWorkflowStatus.put.js", "APSWorkflowInfo.put.js", "NodeInfo.get.desc.xml", "NodeInfo.get.html.ftl", "capinfo.get.js", "capstart.get.js", "epsb.get.js", "epsb.get.html.ftl", "capstart.get.html.ftl", "epsb.get.desc.xml", "schoolboard.get.html.ftl", "NodeInfo.get.js", "NodeInfoByCapId.get.desc.xml", "updateVariable.post.json.ftl", "updateVariable.post.js", "schoolboard.get.desc.xml", "updateVariable.post.desc.xml", "schoolboard.get.js", "capinfo.get.html.ftl.backup", "cap-file-load.post.json.ftl", "NodeInfoByCapId.get.js", "capinfo.get.html.ftl", "capstart.get.desc.xml", "cap-file-load.post.desc.xml", "capinfo.get.desc.xml", "cap-file-load.post.js", "capeamergedoc.get.js", "capeamergedoc.get.desc.xml", "capeamergedoc.get.html.ftl", "capConfig.js", "chsEnv.js", "chsConfig.js", "chsAdminStuView.get.desc.xml", "chsAdminStuView.get.html.ftl", "chsAdminStuView.get.js", "coupa.get.html.ftl", "coupa.get.desc.xml", "coupa.get.js", "coveoGetDocList.get.desc.xml", "coveoGetDocList.get.json.ftl", "coveoGetDocList.get.js", "getJson.get.desc.xml", "getJson.get.js", "getJson.get.json.ftl", "simpleupload.post.desc.xml", "simpleupload.post.json.ftl", "simpleupload.post.js", "consignoMessage.get.js", "consignoWebhook.post.js", "consignoWebhook.post.json.ftl", "consignoMessage.get.desc.xml", "consignoWebhook.post.desc.xml", "consignoMessage.get.json.ftl", "eSignDownload.get.js", "eSignDownload.get.html.ftl", "eSignDownload.get.desc.xml", "review-supervisorv2.get.desc.xml", "review-supervisorv2.get.js", "review-supervisorv2.get.html.ftl", "fgsrssgLanding.get.js", "review-comm01v2.get.desc.xml", "fgsrssgLanding.get.html.ftl", "review-comm01v2.get.html.ftl", "review-comm02v2.get.desc.xml", "review-comm02v2.get.html.ftl", "fgsrssgLanding.get.desc.xml", "review-studentv2.get.html.ftl", "review-comm03v2.get.html.ftl", "review-comm03v2.get.desc.xml", "review-studentv2.get.desc.xml", "review-cosupervisorv2.get.html.ftl", "review-comm02v2.get.js", "review-startv2.get.desc.xml", "review-studentv2.get.js", "review-cosupervisorv2.get.js", "review-startv2.get.js", "review-student-revisionv2.get.html.ftl", "review-student-revisionv2.get.desc.xml", "review-startv2.get.html.ftl", "review-comm03v2.get.js", "review-cosupervisorv2.get.desc.xml", "review-student-revisionv2.get.js", "review-comm01v2.get.js", "review-comm02.get.desc.xml", "review-comm02.get.html.ftl", "review-comm03.get.desc.xml", "review-comm02.get.js", "review-comm03.get.html.ftl", "review-cosupervisor.get.desc.xml", "review-cosupervisor.get.html.ftl", "review-cosupervisor.get.js", "review-nextdate.get.desc.xml", "review-comm03.get.js", "review-nextdate.get.js", "review-student.get.html.ftl", "review-student.get.js", "review-student-revision.get.desc.xml", "review-student.get.desc.xml", "review-student-revision.get.js", "review-studentTest.get.desc.xml", "review-supervisor.get.desc.xml", "review-studentTest.get.js", "review-supervisor.get.html.ftl", "review-supervisor.get.js", "review-comm01.get.desc.xml", "review-comm01.get.html.ftl", "review-comm01.get.js", "review-student-revision.get.html.ftl", "review-nextdate.get.html.ftl", "review-studentTest.get.html.ftl", "guidelines-supervisor.get.desc.xml", "guidelines-supervisor-revision.get.html.ftl", "guidelines-start.get.desc.xml", "guidelines-start.get.html.ftl", "guidelines-start.get.js", "guidelines-student.get.desc.xml", "guidelines-student.get.html.ftl", "guidelines-student-revision.get.js", "guidelines-student-revision.get.desc.xml", "guidelines-supervisor.get.html.ftl", "guidelines-supervisor-revision.get.desc.xml", "guidelines-student-revision.get.html.ftl", "guidelines-student.get.js", "guidelines-supervisor.get.js", "guidelines-supervisor-revision.get.js", "programExtensionScript.js", "customScript.js", "customCSS_FGSR2.css", "customCSS_FGSR.css", "fgsrEnv.js", "FGSR-Forms-Config.js", "config.js", "googleAddon.get.json.ftl", "googleAddon.get.desc.xml", "googleAddon.get.js", "gtaGraStatus.post.json.ftl", "gtaGraStatus.post.js", "gtaGraStatus.post.desc.xml", "wfh-manager.get.desc.xml", "wfh-form.get.js", "wfh-manager.get.html.ftl", "wfh-form.get.desc.xml", "wfh-revise.get.desc.xml", "wfh-revise.get.html.ftl", "wfh-revise.get.js", "wfh-seniormanager.get.desc.xml", "wfh-manager.get.js", "wfh-seniormanager.get.js", "wfh-seniormanager.get.html.ftl", "wfh-form.get.html.ftl", "hrsbsDocumentLinking.get.desc.xml", "hrsbsDocumentLinking.get.html.ftl", "hrsbsDocumentLinking.get.js", "coi-start.get.desc.xml", "coi-start.get.html.ftl", "coi-revise.get.html.ftl", "coi-employee.get.html.ftl", "coi-employee.get.desc.xml", "coi-revise.get.desc.xml", "coi-start.get.js", "coi-revise.get.js", "coi-supervisor.get.js", "coi-supervisor.get.desc.xml", "coi-employee.get.js", "coi-supervisor.get.html.ftl", "getTaskFilter.get.json.ftl", "queryTasks.get.json.ftl", "routableGroups.get.desc.xml", "routableGroups.get.js", "routableGroups.get.json.ftl", "queryTasks.get.desc.xml", "setTaskFilter.post.js", "setTaskFilter.post.json.ftl", "setTaskFilter.post.desc.xml", "applyTaskAction.post.js", "applyTaskAction.post.json.ftl", "applyTaskAction.post.desc.xml", "getTaskFilter.get.desc.xml", "getTaskFilter.get.js", "queryTasks.get.js", "avmbrowse.get.desc.xml", "avmbrowse.get.html.ftl", "avmbrowse.get.js", "avmstores.get.desc.xml", "avmstores.get.html.ftl", "blogsearch.get.atom.400.ftl", "blogsearch.get.html.400.ftl", "blogsearch.get.desc.xml", "blogsearch.get.js", "categorysearch.get.atom.404.ftl", "blogsearch.get.html.ftl", "categorysearch.get.html.404.ftl", "categorysearch.get.js", "categorysearch.get.html.ftl", "categorysearch.get.desc.xml", "folder.get.desc.xml", "folder.get.html.ftl", "folder.get.js", "psDeptAll.get.js", "psDeptSingle.get.json.ftl", "psDeptSingle.get.js", "psPerson.get.json.ftl", "psUtil.js", "psPerson.get.js", "psAcademicDeptAll.get.desc.xml", "psAcademicDeptAll.get.json.ftl", "psAuthorizedApprover.get.desc.xml", "psDeptAll.get.json.ftl", "psAuthorizedApprover.get.js", "psAuthorizedApprover.get.json.ftl", "psDeptAll.get.desc.xml", "psDeptSingle.get.desc.xml", "psPerson.get.desc.xml", "ceeb.get.desc.xml", "ceeb.get.json.ftl", "getSlateId.get.desc.xml", "getSlateId.get.js", "materials.get.json.ftl", "materials.get.desc.xml", "getSlateId.get.json.ftl", "ceeb.get.js", "materials.get.js", "edit.get.html.ftl", "edit.get.js", "save.post.js", "save.post.json.ftl", "scans.get.desc.xml", "scans.get.js", "uploadfile.post.desc.xml", "uploadfile.post.json.ftl", "edit.get.desc.xml", "uploadfile.post.js", "scans.get.html.ftl", "save.post.desc.xml", "AFA_Main.post.desc.xml", "AFA_MainFileOnly.post.desc.xml", "AFA_MainFileOnly.post.js", "AFA_Main.post.js", "AFA_MainFileOnly.post.json.ftl", "AFA_Main.post.json.ftl", "paperFileUtil.get.desc.xml", "paperFileUtil.get.js", "paperFileUtil.get.html.ftl", "rsoprojectdetails.get.html.ftl", "rsoprojectdetails.get.js", "rsoprojectdetails.get.desc.xml", "roslateapplist.get.html.ftl", "roslateapplist.get.desc.xml", "roslateapplist.get.json.ftl", "roslateexists.get.html.ftl", "roslateexists.get.desc.xml", "roslateapplist.get.js", "roslateexists.get.js", "uofaDepartmentList.get.desc.xml", "uofaDepartmentList.get.js", "uofaDepartmentList.get.html.ftl", "uofaDepartmentName.get.desc.xml", "uofaDepartmentName.get.html.ftl", "uofaFacultyList.get.html.ftl", "uofaFacultyList.get.desc.xml", "uofaDepartmentName.get.js", "uofapersonid.get.desc.xml", "uofapersonidrest.get.html.ftl", "uofapersonidrest.get.desc.xml", "uofapersonid.get.html.ftl", "uofapersonid.get.js", "uofapersonidrest.get.js", "uappolCategoryHeirarchy.get.desc.xml", "uappolCategoryHeirarchy.get.json.ftl", "uappol-metadata-query.get.desc.xml", "uappol-metadata-query.get.js", "uappol-metadata-query.get.json.ftl", "uappolCategoryHeirarchy.get.js", "siteFileViewer.get.desc.xml", "siteFileViewerConfig.js", "siteFileViewer.get.html.ftl", "siteFileViewer.get.js", "publicSiteFileViewer.get.html.ftl", "publicSiteFileViewer.get.desc.xml", "publicSiteFileViewer.get.js", "cronJob.post.desc.xml", "cronJob.post.js", "cronJob.post.json.ftl", "studentupload.get.html.ftl", "generatereport.get.json.ftl", "generatereport.get.desc.xml", "approvethesis.post.js", "generatereport.get.js", "search-match-attach.get.js", "search-match-list.get.html.ftl", "search-match-result.get.html.ftl", "search-match-result.get.js", "search-match-list.get.js.old", "chs-agreements.get.js", "chs-agreements.get.html.ftl", "chs-upload.get.html.ftl", "chs-upload.get.js", "uamytasks.config.get.js", "chsStudentView.get.js", "chsStudentView.get.html.ftl", "foModel.xml", "uofaDocTypes.xml", "uofaDocTypes.json", "foModel.json", "tim-sops", "FandO", "cbsr", "nanofab", "support-documentation", "Alfresco.zip - 1bf054bded99e2ae414154593d0892066b2e0c7add603f9321e157c77ae52075", "https://www.virustotal.com/graph/embed/g05f1796a358b458d95751d31d1d529aa378f8ffadf0b4305b7fa0bd1c64fe228?theme=dark", "https://www.virustotal.com/gui/collection/63819e07111e9665ba8602777d782527c54f3fad71ef36f977405a004484787c/iocs", "https://viz.greynoise.io/analysis/0cd9177e-8328-4355-a2c0-d05704a64c72", "components.zip - 2b91fcf852a5f1f57be71a269d82497b37c9f544ebd8f32aaa240e4cde0ffeea", "https://www.virustotal.com/graph/embed/g2948a5c332eb4614973872a8243215f6aa1fba79749a48ea92806e9b934db91f?theme=dark", "https://viz.greynoise.io/ip/analysis/2610b635-c05a-4f28-a112-7278de8fdf9b" ], "public": 1, "adversary": "TA413 proposed (06.08.24), Callisto, APT38, APT 28/29 - too much time too many problems", "targeted_countries": [ "Canada", "United States of America" ], "malware_families": [], "attack_ids": [], "industries": [ "Education", "Government", "Healthcare", "Technology", "Telecommunications" ], "TLP": "white", "cloned_from": "6665315e25f9dd42a99e4f2f", "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 7132, "hostname": 3118, "URL": 4909, "email": 20, "FileHash-SHA256": 2144, "FileHash-MD5": 29, "FileHash-SHA1": 29 }, "indicator_count": 17381, "is_author": false, "is_subscribing": null, "subscriber_count": 66, "modified_text": "15 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69c227fd2960e96cae88fb97", "name": "Dropbox Typo squatting campaign. CoolWebSearch, CycBot , Mirai and Ransomware | Many domains affected.", "description": "Dropbox Typo squatting campaign. Mirai and Ransomware | Many domains affected.\n\nHas been executed. Threat actor attacked bank/s and Dropbox via Drive by compromises and malicious redirects. Multiple Dropbox accounts added to customer accounts confuse bank and customers. All accounts kept until Bank experienced serious breach. Bank admits to breach. Unsure if made public. Customer suddenly loses all paid storage, business tools , registered domains , and investment accounts. Bank empathizes targeted attacks.\nOccurred post initial infection & Pegasus Attack by same threat actors.", "modified": "2026-04-23T04:01:31.987000", "created": "2026-03-24T05:58:21.777000", "tags": [ "domain", "ipv4", "ck t1045", "run keys", "startup", "web protocols", "tool transfer", "user execution", "dns", "accept", "active related", "adversaries", "alerts", "apache", "as133618", "ascii text", "australia asn", "av detections", "christopher p ahmann", "brian sabey", "ck id", "ck matrix", "delete", "data upload", "defense evasion", "data", "cycbot", "cowboy", "coolwebsearch", "content", "contacted", "command", "connection", "delphi", "detection", "drop", "location", "manu", "dynamicloader", "elite", "emails", "encrypt", "error", "external", "extraction", "exploit", "failed", "gmt", "format", "forbidden", "privacy", "files", "feat file", "score", "refresh", "!redirect", "ratio", "redacted", "cycbot", "mirai", "unix", "ransomware", "trojan", "ransom", "query", "proximity", "pragma", "pegasus relationship", "typo squatting", "over path", "texarac", "name tactics", "h6rryf", "meta", "mitre att", "redirect", "malware", "malicious", "gmt server", "http header", "local", "little endian", "javascript", "is elf", "learn", "ipv4", "lambda", "lamk", "installer", "hall render", "index", "http request", "high risk", "insert", "ids detections", "informative", "indicator", "facts", "script style", "win32danginex", "trojanclicker", "trojan spy", "spyware", "udp", "windows", "vtab", "virtool", "trojan", "script strings", "stop data", "upatre", "spawns", "united states", "trojanspy", "tam legal", "secchuaplatform", "secchua", "virtool", "ransom", "quasi" ], "references": [ "dropox.com", "Win.Trojan.Agent-31647 \u2022 IDS: Detections CoolWebSearch Spyware (Feat)", "IDS Detections: Query for .cc TLD 403 Forbidden", "103.224.212.215 \u2022 rigs.zu0x.com \u2022 Australia : AS133618 trellian pty. limited", "UDP Include internal to internal communication Top Source 192.168.122.131 Top Destination 8.8.8.8 x", "u47.cc \u2022 IP Address 13.248.169.48, 76.223.54.146 | United States ASN AS16509 amazon.com", "u47.cc \u2022 | Domain is sinkholed | Registrar: ENAME TECHNOLOGY CO., LTD., x", "The Lambda function associated with the CloudFront distribution was throttled.", "We can't connect to the server for this & x Lambda function", "Error https://otx.alienvault.com/indicator/hostname/lb-212-215.above.com", "https://hybrid-analysis.com/sample/6ac18dcdfd4164ed7beeffffc995c5349c52b01dfObe5000f25294d698faf3b9/69c1b" ], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Australia" ], "malware_families": [ { "id": "Mirai", "display_name": "Mirai", "target": null }, { "id": "Win. Trojan.Agent-292909", "display_name": "Win. Trojan.Agent-292909", "target": null }, { "id": "Win.Trojan.Agent-336291", "display_name": "Win.Trojan.Agent-336291", "target": null }, { "id": "Trojan.Cycbot-2671", "display_name": "Trojan.Cycbot-2671", "target": null }, { "id": "Virtool:Win32/Obfuscator.JM", "display_name": "Virtool:Win32/Obfuscator.JM", "target": "/malware/Virtool:Win32/Obfuscator.JM" }, { "id": "Win.Trojan.Agent-36211", "display_name": "Win.Trojan.Agent-36211", "target": null }, { "id": "Win.Malware.Agent-6598770-0", "display_name": "Win.Malware.Agent-6598770-0", "target": null }, { "id": "Win.Downloader.14593-1", "display_name": "Win.Downloader.14593-1", "target": null }, { "id": "Unix.Trojan.Mirai-9441505-0", "display_name": "Unix.Trojan.Mirai-9441505-0", "target": null }, { "id": "Win.Dropper.DarkKomet-9370806-0", "display_name": "Win.Dropper.DarkKomet-9370806-0", "target": null }, { "id": "Trojan:Win32/Danginex", "display_name": "Trojan:Win32/Danginex", "target": "/malware/Trojan:Win32/Danginex" }, { "id": "Trojan.Redirector.JS", "display_name": "Trojan.Redirector.JS", "target": null }, { "id": "Win.Ransomware.Wanna-9769986-0", "display_name": "Win.Ransomware.Wanna-9769986-0", "target": null }, { "id": "Ransom:Win32/WannaCrypt.H", "display_name": "Ransom:Win32/WannaCrypt.H", "target": "/malware/Ransom:Win32/WannaCrypt.H" }, { "id": "CoolWebSearch", "display_name": "CoolWebSearch", "target": null }, { "id": "CycBot", "display_name": "CycBot", "target": null }, { "id": "Trojan:Win32/Bulta!rfn", "display_name": "Trojan:Win32/Bulta!rfn", "target": "/malware/Trojan:Win32/Bulta!rfn" }, { "id": "Trojan:Win32/Bulta!rfn", "display_name": "Trojan:Win32/Bulta!rfn", "target": "/malware/Trojan:Win32/Bulta!rfn" }, { "id": "Trojan.Startpage-1612", "display_name": "Trojan.Startpage-1612", "target": null } ], "attack_ids": [ { "id": "T1045", "name": "Software Packing", "display_name": "T1045 - Software Packing" }, { "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "display_name": "T1048 - Exfiltration Over Alternative Protocol" }, { "id": "T1057", "name": "Process Discovery", "display_name": "T1057 - Process Discovery" }, { "id": "T1059", "name": "Command and Scripting Interpreter", "display_name": "T1059 - Command and Scripting Interpreter" }, { "id": "T1060", "name": "Registry Run Keys / Startup Folder", "display_name": "T1060 - Registry Run Keys / Startup Folder" }, { "id": "T1069", "name": "Permission Groups Discovery", "display_name": "T1069 - Permission Groups Discovery" }, { "id": "T1071", "name": "Application Layer Protocol", "display_name": "T1071 - Application Layer Protocol" }, { "id": "T1105", "name": "Ingress Tool Transfer", "display_name": "T1105 - Ingress Tool Transfer" }, { "id": "T1140", "name": "Deobfuscate/Decode Files or Information", "display_name": "T1140 - Deobfuscate/Decode Files or Information" }, { "id": "T1189", "name": "Drive-by Compromise", "display_name": "T1189 - Drive-by Compromise" }, { "id": "T1204", "name": "User Execution", "display_name": "T1204 - User Execution" }, { "id": "T1480", "name": "Execution Guardrails", "display_name": "T1480 - Execution Guardrails" }, { "id": "T1553", "name": "Subvert Trust Controls", "display_name": "T1553 - Subvert Trust Controls" }, { "id": "T1562", "name": "Impair Defenses", "display_name": "T1562 - Impair Defenses" }, { "id": "T1568", "name": "Dynamic Resolution", "display_name": "T1568 - Dynamic Resolution" }, { "id": "T1583", "name": "Acquire Infrastructure", "display_name": "T1583 - Acquire Infrastructure" }, { "id": "T1048.001", "name": "Exfiltration Over Symmetric Encrypted Non-C2 Protocol", "display_name": "T1048.001 - Exfiltration Over Symmetric Encrypted Non-C2 Protocol" }, { "id": "T1048.003", "name": "Exfiltration Over Unencrypted/Obfuscated Non-C2 Protocol", "display_name": "T1048.003 - Exfiltration Over Unencrypted/Obfuscated Non-C2 Protocol" }, { "id": "T1584.005", "name": "Botnet", "display_name": "T1584.005 - Botnet" }, { "id": "T1583.001", "name": "Domains", "display_name": "T1583.001 - Domains" }, { "id": "T1155", "name": "AppleScript", "display_name": "T1155 - AppleScript" }, { "id": "T1071.004", "name": "DNS", "display_name": "T1071.004 - DNS" }, { "id": "T1071.001", "name": "Web Protocols", "display_name": "T1071.001 - Web Protocols" }, { "id": "T1562.001", "name": "Disable or Modify Tools", "display_name": "T1562.001 - Disable or Modify Tools" }, { "id": "T1553.002", "name": "Code Signing", "display_name": "T1553.002 - Code Signing" }, { "id": "T1069.002", "name": "Domain Groups", "display_name": "T1069.002 - Domain Groups" }, { "id": "T1059.007", "name": "JavaScript", "display_name": "T1059.007 - JavaScript" } ], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Q.Vashti", "id": "337942", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 241, "FileHash-SHA1": 245, "FileHash-SHA256": 246, "URL": 548, "CVE": 1, "SSLCertFingerprint": 6, "domain": 198, "email": 6, "hostname": 337 }, "indicator_count": 1828, "is_author": false, "is_subscribing": null, "subscriber_count": 142, "modified_text": "39 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69c228009e33309be83b65b7", "name": "Dropbox Typo squatting campaign. CoolWebSearch, CycBot , Mirai and Ransomware | Many domains affected.", "description": "Dropbox Typo squatting campaign. Mirai and Ransomware | Many domains affected.\n\nHas been executed. Threat actor attacked bank/s and Dropbox via Drive by compromises and malicious redirects. Multiple Dropbox accounts added to customer accounts confuse bank and customers. All accounts kept until Bank experienced serious breach. Bank admits to breach. Unsure if made public. Customer suddenly loses all paid storage, business tools , registered domains , and investment accounts. Bank empathizes targeted attacks.\nOccurred post initial infection & Pegasus Attack by same threat actors.", "modified": "2026-04-23T04:01:31.987000", "created": "2026-03-24T05:58:24.002000", "tags": [ "domain", "ipv4", "ck t1045", "run keys", "startup", "web protocols", "tool transfer", "user execution", "dns", "accept", "active related", "adversaries", "alerts", "apache", "as133618", "ascii text", "australia asn", "av detections", "christopher p ahmann", "brian sabey", "ck id", "ck matrix", "delete", "data upload", "defense evasion", "data", "cycbot", "cowboy", "coolwebsearch", "content", "contacted", "command", "connection", "delphi", "detection", "drop", "location", "manu", "dynamicloader", "elite", "emails", "encrypt", "error", "external", "extraction", "exploit", "failed", "gmt", "format", "forbidden", "privacy", "files", "feat file", "score", "refresh", "!redirect", "ratio", "redacted", "cycbot", "mirai", "unix", "ransomware", "trojan", "ransom", "query", "proximity", "pragma", "pegasus relationship", "typo squatting", "over path", "texarac", "name tactics", "h6rryf", "meta", "mitre att", "redirect", "malware", "malicious", "gmt server", "http header", "local", "little endian", "javascript", "is elf", "learn", "ipv4", "lambda", "lamk", "installer", "hall render", "index", "http request", "high risk", "insert", "ids detections", "informative", "indicator", "facts", "script style", "win32danginex", "trojanclicker", "trojan spy", "spyware", "udp", "windows", "vtab", "virtool", "trojan", "script strings", "stop data", "upatre", "spawns", "united states", "trojanspy", "tam legal", "secchuaplatform", "secchua", "virtool", "ransom", "quasi" ], "references": [ "dropox.com", "Win.Trojan.Agent-31647 \u2022 IDS: Detections CoolWebSearch Spyware (Feat)", "IDS Detections: Query for .cc TLD 403 Forbidden", "103.224.212.215 \u2022 rigs.zu0x.com \u2022 Australia : AS133618 trellian pty. limited", "UDP Include internal to internal communication Top Source 192.168.122.131 Top Destination 8.8.8.8 x", "u47.cc \u2022 IP Address 13.248.169.48, 76.223.54.146 | United States ASN AS16509 amazon.com", "u47.cc \u2022 | Domain is sinkholed | Registrar: ENAME TECHNOLOGY CO., LTD., x", "The Lambda function associated with the CloudFront distribution was throttled.", "We can't connect to the server for this & x Lambda function", "Error https://otx.alienvault.com/indicator/hostname/lb-212-215.above.com", "https://hybrid-analysis.com/sample/6ac18dcdfd4164ed7beeffffc995c5349c52b01dfObe5000f25294d698faf3b9/69c1b" ], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Australia" ], "malware_families": [ { "id": "Mirai", "display_name": "Mirai", "target": null }, { "id": "Win. Trojan.Agent-292909", "display_name": "Win. Trojan.Agent-292909", "target": null }, { "id": "Win.Trojan.Agent-336291", "display_name": "Win.Trojan.Agent-336291", "target": null }, { "id": "Trojan.Cycbot-2671", "display_name": "Trojan.Cycbot-2671", "target": null }, { "id": "Virtool:Win32/Obfuscator.JM", "display_name": "Virtool:Win32/Obfuscator.JM", "target": "/malware/Virtool:Win32/Obfuscator.JM" }, { "id": "Win.Trojan.Agent-36211", "display_name": "Win.Trojan.Agent-36211", "target": null }, { "id": "Win.Malware.Agent-6598770-0", "display_name": "Win.Malware.Agent-6598770-0", "target": null }, { "id": "Win.Downloader.14593-1", "display_name": "Win.Downloader.14593-1", "target": null }, { "id": "Unix.Trojan.Mirai-9441505-0", "display_name": "Unix.Trojan.Mirai-9441505-0", "target": null }, { "id": "Win.Dropper.DarkKomet-9370806-0", "display_name": "Win.Dropper.DarkKomet-9370806-0", "target": null }, { "id": "Trojan:Win32/Danginex", "display_name": "Trojan:Win32/Danginex", "target": "/malware/Trojan:Win32/Danginex" }, { "id": "Trojan.Redirector.JS", "display_name": "Trojan.Redirector.JS", "target": null }, { "id": "Win.Ransomware.Wanna-9769986-0", "display_name": "Win.Ransomware.Wanna-9769986-0", "target": null }, { "id": "Ransom:Win32/WannaCrypt.H", "display_name": "Ransom:Win32/WannaCrypt.H", "target": "/malware/Ransom:Win32/WannaCrypt.H" }, { "id": "CoolWebSearch", "display_name": "CoolWebSearch", "target": null }, { "id": "CycBot", "display_name": "CycBot", "target": null }, { "id": "Trojan:Win32/Bulta!rfn", "display_name": "Trojan:Win32/Bulta!rfn", "target": "/malware/Trojan:Win32/Bulta!rfn" }, { "id": "Trojan:Win32/Bulta!rfn", "display_name": "Trojan:Win32/Bulta!rfn", "target": "/malware/Trojan:Win32/Bulta!rfn" }, { "id": "Trojan.Startpage-1612", "display_name": "Trojan.Startpage-1612", "target": null } ], "attack_ids": [ { "id": "T1045", "name": "Software Packing", "display_name": "T1045 - Software Packing" }, { "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "display_name": "T1048 - Exfiltration Over Alternative Protocol" }, { "id": "T1057", "name": "Process Discovery", "display_name": "T1057 - Process Discovery" }, { "id": "T1059", "name": "Command and Scripting Interpreter", "display_name": "T1059 - Command and Scripting Interpreter" }, { "id": "T1060", "name": "Registry Run Keys / Startup Folder", "display_name": "T1060 - Registry Run Keys / Startup Folder" }, { "id": "T1069", "name": "Permission Groups Discovery", "display_name": "T1069 - Permission Groups Discovery" }, { "id": "T1071", "name": "Application Layer Protocol", "display_name": "T1071 - Application Layer Protocol" }, { "id": "T1105", "name": "Ingress Tool Transfer", "display_name": "T1105 - Ingress Tool Transfer" }, { "id": "T1140", "name": "Deobfuscate/Decode Files or Information", "display_name": "T1140 - Deobfuscate/Decode Files or Information" }, { "id": "T1189", "name": "Drive-by Compromise", "display_name": "T1189 - Drive-by Compromise" }, { "id": "T1204", "name": "User Execution", "display_name": "T1204 - User Execution" }, { "id": "T1480", "name": "Execution Guardrails", "display_name": "T1480 - Execution Guardrails" }, { "id": "T1553", "name": "Subvert Trust Controls", "display_name": "T1553 - Subvert Trust Controls" }, { "id": "T1562", "name": "Impair Defenses", "display_name": "T1562 - Impair Defenses" }, { "id": "T1568", "name": "Dynamic Resolution", "display_name": "T1568 - Dynamic Resolution" }, { "id": "T1583", "name": "Acquire Infrastructure", "display_name": "T1583 - Acquire Infrastructure" }, { "id": "T1048.001", "name": "Exfiltration Over Symmetric Encrypted Non-C2 Protocol", "display_name": "T1048.001 - Exfiltration Over Symmetric Encrypted Non-C2 Protocol" }, { "id": "T1048.003", "name": "Exfiltration Over Unencrypted/Obfuscated Non-C2 Protocol", "display_name": "T1048.003 - Exfiltration Over Unencrypted/Obfuscated Non-C2 Protocol" }, { "id": "T1584.005", "name": "Botnet", "display_name": "T1584.005 - Botnet" }, { "id": "T1583.001", "name": "Domains", "display_name": "T1583.001 - Domains" }, { "id": "T1155", "name": "AppleScript", "display_name": "T1155 - AppleScript" }, { "id": "T1071.004", "name": "DNS", "display_name": "T1071.004 - DNS" }, { "id": "T1071.001", "name": "Web Protocols", "display_name": "T1071.001 - Web Protocols" }, { "id": "T1562.001", "name": "Disable or Modify Tools", "display_name": "T1562.001 - Disable or Modify Tools" }, { "id": "T1553.002", "name": "Code Signing", "display_name": "T1553.002 - Code Signing" }, { "id": "T1069.002", "name": "Domain Groups", "display_name": "T1069.002 - Domain Groups" }, { "id": "T1059.007", "name": "JavaScript", "display_name": "T1059.007 - JavaScript" } ], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Q.Vashti", "id": "337942", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 241, "FileHash-SHA1": 245, "FileHash-SHA256": 246, "URL": 548, "CVE": 1, "SSLCertFingerprint": 6, "domain": 198, "email": 6, "hostname": 337 }, "indicator_count": 1828, "is_author": false, "is_subscribing": null, "subscriber_count": 143, "modified_text": "39 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69c06ca9341d6c063f652e33", "name": "ETERNALBLUE Probe MS17-010 | Wannacry Ransomware Domain - related to NSO Group Pegasus", "description": "Quasi governmental, Healthcare Law Firms , legal entities , as well as direct safety threats such as NSO Group Pegasus, Enterprise Cellebrite (in references) and other dangerous intimidation and life endangering tactics directed against a crime victim. Continuous harassment and threats of violence against victims family including 83 yo father. Veteran & hand picked Sr Systems Analyst and Engineer for Aegis Weapon System Team of 24. You\u2019re welcome America.. Victim left zero evidence with family. Documents shredded. Data stolen by parties named. She isn\u2019t the only one. These people do this for a living. Abuse of Palantir & Foundry tools.", "modified": "2026-04-21T22:07:35.710000", "created": "2026-03-22T22:26:49.205000", "tags": [ "ransomware", "united", "search", "asnone", "regsetvalueexa", "service", "regdword", "medium", "get na", "malware", "dock", "push", "write", "win32", "playgame", "unknown", "exploit", "cve", "wncry", "wannacry", "passive dns", "urls", "british virgin", "all url", "http", "ip address", "related nids", "files location", "virgin islands", "islands", "bgp", "virgin islands", "hijacked", "data upload", "extraction", "failed", "review iocs", "include ovo", "tovary review", "ids detec", "yara dete", "trior texarag", "drop or", "rrowse", "type", "extra data", "hurricane electric", "p2404", "p11629470400", "p11629107633", "artifacts v", "full reports", "v help", "info", "low l", "high ta0002", "techniques", "t1053", "command", "scripting inte", "low ta0003", "techniques high", "t1053 ite", "modify system", "pl t1543", "boot", "logon autostart", "ex t1547", "checks-disk-space", "checks-network-adapters", "detect-debug-environment", "direct-cpu-clock-access", "long-sleeps", "runtime-modules", "get http", "head http", "dns resolutions", "ip traffic", "53 tcp", "tls sni", "apple id", "webdisk", "expiration", "url http", "hostname", "no expiration", "iocs", "url https", "es included", "win32 exe", "pe32 executable", "ms windows", "intel", "ms visual", "win32 dynamic", "link library", "win16 ne", "learn", "ck id", "name tactics", "suspicious", "informative", "adversaries", "spawns", "t1204 user", "defense evasion", "over", "mitre att", "ck matrix", "ascii text", "hybrid", "general", "local", "path", "click", "strings", "javascript", "ssl certificate", "encrypt", "accept", "russia unknown", "meta", "record value", "aaaa", "link", "present jun", "apple", "remote access", "otx logo", "all ipv4", "url analysis", "files", "accept ch", "present dec", "content type", "x pcrew", "name servers", "present may", "body doctype", "title", "all domain", "servers", "china unknown", "found content", "gmt p3p", "cp oti", "dsp cor", "iva our", "ind com", "domain", "cname", "entries", "brian sabey", "hallrender", "christopher ahmann", "t1480 execution", "discovery att", "heur", "virtool", "win64", "mtb win32", "backdoor", "location china", "hangzhou", "china asn", "ransom", "wannadecryptor", "filehash", "yara detections", "msvisualcpp60", "related tags", "none file", "type pexe", "copy", "beginstring", "null", "refresh", "body", "span", "error", "tools", "look", "verify", "restart", "expl", "unknown cname", "hacktool", "domain address", "contacted hosts", "process details", "flag", "ipv4 add", "location united", "america flag", "exploit", "show", "all filehash", "expiration date", "gmt location", "gmt max", "domain add", "elite", "date", "cowboy", "United States", "present feb", "present oct", "creation date", "present nov", "moved", "emails" ], "references": [ "http://ww17.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com/", "Win32:CVE-2017-0147-B\\ [Expl] , Win.Ransomware.WannaCry-6313787-0 , Exploit:Win32/CVE-2017-0147.A", "IDS Detections: Observed WannaCry Domain (iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff .com in DNS Lookup)", "IDS Detections: Possible ETERNALBLUE Probe MS17-010 (MSF style) ETERNALBLUE Probe Vulnerable System Response MS17-010", "IDS Detections: Possible ETERNALBLUE Probe MS17-010 (Generic Flags)", "IDS Detections: Behavioral Unusual Port 445 traffic Potential Scan or Infection SMB-DS", "IDS Detections: IPC$ share access \u2022 SMB-DS IPC$ unicode share access \u2022 403 Forbidden", "Yara Detections: WannaCry_Ransomware , Wanna_Cry_Ransomware_Generic , WannaDecryptor", "Yara Detections: MS17_010_WanaCry_worm , stack_string , MS_Visual_Cpp_6_0 , Armadillov1xxv2xx", "Alerts: network_icmp nolookup_communication persistence_autorun modifies_proxy_wpad", "Alerts: network_cnc_http network_http allocates_rwx creates_exe creates_hidden_file", "Alerts: creates_service stealth_window antivm_network_adapters checks_debugger", "Alerts: peid_packer pe_unknown_resource_name", "IP\u2019s Contacted: 103.224.212.220 105.242.60.208 117.13.61.219 117.180.208.83 12.105.46.122", "IP\u2019s Contacted: 121.105.233.189 128.251.173.246 13.248.148.254 132.124.155.52 139.246.30.108", "Domains Contacted: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com", "Domains Contacted: ww38.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com", "FileHash-SHA256 002dee2db8b07b98b543ad99d0dd4e3e0ba7624f956d719ba803f57b426e30e7", "Names: Photo.scr \u2022 85115B0142902832C864B3009CAB1A00.RS (names of FileHash above)", "Crowdsourced IDS: Matches rule MALWARE-CNC DNS", "Crowdsourced IDS: Fast Flux attempt Matches rule ET INFO EXE IsDebuggerPresent (Used in Malware Anti-Debugging)", "Crowdsourced IDS: Matches rule ET POLICY PE EXE or DLL Windows file download HTTP", "apple.com-index.php-account-locked-verification.test2.aptaforum.com.cn", "apple.com-verify.account.manage.test2.aptaforum.com.cn", "appleid.apple.com-signin-8491e.test2.aptaforum.com.cn", "appleid.apple.com.secure1account.pagelogin.test2.aptaforum.com.cn", "web-secure-appleid-login.com.test2.aptaforum.com.cn", "http://apple.com-verify.account.manage.test2.aptaforum.com.cn/", "http://appleid.apple.com-signin-8491e.test2.aptaforum.com.cn/", "http://apple.sweetycat.com/ \u2022 https://apple.sweetycat.com/", "findmy.apple-uk.live", "apple.haipaoapp.com \u2022 http://apple.haipaoapp.com \u2022 http://apple.haipaoapp.com/ \u2022 https://apple.haipaoapp.com/", "http://apple.com-index.php-account-locked-verification.test2.aptaforum.com.cn/", "http://appleid.apple.com.secure1account.pagelogin.test2.aptaforum.com.cn/", "http://web-secure-appleid-login.com.test2.aptaforum.com.cn/", "Trojan/JS.Redirector.QNO SHA256:9e6e93c05a9736b95426fe0f492a18a2ac409bd9fb572dd3c982cb6de3ba0dbc", "VO7MU1HA.htm : https://hybrid-analysis.com/sample/9e6e93c05a9736b95426fe0f492a18a2ac409bd9fb572dd3c982cb6de3ba0dbc", "https://hybrid-analysis.com/sample/a638ece11c81bcac0002363eb3f75de35a46ce0e080b5de41162093181079a6b/69c018efcb875e4fb30cdfcc", "https://hybrid-analysis.com/sample/09610b7c855ef132a31f2e0136b4d62b9dbb04c6fcb42160d6d8409ef6394e40/69c0189c5e0483a78907cc39", "KeenDNS | keendnsaclremote805717135272048.qeenetic.link", "https://fonts.googleapis.com/css", "http://e7.c.lencr.org/74.crl \u2022 http://e7.i.lencr.org/", "Quasi Gov - Law firms stole victims clouds. Evidence, $Intellectual property, Memories of & victims family. Merciless", "www.remoteaccess.allied-media.com", "apple.com-index.php-account-locked-verification.test2.aptaforum.com.cn", "aptaforum.com.cn 182.61.201.90 , 182.61.201.91 China ASN AS38365 beijing baidu netcom science and technology co. ltd", "Emails:yejun.shou@yxips.com Name:\u7ebd\u8fea\u5e0c\u4e9a\u751f\u547d\u65e9\u671f\u8425\u517b\u54c1\u7ba1\u7406(\u4e0a\u6d77)\u6709\u9650\u516c\u53f8 Name Servers: dns17.hichina.com", "*unsigned Domain: aptaforum.com.cn Name Servers: dns18.hichina.com Registrar: \u963f\u91cc\u4e91\u8ba1\u7b97\u6709\u9650\u516c\u53f8\uff08\u4e07\u7f51\uff09Status: ok", "dns17.hichina.com", "dropbox.com - deleted victims DB post assault. Sabey + Ahmann repeatedly erased DB (ILLEGAL)", "Protected:SA\u2019r Jeffrey Scott Reimer, Mark Montano MD, John T. Sasha MD, Frederick P. Scherr , others.", "https://otx.alienvault.com/indicator/domain/qeenetic.link", "okg.and.googletagmanagers.com", "pcy.and.googletagmanagers.com", "pgj.and.googletagmanagers.com", "prb.and.googletagmanagers.com", "lkp.and.googletagmanagers.com", "jgw.and.googletagmanagers.com", "bzx.and.googletagmanagers.com", "msedge.b.tlu.dl.delivery.mp.microsoft.com", "http://prtests.ru/test.html?15%0Ahttp://profetest.ru/test.html?2%0Ahttp://qptest.ru/test.html?5%0Ahttp://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/3cf71a18-f999-4372-beac-67715d51bb62?P1=1629470400&P2=404&P3=2&P4=d%2520arRdiatcalmlQRKq2gm1LlFitNgIcLpnyzCIHYtf%2520ByXQF0JNptZ0rBDMKlLL%2520qsOzZdPICJjC7MWkkdm1Hg==%0Ahttp://stafftest.ru/test.html?0%0Ahttp://iqtesti.ru/test.html?17%0Ahttp://hrtests.ru/test.html?1%0Ahttp://pstests.ru/test.html?4%0Ahttp://prtests.ru/test.html?6%0Ahttp:/", "HallRender.com | Law Firm M. Brian Sabey Esq. | Pegasus related", "TAM Legal\u2019s Christopher P. \u2018Buzz\u2019 Ahmann Esq works for State Quasi Government in tandem w/ Hall Render", "https://otx.alienvault.com/pulse/69bf8e2663d5480917ddb699", "https://otx.alienvault.com/pulse/69bf261cc4e399447d78776c", "https://otx.alienvault.com/pulse/69bea426487bffa5384c6f38", "(?) https://living-sun.com/applescript/68281-is-there-a-way-to-disable-force-quit-while-applescript-application-is-still-running-applescript-quit.html", "https://otx.alienvault.com/pulse/69bf261cc4e399447d78776c", "https://otx.alienvault.com/pulse/69b49ad5dd40a24d83cd6a72" ], "public": 1, "adversary": "", "targeted_countries": [ "United States of America" ], "malware_families": [ { "id": "Ransomware", "display_name": "Ransomware", "target": null }, { "id": "Win.Ransomware.WannaCry-6313787-0", "display_name": "Win.Ransomware.WannaCry-6313787-0", "target": null }, { "id": "Exploit:Win32/CVE-2017-0147.A", "display_name": "Exploit:Win32/CVE-2017-0147.A", "target": "/malware/Exploit:Win32/CVE-2017-0147.A" }, { "id": "Trojan/JS.Redirector.QNO", "display_name": "Trojan/JS.Redirector.QNO", "target": null }, { "id": "Win.Trojan.Application-1955.", "display_name": "Win.Trojan.Application-1955.", "target": null }, { "id": "Win32:Banker-LAA\\ [Trj]", "display_name": "Win32:Banker-LAA\\ [Trj]", "target": null }, { "id": "Win.Malware.Snojan-6775202-0", "display_name": "Win.Malware.Snojan-6775202-0", "target": null }, { "id": "Win32:Evo-gen\\ [Trj]", "display_name": "Win32:Evo-gen\\ [Trj]", "target": null }, { "id": "Win64:Expiro-AJ\\ [Inf]", "display_name": "Win64:Expiro-AJ\\ [Inf]", "target": null }, { "id": "Win.Trojan.Fugrafa-9733007-0", "display_name": "Win.Trojan.Fugrafa-9733007-0", "target": null }, { "id": "Win32:TrojanX-gen\\ [Trj]", "display_name": "Win32:TrojanX-gen\\ [Trj]", "target": null }, { "id": "Win.Trojan.VBGeneric-6989114-0", "display_name": "Win.Trojan.VBGeneric-6989114-0", "target": null }, { "id": "VirTool:Win32/VBInject.YA!MTB", "display_name": "VirTool:Win32/VBInject.YA!MTB", "target": "/malware/VirTool:Win32/VBInject.YA!MTB" }, { "id": "Win32:Dh-A\\ [Win32:FileInfector-C\\ [Heur]", "display_name": "Win32:Dh-A\\ [Win32:FileInfector-C\\ [Heur]", "target": null }, { "id": "#VirTool:Win32/Obfuscator", "display_name": "#VirTool:Win32/Obfuscator", "target": "/malware/#VirTool:Win32/Obfuscator" }, { "id": "Backdoor:Win32/Small.IR", "display_name": "Backdoor:Win32/Small.IR", "target": "/malware/Backdoor:Win32/Small.IR" }, { "id": "Win64:Expiro-AJ\\ [Inf]", "display_name": "Win64:Expiro-AJ\\ [Inf]", "target": null }, { "id": "Win32:Dh-A\\", "display_name": "Win32:Dh-A\\", "target": null }, { "id": "CVE-2017-0147", "display_name": "CVE-2017-0147", "target": null }, { "id": "Ransom:Win32/CVE-2017-0147.A", "display_name": "Ransom:Win32/CVE-2017-0147.A", "target": "/malware/Ransom:Win32/CVE-2017-0147.A" }, { "id": "Win32:Malware-gen", "display_name": "Win32:Malware-gen", "target": null }, { "id": "Win.Malware.Flystudio-6738927-0", "display_name": "Win.Malware.Flystudio-6738927-0", "target": null }, { "id": "ALF:SpikeAexR.PEVPOPC", "display_name": "ALF:SpikeAexR.PEVPOPC", "target": null }, { "id": "Sf:WNCryLdr-A\\ [Trj]", "display_name": "Sf:WNCryLdr-A\\ [Trj]", "target": null }, { "id": "Win.Ransomware.WannaCry-6313787-0", "display_name": "Win.Ransomware.WannaCry-6313787-0", "target": null }, { "id": "ransom:Win32/WannaCrypt.H", "display_name": "ransom:Win32/WannaCrypt.H", "target": "/malware/ransom:Win32/WannaCrypt.H" } ], "attack_ids": [ { "id": "T1031", "name": "Modify Existing Service", "display_name": "T1031 - Modify Existing Service" }, { "id": "T1040", "name": "Network Sniffing", "display_name": "T1040 - Network Sniffing" }, { "id": "T1045", "name": "Software Packing", "display_name": "T1045 - Software Packing" }, { "id": "T1053", "name": "Scheduled Task/Job", "display_name": "T1053 - Scheduled Task/Job" }, { "id": "T1060", "name": "Registry Run Keys / Startup Folder", "display_name": "T1060 - Registry Run Keys / Startup Folder" }, { "id": "T1129", "name": "Shared Modules", "display_name": "T1129 - Shared Modules" }, { "id": "T1143", "name": "Hidden Window", "display_name": "T1143 - Hidden Window" }, { "id": "T1158", "name": "Hidden Files and Directories", "display_name": "T1158 - Hidden Files and Directories" }, { "id": "T1198", "name": "SIP and Trust Provider Hijacking", "display_name": "T1198 - SIP and Trust Provider Hijacking" }, { "id": "T1140", "name": "Deobfuscate/Decode Files or Information", "display_name": "T1140 - Deobfuscate/Decode Files or Information" }, { "id": "T1059", "name": "Command and Scripting Interpreter", "display_name": "T1059 - Command and Scripting Interpreter" }, { "id": "T1203", "name": "Exploitation for Client Execution", "display_name": "T1203 - Exploitation for Client Execution" }, { "id": "T1543", "name": "Create or Modify System Process", "display_name": "T1543 - Create or Modify System Process" }, { "id": "T1547", "name": "Boot or Logon Autostart Execution", "display_name": "T1547 - Boot or Logon Autostart Execution" }, { "id": "T1574", "name": "Hijack Execution Flow", "display_name": "T1574 - Hijack Execution Flow" }, { "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "display_name": "T1048 - Exfiltration Over Alternative Protocol" }, { "id": "T1057", "name": "Process Discovery", "display_name": "T1057 - Process Discovery" }, { "id": "T1069", "name": "Permission Groups Discovery", "display_name": "T1069 - Permission Groups Discovery" }, { "id": "T1071", "name": "Application Layer Protocol", "display_name": "T1071 - Application Layer Protocol" }, { "id": "T1105", "name": "Ingress Tool Transfer", "display_name": "T1105 - Ingress Tool Transfer" }, { "id": "T1204", "name": "User Execution", "display_name": "T1204 - User Execution" }, { "id": "T1480", "name": "Execution Guardrails", "display_name": "T1480 - Execution Guardrails" }, { "id": "T1568", "name": "Dynamic Resolution", "display_name": "T1568 - Dynamic Resolution" }, { "id": "T1069.002", "name": "Domain Groups", "display_name": "T1069.002 - Domain Groups" }, { "id": "T1568.002", "name": "Domain Generation Algorithms", "display_name": "T1568.002 - Domain Generation Algorithms" }, { "id": "T1071.001", "name": "Web Protocols", "display_name": "T1071.001 - Web Protocols" }, { "id": "T1071.004", "name": "DNS", "display_name": "T1071.004 - DNS" }, { "id": "T1048.003", "name": "Exfiltration Over Unencrypted/Obfuscated Non-C2 Protocol", "display_name": "T1048.003 - Exfiltration Over Unencrypted/Obfuscated Non-C2 Protocol" }, { "id": "T1189", "name": "Drive-by Compromise", "display_name": "T1189 - Drive-by Compromise" }, { "id": "T1553", "name": "Subvert Trust Controls", "display_name": "T1553 - Subvert Trust Controls" }, { "id": "T1583", "name": "Acquire Infrastructure", "display_name": "T1583 - Acquire Infrastructure" }, { "id": "T1543.001", "name": "Launch Agent", "display_name": "T1543.001 - Launch Agent" }, { "id": "T1210", "name": "Exploitation of Remote Services", "display_name": "T1210 - Exploitation of Remote Services" }, { "id": "T1022", "name": "Data Encrypted", "display_name": "T1022 - Data Encrypted" } ], "industries": [ "Government", "Legal", "Technology", "Healthcare" ], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 2, "follower_count": 0, "vote": 0, "author": { "username": "Q.Vashti", "id": "337942", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 3779, "FileHash-MD5": 422, "FileHash-SHA1": 411, "FileHash-SHA256": 1824, "domain": 979, "hostname": 2082, "CVE": 1, "BitcoinAddress": 3, "SSLCertFingerprint": 6, "email": 8 }, "indicator_count": 9515, "is_author": false, "is_subscribing": null, "subscriber_count": 143, "modified_text": "40 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68ddf5bda001ff2f840c20e7", "name": "Mofksys - Originated from an X.com image", "description": "Mofksys - Originated from an X.com image Clicked on image to expand. Image coded. IUQERFSODP9IFJAPOSDFJHGOSURIJFAEWRWERGWFF.COM - Seen before. Associated with Pegasus in the past. \n\n#wannacry #wannacrypt #ransomware #phishing #other_malware_packed#cabby#driveby #milesmx #keystrokes #record #screencapture #mofksys #remote access #fullaccess #code -#botnet #deadhost #otx_pulsed #hilo:", "modified": "2025-11-01T03:03:51.684000", "created": "2025-10-02T03:47:09.092000", "tags": [ "url http", "url https", "h oct", "united", "netherlands", "present apr", "passive dns", "ip address", "present jul", "domain add", "pulse pulses", "urls", "files", "trojan", "entries", "next associated", "mtb nov", "ipv4 add", "overview domain", "files ip", "address", "location united", "asn asnone", "whois registrar", "mtb apr", "files show", "date hash", "avast avg" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 7, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Q.Vashti", "id": "337942", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 3888, "domain": 1009, "hostname": 2134, "FileHash-SHA256": 2150, "CVE": 1, "FileHash-MD5": 106, "FileHash-SHA1": 107 }, "indicator_count": 9395, "is_author": false, "is_subscribing": null, "subscriber_count": 149, "modified_text": "212 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6665315e25f9dd42a99e4f2f", "name": "UAlberta Alfresco Management Software Abuse -> Admin/Backdoor Edmonton Police Services", "description": "Just pulled down what was in my employee profile (I don't work there).\nDiscovered after being directed to some management system (unknown at the time).\nPulled down and scanned: 1bf054bded99e2ae414154593d0892066b2e0c7add603f9321e157c77ae52075", "modified": "2025-10-10T19:03:58.376000", "created": "2024-06-09T04:36:46.536000", "tags": [ "note", "home", "lucene paths", "json descriptor", "lucene path", "company home", "actividades", "pageuser", "sie knnen", "sie auf", "link klicken", "recente", "u kunt", "attivit", "possibile", "activits", "vous", "report", "web link", "cvs report", "link", "chs placement", "chs student", "placement", "team", "google form", "university", "alberta", "automation", "please", "following", "followers", "ihnen", "mitarbeitern", "mitarbeiter", "hello", "foreign visitor", "fvca", "human resource", "fvca assessment", "incomplete", "regards", "klik", "wachtwoord", "mijn profiel", "klik op", "hoogachtend", "alfresco", "bonjour", "cliquez sur", "nous", "pour ce", "mon profil", "changer", "invito", "caro", "fare", "password", "il mio", "cambia password", "per rifiutare", "cordiali saluti", "my profile", "change password", "konto", "sie erstellt", "passwort", "wir legen", "ihnen nahe", "passwort bei", "anmeldung zu", "ndern", "gehen sie", "mmm yyyy", "nome utente", "nombre", "contrasea", "para hacerlo", "mi perfil", "atentamente", "account", "alfresco share", "hola", "haga", "los datos", "y seleccione", "si desea", "click", "einladung von", "hallo", "sie eingeladen", "site", "klicken sie", "konto fr", "alfresco client", "kofax index", "inhaltselement", "zur site", "gren alfresco", "pledged gift", "office", "advancement", "datetime", "university vpn", "date", "shared", "support", "auxiliary", "process", "priority", "medium high", "pay action", "sincerely", "uofa ecm", "link um", "aufgaben stehen", "verfgung", "prioritt", "niedrig mittel", "hoch", "klicken", "aufgabe zu", "il seguente", "disponibile", "priorit", "bassa media", "alta", "clicca", "clicca su", "la tche", "tre rcupre", "basse moyenne", "leve", "cliquez", "cordialement", "prioriteit", "laag gemiddeld", "hoog", "la siguiente", "prioridad", "media alta", "saludos", "kb content", "links content", "content url", "download url", "webdav url", "ttulo", "descripcin", "ninguno", "ninguna", "creador", "creado", "modificador", "modificado", "tamao", "webdav", "titre", "aucun", "aucune", "modificateur", "modifi", "taille", "ko liens", "du contenu", "dossier du", "url webdav", "titolo", "nessuno", "nessuna", "creato", "modificato", "dimensioni", "kb link", "al contenuto", "cartella", "ingen", "beskrivelse", "tittel", "opprettet", "modifikator", "modifisert", "strrelse", "lenker for", "innhold mappe", "descrio", "nome", "nenhum", "nenhuma", "criador", "criado", "tamanho", "geen", "beschrijving", "titel", "maker", "gemaakt", "gewijzigd", "grootte", "contenturl", "downloadurl", "beschreibung", "url zum", "keiner", "keine", "ersteller", "erstellt", "bearbeiter", "gendert", "kb links", "download", "navigatebrowse", "pagesite", "readme file", "yesno", "user name", "main", "function", "log debug", "record", "sample rm", "import", "njson", "forms", "sites", "documenttype", "commonfolder", "error", "value", "jsonfile", "service", "false", "moving", "prop", "null", "bearer", "uappol", "uappol function", "contentid", "param", "id var", "call", "post request", "json", "config", "coveo", "uappol metadata", "content id", "and not", "loads", "update", "uploader", "inbox", "rnrn", "create", "contenteml", "inbox folder", "number", "normal", "textpart", "backup", "createchildren", "backupname", "childlist", "name", "content", "array", "write", "childname2", "childname3", "childname4", "reviewgroup", "groupsite", "starting", "started", "delete email", "command", "found", "create content", "resources", "unknown command", "globals", "var title", "rnrncopyright", "copyright", "csvtoarray", "regexp", "jsonstr", "daily", "review", "az09", "format", "hrsfilescanner", "hrs document", "fromscanner", "not type", "matches1", "employee id", "third", "tempfilename", "ldap", "version", "this", "file share", "folder", "trimlr", "namearr", "personid", "document name", "ales file", "scanned", "shared drive", "last", "document type", "document", "advising notes", "debug", "debugstr", "schedule", "descriptorpath", "web service", "inbound rule", "web services", "collaborator", "groupeveryone", "check", "index", "taskassignee", "taskenddate", "filename", "localisotime", "startdatetime", "timeperiod", "uofa edrms", "author", "descommonnode", "nomatch", "iddocumenttype", "siteid", "span", "path", "term", "core", "cap report", "template", "object", "cap mail", "dev testing", "application", "aps status", "cap generate", "monthly report", "extension", "alfresco locale", "september", "pm mdt", "school", "didx", "json response", "cap final", "rebcapiddict", "finalcapiddict", "aps process", "trigger", "chsdocument", "message", "func", "msgstr", "emailobj", "emailtemplate", "emailsubject", "sitepath", "chs docs", "studentfiles", "faculty", "true", "chssiteid", "type", "aspect", "chsdocs", "nodeidx", "find", "expired", "chs school", "defunc", "facultykey", "program", "spasite", "ldapperson", "parent name", "securitytype", "formsengg", "limit", "enggfilescanner", "stuccid", "csv file", "studdept", "supccid", "supdept", "cosupccid", "relocation", "fgsr", "records site", "fgsr doc", "department", "start fgsr", "department doc", "completion of", "oral hlth", "form", "application for", "report of", "admission", "master", "music", "unknown", "comp", "class", "leave", "supervisor", "currentline", "return", "studentid", "superccid", "revdate", "code", "apstaskproperty", "converttocsv", "aps guideline", "aps task", "newdata", "hyperlink", "certificate", "first", "info", "procid", "filecontentstr", "query sort", "create header", "person id", "subject title", "node", "studentccid", "yyyymmdd", "lookupjson", "propidx", "input date", "iso format", "folder level", "query", "duedate", "test java", "dailyschedule", "upload", "ro adm", "workflow", "offset", "adm workflow", "data length", "startindex", "json object", "aps group", "acs site", "user", "getgroupid", "am mst", "acsaps group", "user sync", "january", "start january", "february", "start february", "december", "start december", "march", "start march", "am mdt", "consumer march", "aps student", "april", "start april", "june", "start june", "pm mst", "ro backscan", "edrmsteam", "group", "group december", "aps ro", "copy file", "aps api", "maxfile", "creator", "rand", "hrsbs", "july", "august", "hrsbssyncccids", "zhrroleuserresp", "edrms", "ccids", "prefix", "createdirectory", "directory", "actionreason", "safefilename", "employeeclass", "carry", "csv data", "host", "bachelor", "college level", "mike", "propname", "maxitems", "currjson", "fvca status", "important", "prod", "manual data", "doctoratephd", "medicine", "nodename", "employeeccid", "managerccid", "employeeid", "workingtitle", "regtempdescr", "findkey", "email", "new document", "doctypelabel", "competitive bid", "bid exception", "pcm competitive", "and aspect", "competitive", "nodes", "bid update", "acommonfolder", "formspcm", "peoplesoft", "no data", "qaselectednode", "qaselected", "qanotselected", "qa folder", "preqa", "qa var", "documentcount", "passcount", "qadocument", "qa selected", "moved", "attempts", "accepted", "rm file", "plan", "rm filing", "min to", "rm system", "batch", "time limit", "rmcfg", "string", "already", "load", "valid", "graddate", "uathdep", "ccid", "title", "abstract", "embargo", "datestr", "searchresult", "alfresco afa", "admissions", "student case", "files", "and type", "institution", "inst", "json config", "institution not", "if file", "logger", "needle", "xmlstr", "staus", "document linkn", "getlogfile", "documentlist", "xml field", "not found", "addaspect", "move aspect", "duplicate file", "makes", "to max", "checks", "workflow name", "workflow link", "emplid", "due daten", "total afa", "not path", "afabundling", "change", "not aspect", "logs", "ephesoft", "document moved", "epehsoft", "xmlsourcenode", "batchsize", "filemappingpdf", "entry", "move file", "getcsvfile", "batchprocess", "logging", "completed", "document link", "groupn", "created date", "stdapl", "person", "workflow desc", "json file", "list", "lastmonth", "daily qa", "default", "qastartdate", "query language", "finished", "afa bundle", "transcriptarr", "lucene query", "qacounter", "rrfgroupname", "uaroemplid", "uaropriority", "uaroduedate", "documentlistarr", "uarmm", "profile", "courseauditform", "status", "jile", "searchmatchmove", "logfoldername", "backscanreview", "smfstr", "rosm", "converter", "shortxml", "failedcsvfolder", "xml file", "qaoperatorindex", "qaoperatorlabel", "script", "suresh", "aws promotion", "file", "tasks", "bundlingprop", "tasktype", "grps2", "uarotasktype", "comments", "test", "ro scripts", "xmlnode", "shortdescr", "xmlcont", "firstname", "orgid", "middlename", "lastname", "middle", "final", "script started", "to now", "received date", "first name", "receiveddatestr", "dateofbirthstr", "getdefination", "2005 aug", "dropbox", "foldercreate", "scan doc", "officiality", "search match", "running script", "materialextid", "studentref", "ceeb", "materialcode", "memo", "jsoncontent", "ro document", "paperfileutils", "afaconfig", "ro workflow", "paperfileconfig", "applicationjson", "formsrso", "targetfile", "property name", "pinames today", "addp", "science addp", "addp move", "ro code", "scifilescanner", "desconfnode", "grabnodeprop", "copy", "consumer", "initiators", "hiring", "consigno", "offer letter", "match", "apsmaster", "match2", "reappointment", "expiry date", "today", "finaldate", "task info", "psperson", "complete basic", "hiring info", "employee", "resultdata", "delegategroup", "delegate group", "verify", "bind", "aps appointment", "trevor report", "sfsussl", "drawdown", "refund", "reporttype", "var document", "shareurl", "newgroup", "parentgrp", "group created", "var logfile", "rule folder", "site running", "report on", "get site", "foldername", "create file", "reportlogslogs", "reportlogs", "ist site", "running report", "count", "tran", "var csvfile", "result length", "processid", "process id", "delimiters", "quoted", "standard", "starting name", "morechildren", "pdf var", "length", "newname", "fiscal", "docnamearr", "filenode", "calendar year", "versionhistory", "new doc", "web deployed", "var startdate", "startdate", "maxcount", "prevmonth", "monthcount", "application id", "delete", "get path", "if node", "search length", "arra y", "if csv", "version history", "graduate", "graduate folder", "children", "graduate file", "searchmatchdob", "career", "appl nbr", "jan04 now", "counter", "thesis", "runyear", "spring", "service log", "everything", "this determine", "thesis deposit", "archival", "problem", "filepath", "md import", "arraytocsv", "found document", "start", "food", "yumna", "start kofax", "kofax", "admin", "subject", "sample email", "execute", "koafx", "apasresponseid", "merge", "recruitment", "transcripts", "review request", "admindate", "requesteddate", "approveddate", "approvereject", "getemailbody", "taskid", "sendemail", "request status", "siteconsumer", "sitemanager", "eval", "acshost", "global env", "config file", "apsprod", "params", "alloc", "checkpath", "newpath", "adding entity", "surnamechar", "adding person", "jsonfunction", "text", "syntaxerror", "arraytoxml", "xml related", "change xml", "xmltoarray", "xmlutil", "common folder", "random2digit", "maxlimit", "jsonarchive", "very", "returns", "sitecontext", "arrcounter", "node id", "items", "array length", "therecord", "award sponsor", "rso project", "res0012345", "iso88591", "util function", "project id", "proposal id", "doc name", "newdocname", "prod url", "199899", "property", "typeprop", "barcode", "accepts", "parent", "xmlfilename", "siteconfigjson", "qabatchgrp", "signeddate", "ephdocumenttype", "json document", "qapercentage", "entity", "broker", "add error", "getexecutetime", "qaoperator", "retain title", "idnumber", "assocname", "metaarr", "fund report", "csvcontent", "input folder", "doc00c200004txg", "xmlfile", "node1", "node2", "540am", "240pm", "metadata", "var folder", "filter", "mappedobj", "09azaz", "conditionval", "foldercondition", "file name", "xmlfileobj", "alfresco prop", "setup error", "formatjson", "id property", "move", "getrandomnumber", "result", "newdoctype", "no title", "clioacs update", "clio", "patch", "system overview", "system", "overview", "purpose", "aims", "objectives", "prerequisites", "total", "expected effort", "domain", "urls", "dept param", "department name", "done", "submit form", "saving", "label", "input", "approvers", "information", "user group", "request", "group request", "users", "single family", "edmonton ab", "coverage", "common law", "step workflow", "care", "dental benefits", "direct", "web scripts", "get http", "documentation", "web script", "http method", "http", "apis", "development", "knowledge", "java", "empty argument", "e1234", "im system", "lookupentity", "configfilename", "namespace", "searchterm", "access", "jsonuser", "alfresco search", "page search", "expires", "signer", "reason", "utf8", "stripcharacter", "pull hiring", "getapsdbid", "save", "processsetidset", "saved", "returndata", "boolean", "start building", "varname", "fill", "time click", "initiated all", "submissions", "all submissions", "process landing", "page", "initiators all", "maps initiated", "post doc", "student term", "start form", "middle name", "email address", "retype", "cell", "phone no", "fellow", "secureorigin", "expand", "thank", "here", "please check", "aps list", "pang", "subset", "display", "args", "task", "username", "save form", "data need", "cdkey", "checkdict", "item", "column", "anchor", "multi", "tasks filter", "search", "trigger aps", "process api", "apsprocess", "authentication", "webscript", "getapsperson", "process info", "initsavestatus", "step0statusfail", "signer1", "signer2", "appointment", "taskjson", "groupapiaccess", "checkapiuser", "fgsrpr", "psaudit", "statusname", "unsuccessful1", "apptreappt", "emplobject", "caps aps", "cap epsb", "applicant", "form submitted", "board review", "form applicant", "school district", "start date", "cap application", "home help", "pdfa format", "larger", "upload file", "please click", "uofacap", "applications", "jstr", "processjson", "invalid url", "associate dean", "edmonton public", "october", "elk island", "reutrn false", "mapdoctypeurl", "doctype", "cap document", "doctypes", "doctypemap", "schools", "public schools", "foip", "edmonton area", "epsb", "capid", "server", "aps user", "groupcapadmin", "assignuser", "cap ea", "successfully", "please wait", "successfully ea", "apsservice", "apsserviceprod", "requireddate", "bibliography", "reb approval", "letter", "cprbls", "ahsrespect", "ahscon", "immformdocs", "picvsc", "whmis", "condissi", "hspnet", "conphoto", "conclin", "college", "health", "submission date", "effective date", "expiration date", "chs admin", "student view", "typekey", "placementdocs", "warning", "jobj", "abraniuk", "wendy", "terry harris", "directorhrsbs", "level", "holiday pay", "part time", "payroll", "salariedreg aux", "cheat", "paramname", "getallurlparams", "hrsbs config", "data dictionary", "field", "responsejson", "workflowid", "workflow id", "context", "event", "statusevent", "uaesign", "success", "permission", "progress report", "postdoctoral", "sorry", "deptjson", "fgsr student", "process status", "select", "currentuser", "reports", "student ccid", "populated", "invalid student", "supervisor ccid", "co supervisor", "due date", "freedom", "report process", "fgsr forms", "list fgsr", "report fgsr", "report sorry", "review process", "fgsr supervisor", "thesis programs", "programs", "please enter", "student id", "submit button", "var taskid", "var currentuser", "review sorry", "raheel", "added", "urlorigin", "need", "raheel var", "elmid", "commentkeyarr", "override", "menu", "colour bar", "mdphd", "absence", "completion", "mbameng", "mbamsc", "meng", "jason", "acs property", "available", "subdoctype", "test person", "test effective", "modelnodepath", "sitename", "metadatamap", "sitefile", "google addon", "gtagra", "gta gra", "zhreformengresp", "id otherwise", "university home", "indicate", "monday", "tuesday", "wednesday", "thursday", "friday", "na note", "services", "please contact", "documentname", "time", "docs", "documentlink", "employee ccid", "conflict", "task assigned", "ist coi", "declaration", "jsonobj3", "parse", "stringify", "grouplist", "json post", "taskfilter", "applies", "assigntogroup", "retrieves", "assignee", "queries", "expects", "uri args", "json containing", "applyfilter", "assignment", "avm folder", "avm store", "store id", "fullpath", "store", "storeid", "avm stores", "search term", "blog query", "category", "api call", "returns json", "cached data", "keylabel", "rest", "ldap query", "resultstr", "jsonoutput", "campusid", "jsonobj", "suresh joshee", "raheel bhojani", "desrochers", "first check", "set message", "materialkey", "acommonfolderid", "hasaccess", "siteconfig", "unprocesseddata", "savemetadata", "getcustomscript", "sitetitle", "error occured", "afa admission", "afas", "change log", "date name", "description", "ebeaton script", "tfrith", "afa main", "runasuser", "afas name", "afa paper", "file test", "utility enter", "does", "student", "bad query", "parameters", "add all", "or condition", "batch ids", "case files", "batchid", "afns", "agricultural", "anaesthes", "life", "environmental", "anaesthesiology", "uappol content", "deanaheed", "programyear", "province", "agreementtype", "safety manual", "mtis", "cree", "blackfoot", "nakota sioux", "iroquois", "dene", "treaties", "first nations", "next", "refresh", "site viewer", "facetkey", "sortparameter", "textjavascript", "public site", "viewer access", "acs cron", "job error", "alfrescos", "unauthorized", "enter", "bear tracks", "main department", "choose", "library", "john", "reviewer", "embargodate", "actiondate", "convocation", "graduation", "nodeid", "thesis status", "match result", "match list", "name dob", "view", "searchcriteria", "main function", "method", "chs upload", "stuln", "filetype", "stuid", "chs agreement", "health sciences", "recreation fomd", "dentistry fomd", "fomd", "therapy fomd", "consent for", "disclosure of", "alberta freedom", "protection", "privacy act", "alberta health", "chs form", "intake", "tasks dashlet", "doccd", "val2", "a my", "view error", "view warning", "keyword search", "refresh list" ], "references": [ "old-AlfrescoToolkit.conf", "AlfrescoToolkit.info", "AlfrescoToolkit.conf", "activities-email_es.ftl", "activities-email_ja.ftl", "activities-email_de.ftl", "activities-email_nl.ftl", "activities-email.ftl", "activities-email_it.ftl", "activities-email_fr.ftl", "CAP-notify-monthly-report.ftl", "chs-commentUpdate.ftl", "chs-studentUploadNotification.ftl", "chs-Invalid.ftl", "chs-studentExpireSoon.ftl", "chs-studentExpired.ftl", "following-email.html_it.ftl", "following-email.html_fr.ftl", "following-email.html_ja.ftl", "following-email.html_nl.ftl", "following-email_de.html.ftl", "following-email_fr.html.ftl", "following-email_ja.html.ftl", "following-email_it.html.ftl", "following-email_nl.html.ftl", "following-email.html.ftl", "following-email.html_de.ftl", "fvca-reminder-email.ftl", "fvca-corrections-email.ftl", "invite-email_nl.html.ftl", "invite-email-add-direct.html.ftl", "invite-email-add-direct.html_fr.ftl", "invite-email_fr.html.ftl", "invite-email_it.html.ftl", "invite-email-add-direct.html_es.ftl", "invite-email-add-direct.html_de.ftl", "invite-email_ja.html.ftl", "invite-email-add-direct.html_nl.ftl", "new-user-email.html.ftl", "new-user-email_de.html.ftl", "invite-email-add-direct.html_ja.ftl", "invite-email-moderated.html.ftl", "new-user-email_fr.html.ftl", "new-user-email_it.html.ftl", "new-user-email_ja.html.ftl", "new-user-email_es.html.ftl", "new-user-email_nl.html.ftl", "invite-email-add-direct.html_it.ftl", "new-user-email_nl.html", "invite-email.html_nl.ftl", "invite-email.ftl", "invite-email_es.html.ftl", "invite-email.html.ftl", "invite-email_de.html.ftl", "invite_user_email.ftl", "kofaxFailedEmailTemplate.ftl", "notify_user_email.ftl", "notify_nl.htm", "notify_user_email_es.html.ftl", "notify_user_email_de.html.ftl", "notify_user_email_ooa_failed.ftl", "notify_user_email.html.ftl", "notify_user_email_it.html.ftl", "notify_user_email_e-transcript_failed.ftl", "notify_user_email_ja.html.ftl", "notify_user_email_fr.html.ftl", "notify_user_email_nl.html.ftl", "OOA-notify-email-template.ftl", "ADV-notify-terms-types.ftl", "appt-final-reminder.ftl", "appt-halfway-reminder.ftl", "sfs-wf-email.html.ftl", "sfs-wf-completed-email.html.ftl", "payActionDecision.html.ftl", "departmentAdhocTask.html.ftl", "wf-email.html_de.ftl", "wf-email.html.ftl", "wf-email_it.html.ftl", "wf-email_fr.html.ftl", "wf-email_nl.html.ftl", "wf-email_ja.html.ftl", "wf-email.html_fr.ftl", "wf-email.html_nl.ftl", "wf-email_es.html.ftl", "wf-email.html_ja.ftl", "wf-email.html_it.ftl", "wf-email_de.html.ftl", "wf-email.html_es.ftl", "emailbody_textplain_alfresco.ftl", "emailbody_textplain_alfresco_es.ftl", "emailbody_textplain_alfresco_fr.ftl", "emailbody_textplain_alfresco_it.ftl", "emailbody_textplain_alfresco_ja.ftl", "emailbody_textplain_alfresco_nb.ftl", "emailbody_textplain_alfresco_pt_BR.ftl", "emailbody_textplain_alfresco_nl.ftl", "emailbody_textplain_alfresco_ru.ftl", "emailbody_textplain_alfresco_zh_CN.ftl", "emailbody_textplain_share.ftl", "emailbody_textplain_share_de.ftl", "emailbody_textplain_share_es.ftl", "emailbody_textplain_share_it.ftl", "emailbody_textplain_share_ja.ftl", "emailbody_textplain_share_nb.ftl", "emailbody_textplain_share_nl.ftl", "emailbody_textplain_share_ru.ftl", "emailbody-alfresco-textplain.ftl", "emailbody-share-textplain.ftl", "emailbody_textplain_alfresco_de.ftl", "emailbody_textplain_share_zh_CN.ftl", "emailbody_textplain_share_fr.ftl", "emailbody_textplain_share_pt_BR.ftl", "uofa-pc-model.xml", "uofa-pllc-model.xml", "uofa-science-model.xml", "uofa-rso-model.xml", "uofa-set-model.xml", "uofa-sfs-model.xml", "uofa-slate-model.xml", "uofa-uappol-model.xml", "advext-model.xml", "assocModel.xml", "adv-model.xml", "cbsr-model.xml", "dynamicSecurityMarksModel", "ephesoft-educational.xml", "facopr-model.xml", "fgsr-model.xml", "faculty-model.xml", "psAudit-model.xml", "FVCA.xml", "roDocProcessing-model.xml", "ro-model.xml", "fgsr-thesis-deposit.xml", "security-group-model.xml", "ua-audit-generic-model.xml", "ua-dummy.xml", "calendar-year-model.xml", "ua-error-model.xml", "uafgsrsup-model.xml", "uaqa-model.xml", "transcript-model.xml", "uAlbertaWorkflowGeneral.xml", "uarmm-supplement-scanning.xml", "uarm-rma-filing-model.xml", "ua-search-model.xml", "ro-search-match.xml", "uatraining.xml", "uofa-ales-model.xml", "uofa-arts-model.xml", "uofa-aps-model.xml", "uofa-base-model.xml", "uawfh-model.xml", "uofa-augustana-model.xml", "uofa-business-model.xml", "uarmTempModel.xml", "uofa-cap-model.xml", "uofa-chs-model.xml", "uofa-chs-agreements-model.xml", "uofa-common-model.xml", "uofa-education-model.xml", "tamis-model.xml", "uofa-engg-coop-model.xml", "uofa-engg-model.xml", "uofa-fo-model.xml", "uofa-extension-model.xml", "uofa-esign-model.xml", "uofa-hrsbs-model.xml", "uofa-law-model.xml", "uofa-caps-model.xml", "uofa-hrs-model.xml", "uofa-native-studies-model.xml", "uofa-pllc-model.json", "uofa-rso-model.json", "uofa-pc-model.json", "uofa-native-studies-model.json", "uofa-slate-model.json", "uofa-uappol-model.json", "uofa-science-model.json", "uofa-workflowGeneral.json", "uofa-sfs-model.json", "adv-model.json", "advext-model.json", "assocModel.json", "calendar-year-model.json", "facopr-model.json", "cbsr-model.json", "ephesoft-educational.json", "faculty-model.json", "faculty-model.xml.json", "rma-model.json", "fgsr-model.json", "FVCA.json", "psAudit-model.json", "ro-aug-model.json", "ro-search-match.json", "tamis-model.json", "security-group-model.json", "fgsr-thesis-deposit.json", "transcript-model.json", "ro-model.json", "ua-audit-generic-model.json", "uafgsrsup-model.json", "uaqa-model.json", "uarmm-supplement-scanning.json", "uAlbertaWorkflowGeneral.json", "ua-error-model.json", "uofa-ales-model.json", "ua-search-model.json", "uarmTempModel.json", "uofa-aps-model.json", "uawfh-model.json", "uofa-arts-model.json", "uofa-cap-model.json", "uofa-chs-agreements-model.json", "uofa-augustana-model.json", "uofa-base-model.json", "uofa-chs-model.json", "uofa-engg-coop-model.json", "uofa-common-model.json", "uofa-engg-model.json", "uofa-extension-model.json", "uofa-hrsbs-model.json", "uofa-fo-model.json", "uofa-education-model.json", "uofa-law-model.json", "uofa-hrs-model.json", "uofa-esign-model.json", "uofa-business-model.json", "faculty-of-science-site.json", "FandO-Organizations.json", "FandO-Programs.json", "fgsr-awards.json", "fgsr-category-list.json", "fgsr-exam-list.json", "fgsr-official-list.json", "fgsr-programOfStudy.json", "fgsr-site.json", "fo-emergency-response-manual.json", "graduate-student-records-site.json", "fo-site.json", "fo-utilities.json", "hrs-benefits.json", "hrsbs-action-reasons.json", "graduate-student-records-v2-site.json", "hrsbs-doc-list.json", "hrsbs-file-structure.json", "hrsbs-owner-details.json", "hrsbs-functionalroles.json", "hrsbs-function-module.json", "hrsbs-review-month.json", "hrsbs-security-class.json", "hrsbs-site.json", "hrs-employeeApprovedDeductions.json", "hrs-bulkId.json", "hrsbs-review-cycle.json", "hrs-employmentFinancial.json", "hrs-personalInformation.json", "hrs-pension.json", "hrs-security-list.json", "hrs-leaves.json", "Institutions.json", "ist-site.json", "hrs-site.json", "my-site-site.json", "law-security-list.json", "native-studies-doc-list.json", "fgsr-credential-list.json", "law-doc-list.json", "native-studies-security-list.json", "office-of-advancement-record-types.json", "office-of-advancement-site.json", "pcm-category.json", "pllc-doc-list.json", "ro-academic-pre-pro-programs.json", "pllc-security-list.json", "ro-acad-group.json", "ro-admitType.json", "ro-applicant-type.json", "ro-campusSolutionsTerm.json", "hrsbs-employee-class.json", "pllc-site.json", "ro-indigenous-type.json", "ro-doctypes.json", "pcm-site.json", "ro-official.json", "ro-org-desc.json", "ro-related-record-types.json", "ro-relationship-to-institution.json", "ro-search-match-status.json", "ro-authenticity.json", "ro-slate-folio-material-non-school-scope.json", "ro-slate-institution-material.json", "ro-slate-folio-material-school-scope.json", "ro-method-receipt.json", "ro-slate-institutions.json", "ro-test-id.json", "rso-accounts-receivable-accounts-payable-doc-type.json", "rso-agreements-doc-category.json", "rso-bulk-scan-doc-type.json", "rso-cfi-purchasing-doc-type.json", "rso-cfi-financials-doc-type.json", "rso-financial-reconciliation-doc-type.json", "rso-financial-reporting-doc-type.json", "rso-financials-doc-type.json", "rso-mask.json", "rso-site.json", "rso-sponsor-names.json", "science-doc-list.json", "science-security-list.json", "school-of-business-site.json", "sfs-ussl-report-status.json", "staff-training-site.json", "student-financial-services-doc-list.json", "student-financial-services-site.json", "student-records-bulk-load-testing-site.json", "student-records-training-site.json", "student-records-site.json", "student-transcripts-site.json", "rso-forms-form-type.json", "support-documentation-site.json", "test-site-site.json", "uappol-category-heirarchy.json", "uappol-type.json", "uappol-site.json", "uoda-faculties.json", "academic-department.json", "adv-correspondence-type.json", "uoda-departments.json", "advsearch.json", "ales-security-list.json", "ales-doc-list.json", "arts-doc-list.json", "arts-security-list.json", "augustana-security-list.json", "augustana-site.json", "augustana-legacy-transcript-doc-list.json", "rso-activation-report-doc-type.json", "business-doc-list.json", "business-security-list.json", "bulkload-testing-site.json", "cap-site.json", "caps-school-board-list.json", "cbsrsite-site.json", "cbsrsite-sopTypes.json", "cbsr-study.json", "cbsr-worksheetType.json", "augustana-doc-list.json", "chs-ag-type.json", "chs-agreements-site.json", "chs-campus-list.json", "chs-degProgram-list.json", "chs-emailNotification.json", "chs-document-status.json", "chs-faculty-list.json", "chs-programYear-list.json", "chs-program-list.json", "canada-provinces-list.json", "demo-site-site.json", "education-doc-list.json", "department.json", "education-security-list.json", "chs-stuEmailNotification.json", "college-of-health-sciences-site.json", "chs-provinces-list.json", "engineering-coop-doc-list.json", "engineering-coop-security-list.json", "engineering-co-op-site.json", "engineering-doc-list.json", "extension-doc-list.json", "extension-security-list.json", "facopr-planTypes.json", "facopr-supportinDocField.json", "faculty-of-ales-site.json", "engineering-security-list.json", "faculty-of-education-site.json", "faculty-of-extension-site.json", "faculty-of-native-studies-site.json", "faculty-of-law-site.json", "faculty-of-arts-site.json", "faculty-of-engineering-site.json", "my_docs_inline.ftl", "my_docs.ftl", "my_spaces.ftl", "recent_docs.ftl", "translatable.ftl", "readme.ftl", "show_audit.ftl", "general_example.ftl", "my_summary.ftl", "doc_info.ftl", "localizable.ftl", "recordsCustomModel.xml", "imapConfig.json", "rm_event_config.json", "rmScriptThrowError.js", "report_rmr_transferReport.html.ftl", "report_rmr_destructionReport.html.ftl", "report_rmr_holdReport.html.ftl", "notify-records-due-for-review-email.ftl", "record-rejected-email.ftl", "record-superseded-email.ftl", "onCreate_supersedes.js", "rma_isClosed.js", "PaperFileconfig.json", "MyTasks-config.json", "AFAconfig.json", "roDocumentTypes.json", "uappol-upload-rule.js", "uappolCreateFolderRule.js", "uappolCreateFolder.js", "uappol-api.js", "uappol-functions.js", "command-utils.js", "backup and log.js", "backup.js", "example test script.js", "test return value.js", "start-pooled-review-workflow.js", "command-processor.js", "command-search.js", "alfresco docs.js", "append copyright.js", "createDepartmentJSON.js", "hrsDaily.js", "hrsFolderCreateSchedule.js", "hrsScanned.js", "hrsCreateFolder.js", "hrsFolderCreateRule.js", "hrsFileShareFolder.js", "alesCreateFolderRestricted.js", "alesCreateFolderSchedule.js", "alesBulkShareFolder.js", "alesFileScanned.js", "alesCreateFolder.js", "alesDaily.js", "alesFileShareFolder.js", "alesCreateFolderConfidential.js", "alesCreateAdvisingNotes.js", "alesFolderCreateSchedule.js", "deployWebServiceDescriptor.js", "taskReportCSV-Appointment-prod.js", "artsFileScanned.js", "artsCreateFolderRule.js", "artsCreateFolder.js", "artsCreateFolderRestricted.js", "augCreateFolderRestricted.js", "augCreateFolder.js", "businessCreateFolderRule.js", "businessCreateFolder.js", "businessCreateFolderSchedule.js", "businessBulkShareFolder.js", "businessFileShareFolder.js", "businessCreateFolderRestricted.js", "businessDaily.js", "businessCreateAdvisingNotes.js", "businessFileScanned.js", "CAPSendMonthlyReportEmail.js", "CAPGenerateMonthlyReport.js", "CapFinalReportSubmit.js", "chsCreateFolderRule.js", "chsEmailOnUpdateComment.js", "chsReport.js", "EmailNotifCHSStudent.js", "SetExpiryDate.js", "chsCreateFolder.js", "chsFacultyReport.js", "chsAgreementCreateFolderRule.js", "chsAgreementCreateFolder.js", "scheduleJobTest.js", "every52MinPastHour.js", "every46MinPastHourBetween4PM12PM.js", "every57MinPastHour.js", "every47MinPastHourBetween4PM12PM.js", "everyDay4H30MinAM.js", "everyDay7H45MinAM.js", "every10MinStartingAt5MinPastHour.js", "every38MinPastHourBetween4PM12PM.js", "every20MinStartingAt15MinPastHour.js", "everyDay2H05MinAM.js", "every2MinStartingAt1MinPastHour.js", "everyDay1H05MinAM.js", "everyDay12H30MinAM.js", "everyDay7H30MinPM.js", "every30MinStartingAt19MinPastHour.js", "every30MinStartingAt11MinPastHour.js", "everyDay2H35MinAM.js", "every30MinStartingAt26MinPastHour.js", "every16MinPastHour.js", "everyDay1H45MinAM.js", "everyDay2H45MinAM.js", "every29MinPastHour.js", "every22MinPastHour.js", "everyDay11H30MinPM.js", "educationCreateFolderRule.js", "educationCreateFolder.js", "educationCreateAdvisingNotes.js", "enggCoopCreateFolderRestricted.js", "enggCoopCreateFolderRule.js", "enggCoopBulkUpload.js", "enggCreateFolderRule.js", "enggCreateFolderRestricted.js", "enggCreateFolder.js", "engineeringCreateAdvisingNotes.js", "enggCoopCreateFolder.js", "enggFileScanned.js", "enggCoopFileScanned.js", "extensionFileScanned.js", "extensionCreateFolder.js", "extensionCreateFolderRule.js", "fgsrCreateGuidelineAPSProcessFromCSV.js", "fgsrDocRestructure.js", "fgsrMigrationScript.js", "fgsrDocRelocation.js", "fgsrCreateFolderFromCSV.js", "guideline-reports.js", "fgsrMigrationScript-withTerminationLogic.js", "modfiyOrUpdatePropertyfromCSV.js", "fgsr-case-file-report.js", "fgsrCreateAPSProcessFromFolder.js", "fgsrCreateFolder.js", "fgsrCopyMetadataToFolderLevel.js", "fgsrCreateAPSProcessFromCSV.js", "foCreateFolder.js", "foCreateFolderRule.js", "Script1.js", "Script2.js", "scheduleRunEvery2-10PM.js", "scheduleRunEvery5PMTo10PM.js", "scheduleRunEvery30Minutes.js", "scheduleRunEvery60Minutes.js", "scheduleRunEveryday3PMto11PM.js", "scheduleRunEveryday12AMto6AM.js", "scheduleRunEvery20Minutes.js", "scheduleRunEvery2AM.js", "acsToApsUserUpdate.js", "2024-01-13-log.txt", "2024-01-15-log.txt", "2024-01-20-log.txt", "2024-01-21-log.txt", "2024-01-22-log.txt", "2024-01-23-log.txt", "2024-02-04-log.txt", "2024-02-05-log.txt", "2024-02-06-log.txt", "2024-02-07-log.txt", "2024-02-08-log.txt", "2024-01-14-log.txt", "2024-01-18-log.txt", "2024-01-11-log.txt", "2024-01-16-log.txt", "2024-01-19-log.txt", "2024-01-26-log.txt", "2024-01-28-log.txt", "2024-01-30-log.txt", "2024-01-12-log.txt", "2024-01-29-log.txt", "2024-01-27-log.txt", "2024-01-31-log.txt", "2024-01-24-log.txt", "2024-02-09-log.txt", "2024-02-02-log.txt", "2024-01-09-log.txt", "2024-02-03-log.txt", "2024-01-05-log.txt", "2024-01-06-log.txt", "2024-01-04-log.txt", "2024-02-01-log.txt", "2024-01-07-log.txt", "2024-01-08-log.txt", "2024-02-10-log.txt", "2024-02-11-log.txt", "2024-02-12-log.txt", "2024-02-13-log.txt", "2023-12-31-log.txt", "2024-02-15-log.txt", "2024-02-16-log.txt", "2024-02-14-log.txt", "2024-02-18-log.txt", "2024-02-20-log.txt", "2024-01-17-log.txt", "2024-02-19-log.txt", "2024-01-10-log.txt", "2024-02-23-log.txt", "2024-02-25-log.txt", "2024-02-21-log.txt", "2024-01-25-log.txt", "2024-02-28-log.txt", "2024-02-22-log.txt", "2024-02-29-log.txt", "2024-03-02-log.txt", "2024-03-03-log.txt", "2024-02-26-log.txt", "2024-03-04-log.txt", "2024-03-06-log.txt", "2024-03-07-log.txt", "2024-03-05-log.txt", "2024-03-08-log.txt", "2024-03-09-log.txt", "2024-03-11-log.txt", "2024-03-10-log.txt", "2024-03-12-log.txt", "2024-03-13-log.txt", "2024-03-14-log.txt", "2024-03-15-log.txt", "2024-03-16-log.txt", "2024-03-17-log.txt", "2024-03-18-log.txt", "2024-03-20-log.txt", "2024-03-21-log.txt", "2024-03-22-log.txt", "2024-03-19-log.txt", "2024-03-23-log.txt", "2024-03-01-log.txt", "2024-03-26-log.txt", "2024-03-25-log.txt", "2024-03-28-log.txt", "2024-03-29-log.txt", "2024-03-27-log.txt", "2024-03-24-log.txt", "2024-03-30-log.txt", "2024-04-02-log.txt", "2024-04-03-log.txt", "2024-03-31-log.txt", "2024-04-05-log.txt", "2024-04-06-log.txt", "2024-04-07-log.txt", "2024-04-08-log.txt", "2024-04-09-log.txt", "2024-04-04-log.txt", "2024-04-11-log.txt", "2024-04-12-log.txt", "2024-04-13-log.txt", "2024-02-17-log.txt", "2024-04-01-log.txt", "2024-04-16-log.txt", "2024-04-15-log.txt", "2024-04-10-log.txt", "2024-04-17-log.txt", "2024-02-24-log.txt", "2024-04-14-log.txt", "2024-04-19-log.txt", "2024-04-21-log.txt", "2024-04-22-log.txt", "2024-04-23-log.txt", "2024-04-24-log.txt", "2024-04-26-log.txt", "2024-04-25-log.txt", "2024-04-29-log.txt", "2024-04-30-log.txt", "2024-05-01-log.txt", "2024-05-02-log.txt", "2024-05-03-log.txt", "2024-05-04-log.txt", "2024-05-05-log.txt", "2024-05-06-log.txt", "2024-04-28-log.txt", "2024-05-07-log.txt", "2024-04-18-log.txt", "2024-05-08-log.txt", "2024-05-09-log.txt", "2024-05-10-log.txt", "2024-05-12-log.txt", "2024-05-14-log.txt", "2024-05-11-log.txt", "2024-05-16-log.txt", "2024-04-27-log.txt", "2024-05-17-log.txt", "2024-05-15-log.txt", "2024-05-18-log.txt", "2024-05-20-log.txt", "2024-05-21-log.txt", "2024-05-19-log.txt", "2024-05-22-log.txt", "2024-05-23-log.txt", "2024-05-25-log.txt", "2024-05-24-log.txt", "2024-05-26-log.txt", "2024-05-27-log.txt", "2024-05-28-log.txt", "2024-05-29-log.txt", "2024-05-30-log.txt", "2024-06-02-log.txt", "2024-05-13-log.txt", "2024-06-01-log.txt", "2024-05-31-log.txt", "2024-04-20-log.txt", "2024-06-03-log.txt", "2024-06-04-log.txt", "2024-06-05-log.txt", "2023-12-30-log.txt", "2023-12-01-log.txt", "2024-02-27-log.txt", "2023-12-29-log.txt", "gtaGraProcessToCSV.js", "gtaGraProcessToCSV-2AM.js", "hrs-benefit-report.js", "westCanDocumentMove.js", "hrsbsReviewCycleReport.js", "hrsbsCreateFolderRule.js", "HRSBS-SyncCCIDs.js", "hrsbsCreateFolder.js", "FVCA-data-import.js", "FVCA-manual-property-update.js", "istPerformanceReviewCreateFolder.js", "lawCreateFolderRestricted.js", "lawFileScanned.js", "lawCreateFolder.js", "lawCreateFolderRule.js", "nativeStudiesCreateFolderRestricted.js", "nsFolderCreateSchedule.js", "nativeStudiesCreateFolder.js", "nativeStudiesCreateFolderRule.js", "ADV-notify-type-mapping.json", "OOA-notify-email.js", "ADV-notify-terms-types.js", "pcm-grab-competitive-noderefs.js", "pcm-update-competitive-noderefs.js", "pcmCreateFolder.js", "psUpdateAlfrescoDepartment.js", "pllcCreateFolder.js", "qaProcess.js", "qaRelease.js", "rmOOABackgroundInformationFiling.js", "rmFilingDoc.js", "rmSearchmatchNomatchFiling.js", "rmFilingConfig.json", "thesisDestructionReport.js", "rmThesis.js", "add_document_type_ro.js", "updateSearchMatchStatus.js", "searchmatchFullDob.js", "createROReconciliationReports.js", "eTranscriptInstList.js", "folder-create-ro.js", "augTranscript.js", "addTimeStamp.js", "missingDocumentList-csv.js", "roAddAspectAndMoveAFA.js", "myTaskDownload.js", "roAddAspectAndMoveTranscript.js", "roAddBundlingAspect.js", "roAddSearchMatchAspect.js", "roCopyEphesoftMetadataXML.js", "roBatchScript.js", "addSearchMatchDocumentType.js", "roCreateEducationalCSV.js", "roCopyOlderScannedDocument.js", "roDocumentListAPLSTD.js", "roCopyOlderScannedDocumentAdHoc.js", "roEtranscriptReport.js", "roDailyQA.js", "roEtranscriptsBundleTest.js", "roFolderCreateLDAPLookup_no_notificatiion.js", "roFolderCreateLDAPLookup.js", "roEtranscriptsBundle.js", "roAddComment.js", "roCopyEphesoftMetadataScanned.js", "roMoveCompleted.js", "roMoveCompletedBackScan.js", "roMoveCompletedSearchMatch.js", "roEtranscriptPDFConverter.js", "roScanningMetadata.js", "roScript1.js", "RORoutingWorkflowUtil.js", "roScript3.js", "roScript2.js", "roScanningMetadataBackScan.js", "roScript7.js", "roScript6.js", "roScript9.js", "roScript1BackScan.js", "roSearchMatchNoMatchReport.js", "roSearchMatchQuery.js", "RONotification.js", "roSlateDocumentExport.js", "roTagAndFileRenderedPDFs.js", "roScript4.js", "roScript5.js", "roScript8.js", "createSlateFolioMaterialDropdown.js", "createSlateApplicationsCSV.js", "LaunchWorkflowUtils.js", "PaperFileUtils.js", "GenerateSponsornamesAndPinames.js", "rsoCreateFolder.js", "sciCreateFolderConfidential.js", "sciCreateFolderPublic.js", "sciCreateFolder.js", "sciCreateFolderRestricted.js", "scienceASDocumentImport.js", "sciFileADDPFileTypes.js", "sciFileShareFolder.js", "sciFileScanned.js", "sciBulkShareFolder.js", "copy-signed-offer-letter.js", "dept-config.js", "reappointment-generate-schedule.js", "reappointment-reminder-schedule.js", "reappointment-generate-process.js", "manual-generate-script.js", "reappointment-reminder-process.js", "reminder-email-util.js", "reappointment-tracking-schedule.js", "reappointment-tracking-process.js", "appointment-report.js", "appointment-report-schedule.js", "manual-tracking-script.js", "sfsCreateFolder.js", "sfsWorkflowStatus.js", "security-group-user.js", "createReportPermissionsFoldersInASite.js", "siteMembersReport.js", "createReportRecursiveGroupsAndUsersInASite.js", "search-responses.js", "advChangeDocumentType.js", "addFolderMetadata.js", "advChangeDocumentType_confidential.js", "consignOInitiatorOfferLetterChange.js", "advChangeDocumentType_background.js", "transcriptResponse.js", "change-fgsr-pdf-file-name-with-date.js", "copy-fgsr-to-graduate-students-records.js", "ADVDonationCalendarToFiscal.js", "document-query.js", "deletingCompletingWorkflow.js", "eTranscriptTemp.js", "eTranscript-bundled-02-jan.js", "eTranscriptVersionModifierFix.js", "fixCheckout.js", "removeDonationGrp.js", "eTranscriptVersioningFix.js", "move-fgsr-folder.js", "search-match-dob-add.js", "thesisDepositArchival.js", "moveThesesForTransfer.js", "eraReportGeneration.js", "kofaxMetadataMerge.js", "kofaxMetadataMergeMissing.js", "generic2min.js", "kofaxSendEmail.js", "PeopleSoft-eTranscript-XML-PDF.js", "startBenefitWorkflow.js", "peoplesoftMetadataMergeMissing.js", "securityWorkflowUtil.js", "startPayActionWorkflow.js", "startDepartmentAdhocApprovalWorkflow.js", "convertTranscript.js", "CreateTranscriptUserMemberships.js", "startTwoStepWorkflow.js", "fix_employee_names.js", "env.js", "folderCreateUtil.js", "folderCreateUtilAA.js", "generalSchedule.js", "JSON.js", "xmlUtil.js", "addPersonAspect.js", "addTimeStampRandomFileName.js", "archiveDocument.js", "luceneUtil.js", "util.js", "archivedItems.js", "getProjectDetails.js", "ADVChangeAuthor.js", "ADVcalendarToFiscal.js", "symplexUtils.js", "advBatchProcessing.js", "advChangeDocumentName.js", "ADVEphesoftMove.js", "advCreateFolderScheduled.js", "advErrorMessageReset.js", "advMetadataUpdate.js", "advMoveToFoldersScheduled.js", "ADVendFundReportFiling.js", "advReconcilliation.js", "ADVmoveRecordsToPreQA.js", "advScanningMetadata.js", "advScript2.js", "advScript3.js", "advScript4.js", "advScript1.js", "advScript5.js", "advScriptDaily.js", "advScriptMonthly.js", "advScriptKofax.js", "ADVSiteContext.js", "advMoveToFolder.js", "deleteEphesoftDoc.js", "advUtils.js", "folderCreateADV.js", "advScriptDaily30minFreq.js", "jsonUtils.js", "advScanning.js", "folderCreateDocumentADV.js", "moveToFolders.js", "symplexMetadataUpdate.js", "OOA_SOT_Name_change.js", "moveToFoldersRetainTitle.js", "advScriptWeekly.js", "symplexMoveToFolder.js", "clioToAcsDocUpdate.js", "ClioUpdateScheduledJob.js", "smartFoldersExample.json", "system-overview.html", "businessDocSetup.json", "uappolDocSetup.json", "businessConfig.json", "augConfig.json", "augDocSetup.json", "lawConfig.json", "uappolConfig.json", "UAlbertaSettings.json", "hrsbsDocSetup.json", "advConfig.json", "hrsbsConfig.json", "hrsConfig.json", "hrsDocSetup.json", "advSimplexMapping.json", "advDocSetup.json", "artsDocSetup.json", "alesConfig.json", "alesDocSetup.json", "archiveFolder.json", "artsConfig.json", "advScanningMapping.json", "collegeOfHealthSciencesConfig.json", "chsAgreementsConfig.json", "dropboxCommonAspects.json", "collegeOfHealthSciencesDocSetup.json", "chsAgreementsDocSetup.json", "educationConfig.json", "extensionConfig.json", "fgsrv2DocSetup.json", "foConfig.json", "foDocSetup.json", "educationDocSetup.json", "lawDocSetup.json", "nativeStudiesDocSetup.json", "pllcConfig.json", "pllcDocSetup.json", "roConfig.json", "fgsrv2Config.json", "rsoConfig.json", "rsoDocSetup.json", "sciConfig.json", "eTranscriptConfig.json", "sciDocSetup.json", "roDocSetup.json", "sfsDocSetup.json", "UAlbertaSettings.conf", "student-recordsConfig.json", "securityWorkflowSetting.json", "thesisDepositConfig.json", "globalHeader.html.ftl", "webFormDialog.html.ftl", "alfrescoUserGroupRequest.ftl", "pensionBenefit.html.ftl", "pinames.json", "sponsornames.json", "searchPageConfig.json", "pcmDocSetup.json", "pcmConfig.json", "qaConfig.json", "apsAppConfig.json", "fgsrCreateApsFromCSV.json", "fgsrCopyMetadata.json", "enggCoopDocSetup.json", "enggDocSetup.json", "enggConfig.json", "enggCoopConfig.json", "CapApsConfig.json", "extensionDocSetup.json", "readme.html", "readme_de.html", "readme_ja.html", "readme_fr.html", "advEndowmentName.get.desc.xml", "advEndowmentName.get.json.ftl", "advEndowmentName.get.js", "advEntityName.get.desc.xml", "advEntityName.get.js", "advEntityName.get.html.ftl", "search.get.desc.xml", "search.get.js", "search.get.html.ftl", "changeInitiatorAppt.put.desc.xml", "eSignatureStatusHistory.get.html.ftl", "changeInitiatorAppt.put.json.ftl", "eSignatureStatusHistory.get.desc.xml", "appointmentSubmit.get.js", "processIdProps.get.desc.xml", "changeInitiatorAppt.put.js", "processIdProps.get.json.ftl", "processIdProps.get.js", "appointmentLandingPage.get.desc.xml", "appointmentLandingPage.get.js", "appointmentLandingPage.get.html.ftl", "appointmentStart.get.desc.xml", "appointmentStart.get.html.ftl", "appointmentStart.get.js", "appointmentStartTest.get.desc.xml", "appointmentStartTest.get.js", "appointmentStartTest.get.html.ftl", "appointmentSubmit.get.desc.xml", "appointmentSubmit.get.html.ftl", "eSignatureStatusHistory.get.js", "apsApplicationList.get.desc.xml", "apsApplicationList.get.html.ftl", "assignuser.put.js", "assignuser.put.json.ftl", "claimtask.put.desc.xml", "claimtask.put.js", "claimtask.put.json.ftl", "completetask.post.desc.xml", "completetask.post.json.ftl", "completetask.post.js", "getapsdbid.get.desc.xml", "getapsdbid.get.json.ftl", "gettasks.get.desc.xml", "gettasks.get.json.ftl", "assignuser.put.desc.xml", "gettasks.get.js", "savetask.post.desc.xml", "savetask.post.js", "savetask.post.json.ftl", "taskForm.get.js", "taskForm.get.desc.xml", "tasklist.get.desc.xml", "apsApplicationList.get.js", "taskForm.get.json.ftl", "tasklist.get.html.ftl.jquery", "tasklist.get.html.ftl", "tasklist.get.js", "triggerapsprocess.post.desc.xml", "triggerapsprocess.post.js", "updatevariables.post.desc.xml.notused", "triggerapsprocess.post.json.ftl", "updatevariables.post.json.ftl.notused", "getapsdbid.get.js", "updatevariables.post.js.notused", "taskUtils.js", "apsGroupsConfig.json", "apsSitesConfig.json", "apptStepZeroStarter.post.desc.xml", "apptStepZeroStarter.post.json.ftl", "apptStepZeroStarter.post.js", "apptStepOneStarter.post.desc.xml", "apptStepOneStarter.post.js", "apptStepOneStarter.post.json.ftl", "apptStepOneSave.post.json.ftl", "apptStepOneSave.post.desc.xml", "apptStepOneSave.post.js", "apptStatusDocUpdate.post.desc.xml", "apptStatusDocUpdate.post.json.ftl", "apptStatusDocUpdate.post.js", "APSWorkflowStatus.get.desc.xml", "APSWorkflowStatus.put.html.ftl", "APSWorkflowStatus.get.html.ftl", "APSWorkflowInfo.put.html.ftl", "APSWorkflowStatus.put.desc.xml", "APSWorkflowInfo.put.desc.xml", "APSWorkflowStatus.get.js", "APSWorkflowStatus.put.js", "APSWorkflowInfo.put.js", "NodeInfo.get.desc.xml", "NodeInfo.get.html.ftl", "capinfo.get.js", "capstart.get.js", "epsb.get.js", "epsb.get.html.ftl", "capstart.get.html.ftl", "epsb.get.desc.xml", "schoolboard.get.html.ftl", "NodeInfo.get.js", "NodeInfoByCapId.get.desc.xml", "updateVariable.post.json.ftl", "updateVariable.post.js", "schoolboard.get.desc.xml", "updateVariable.post.desc.xml", "schoolboard.get.js", "capinfo.get.html.ftl.backup", "cap-file-load.post.json.ftl", "NodeInfoByCapId.get.js", "capinfo.get.html.ftl", "capstart.get.desc.xml", "cap-file-load.post.desc.xml", "capinfo.get.desc.xml", "cap-file-load.post.js", "capeamergedoc.get.js", "capeamergedoc.get.desc.xml", "capeamergedoc.get.html.ftl", "capConfig.js", "chsEnv.js", "chsConfig.js", "chsAdminStuView.get.desc.xml", "chsAdminStuView.get.html.ftl", "chsAdminStuView.get.js", "coupa.get.html.ftl", "coupa.get.desc.xml", "coupa.get.js", "coveoGetDocList.get.desc.xml", "coveoGetDocList.get.json.ftl", "coveoGetDocList.get.js", "getJson.get.desc.xml", "getJson.get.js", "getJson.get.json.ftl", "simpleupload.post.desc.xml", "simpleupload.post.json.ftl", "simpleupload.post.js", "consignoMessage.get.js", "consignoWebhook.post.js", "consignoWebhook.post.json.ftl", "consignoMessage.get.desc.xml", "consignoWebhook.post.desc.xml", "consignoMessage.get.json.ftl", "eSignDownload.get.js", "eSignDownload.get.html.ftl", "eSignDownload.get.desc.xml", "review-supervisorv2.get.desc.xml", "review-supervisorv2.get.js", "review-supervisorv2.get.html.ftl", "fgsrssgLanding.get.js", "review-comm01v2.get.desc.xml", "fgsrssgLanding.get.html.ftl", "review-comm01v2.get.html.ftl", "review-comm02v2.get.desc.xml", "review-comm02v2.get.html.ftl", "fgsrssgLanding.get.desc.xml", "review-studentv2.get.html.ftl", "review-comm03v2.get.html.ftl", "review-comm03v2.get.desc.xml", "review-studentv2.get.desc.xml", "review-cosupervisorv2.get.html.ftl", "review-comm02v2.get.js", "review-startv2.get.desc.xml", "review-studentv2.get.js", "review-cosupervisorv2.get.js", "review-startv2.get.js", "review-student-revisionv2.get.html.ftl", "review-student-revisionv2.get.desc.xml", "review-startv2.get.html.ftl", "review-comm03v2.get.js", "review-cosupervisorv2.get.desc.xml", "review-student-revisionv2.get.js", "review-comm01v2.get.js", "review-comm02.get.desc.xml", "review-comm02.get.html.ftl", "review-comm03.get.desc.xml", "review-comm02.get.js", "review-comm03.get.html.ftl", "review-cosupervisor.get.desc.xml", "review-cosupervisor.get.html.ftl", "review-cosupervisor.get.js", "review-nextdate.get.desc.xml", "review-comm03.get.js", "review-nextdate.get.js", "review-student.get.html.ftl", "review-student.get.js", "review-student-revision.get.desc.xml", "review-student.get.desc.xml", "review-student-revision.get.js", "review-studentTest.get.desc.xml", "review-supervisor.get.desc.xml", "review-studentTest.get.js", "review-supervisor.get.html.ftl", "review-supervisor.get.js", "review-comm01.get.desc.xml", "review-comm01.get.html.ftl", "review-comm01.get.js", "review-student-revision.get.html.ftl", "review-nextdate.get.html.ftl", "review-studentTest.get.html.ftl", "guidelines-supervisor.get.desc.xml", "guidelines-supervisor-revision.get.html.ftl", "guidelines-start.get.desc.xml", "guidelines-start.get.html.ftl", "guidelines-start.get.js", "guidelines-student.get.desc.xml", "guidelines-student.get.html.ftl", "guidelines-student-revision.get.js", "guidelines-student-revision.get.desc.xml", "guidelines-supervisor.get.html.ftl", "guidelines-supervisor-revision.get.desc.xml", "guidelines-student-revision.get.html.ftl", "guidelines-student.get.js", "guidelines-supervisor.get.js", "guidelines-supervisor-revision.get.js", "programExtensionScript.js", "customScript.js", "customCSS_FGSR2.css", "customCSS_FGSR.css", "fgsrEnv.js", "FGSR-Forms-Config.js", "config.js", "googleAddon.get.json.ftl", "googleAddon.get.desc.xml", "googleAddon.get.js", "gtaGraStatus.post.json.ftl", "gtaGraStatus.post.js", "gtaGraStatus.post.desc.xml", "wfh-manager.get.desc.xml", "wfh-form.get.js", "wfh-manager.get.html.ftl", "wfh-form.get.desc.xml", "wfh-revise.get.desc.xml", "wfh-revise.get.html.ftl", "wfh-revise.get.js", "wfh-seniormanager.get.desc.xml", "wfh-manager.get.js", "wfh-seniormanager.get.js", "wfh-seniormanager.get.html.ftl", "wfh-form.get.html.ftl", "hrsbsDocumentLinking.get.desc.xml", "hrsbsDocumentLinking.get.html.ftl", "hrsbsDocumentLinking.get.js", "coi-start.get.desc.xml", "coi-start.get.html.ftl", "coi-revise.get.html.ftl", "coi-employee.get.html.ftl", "coi-employee.get.desc.xml", "coi-revise.get.desc.xml", "coi-start.get.js", "coi-revise.get.js", "coi-supervisor.get.js", "coi-supervisor.get.desc.xml", "coi-employee.get.js", "coi-supervisor.get.html.ftl", "getTaskFilter.get.json.ftl", "queryTasks.get.json.ftl", "routableGroups.get.desc.xml", "routableGroups.get.js", "routableGroups.get.json.ftl", "queryTasks.get.desc.xml", "setTaskFilter.post.js", "setTaskFilter.post.json.ftl", "setTaskFilter.post.desc.xml", "applyTaskAction.post.js", "applyTaskAction.post.json.ftl", "applyTaskAction.post.desc.xml", "getTaskFilter.get.desc.xml", "getTaskFilter.get.js", "queryTasks.get.js", "avmbrowse.get.desc.xml", "avmbrowse.get.html.ftl", "avmbrowse.get.js", "avmstores.get.desc.xml", "avmstores.get.html.ftl", "blogsearch.get.atom.400.ftl", "blogsearch.get.html.400.ftl", "blogsearch.get.desc.xml", "blogsearch.get.js", "categorysearch.get.atom.404.ftl", "blogsearch.get.html.ftl", "categorysearch.get.html.404.ftl", "categorysearch.get.js", "categorysearch.get.html.ftl", "categorysearch.get.desc.xml", "folder.get.desc.xml", "folder.get.html.ftl", "folder.get.js", "psDeptAll.get.js", "psDeptSingle.get.json.ftl", "psDeptSingle.get.js", "psPerson.get.json.ftl", "psUtil.js", "psPerson.get.js", "psAcademicDeptAll.get.desc.xml", "psAcademicDeptAll.get.json.ftl", "psAuthorizedApprover.get.desc.xml", "psDeptAll.get.json.ftl", "psAuthorizedApprover.get.js", "psAuthorizedApprover.get.json.ftl", "psDeptAll.get.desc.xml", "psDeptSingle.get.desc.xml", "psPerson.get.desc.xml", "ceeb.get.desc.xml", "ceeb.get.json.ftl", "getSlateId.get.desc.xml", "getSlateId.get.js", "materials.get.json.ftl", "materials.get.desc.xml", "getSlateId.get.json.ftl", "ceeb.get.js", "materials.get.js", "edit.get.html.ftl", "edit.get.js", "save.post.js", "save.post.json.ftl", "scans.get.desc.xml", "scans.get.js", "uploadfile.post.desc.xml", "uploadfile.post.json.ftl", "edit.get.desc.xml", "uploadfile.post.js", "scans.get.html.ftl", "save.post.desc.xml", "AFA_Main.post.desc.xml", "AFA_MainFileOnly.post.desc.xml", "AFA_MainFileOnly.post.js", "AFA_Main.post.js", "AFA_MainFileOnly.post.json.ftl", "AFA_Main.post.json.ftl", "paperFileUtil.get.desc.xml", "paperFileUtil.get.js", "paperFileUtil.get.html.ftl", "rsoprojectdetails.get.html.ftl", "rsoprojectdetails.get.js", "rsoprojectdetails.get.desc.xml", "roslateapplist.get.html.ftl", "roslateapplist.get.desc.xml", "roslateapplist.get.json.ftl", "roslateexists.get.html.ftl", "roslateexists.get.desc.xml", "roslateapplist.get.js", "roslateexists.get.js", "uofaDepartmentList.get.desc.xml", "uofaDepartmentList.get.js", "uofaDepartmentList.get.html.ftl", "uofaDepartmentName.get.desc.xml", "uofaDepartmentName.get.html.ftl", "uofaFacultyList.get.html.ftl", "uofaFacultyList.get.desc.xml", "uofaDepartmentName.get.js", "uofapersonid.get.desc.xml", "uofapersonidrest.get.html.ftl", "uofapersonidrest.get.desc.xml", "uofapersonid.get.html.ftl", "uofapersonid.get.js", "uofapersonidrest.get.js", "uappolCategoryHeirarchy.get.desc.xml", "uappolCategoryHeirarchy.get.json.ftl", "uappol-metadata-query.get.desc.xml", "uappol-metadata-query.get.js", "uappol-metadata-query.get.json.ftl", "uappolCategoryHeirarchy.get.js", "siteFileViewer.get.desc.xml", "siteFileViewerConfig.js", "siteFileViewer.get.html.ftl", "siteFileViewer.get.js", "publicSiteFileViewer.get.html.ftl", "publicSiteFileViewer.get.desc.xml", "publicSiteFileViewer.get.js", "cronJob.post.desc.xml", "cronJob.post.js", "cronJob.post.json.ftl", "studentupload.get.html.ftl", "generatereport.get.json.ftl", "generatereport.get.desc.xml", "approvethesis.post.js", "generatereport.get.js", "search-match-attach.get.js", "search-match-list.get.html.ftl", "search-match-result.get.html.ftl", "search-match-result.get.js", "search-match-list.get.js.old", "chs-agreements.get.js", "chs-agreements.get.html.ftl", "chs-upload.get.html.ftl", "chs-upload.get.js", "uamytasks.config.get.js", "chsStudentView.get.js", "chsStudentView.get.html.ftl", "foModel.xml", "uofaDocTypes.xml", "uofaDocTypes.json", "foModel.json", "tim-sops", "FandO", "cbsr", "nanofab", "support-documentation", "Alfresco.zip - 1bf054bded99e2ae414154593d0892066b2e0c7add603f9321e157c77ae52075", "https://www.virustotal.com/graph/embed/g05f1796a358b458d95751d31d1d529aa378f8ffadf0b4305b7fa0bd1c64fe228?theme=dark", "https://www.virustotal.com/gui/collection/63819e07111e9665ba8602777d782527c54f3fad71ef36f977405a004484787c/iocs", "https://viz.greynoise.io/analysis/0cd9177e-8328-4355-a2c0-d05704a64c72", "components.zip - 2b91fcf852a5f1f57be71a269d82497b37c9f544ebd8f32aaa240e4cde0ffeea", "https://www.virustotal.com/graph/embed/g2948a5c332eb4614973872a8243215f6aa1fba79749a48ea92806e9b934db91f?theme=dark", "https://viz.greynoise.io/ip/analysis/2610b635-c05a-4f28-a112-7278de8fdf9b" ], "public": 1, "adversary": "TA413 proposed (06.08.24), Callisto, APT38, APT 28/29 - too much time too many problems", "targeted_countries": [ "Canada", "United States of America" ], "malware_families": [], "attack_ids": [], "industries": [ "Education", "Government", "Healthcare", "Technology", "Telecommunications" ], "TLP": "white", "cloned_from": null, "export_count": 57, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 4, "follower_count": 0, "vote": 0, "author": { "username": "Disable_Duck", "id": "244325", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_244325/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 7132, "hostname": 3118, "URL": 4909, "email": 20, "FileHash-SHA256": 2144, "FileHash-MD5": 29, "FileHash-SHA1": 29 }, "indicator_count": 17381, "is_author": false, "is_subscribing": null, "subscriber_count": 131, "modified_text": "234 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6583e3a2d1432cbf9054d26d", "name": "Qkbot | Reddit", "description": "Qbot URL: https://seedbeej.pk/tin/index.php?QBOT.zip found in Reddit Honeypot link: https://www.reddit.com/user\nbackdoor second stage developed for distribution as a password stealer. Qbot, seemingly common; is a large botnetwork with many capabilities, attack methods and demands. An unsuspecting victim always be in botnetwork. Qbot encompasses many other bot networks, trojans, network rats, spyware, malvertizing, fraud services, full control of badly compromised digital profiles which have been discovered.", "modified": "2024-01-20T02:02:19.559000", "created": "2023-12-21T07:05:06.936000", "tags": [ "ssl certificate", "iocs", "ioc search", "new ioc", "teams api", "contact", "search", "threat", "paste", "blacklist https", "qakbot", "site", "cisco umbrella", "alexa top", "million", "ascii text", "pattern match", "file", "windows nt", "appdata", "indicator", "crlf line", "unicode text", "jpeg image", "mitre att", "hybrid", "general", "local", "error", "click", "strings", "microsoft", "threat analyzer", "urls https", "no data", "tag count", "threat report", "ip summary", "url summary", "summary", "heur", "malware site", "malicious site", "safe site", "malware", "html", "phishing site", "site top", "riskware", "unsafe", "artemis", "quasar rat", "downldr", "agent", "presenoker", "applicunwnt", "crack", "cve201711882", "win64", "iframe", "quasar", "trojanspy", "exit", "node tcp", "tor known", "tor relayrouter", "traffic", "anonymizer", "brasil", "phishing three", "united", "phishing bank", "virustotal", "tech", "bank", "maltiverse", "hidelink", "samples", "spyware", "injector", "mon jan", "tld count", "wed dec", "download", "first", "team", "simda", "bambernek", "simda simda", "infy", "alexa", "gregory", "cyber threat", "phishing", "engineering", "covid19", "telefonica co", "malicious", "zbot", "zeus", "betabot", "suppobox", "citadel", "pony", "kraken", "redline stealer", "ransomware", "vawtrak", "athena", "neutrino", "alina", "andromeda", "dexter", "unknown", "keylogger", "hawkeye", "phase", "jackpos", "plasma", "spyeye", "spitmo", "slingshot", "ramnit", "emotet", "pykspa", "virut", "installcore", "dorkbot", "bondat", "union", "vskimmer", "xtrat", "solar", "grandcrab", "nymaim", "matsnu", "cutwail", "cobalt strike", "hydra", "tinba", "nsis", "memscan", "deepscan", "runescape", "backdoor", "reddit", "tulach" ], "references": [ "https://seedbeej.pk/tin/index.php?QBOT.zip", "https://tulach.cc/ [phishing, exploits, malware spreader]", "https://www.hybrid-analysis.com/sample/a8decf589e5ec26f1e994a3923fc245db98f681f951d2bb8e1fcce1d8fef5293", "https://www.virustotal.com/gui/url/000c01d40db51f156933c624f23e776cb2c1fd60b8f1840b13b9622886a8e918/community", "198.54.115.46 [exploit_source]", "gadyniw.com [command_and_control]", "gahyqah.com [command_and_control]", "galyqaz.com [command_and_control]", "lyvyxor.com [command_and_control]", "puzylyp.com [command_and_control]", "malicious.high.ml [dropper]", "https://www.reddit.com/user" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [ { "id": "Qakbot", "display_name": "Qakbot", "target": null }, { "id": "Quasar", "display_name": "Quasar", "target": null }, { "id": "TrojanSpy", "display_name": "TrojanSpy", "target": null }, { "id": "Maltiverse", "display_name": "Maltiverse", "target": null }, { "id": "HideLink", "display_name": "HideLink", "target": null }, { "id": "Gregory", "display_name": "Gregory", "target": null }, { "id": "Cutwail", "display_name": "Cutwail", "target": null }, { "id": "Matsnu", "display_name": "Matsnu", "target": null }, { "id": "Vawtrak", "display_name": "Vawtrak", "target": null }, { "id": "XRat", "display_name": "XRat", "target": null }, { "id": "Zbot", "display_name": "Zbot", "target": null }, { "id": "Virut", "display_name": "Virut", "target": null }, { "id": "ZeuS", "display_name": "ZeuS", "target": null }, { "id": "vSkimmer", "display_name": "vSkimmer", "target": null }, { "id": "SuppoBox", "display_name": "SuppoBox", "target": null }, { "id": "Simda", "display_name": "Simda", "target": null }, { "id": "Pykspa", "display_name": "Pykspa", "target": null }, { "id": "SpyEye", "display_name": "SpyEye", "target": null }, { "id": "Spitmo", "display_name": "Spitmo", "target": null }, { "id": "Solar", "display_name": "Solar", "target": null }, { "id": "Nymaim", "display_name": "Nymaim", "target": null }, { "id": "DorkBot", "display_name": "DorkBot", "target": null }, { "id": "Slingshot", "display_name": "Slingshot", "target": null }, { "id": "Pony", "display_name": "Pony", "target": null }, { "id": "Plasma RAT", "display_name": "Plasma RAT", "target": null }, { "id": "Neutrino", "display_name": "Neutrino", "target": null }, { "id": "Ramnit", "display_name": "Ramnit", "target": null }, { "id": "NSIS", "display_name": "NSIS", "target": null }, { "id": "RedLine Stealer", "display_name": "RedLine Stealer", "target": null }, { "id": "InstallCore", "display_name": "InstallCore", "target": null }, { "id": "GrandCrab", "display_name": "GrandCrab", "target": null }, { "id": "Andromeda", "display_name": "Andromeda", "target": null }, { "id": "Alinaos", "display_name": "Alinaos", "target": null }, { "id": "HawkEye", "display_name": "HawkEye", "target": null }, { "id": "Kraken", "display_name": "Kraken", "target": null }, { "id": "Infy", "display_name": "Infy", "target": null }, { "id": "Dexter", "display_name": "Dexter", "target": null }, { "id": "Emotet", "display_name": "Emotet", "target": null }, { "id": "Artemis", "display_name": "Artemis", "target": null }, { "id": "ASCII", "display_name": "ASCII", "target": null }, { "id": "Athena", "display_name": "Athena", "target": null }, { "id": "Bambernek", "display_name": "Bambernek", "target": null }, { "id": "BetaBot", "display_name": "BetaBot", "target": null }, { "id": "COVID19", "display_name": "COVID19", "target": null }, { "id": "Citadel", "display_name": "Citadel", "target": null }, { "id": "Bondat", "display_name": "Bondat", "target": null }, { "id": "HideLink", "display_name": "HideLink", "target": null }, { "id": "Hydra", "display_name": "Hydra", "target": null }, { "id": "Tulach", "display_name": "Tulach", "target": null } ], "attack_ids": [ { "id": "T1059", "name": "Command and Scripting Interpreter", "display_name": "T1059 - Command and Scripting Interpreter" }, { "id": "T1071", "name": "Application Layer Protocol", "display_name": "T1071 - Application Layer Protocol" }, { "id": "T1105", "name": "Ingress Tool Transfer", "display_name": "T1105 - Ingress Tool Transfer" }, { "id": "T1497", "name": "Virtualization/Sandbox Evasion", "display_name": "T1497 - Virtualization/Sandbox Evasion" }, { "id": "T1547", "name": "Boot or Logon Autostart Execution", "display_name": "T1547 - Boot or Logon Autostart Execution" }, { "id": "T1140", "name": "Deobfuscate/Decode Files or Information", "display_name": "T1140 - Deobfuscate/Decode Files or Information" }, { "id": "T1027", "name": "Obfuscated Files or Information", "display_name": "T1027 - Obfuscated Files or Information" }, { "id": "T1204", "name": "User Execution", "display_name": "T1204 - User Execution" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 98, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "OctoSeek", "id": "243548", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_243548/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 8343, "FileHash-MD5": 953, "FileHash-SHA1": 489, "FileHash-SHA256": 3565, "domain": 1494, "hostname": 2218, "CVE": 6 }, "indicator_count": 17068, "is_author": false, "is_subscribing": null, "subscriber_count": 222, "modified_text": "863 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6583e3acc7f464d48a3503d1", "name": "Qkbot | Reddit", "description": "Qbot URL: https://seedbeej.pk/tin/index.php?QBOT.zip found in Reddit Honeypot link: https://www.reddit.com/user\nbackdoor second stage developed for distribution as a password stealer. Qbot, seemingly common; is a large botnetwork with many capabilities, attack methods and demands. An unsuspecting victim always be in botnetwork. Qbot encompasses many other bot networks, trojans, network rats, spyware, malvertizing, fraud services, full control of badly compromised digital profiles which have been discovered.", "modified": "2024-01-20T02:02:19.559000", "created": "2023-12-21T07:05:16.695000", "tags": [ "ssl certificate", "iocs", "ioc search", "new ioc", "teams api", "contact", "search", "threat", "paste", "blacklist https", "qakbot", "site", "cisco umbrella", "alexa top", "million", "ascii text", "pattern match", "file", "windows nt", "appdata", "indicator", "crlf line", "unicode text", "jpeg image", "mitre att", "hybrid", "general", "local", "error", "click", "strings", "microsoft", "threat analyzer", "urls https", "no data", "tag count", "threat report", "ip summary", "url summary", "summary", "heur", "malware site", "malicious site", "safe site", "malware", "html", "phishing site", "site top", "riskware", "unsafe", "artemis", "quasar rat", "downldr", "agent", "presenoker", "applicunwnt", "crack", "cve201711882", "win64", "iframe", "quasar", "trojanspy", "exit", "node tcp", "tor known", "tor relayrouter", "traffic", "anonymizer", "brasil", "phishing three", "united", "phishing bank", "virustotal", "tech", "bank", "maltiverse", "hidelink", "samples", "spyware", "injector", "mon jan", "tld count", "wed dec", "download", "first", "team", "simda", "bambernek", "simda simda", "infy", "alexa", "gregory", "cyber threat", "phishing", "engineering", "covid19", "telefonica co", "malicious", "zbot", "zeus", "betabot", "suppobox", "citadel", "pony", "kraken", "redline stealer", "ransomware", "vawtrak", "athena", "neutrino", "alina", "andromeda", "dexter", "unknown", "keylogger", "hawkeye", "phase", "jackpos", "plasma", "spyeye", "spitmo", "slingshot", "ramnit", "emotet", "pykspa", "virut", "installcore", "dorkbot", "bondat", "union", "vskimmer", "xtrat", "solar", "grandcrab", "nymaim", "matsnu", "cutwail", "cobalt strike", "hydra", "tinba", "nsis", "memscan", "deepscan", "runescape", "backdoor", "reddit", "tulach" ], "references": [ "https://seedbeej.pk/tin/index.php?QBOT.zip", "https://tulach.cc/ [phishing, exploits, malware spreader]", "https://www.hybrid-analysis.com/sample/a8decf589e5ec26f1e994a3923fc245db98f681f951d2bb8e1fcce1d8fef5293", "https://www.virustotal.com/gui/url/000c01d40db51f156933c624f23e776cb2c1fd60b8f1840b13b9622886a8e918/community", "198.54.115.46 [exploit_source]", "gadyniw.com [command_and_control]", "gahyqah.com [command_and_control]", "galyqaz.com [command_and_control]", "lyvyxor.com [command_and_control]", "puzylyp.com [command_and_control]", "malicious.high.ml [dropper]", "https://www.reddit.com/user" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [ { "id": "Qakbot", "display_name": "Qakbot", "target": null }, { "id": "Quasar", "display_name": "Quasar", "target": null }, { "id": "TrojanSpy", "display_name": "TrojanSpy", "target": null }, { "id": "Maltiverse", "display_name": "Maltiverse", "target": null }, { "id": "HideLink", "display_name": "HideLink", "target": null }, { "id": "Gregory", "display_name": "Gregory", "target": null }, { "id": "Cutwail", "display_name": "Cutwail", "target": null }, { "id": "Matsnu", "display_name": "Matsnu", "target": null }, { "id": "Vawtrak", "display_name": "Vawtrak", "target": null }, { "id": "XRat", "display_name": "XRat", "target": null }, { "id": "Zbot", "display_name": "Zbot", "target": null }, { "id": "Virut", "display_name": "Virut", "target": null }, { "id": "ZeuS", "display_name": "ZeuS", "target": null }, { "id": "vSkimmer", "display_name": "vSkimmer", "target": null }, { "id": "SuppoBox", "display_name": "SuppoBox", "target": null }, { "id": "Simda", "display_name": "Simda", "target": null }, { "id": "Pykspa", "display_name": "Pykspa", "target": null }, { "id": "SpyEye", "display_name": "SpyEye", "target": null }, { "id": "Spitmo", "display_name": "Spitmo", "target": null }, { "id": "Solar", "display_name": "Solar", "target": null }, { "id": "Nymaim", "display_name": "Nymaim", "target": null }, { "id": "DorkBot", "display_name": "DorkBot", "target": null }, { "id": "Slingshot", "display_name": "Slingshot", "target": null }, { "id": "Pony", "display_name": "Pony", "target": null }, { "id": "Plasma RAT", "display_name": "Plasma RAT", "target": null }, { "id": "Neutrino", "display_name": "Neutrino", "target": null }, { "id": "Ramnit", "display_name": "Ramnit", "target": null }, { "id": "NSIS", "display_name": "NSIS", "target": null }, { "id": "RedLine Stealer", "display_name": "RedLine Stealer", "target": null }, { "id": "InstallCore", "display_name": "InstallCore", "target": null }, { "id": "GrandCrab", "display_name": "GrandCrab", "target": null }, { "id": "Andromeda", "display_name": "Andromeda", "target": null }, { "id": "Alinaos", "display_name": "Alinaos", "target": null }, { "id": "HawkEye", "display_name": "HawkEye", "target": null }, { "id": "Kraken", "display_name": "Kraken", "target": null }, { "id": "Infy", "display_name": "Infy", "target": null }, { "id": "Dexter", "display_name": "Dexter", "target": null }, { "id": "Emotet", "display_name": "Emotet", "target": null }, { "id": "Artemis", "display_name": "Artemis", "target": null }, { "id": "ASCII", "display_name": "ASCII", "target": null }, { "id": "Athena", "display_name": "Athena", "target": null }, { "id": "Bambernek", "display_name": "Bambernek", "target": null }, { "id": "BetaBot", "display_name": "BetaBot", "target": null }, { "id": "COVID19", "display_name": "COVID19", "target": null }, { "id": "Citadel", "display_name": "Citadel", "target": null }, { "id": "Bondat", "display_name": "Bondat", "target": null }, { "id": "HideLink", "display_name": "HideLink", "target": null }, { "id": "Hydra", "display_name": "Hydra", "target": null }, { "id": "Tulach", "display_name": "Tulach", "target": null } ], "attack_ids": [ { "id": "T1059", "name": "Command and Scripting Interpreter", "display_name": "T1059 - Command and Scripting Interpreter" }, { "id": "T1071", "name": "Application Layer Protocol", "display_name": "T1071 - Application Layer Protocol" }, { "id": "T1105", "name": "Ingress Tool Transfer", "display_name": "T1105 - Ingress Tool Transfer" }, { "id": "T1497", "name": "Virtualization/Sandbox Evasion", "display_name": "T1497 - Virtualization/Sandbox Evasion" }, { "id": "T1547", "name": "Boot or Logon Autostart Execution", "display_name": "T1547 - Boot or Logon Autostart Execution" }, { "id": "T1140", "name": "Deobfuscate/Decode Files or Information", "display_name": "T1140 - Deobfuscate/Decode Files or Information" }, { "id": "T1027", "name": "Obfuscated Files or Information", "display_name": "T1027 - Obfuscated Files or Information" }, { "id": "T1204", "name": "User Execution", "display_name": "T1204 - User Execution" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 101, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "OctoSeek", "id": "243548", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_243548/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 8343, "FileHash-MD5": 953, "FileHash-SHA1": 489, "FileHash-SHA256": 3565, "domain": 1494, "hostname": 2218, "CVE": 6 }, "indicator_count": 17068, "is_author": false, "is_subscribing": null, "subscriber_count": 221, "modified_text": "863 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "658449d3f6ec1af2f3aace46", "name": "Qakbot | Reddit", "description": "Qbot URL: https://seedbeej.pk/tin/index.php?QBOT.zip Qbot zip found in Reddit Honeypot link: https://www.reddit.com/user backdoor second stage developed for distribution as a password stealer. Qbot, seemingly common; is a large botnetwork with many capabilities, attack methods and demands. An unsuspecting victim always be in botnetwork. Qbot encompasses many other bot networks, trojans, network rats, spyware malvertizing, fraud services, leads to full control of badly compromised digital profile.", "modified": "2024-01-20T02:02:19.559000", "created": "2023-12-21T14:21:07.435000", "tags": [ "ssl certificate", "iocs", "ioc search", "new ioc", "teams api", "contact", "search", "threat", "paste", "blacklist https", "qakbot", "site", "cisco umbrella", "alexa top", "million", "ascii text", "pattern match", "file", "windows nt", "appdata", "indicator", "crlf line", "unicode text", "jpeg image", "mitre att", "hybrid", "general", "local", "error", "click", "strings", "microsoft", "threat analyzer", "urls https", "no data", "tag count", "threat report", "ip summary", "url summary", "summary", "heur", "malware site", "malicious site", "safe site", "malware", "html", "phishing site", "site top", "riskware", "unsafe", "artemis", "quasar rat", "downldr", "agent", "presenoker", "applicunwnt", "crack", "cve201711882", "win64", "iframe", "quasar", "trojanspy", "exit", "node tcp", "tor known", "tor relayrouter", "traffic", "anonymizer", "brasil", "phishing three", "united", "phishing bank", "virustotal", "tech", "bank", "maltiverse", "hidelink", "samples", "spyware", "injector", "mon jan", "tld count", "wed dec", "download", "first", "team", "simda", "bambernek", "simda simda", "infy", "alexa", "gregory", "cyber threat", "phishing", "engineering", "covid19", "telefonica co", "malicious", "zbot", "zeus", "betabot", "suppobox", "citadel", "pony", "kraken", "redline stealer", "ransomware", "vawtrak", "athena", "neutrino", "alina", "andromeda", "dexter", "unknown", "keylogger", "hawkeye", "phase", "jackpos", "plasma", "spyeye", "spitmo", "slingshot", "ramnit", "emotet", "pykspa", "virut", "installcore", "dorkbot", "bondat", "union", "vskimmer", "xtrat", "solar", "grandcrab", "nymaim", "matsnu", "cutwail", "cobalt strike", "hydra", "tinba", "nsis", "memscan", "deepscan", "runescape", "backdoor", "reddit", "tulach", "password stealer", "active threat", "apple", "pinkslipbot", "icloud", "free", "apple" ], "references": [ "https://seedbeej.pk/tin/index.php?QBOT.zip. [Qbot zip]", "https://tulach.cc/ [Botnet phishing]", "https://www.hybrid-analysis.com/sample/a8decf589e5ec26f1e994a3923fc245db98f681f951d2bb8e1fcce1d8fef5293", "https://www.virustotal.com/gui/url/000c01d40db51f156933c624f23e776cb2c1fd60b8f1840b13b9622886a8e918/community", "198.54.115.46 [exploit_source]", "gadyniw.com [command_and_control]", "gahyqah.com [command_and_control]", "galyqaz.com [command_and_control]", "lyvyxor.com [command_and_control]", "puzylyp.com [command_and_control]", "malicious.high.ml [dropper]", "https://www.reddit.com/user [honeypot]", "beacons.bcp.gvt.com [tracking]", "https://www.norad.mil/ [tracking]", "www.norad.mil [tracking]", "www.apple.com [API property call]", "https://www.apple.com/qtactivex/qtplugin.cab [https://www.icloud.com .cab]", "yesporn.fun", "http://114.114.114.114:90/p/cdbdd4a09a64909694281aec503746fd/mobile_index.html?MTE0LjExNC4xMTQuMTE0L2xvZ2luP2hhc19vcmlfdXJp [Tulach | Malicious]", "114.114.114.114 [Tulach | Virus Network IP]" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [ { "id": "Qakbot", "display_name": "Qakbot", "target": null }, { "id": "Quasar", "display_name": "Quasar", "target": null }, { "id": "TrojanSpy", "display_name": "TrojanSpy", "target": null }, { "id": "Maltiverse", "display_name": "Maltiverse", "target": null }, { "id": "HideLink", "display_name": "HideLink", "target": null }, { "id": "Gregory", "display_name": "Gregory", "target": null }, { "id": "Cutwail", "display_name": "Cutwail", "target": null }, { "id": "Matsnu", "display_name": "Matsnu", "target": null }, { "id": "Vawtrak", "display_name": "Vawtrak", "target": null }, { "id": "XRat", "display_name": "XRat", "target": null }, { "id": "Zbot", "display_name": "Zbot", "target": null }, { "id": "Virut", "display_name": "Virut", "target": null }, { "id": "ZeuS", "display_name": "ZeuS", "target": null }, { "id": "vSkimmer", "display_name": "vSkimmer", "target": null }, { "id": "SuppoBox", "display_name": "SuppoBox", "target": null }, { "id": "Simda", "display_name": "Simda", "target": null }, { "id": "Pykspa", "display_name": "Pykspa", "target": null }, { "id": "SpyEye", "display_name": "SpyEye", "target": null }, { "id": "Spitmo", "display_name": "Spitmo", "target": null }, { "id": "Solar", "display_name": "Solar", "target": null }, { "id": "Nymaim", "display_name": "Nymaim", "target": null }, { "id": "DorkBot", "display_name": "DorkBot", "target": null }, { "id": "Slingshot", "display_name": "Slingshot", "target": null }, { "id": "Pony", "display_name": "Pony", "target": null }, { "id": "Plasma RAT", "display_name": "Plasma RAT", "target": null }, { "id": "Neutrino", "display_name": "Neutrino", "target": null }, { "id": "Ramnit", "display_name": "Ramnit", "target": null }, { "id": "NSIS", "display_name": "NSIS", "target": null }, { "id": "RedLine Stealer", "display_name": "RedLine Stealer", "target": null }, { "id": "InstallCore", "display_name": "InstallCore", "target": null }, { "id": "GrandCrab", "display_name": "GrandCrab", "target": null }, { "id": "Andromeda", "display_name": "Andromeda", "target": null }, { "id": "Alinaos", "display_name": "Alinaos", "target": null }, { "id": "HawkEye", "display_name": "HawkEye", "target": null }, { "id": "Kraken", "display_name": "Kraken", "target": null }, { "id": "Infy", "display_name": "Infy", "target": null }, { "id": "Dexter", "display_name": "Dexter", "target": null }, { "id": "Emotet", "display_name": "Emotet", "target": null }, { "id": "Artemis", "display_name": "Artemis", "target": null }, { "id": "ASCII", "display_name": "ASCII", "target": null }, { "id": "Athena", "display_name": "Athena", "target": null }, { "id": "Bambernek", "display_name": "Bambernek", "target": null }, { "id": "BetaBot", "display_name": "BetaBot", "target": null }, { "id": "COVID19", "display_name": "COVID19", "target": null }, { "id": "Citadel", "display_name": "Citadel", "target": null }, { "id": "Bondat", "display_name": "Bondat", "target": null }, { "id": "HideLink", "display_name": "HideLink", "target": null }, { "id": "Hydra", "display_name": "Hydra", "target": null }, { "id": "Tulach", "display_name": "Tulach", "target": null }, { "id": "Pinkslipbot", "display_name": "Pinkslipbot", "target": null } ], "attack_ids": [ { "id": "T1059", "name": "Command and Scripting Interpreter", "display_name": "T1059 - Command and Scripting Interpreter" }, { "id": "T1071", "name": "Application Layer Protocol", "display_name": "T1071 - Application Layer Protocol" }, { "id": "T1105", "name": "Ingress Tool Transfer", "display_name": "T1105 - Ingress Tool Transfer" }, { "id": "T1497", "name": "Virtualization/Sandbox Evasion", "display_name": "T1497 - Virtualization/Sandbox Evasion" }, { "id": "T1547", "name": "Boot or Logon Autostart Execution", "display_name": "T1547 - Boot or Logon Autostart Execution" }, { "id": "T1140", "name": "Deobfuscate/Decode Files or Information", "display_name": "T1140 - Deobfuscate/Decode Files or Information" }, { "id": "T1027", "name": "Obfuscated Files or Information", "display_name": "T1027 - Obfuscated Files or Information" }, { "id": "T1204", "name": "User Execution", "display_name": "T1204 - User Execution" } ], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 124, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "OctoSeek", "id": "243548", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_243548/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 8736, "FileHash-MD5": 953, "FileHash-SHA1": 489, "FileHash-SHA256": 3566, "domain": 1516, "hostname": 2221, "CVE": 6 }, "indicator_count": 17487, "is_author": false, "is_subscribing": null, "subscriber_count": 223, "modified_text": "863 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "references": [ "fgsr-programOfStudy.json", "coi-supervisor.get.html.ftl", "customCSS_FGSR2.css", "qaConfig.json", "hrsbsCreateFolderRule.js", "fix_employee_names.js", "2024-03-17-log.txt", "roDailyQA.js", "eTranscriptTemp.js", "psPerson.get.js", "FandO-Programs.json", "readme.ftl", "cronJob.post.js", "hrsFolderCreateRule.js", "2024-01-17-log.txt", "*unsigned Domain: aptaforum.com.cn Name Servers: dns18.hichina.com Registrar: \u963f\u91cc\u4e91\u8ba1\u7b97\u6709\u9650\u516c\u53f8\uff08\u4e07\u7f51\uff09Status: ok", "apptStepOneSave.post.js", "2024-02-29-log.txt", "startDepartmentAdhocApprovalWorkflow.js", "review-comm01.get.html.ftl", "2024-01-14-log.txt", "fgsr-case-file-report.js", "2024-02-04-log.txt", "chs-upload.get.html.ftl", "scheduleRunEvery60Minutes.js", "my_docs_inline.ftl", "appointmentStartTest.get.html.ftl", "advScript1.js", "taskForm.get.js", "Emails:yejun.shou@yxips.com Name:\u7ebd\u8fea\u5e0c\u4e9a\u751f\u547d\u65e9\u671f\u8425\u517b\u54c1\u7ba1\u7406(\u4e0a\u6d77)\u6709\u9650\u516c\u53f8 Name Servers: dns17.hichina.com", "invite-email_nl.html.ftl", "uofaFacultyList.get.html.ftl", "studentupload.get.html.ftl", "uofa-pc-model.json", "wfh-seniormanager.get.desc.xml", "uofa-education-model.xml", "https://www.apple.com/qtactivex/qtplugin.cab [https://www.icloud.com .cab]", "enggCoopDocSetup.json", "review-startv2.get.html.ftl", "uAlbertaWorkflowGeneral.json", "blogsearch.get.js", "pgj.and.googletagmanagers.com", "artsCreateFolder.js", "dropboxCommonAspects.json", "fgsr-official-list.json", "coi-revise.get.desc.xml", "https://otx.alienvault.com/pulse/69bf8e2663d5480917ddb699", "fvca-corrections-email.ftl", "2024-02-27-log.txt", "readme_fr.html", "2024-01-20-log.txt", "triggerapsprocess.post.js", "gahyqah.com [command_and_control]", "NodeInfo.get.html.ftl", "thesisDepositArchival.js", "fgsrssgLanding.get.js", "appointmentSubmit.get.js", "guidelines-student-revision.get.js", "consignoMessage.get.js", "2024-02-10-log.txt", "pcmDocSetup.json", "wf-email.html_de.ftl", "routableGroups.get.json.ftl", "2024-06-01-log.txt", "categorysearch.get.desc.xml", "coupa.get.html.ftl", "RONotification.js", "https://otx.alienvault.com/pulse/69bf261cc4e399447d78776c", "searchmatchFullDob.js", "uarmm-supplement-scanning.json", "uofaDepartmentList.get.html.ftl", "psDeptSingle.get.desc.xml", "categorysearch.get.js", "engineering-doc-list.json", "MyTasks-config.json", "prb.and.googletagmanagers.com", "2024-01-22-log.txt", "search-match-list.get.html.ftl", "wfh-manager.get.desc.xml", "roEtranscriptReport.js", "kofaxSendEmail.js", "rso-mask.json", "office-of-advancement-record-types.json", "wf-email_fr.html.ftl", "2024-04-13-log.txt", "dns17.hichina.com", "googleAddon.get.desc.xml", "uofapersonidrest.get.html.ftl", "2024-05-22-log.txt", "extensionCreateFolder.js", "coveoGetDocList.get.json.ftl", "uofa-science-model.xml", "chsEmailOnUpdateComment.js", "APSWorkflowStatus.put.desc.xml", "uofa-cap-model.xml", "fgsr-category-list.json", "rso-financial-reporting-doc-type.json", "engineering-coop-security-list.json", "roAddAspectAndMoveAFA.js", "2024-04-03-log.txt", "sciCreateFolderPublic.js", "roslateapplist.get.js", "review-studentv2.get.html.ftl", "cbsr-model.xml", "folder-create-ro.js", "advMoveToFolder.js", "canada-provinces-list.json", "ro-acad-group.json", "claimtask.put.json.ftl", "CapFinalReportSubmit.js", "psDeptAll.get.js", "getapsdbid.get.desc.xml", "ADV-notify-type-mapping.json", "activities-email_fr.ftl", "pcm-update-competitive-noderefs.js", "capeamergedoc.get.js", "hrsbsDocumentLinking.get.js", "2024-01-06-log.txt", "scheduleRunEvery2AM.js", "following-email.html_fr.ftl", "wfh-form.get.html.ftl", "my-site-site.json", "roslateapplist.get.html.ftl", "assignuser.put.js", "avmstores.get.html.ftl", "FGSR-Forms-Config.js", "invite-email.ftl", "eTranscriptVersioningFix.js", "2024-04-16-log.txt", "coi-revise.get.html.ftl", "advEndowmentName.get.js", "Script2.js", "roScript4.js", "setTaskFilter.post.desc.xml", "businessDocSetup.json", "emailbody_textplain_alfresco_zh_CN.ftl", "scans.get.html.ftl", "ua-dummy.xml", "uarmTempModel.json", "roMoveCompletedBackScan.js", "ro-authenticity.json", "2024-03-23-log.txt", "updateVariable.post.json.ftl", "searchPageConfig.json", "approvethesis.post.js", "search.get.html.ftl", "emailbody_textplain_alfresco_it.ftl", "guidelines-start.get.desc.xml", "http://apple.com-index.php-account-locked-verification.test2.aptaforum.com.cn/", "apsSitesConfig.json", "generatereport.get.json.ftl", "chs-agreements.get.html.ftl", "advScript3.js", "2024-02-20-log.txt", "consignoMessage.get.json.ftl", "review-comm02.get.desc.xml", "emailbody_textplain_alfresco_fr.ftl", "roScript9.js", "support-documentation", "malicious.high.ml [dropper]", "roFolderCreateLDAPLookup.js", "Institutions.json", "caps-school-board-list.json", "localizable.ftl", "roSearchMatchQuery.js", "Quasi Gov - Law firms stole victims clouds. Evidence, $Intellectual property, Memories of & victims family. Merciless", "alfresco docs.js", "tasklist.get.html.ftl.jquery", "AFAconfig.json", "notify_user_email_ooa_failed.ftl", "search-match-result.get.html.ftl", "moveToFoldersRetainTitle.js", "setTaskFilter.post.js", "roFolderCreateLDAPLookup_no_notificatiion.js", "2024-01-07-log.txt", "https://www.reddit.com/user [honeypot]", "getSlateId.get.json.ftl", "psAudit-model.xml", "processIdProps.get.desc.xml", "2024-04-12-log.txt", "roDocumentTypes.json", "advScanningMetadata.js", "APSWorkflowInfo.put.js", "advChangeDocumentName.js", "graduate-student-records-v2-site.json", "aptaforum.com.cn 182.61.201.90 , 182.61.201.91 China ASN AS38365 beijing baidu netcom science and technology co. ltd", "fgsrEnv.js", "review-cosupervisor.get.html.ftl", "2024-04-15-log.txt", "advMetadataUpdate.js", "everyDay11H30MinPM.js", "hrsbs-doc-list.json", "chsStudentView.get.html.ftl", "apptStepOneStarter.post.json.ftl", "categorysearch.get.html.404.ftl", "ADV-notify-terms-types.ftl", "businessBulkShareFolder.js", "fgsrCreateAPSProcessFromFolder.js", "fgsr-credential-list.json", "tasklist.get.js", "fgsr-thesis-deposit.json", "ro-search-match.xml", "www.norad.mil [tracking]", "2024-01-05-log.txt", "wf-email_ja.html.ftl", "galyqaz.com [command_and_control]", "faculty-of-ales-site.json", "2024-05-02-log.txt", "uofapersonidrest.get.js", "Crowdsourced IDS: Matches rule MALWARE-CNC DNS", "Domains Contacted: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com", "chsConfig.js", "sciCreateFolder.js", "capeamergedoc.get.desc.xml", "2024-02-17-log.txt", "2024-04-17-log.txt", "avmbrowse.get.desc.xml", "capstart.get.html.ftl", "chs-studentExpired.ftl", "categorysearch.get.atom.404.ftl", "capConfig.js", "2024-02-03-log.txt", "review-comm01v2.get.html.ftl", "2024-01-31-log.txt", "emailbody_textplain_share_nl.ftl", "uofa-native-studies-model.json", "apsAppConfig.json", "arts-security-list.json", "ua-audit-generic-model.xml", "arts-doc-list.json", "uatraining.xml", "review-comm03v2.get.js", "rmOOABackgroundInformationFiling.js", "pllcDocSetup.json", "hrsbsReviewCycleReport.js", "apple.haipaoapp.com \u2022 http://apple.haipaoapp.com \u2022 http://apple.haipaoapp.com/ \u2022 https://apple.haipaoapp.com/", "uofa-law-model.xml", "schoolboard.get.desc.xml", "bulkload-testing-site.json", "2024-03-03-log.txt", "2024-04-23-log.txt", "enggCoopCreateFolderRule.js", "wfh-seniormanager.get.js", "advEntityName.get.js", "https://hybrid-analysis.com/sample/6ac18dcdfd4164ed7beeffffc995c5349c52b01dfObe5000f25294d698faf3b9/69c1b", "faculty-of-education-site.json", "uofa-sfs-model.xml", "2024-03-29-log.txt", "fixCheckout.js", "createSlateApplicationsCSV.js", "enggDocSetup.json", "wf-email.html_it.ftl", "ro-applicant-type.json", "rso-activation-report-doc-type.json", "businessFileShareFolder.js", "ro-aug-model.json", "blogsearch.get.html.ftl", "2024-03-27-log.txt", "roslateexists.get.desc.xml", "chs-programYear-list.json", "following-email.html_de.ftl", "http://appleid.apple.com-signin-8491e.test2.aptaforum.com.cn/", "lawConfig.json", "department.json", "review-comm03.get.js", "adv-model.json", "emailbody_textplain_share_ja.ftl", "chs-faculty-list.json", "uofa-business-model.xml", "uofa-pllc-model.xml", "uofa-slate-model.json", "uappol-category-heirarchy.json", "alesCreateAdvisingNotes.js", "eSignatureStatusHistory.get.js", "uappol-site.json", "moveToFolders.js", "thesisDepositConfig.json", "chsAdminStuView.get.html.ftl", "schoolboard.get.js", "2024-04-18-log.txt", "advScriptKofax.js", "emailbody_textplain_alfresco_ru.ftl", "apptStepOneSave.post.json.ftl", "my_spaces.ftl", "review-comm03v2.get.html.ftl", "securityWorkflowUtil.js", "2024-02-15-log.txt", "advChangeDocumentType_background.js", "eraReportGeneration.js", "old-AlfrescoToolkit.conf", "www.apple.com [API property call]", "augustana-site.json", "advReconcilliation.js", "roslateapplist.get.json.ftl", "uappolCategoryHeirarchy.get.desc.xml", "AFA_MainFileOnly.post.desc.xml", "following-email.html_nl.ftl", "roScript3.js", "appleid.apple.com-signin-8491e.test2.aptaforum.com.cn", "faculty-of-native-studies-site.json", "search-match-result.get.js", "eSignDownload.get.js", "activities-email_it.ftl", "uappolCreateFolderRule.js", "coveoGetDocList.get.desc.xml", "epsb.get.html.ftl", "https://fonts.googleapis.com/css", "advext-model.json", "ro-slate-institutions.json", "student-financial-services-site.json", "APSWorkflowStatus.get.desc.xml", "foCreateFolder.js", "notify_user_email.html.ftl", "pllc-doc-list.json", "uappolCategoryHeirarchy.get.js", "paperFileUtil.get.html.ftl", "chsCreateFolderRule.js", "review-startv2.get.desc.xml", "ADV-notify-terms-types.js", "coi-employee.get.html.ftl", "chs-studentUploadNotification.ftl", "alesDaily.js", "adv-model.xml", "hrsDaily.js", "sciBulkShareFolder.js", "fgsrCreateFolder.js", "artsFileScanned.js", "review-comm01v2.get.js", "hrs-leaves.json", "startPayActionWorkflow.js", "2024-03-31-log.txt", "roScript8.js", "chsAgreementsConfig.json", "ADVDonationCalendarToFiscal.js", "emailbody_textplain_share_it.ftl", "rmSearchmatchNomatchFiling.js", "dynamicSecurityMarksModel", "hrsDocSetup.json", "every30MinStartingAt19MinPastHour.js", "assignuser.put.desc.xml", "guidelines-student.get.html.ftl", "psPerson.get.json.ftl", "uappol-functions.js", "eSignDownload.get.desc.xml", "hrsbs-action-reasons.json", "util.js", "native-studies-security-list.json", "Alerts: creates_service stealth_window antivm_network_adapters checks_debugger", "psAcademicDeptAll.get.desc.xml", "hrsbs-security-class.json", "2024-02-22-log.txt", "updateVariable.post.desc.xml", "APSWorkflowInfo.put.desc.xml", "faculty-of-engineering-site.json", "wf-email_es.html.ftl", "advErrorMessageReset.js", "pllcConfig.json", "applyTaskAction.post.desc.xml", "sfs-wf-email.html.ftl", "consignoWebhook.post.json.ftl", "EmailNotifCHSStudent.js", "review-comm02.get.html.ftl", "yesporn.fun", "review-comm01.get.desc.xml", "2024-05-26-log.txt", "updateSearchMatchStatus.js", "2024-02-26-log.txt", "blogsearch.get.desc.xml", "fo-emergency-response-manual.json", "2024-01-15-log.txt", "uofa-uappol-model.xml", "guideline-reports.js", "ro-academic-pre-pro-programs.json", "rsoprojectdetails.get.html.ftl", "2024-01-23-log.txt", "VO7MU1HA.htm : https://hybrid-analysis.com/sample/9e6e93c05a9736b95426fe0f492a18a2ac409bd9fb572dd3c982cb6de3ba0dbc", "artsDocSetup.json", "updateVariable.post.js", "move-fgsr-folder.js", "OOA-notify-email.js", "system-overview.html", "search-match-list.get.js.old", "ales-doc-list.json", "2024-05-29-log.txt", "uoda-faculties.json", "createSlateFolioMaterialDropdown.js", "sfsDocSetup.json", "psAuthorizedApprover.get.json.ftl", "HallRender.com | Law Firm M. Brian Sabey Esq. | Pegasus related", "faculty-model.json", "command-utils.js", "https://tulach.cc/ [phishing, exploits, malware spreader]", "chs-emailNotification.json", "Protected:SA\u2019r Jeffrey Scott Reimer, Mark Montano MD, John T. Sasha MD, Frederick P. Scherr , others.", "createReportPermissionsFoldersInASite.js", "invite-email.html.ftl", "uofa-set-model.xml", "ro-doctypes.json", "artsCreateFolderRule.js", "rso-forms-form-type.json", "cronJob.post.desc.xml", "school-of-business-site.json", "emailbody_textplain_alfresco_nb.ftl", "enggCreateFolderRestricted.js", "2024-03-24-log.txt", "2024-04-19-log.txt", "2024-05-31-log.txt", "capeamergedoc.get.html.ftl", "gtaGraStatus.post.json.ftl", "uploadfile.post.json.ftl", "2024-03-06-log.txt", "invite-email-add-direct.html_ja.ftl", "rso-site.json", "psDeptSingle.get.json.ftl", "uofaDepartmentName.get.js", "review-student-revision.get.desc.xml", "folder.get.html.ftl", "psUpdateAlfrescoDepartment.js", "psAcademicDeptAll.get.json.ftl", "review-nextdate.get.js", "2024-02-01-log.txt", "emailbody-share-textplain.ftl", "Names: Photo.scr \u2022 85115B0142902832C864B3009CAB1A00.RS (names of FileHash above)", "law-doc-list.json", "uofa-slate-model.xml", "foModel.json", "https://hybrid-analysis.com/sample/a638ece11c81bcac0002363eb3f75de35a46ce0e080b5de41162093181079a6b/69c018efcb875e4fb30cdfcc", "symplexMoveToFolder.js", "lawDocSetup.json", "review-student-revisionv2.get.desc.xml", "Error https://otx.alienvault.com/indicator/hostname/lb-212-215.above.com", "artsConfig.json", "consignOInitiatorOfferLetterChange.js", "epsb.get.js", "pllc-site.json", "notify_user_email_de.html.ftl", "rmScriptThrowError.js", "coi-start.get.html.ftl", "2024-05-06-log.txt", "chsStudentView.get.js", "wf-email.html_nl.ftl", "http://apple.sweetycat.com/ \u2022 https://apple.sweetycat.com/", "roEtranscriptPDFConverter.js", "new-user-email_nl.html", "cbsr-worksheetType.json", "getTaskFilter.get.js", "2024-04-09-log.txt", "review-cosupervisorv2.get.desc.xml", "https://www.norad.mil/ [tracking]", "uoda-departments.json", "ro-campusSolutionsTerm.json", "setTaskFilter.post.json.ftl", "http://web-secure-appleid-login.com.test2.aptaforum.com.cn/", "wfh-revise.get.desc.xml", "2024-03-01-log.txt", "apptStepZeroStarter.post.js", "components.zip - 2b91fcf852a5f1f57be71a269d82497b37c9f544ebd8f32aaa240e4cde0ffeea", "roAddComment.js", "customCSS_FGSR.css", "review-comm03v2.get.desc.xml", "ro-search-match-status.json", "appointmentSubmit.get.desc.xml", "https://otx.alienvault.com/pulse/69b49ad5dd40a24d83cd6a72", "addPersonAspect.js", "consignoWebhook.post.desc.xml", "FileHash-SHA256 002dee2db8b07b98b543ad99d0dd4e3e0ba7624f956d719ba803f57b426e30e7", "review-comm03.get.desc.xml", "RORoutingWorkflowUtil.js", "2024-05-21-log.txt", "gettasks.get.js", "2024-02-14-log.txt", "capinfo.get.js", "appt-final-reminder.ftl", "nativeStudiesDocSetup.json", "new-user-email_de.html.ftl", "everyDay2H35MinAM.js", "2024-04-01-log.txt", "guidelines-student.get.js", "foCreateFolderRule.js", "ist-site.json", "guidelines-student-revision.get.html.ftl", "college-of-health-sciences-site.json", "augTranscript.js", "scans.get.desc.xml", "invite-email_es.html.ftl", "alesFolderCreateSchedule.js", "googleAddon.get.js", "invite-email.html_nl.ftl", "consignoMessage.get.desc.xml", "uappolCategoryHeirarchy.get.json.ftl", "2024-04-22-log.txt", "hrsbs-file-structure.json", "emailbody_textplain_alfresco_nl.ftl", "changeInitiatorAppt.put.js", "uofaDepartmentList.get.desc.xml", "chs-upload.get.js", "KeenDNS | keendnsaclremote805717135272048.qeenetic.link", "review-student.get.html.ftl", "notify-records-due-for-review-email.ftl", "2024-03-21-log.txt", "ADVendFundReportFiling.js", "enggConfig.json", "invite-email-add-direct.html_nl.ftl", "symplexUtils.js", "pensionBenefit.html.ftl", "UAlbertaSettings.conf", "archiveDocument.js", "pinames.json", "2024-04-30-log.txt", "activities-email_de.ftl", "staff-training-site.json", "fgsrCreateGuidelineAPSProcessFromCSV.js", "apptStepOneStarter.post.js", "capstart.get.desc.xml", "manual-tracking-script.js", "guidelines-supervisor.get.js", "https://otx.alienvault.com/pulse/69bea426487bffa5384c6f38", "uofa-extension-model.json", "2024-01-08-log.txt", "2024-02-11-log.txt", "https://seedbeej.pk/tin/index.php?QBOT.zip", "advConfig.json", "hrs-benefits.json", "educationCreateAdvisingNotes.js", "fvca-reminder-email.ftl", "uappol-metadata-query.get.js", "roslateexists.get.html.ftl", "qaRelease.js", "103.224.212.215 \u2022 rigs.zu0x.com \u2022 Australia : AS133618 trellian pty. limited", "uofa-fo-model.xml", "lawCreateFolder.js", "every10MinStartingAt5MinPastHour.js", "Win32:CVE-2017-0147-B\\ [Expl] , Win.Ransomware.WannaCry-6313787-0 , Exploit:Win32/CVE-2017-0147.A", "science-doc-list.json", "getJson.get.js", "edit.get.js", "review-nextdate.get.desc.xml", "missingDocumentList-csv.js", "config.js", "apsApplicationList.get.html.ftl", "createROReconciliationReports.js", "review-comm02v2.get.html.ftl", "uofapersonid.get.js", "CAP-notify-monthly-report.ftl", "enggCreateFolderRule.js", "new-user-email_es.html.ftl", "2024-02-28-log.txt", "rma_isClosed.js", "2024-02-25-log.txt", "IDS Detections: Possible ETERNALBLUE Probe MS17-010 (Generic Flags)", "http://ww17.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com/", "ua-search-model.xml", "roDocProcessing-model.xml", "advScript5.js", "acsToApsUserUpdate.js", "msedge.b.tlu.dl.delivery.mp.microsoft.com", "uofa-base-model.json", "following-email.html_ja.ftl", "ro-method-receipt.json", "tamis-model.json", "augustana-doc-list.json", "cbsr", "queryTasks.get.json.ftl", "facopr-planTypes.json", "hrsConfig.json", "2024-05-25-log.txt", "rso-sponsor-names.json", "2024-05-01-log.txt", "add_document_type_ro.js", "ceeb.get.desc.xml", "xmlUtil.js", "reappointment-reminder-schedule.js", "Trojan/JS.Redirector.QNO SHA256:9e6e93c05a9736b95426fe0f492a18a2ac409bd9fb572dd3c982cb6de3ba0dbc", "advScript4.js", "https://viz.greynoise.io/analysis/0cd9177e-8328-4355-a2c0-d05704a64c72", "native-studies-doc-list.json", "following-email_fr.html.ftl", "IDS Detections: Query for .cc TLD 403 Forbidden", "copy-signed-offer-letter.js", "www.remoteaccess.allied-media.com", "notify_user_email_es.html.ftl", "emailbody_textplain_share_pt_BR.ftl", "2024-01-16-log.txt", "capinfo.get.html.ftl", "businessCreateFolderRestricted.js", "roCopyEphesoftMetadataScanned.js", "2023-12-31-log.txt", "coveoGetDocList.get.js", "document-query.js", "IP\u2019s Contacted: 103.224.212.220 105.242.60.208 117.13.61.219 117.180.208.83 12.105.46.122", "2024-05-07-log.txt", "2024-03-02-log.txt", "2024-04-06-log.txt", "addFolderMetadata.js", "report_rmr_holdReport.html.ftl", "advsearch.json", "https://www.hybrid-analysis.com/sample/a8decf589e5ec26f1e994a3923fc245db98f681f951d2bb8e1fcce1d8fef5293", "roScanningMetadata.js", "uofa-engg-model.xml", "smartFoldersExample.json", "every30MinStartingAt26MinPastHour.js", "augustana-security-list.json", "2024-01-04-log.txt", "deployWebServiceDescriptor.js", "scheduleRunEvery5PMTo10PM.js", "uofa-cap-model.json", "okg.and.googletagmanagers.com", "https://www.virustotal.com/graph/embed/g05f1796a358b458d95751d31d1d529aa378f8ffadf0b4305b7fa0bd1c64fe228?theme=dark", "2024-03-07-log.txt", "ro-relationship-to-institution.json", "2024-03-28-log.txt", "fgsrCreateAPSProcessFromCSV.js", "coupa.get.desc.xml", "review-supervisorv2.get.desc.xml", "advScriptMonthly.js", "emailbody_textplain_share_nb.ftl", "emailbody-alfresco-textplain.ftl", "advChangeDocumentType.js", "avmstores.get.desc.xml", "apptStepOneStarter.post.desc.xml", "uafgsrsup-model.xml", "tim-sops", "emailbody_textplain_alfresco_es.ftl", "2024-02-08-log.txt", "deleteEphesoftDoc.js", "apple.com-verify.account.manage.test2.aptaforum.com.cn", "uaqa-model.xml", "foConfig.json", "wf-email.html_fr.ftl", "advEndowmentName.get.desc.xml", "2024-01-21-log.txt", "cap-site.json", "chs-agreements.get.js", "Yara Detections: WannaCry_Ransomware , Wanna_Cry_Ransomware_Generic , WannaDecryptor", "review-supervisor.get.js", "Win.Trojan.Agent-31647 \u2022 IDS: Detections CoolWebSearch Spyware (Feat)", "ua-search-model.json", "advEntityName.get.html.ftl", "every46MinPastHourBetween4PM12PM.js", "fgsr-model.json", "2024-02-16-log.txt", "rso-cfi-purchasing-doc-type.json", "2024-05-28-log.txt", "kofaxMetadataMergeMissing.js", "wfh-revise.get.js", "queryTasks.get.desc.xml", "advBatchProcessing.js", "NodeInfoByCapId.get.desc.xml", "wf-email_nl.html.ftl", "guidelines-start.get.html.ftl", "getSlateId.get.js", "uofa-base-model.xml", "2024-05-11-log.txt", "https://www.virustotal.com/gui/collection/63819e07111e9665ba8602777d782527c54f3fad71ef36f977405a004484787c/iocs", "PeopleSoft-eTranscript-XML-PDF.js", "kofaxFailedEmailTemplate.ftl", "roBatchScript.js", "rso-financials-doc-type.json", "invite-email-add-direct.html_es.ftl", "ro-slate-institution-material.json", "2024-04-25-log.txt", "hrsbsCreateFolder.js", "advScriptDaily.js", "APSWorkflowStatus.put.html.ftl", "calendar-year-model.json", "claimtask.put.js", "convertTranscript.js", "2024-02-12-log.txt", "rmFilingConfig.json", "ADVEphesoftMove.js", "https://www.reddit.com/user", "coi-supervisor.get.desc.xml", "invite-email-add-direct.html_de.ftl", "CapApsConfig.json", "uappol-metadata-query.get.desc.xml", "getJson.get.json.ftl", "roScript1.js", "invite-email-moderated.html.ftl", "fgsrCopyMetadata.json", "simpleupload.post.json.ftl", "uofa-pllc-model.json", "everyDay1H05MinAM.js", "advCreateFolderScheduled.js", "uofa-aps-model.json", "AlfrescoToolkit.conf", "2024-03-30-log.txt", "archivedItems.js", "ro-related-record-types.json", "IDS Detections: Possible ETERNALBLUE Probe MS17-010 (MSF style) ETERNALBLUE Probe Vulnerable System Response MS17-010", "academic-department.json", "paperFileUtil.get.desc.xml", "folderCreateUtilAA.js", "law-security-list.json", "changeInitiatorAppt.put.json.ftl", "command-search.js", "backup.js", "2023-12-01-log.txt", "apple.com-index.php-account-locked-verification.test2.aptaforum.com.cn", "JSON.js", "2024-04-28-log.txt", "addSearchMatchDocumentType.js", "materials.get.desc.xml", "http://apple.com-verify.account.manage.test2.aptaforum.com.cn/", "facopr-model.json", "wf-email_it.html.ftl", "report_rmr_transferReport.html.ftl", "eTranscriptInstList.js", "getapsdbid.get.json.ftl", "2024-01-19-log.txt", "activities-email_es.ftl", "test return value.js", "pllcCreateFolder.js", "uawfh-model.xml", "tasklist.get.desc.xml", "LaunchWorkflowUtils.js", "IDS Detections: IPC$ share access \u2022 SMB-DS IPC$ unicode share access \u2022 403 Forbidden", "uofa-chs-model.json", "hrsbs-employee-class.json", "hrsbsDocumentLinking.get.html.ftl", "every57MinPastHour.js", "everyDay2H05MinAM.js", "roScanningMetadataBackScan.js", "getapsdbid.get.js", "2024-05-30-log.txt", "NodeInfo.get.desc.xml", "fgsr-exam-list.json", "2024-05-18-log.txt", "PaperFileUtils.js", "applyTaskAction.post.json.ftl", "businessCreateFolderSchedule.js", "review-supervisorv2.get.js", "APSWorkflowStatus.put.js", "uofa-workflowGeneral.json", "moveThesesForTransfer.js", "uappol-metadata-query.get.json.ftl", "kofaxMetadataMerge.js", "2024-04-21-log.txt", "everyDay7H30MinPM.js", "hrsFileShareFolder.js", "businessCreateFolder.js", "emailbody_textplain_alfresco_de.ftl", "roScript5.js", "2024-01-18-log.txt", "education-security-list.json", "2024-03-10-log.txt", "advScriptDaily30minFreq.js", "routableGroups.get.js", "Alerts: peid_packer pe_unknown_resource_name", "uofa-pc-model.xml", "uamytasks.config.get.js", "augustana-legacy-transcript-doc-list.json", "new-user-email_ja.html.ftl", "alesDocSetup.json", "AFA_MainFileOnly.post.json.ftl", "guidelines-start.get.js", "every38MinPastHourBetween4PM12PM.js", "advSimplexMapping.json", "uofaDepartmentName.get.desc.xml", "general_example.ftl", "student-records-bulk-load-testing-site.json", "chs-degProgram-list.json", "uappol-upload-rule.js", "alesFileShareFolder.js", "completetask.post.json.ftl", "2024-05-19-log.txt", "wf-email.html_ja.ftl", "uofa-hrs-model.json", "augDocSetup.json", "review-cosupervisor.get.js", "gtaGraProcessToCSV-2AM.js", "2024-05-10-log.txt", "hrsbs-functionalroles.json", "uofa-rso-model.json", "roScript2.js", "appointmentStart.get.js", "ua-error-model.xml", "rma-model.json", "cbsr-study.json", "uofaDepartmentName.get.html.ftl", "uofa-ales-model.json", "transcript-model.json", "FVCA-data-import.js", "IDS Detections: Behavioral Unusual Port 445 traffic Potential Scan or Infection SMB-DS", "uaqa-model.json", "2024-04-20-log.txt", "HRSBS-SyncCCIDs.js", "APSWorkflowStatus.get.html.ftl", "2024-03-14-log.txt", "roslateapplist.get.desc.xml", "review-comm02.get.js", "following-email_nl.html.ftl", "APSWorkflowStatus.get.js", "invite_user_email.ftl", "chs-program-list.json", "following-email_de.html.ftl", "show_audit.ftl", "2024-02-19-log.txt", "2024-02-02-log.txt", "symplexMetadataUpdate.js", "gettasks.get.json.ftl", "search.get.js", "new-user-email_nl.html.ftl", "http://prtests.ru/test.html?15%0Ahttp://profetest.ru/test.html?2%0Ahttp://qptest.ru/test.html?5%0Ahttp://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/3cf71a18-f999-4372-beac-67715d51bb62?P1=1629470400&P2=404&P3=2&P4=d%2520arRdiatcalmlQRKq2gm1LlFitNgIcLpnyzCIHYtf%2520ByXQF0JNptZ0rBDMKlLL%2520qsOzZdPICJjC7MWkkdm1Hg==%0Ahttp://stafftest.ru/test.html?0%0Ahttp://iqtesti.ru/test.html?17%0Ahttp://hrtests.ru/test.html?1%0Ahttp://pstests.ru/test.html?4%0Ahttp://prtests.ru/test.html?6%0Ahttp:/", "readme_de.html", "googleAddon.get.json.ftl", "alesConfig.json", "review-studentTest.get.desc.xml", "uofa-caps-model.xml", "report_rmr_destructionReport.html.ftl", "chs-campus-list.json", "hrs-employmentFinancial.json", "following-email_it.html.ftl", "chsAgreementCreateFolder.js", "alesCreateFolder.js", "uappolConfig.json", "wfh-seniormanager.get.html.ftl", "everyDay7H45MinAM.js", "rso-cfi-financials-doc-type.json", "chsCreateFolder.js", "uofa-arts-model.json", "Alfresco.zip - 1bf054bded99e2ae414154593d0892066b2e0c7add603f9321e157c77ae52075", "ro-search-match.json", "qaProcess.js", "triggerapsprocess.post.desc.xml", "2024-02-07-log.txt", "appointmentStart.get.desc.xml", "psAuthorizedApprover.get.js", "uofa-chs-agreements-model.json", "doc_info.ftl", "uofa-uappol-model.json", "guidelines-supervisor-revision.get.desc.xml", "sciFileScanned.js", "invite-email-add-direct.html.ftl", "generic2min.js", "generatereport.get.desc.xml", "clioToAcsDocUpdate.js", "chsAdminStuView.get.desc.xml", "student-financial-services-doc-list.json", "everyDay12H30MinAM.js", "ceeb.get.json.ftl", "augConfig.json", "notify_nl.htm", "review-supervisorv2.get.html.ftl", "fgsr-site.json", "sciCreateFolderRestricted.js", "hrs-employeeApprovedDeductions.json", "uappolCreateFolder.js", "uofa-engg-coop-model.json", "student-transcripts-site.json", "review-student-revision.get.js", "2024-02-13-log.txt", "wf-email.html_es.ftl", "business-doc-list.json", "invite-email_ja.html.ftl", "Crowdsourced IDS: Fast Flux attempt Matches rule ET INFO EXE IsDebuggerPresent (Used in Malware Anti-Debugging)", "ADVcalendarToFiscal.js", "applyTaskAction.post.js", "eTranscriptVersionModifierFix.js", "apptStatusDocUpdate.post.json.ftl", "roCreateEducationalCSV.js", "2024-01-09-log.txt", "addTimeStamp.js", "roCopyOlderScannedDocument.js", "2024-05-12-log.txt", "updatevariables.post.json.ftl.notused", "2024-04-11-log.txt", "FandO", "avmbrowse.get.js", "eSignatureStatusHistory.get.desc.xml", "fgsrMigrationScript-withTerminationLogic.js", "readme.html", "2024-02-23-log.txt", "notify_user_email_nl.html.ftl", "departmentAdhocTask.html.ftl", "scheduleRunEvery20Minutes.js", "every2MinStartingAt1MinPastHour.js", "ClioUpdateScheduledJob.js", "http://appleid.apple.com.secure1account.pagelogin.test2.aptaforum.com.cn/", "uofa-arts-model.xml", "alesCreateFolderConfidential.js", "coi-employee.get.js", "educationDocSetup.json", "appointmentLandingPage.get.js", "apsApplicationList.get.desc.xml", "copy-fgsr-to-graduate-students-records.js", "sciCreateFolderConfidential.js", "siteFileViewer.get.desc.xml", "2024-04-07-log.txt", "roAddSearchMatchAspect.js", "2024-01-24-log.txt", "2024-04-29-log.txt", "2024-03-11-log.txt", "https://hybrid-analysis.com/sample/09610b7c855ef132a31f2e0136b4d62b9dbb04c6fcb42160d6d8409ef6394e40/69c0189c5e0483a78907cc39", "scheduleRunEveryday12AMto6AM.js", "completetask.post.js", "support-documentation-site.json", "edit.get.desc.xml", "alesFileScanned.js", "following-email_ja.html.ftl", "siteFileViewer.get.html.ftl", "gtaGraStatus.post.desc.xml", "search-match-dob-add.js", "gettasks.get.desc.xml", "recordsCustomModel.xml", "updatevariables.post.desc.xml.notused", "hrs-security-list.json", "tamis-model.xml", "ro-model.json", "ADVmoveRecordsToPreQA.js", "emailbody_textplain_share_ru.ftl", "jgw.and.googletagmanagers.com", "start-pooled-review-workflow.js", "apptStatusDocUpdate.post.desc.xml", "lkp.and.googletagmanagers.com", "chs-Invalid.ftl", "siteFileViewerConfig.js", "2024-03-25-log.txt", "taskForm.get.desc.xml", "(?) https://living-sun.com/applescript/68281-is-there-a-way-to-disable-force-quit-while-applescript-application-is-still-running-applescript-quit.html", "augCreateFolder.js", "startBenefitWorkflow.js", "save.post.desc.xml", "every20MinStartingAt15MinPastHour.js", "manual-generate-script.js", "wfh-manager.get.html.ftl", "dropox.com", "coi-start.get.desc.xml", "enggCoopCreateFolderRestricted.js", "ADVSiteContext.js", "ADVChangeAuthor.js", "apsGroupsConfig.json", "APSWorkflowInfo.put.html.ftl", "2024-05-03-log.txt", "advScanningMapping.json", "ro-slate-folio-material-school-scope.json", "FVCA.xml", "ro-model.xml", "alesCreateFolderRestricted.js", "guidelines-supervisor-revision.get.html.ftl", "invite-email_fr.html.ftl", "rso-accounts-receivable-accounts-payable-doc-type.json", "fgsrDocRestructure.js", "uarmTempModel.xml", "uploadfile.post.js", "demo-site-site.json", "advScriptWeekly.js", "bzx.and.googletagmanagers.com", "artsCreateFolderRestricted.js", "science-security-list.json", "backup and log.js", "chs-ag-type.json", "review-nextdate.get.html.ftl", "enggCreateFolder.js", "2024-04-14-log.txt", "everyDay2H45MinAM.js", "notify_user_email_fr.html.ftl", "new-user-email.html.ftl", "readme_ja.html", "nativeStudiesCreateFolderRestricted.js", "uploadfile.post.desc.xml", "review-comm01.get.js", "2023-12-30-log.txt", "reappointment-generate-process.js", "hrs-bulkId.json", "assignuser.put.json.ftl", "gtaGraStatus.post.js", "uappol-type.json", "uofa-business-model.json", "pcy.and.googletagmanagers.com", "extensionCreateFolderRule.js", "generalSchedule.js", "findmy.apple-uk.live", "2024-02-21-log.txt", "uappol-api.js", "fgsrssgLanding.get.html.ftl", "scienceASDocumentImport.js", "appointmentLandingPage.get.html.ftl", "ro-slate-folio-material-non-school-scope.json", "uarmm-supplement-scanning.xml", "roScript7.js", "taskReportCSV-Appointment-prod.js", "FandO-Organizations.json", "2024-03-18-log.txt", "folder.get.desc.xml", "transcript-model.xml", "faculty-of-extension-site.json", "uofa-hrsbs-model.json", "hrs-site.json", "pcmCreateFolder.js", "example test script.js", "emailbody_textplain_share_es.ftl", "cronJob.post.json.ftl", "save.post.js", "search-match-attach.get.js", "pcm-site.json", "alesCreateFolderSchedule.js", "AFA_Main.post.desc.xml", "apptStepZeroStarter.post.json.ftl", "2024-05-23-log.txt", "uofaDocTypes.json", "securityWorkflowSetting.json", "pcm-category.json", "new-user-email_it.html.ftl", "2024-03-16-log.txt", "nativeStudiesCreateFolder.js", "rso-agreements-doc-category.json", "FVCA-manual-property-update.js", "fgsr-awards.json", "every30MinStartingAt11MinPastHour.js", "engineering-coop-doc-list.json", "rsoDocSetup.json", "blogsearch.get.atom.400.ftl", "http://114.114.114.114:90/p/cdbdd4a09a64909694281aec503746fd/mobile_index.html?MTE0LjExNC4xMTQuMTE0L2xvZ2luP2hhc19vcmlfdXJp [Tulach | Malicious]", "uofa-sfs-model.json", "graduate-student-records-site.json", "lawCreateFolderRule.js", "lyvyxor.com [command_and_control]", "chsAgreementsDocSetup.json", "2024-02-05-log.txt", "AFA_Main.post.json.ftl", "fgsrCreateApsFromCSV.json", "fo-site.json", "ua-audit-generic-model.json", "uofa-common-model.json", "eTranscriptConfig.json", "UDP Include internal to internal communication Top Source 192.168.122.131 Top Destination 8.8.8.8 x", "2024-04-27-log.txt", "guidelines-supervisor.get.desc.xml", "roMoveCompleted.js", "adv-correspondence-type.json", "publicSiteFileViewer.get.desc.xml", "edit.get.html.ftl", "uarm-rma-filing-model.xml", "appointmentStartTest.get.desc.xml", "enggFileScanned.js", "createDepartmentJSON.js", "sfsCreateFolder.js", "addTimeStampRandomFileName.js", "review-student-revision.get.html.ftl", "invite-email_it.html.ftl", "roScript1BackScan.js", "dept-config.js", "change-fgsr-pdf-file-name-with-date.js", "advMoveToFoldersScheduled.js", "2024-01-25-log.txt", "2024-03-20-log.txt", "https://viz.greynoise.io/ip/analysis/2610b635-c05a-4f28-a112-7278de8fdf9b", "avmbrowse.get.html.ftl", "scheduleRunEvery2-10PM.js", "reappointment-tracking-schedule.js", "https://www.virustotal.com/graph/embed/g2948a5c332eb4614973872a8243215f6aa1fba79749a48ea92806e9b934db91f?theme=dark", "review-supervisor.get.desc.xml", "uofa-esign-model.xml", "review-studentv2.get.js", "capstart.get.js", "pllc-security-list.json", "2024-05-20-log.txt", "wf-email_de.html.ftl", "ephesoft-educational.json", "2024-03-12-log.txt", "uofa-native-studies-model.xml", "folder.get.js", "web-secure-appleid-login.com.test2.aptaforum.com.cn", "roScript6.js", "2024-01-28-log.txt", "search.get.desc.xml", "alfrescoUserGroupRequest.ftl", "emailbody_textplain_share_zh_CN.ftl", "scans.get.js", "The Lambda function associated with the CloudFront distribution was throttled.", "rmFilingDoc.js", "FVCA.json", "2024-03-13-log.txt", "reappointment-reminder-process.js", "SetExpiryDate.js", "fgsrssgLanding.get.desc.xml", "wfh-form.get.desc.xml", "uofa-education-model.json", "fgsrCopyMetadataToFolderLevel.js", "uofa-common-model.xml", "everyDay4H30MinAM.js", "psDeptAll.get.desc.xml", "emailbody_textplain_share_fr.ftl", "IDS Detections: Observed WannaCry Domain (iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff .com in DNS Lookup)", "invite-email-add-direct.html_it.ftl", "review-cosupervisorv2.get.js", "thesisDestructionReport.js", "luceneUtil.js", "2024-01-26-log.txt", "NodeInfoByCapId.get.js", "uofapersonid.get.desc.xml", "capinfo.get.html.ftl.backup", "review-supervisor.get.html.ftl", "savetask.post.json.ftl", "hrsbs-owner-details.json", "chs-provinces-list.json", "assocModel.json", "completetask.post.desc.xml", "collegeOfHealthSciencesConfig.json", "extension-security-list.json", "advDocSetup.json", "roAddAspectAndMoveTranscript.js", "cbsrsite-sopTypes.json", "businessCreateAdvisingNotes.js", "UAlbertaSettings.json", "enggCoopConfig.json", "getTaskFilter.get.desc.xml", "beacons.bcp.gvt.com [tracking]", "2024-04-24-log.txt", "siteMembersReport.js", "hrsbsConfig.json", "rmThesis.js", "sfs-ussl-report-status.json", "Yara Detections: MS17_010_WanaCry_worm , stack_string , MS_Visual_Cpp_6_0 , Armadillov1xxv2xx", "generatereport.get.js", "ales-security-list.json", "record-superseded-email.ftl", "env.js", "2024-04-02-log.txt", "2024-05-09-log.txt", "gtaGraProcessToCSV.js", "siteFileViewer.get.js", "uofa-esign-model.json", "activities-email_nl.ftl", "hrsFolderCreateSchedule.js", "Alerts: network_icmp nolookup_communication persistence_autorun modifies_proxy_wpad", "fgsr-model.xml", "review-student-revisionv2.get.js", "appointmentLandingPage.get.desc.xml", "advext-model.xml", "folderCreateDocumentADV.js", "paperFileUtil.get.js", "uofaDepartmentList.get.js", "guidelines-supervisor-revision.get.js", "security-group-model.json", "schoolboard.get.html.ftl", "publicSiteFileViewer.get.js", "payActionDecision.html.ftl", "hrsbs-review-cycle.json", "fo-utilities.json", "wfh-revise.get.html.ftl", "enggCoopCreateFolder.js", "We can't connect to the server for this & x Lambda function", "every22MinPastHour.js", "getSlateId.get.desc.xml", "2024-01-29-log.txt", "advScanning.js", "sciFileShareFolder.js", "calendar-year-model.xml", "blogsearch.get.html.400.ftl", "collegeOfHealthSciencesDocSetup.json", "ro-indigenous-type.json", "routableGroups.get.desc.xml", "chs-commentUpdate.ftl", "eSignatureStatusHistory.get.html.ftl", "savetask.post.desc.xml", "save.post.json.ftl", "updatevariables.post.js.notused", "rso-financial-reconciliation-doc-type.json", "faculty-of-arts-site.json", "2024-05-15-log.txt", "2023-12-29-log.txt", "uofaFacultyList.get.desc.xml", "psPerson.get.desc.xml", "cap-file-load.post.js", "2024-04-10-log.txt", "2024-01-27-log.txt", "appt-halfway-reminder.ftl", "review-student.get.js", "review-comm02v2.get.js", "student-records-site.json", "advScript2.js", "2024-03-19-log.txt", "augCreateFolderRestricted.js", "ro-official.json", "uofa-fo-model.json", "CAPGenerateMonthlyReport.js", "security-group-user.js", "2024-01-10-log.txt", "faculty-of-law-site.json", "fgsrCreateFolderFromCSV.js", "sfs-wf-completed-email.html.ftl", "2024-05-05-log.txt", "recent_docs.ftl", "extensionDocSetup.json", "AFA_Main.post.js", "westCanDocumentMove.js", "Crowdsourced IDS: Matches rule ET POLICY PE EXE or DLL Windows file download HTTP", "programExtensionScript.js", "emailbody_textplain_alfresco_ja.ftl", "following-email.html.ftl", "extension-doc-list.json", "AlfrescoToolkit.info", "2024-05-08-log.txt", "processIdProps.get.json.ftl", "review-student.get.desc.xml", "uofapersonidrest.get.desc.xml", "eSignDownload.get.html.ftl", "2024-02-06-log.txt", "chsReport.js", "appointmentSubmit.get.html.ftl", "2024-05-13-log.txt", "puzylyp.com [command_and_control]", "appointment-report-schedule.js", "chs-studentExpireSoon.ftl", "2024-04-04-log.txt", "simpleupload.post.js", "cbsr-model.json", "OOA_SOT_Name_change.js", "consignoWebhook.post.js", "psAuthorizedApprover.get.desc.xml", "following-email.html_it.ftl", "emailbody_textplain_alfresco_pt_BR.ftl", "coi-employee.get.desc.xml", "review-studentTest.get.js", "uAlbertaWorkflowGeneral.xml", "114.114.114.114 [Tulach | Virus Network IP]", "cbsrsite-site.json", "student-recordsConfig.json", "foDocSetup.json", "review-student-revisionv2.get.html.ftl", "2024-01-13-log.txt", "uofa-aps-model.xml", "2024-02-09-log.txt", "lawFileScanned.js", "businessConfig.json", "appointmentStartTest.get.js", "invite-email-add-direct.html_fr.ftl", "uofa-hrs-model.xml", "folderCreateUtil.js", "review-comm01v2.get.desc.xml", "processIdProps.get.js", "assocModel.xml", "ro-admitType.json", "2024-01-12-log.txt", "2024-03-26-log.txt", "u47.cc \u2022 | Domain is sinkholed | Registrar: ENAME TECHNOLOGY CO., LTD., x", "extensionConfig.json", "append copyright.js", "uappolDocSetup.json", "businessCreateFolderRule.js", "nsFolderCreateSchedule.js", "roDocSetup.json", "myTaskDownload.js", "jsonUtils.js", "Script1.js", "2024-05-04-log.txt", "guidelines-student.get.desc.xml", "uawfh-model.json", "psDeptSingle.get.js", "hrs-pension.json", "everyDay1H45MinAM.js", "chsFacultyReport.js", "2024-01-30-log.txt", "psDeptAll.get.json.ftl", "facopr-supportinDocField.json", "test-site-site.json", "savetask.post.js", "guidelines-supervisor.get.html.ftl", "triggerapsprocess.post.json.ftl", "search-responses.js", "taskForm.get.json.ftl", "security-group-model.xml", "uofa-augustana-model.json", "sponsornames.json", "uofa-chs-model.xml", "notify_user_email_ja.html.ftl", "my_docs.ftl", "cap-file-load.post.desc.xml", "uofaDocTypes.xml", "uofa-extension-model.xml", "removeDonationGrp.js", "hrsCreateFolder.js", "lawCreateFolderRestricted.js", "2024-06-02-log.txt", "roEtranscriptsBundleTest.js", "activities-email.ftl", "emailbody_textplain_share.ftl", "hrsbs-site.json", "taskUtils.js", "engineering-co-op-site.json", "advEndowmentName.get.json.ftl", "dropbox.com - deleted victims DB post assault. Sabey + Ahmann repeatedly erased DB (ILLEGAL)", "IP\u2019s Contacted: 121.105.233.189 128.251.173.246 13.248.148.254 132.124.155.52 139.246.30.108", "materials.get.json.ftl", "notify_user_email.ftl", "fgsr-thesis-deposit.xml", "every29MinPastHour.js", "roMoveCompletedSearchMatch.js", "businessDaily.js", "imapConfig.json", "enggCoopFileScanned.js", "simpleupload.post.desc.xml", "hrs-personalInformation.json", "review-startv2.get.js", "hrsbs-review-month.json", "CAPSendMonthlyReportEmail.js", "faculty-model.xml.json", "command-processor.js", "uofa-rso-model.xml", "nanofab", "coi-start.get.js", "https://tulach.cc/ [Botnet phishing]", "chsEnv.js", "startTwoStepWorkflow.js", "uofa-chs-agreements-model.xml", "getProjectDetails.js", "2024-05-14-log.txt", "AFA_MainFileOnly.post.js", "2024-03-05-log.txt", "roAddBundlingAspect.js", "every52MinPastHour.js", "http://e7.c.lencr.org/74.crl \u2022 http://e7.i.lencr.org/", "folderCreateADV.js", "claimtask.put.desc.xml", "sciFileADDPFileTypes.js", "uofa-law-model.json", "enggCoopBulkUpload.js", "fgsrv2Config.json", "rsoConfig.json", "ephesoft-educational.xml", "pcmConfig.json", "deletingCompletingWorkflow.js", "2024-04-05-log.txt", "wfh-manager.get.js", "sciConfig.json", "reappointment-tracking-process.js", "NodeInfo.get.js", "review-cosupervisorv2.get.html.ftl", "2024-03-09-log.txt", "hrsbsDocSetup.json", "every47MinPastHourBetween4PM12PM.js", "appleid.apple.com.secure1account.pagelogin.test2.aptaforum.com.cn", "2024-06-03-log.txt", "roEtranscriptsBundle.js", "ro-test-id.json", "education-doc-list.json", "2024-05-27-log.txt", "alesBulkShareFolder.js", "appointmentStart.get.html.ftl", "categorysearch.get.html.ftl", "customScript.js", "2024-03-08-log.txt", "publicSiteFileViewer.get.html.ftl", "uofa-science-model.json", "extensionFileScanned.js", "2024-03-22-log.txt", "createReportRecursiveGroupsAndUsersInASite.js", "2024-06-04-log.txt", "roslateexists.get.js", "CreateTranscriptUserMemberships.js", "engineeringCreateAdvisingNotes.js", "uofa-ales-model.xml", "record-rejected-email.ftl", "materials.get.js", "Domains Contacted: ww38.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com", "ceeb.get.js", "archiveFolder.json", "changeInitiatorAppt.put.desc.xml", "GenerateSponsornamesAndPinames.js", "ro-org-desc.json", "rso-bulk-scan-doc-type.json", "educationCreateFolderRule.js", "chsAgreementCreateFolderRule.js", "uofa-hrsbs-model.xml", "businessFileScanned.js", "every16MinPastHour.js", "office-of-advancement-site.json", "2024-02-18-log.txt", "2024-02-24-log.txt", "queryTasks.get.js", "psAudit-model.json", "reappointment-generate-schedule.js", "translatable.ftl", "review-comm02v2.get.desc.xml", "nativeStudiesCreateFolderRule.js", "uofapersonid.get.html.ftl", "rm_event_config.json", "scheduleRunEvery30Minutes.js", "2024-03-04-log.txt", "guidelines-student-revision.get.desc.xml", "gadyniw.com [command_and_control]", "PaperFileconfig.json", "roCopyEphesoftMetadataXML.js", "roDocumentListAPLSTD.js", "wfh-form.get.js", "epsb.get.desc.xml", "roCopyOlderScannedDocumentAdHoc.js", "hrsbs-function-module.json", "u47.cc \u2022 IP Address 13.248.169.48, 76.223.54.146 | United States ASN AS16509 amazon.com", "fgsrv2DocSetup.json", "engineering-security-list.json", "notify_user_email_it.html.ftl", "uofa-engg-coop-model.xml", "coi-supervisor.get.js", "chs-document-status.json", "onCreate_supersedes.js", "notify_user_email_e-transcript_failed.ftl", "fgsrMigrationScript.js", "cap-file-load.post.json.ftl", "OOA-notify-email-template.ftl", "apptStepOneSave.post.desc.xml", "2024-05-24-log.txt", "2024-03-15-log.txt", "advEntityName.get.desc.xml", "psUtil.js", "educationCreateFolder.js", "review-studentTest.get.html.ftl", "uafgsrsup-model.json", "apptStatusDocUpdate.post.js", "ua-error-model.json", "rsoprojectdetails.get.desc.xml", "roTagAndFileRenderedPDFs.js", "coupa.get.js", "emailbody_textplain_alfresco.ftl", "advChangeDocumentType_confidential.js", "uofa-engg-model.json", "coi-revise.get.js", "activities-email_ja.ftl", "chs-stuEmailNotification.json", "2024-04-26-log.txt", "reminder-email-util.js", "pcm-grab-competitive-noderefs.js", "https://otx.alienvault.com/indicator/domain/qeenetic.link", "transcriptResponse.js", "appointment-report.js", "modfiyOrUpdatePropertyfromCSV.js", "business-security-list.json", "emailbody_textplain_share_de.ftl", "faculty-of-science-site.json", "eTranscript-bundled-02-jan.js", "faculty-model.xml", "review-cosupervisor.get.desc.xml", "Alerts: network_cnc_http network_http allocates_rwx creates_exe creates_hidden_file", "sfsWorkflowStatus.js", "chs-agreements-site.json", "2024-06-05-log.txt", "https://www.virustotal.com/gui/url/000c01d40db51f156933c624f23e776cb2c1fd60b8f1840b13b9622886a8e918/community", "2024-05-16-log.txt", "2024-05-17-log.txt", "roSlateDocumentExport.js", "hrsScanned.js", "globalHeader.html.ftl", "2024-04-08-log.txt", "scheduleJobTest.js", "foModel.xml", "peoplesoftMetadataMergeMissing.js", "istPerformanceReviewCreateFolder.js", "TAM Legal\u2019s Christopher P. \u2018Buzz\u2019 Ahmann Esq works for State Quasi Government in tandem w/ Hall Render", "chsAdminStuView.get.js", "review-studentv2.get.desc.xml", "getTaskFilter.get.json.ftl", "uofa-augustana-model.xml", "hrs-benefit-report.js", "sciDocSetup.json", "roSearchMatchNoMatchReport.js", "student-records-training-site.json", "getJson.get.desc.xml", "educationConfig.json", "wf-email.html.ftl", "webFormDialog.html.ftl", "facopr-model.xml", "https://seedbeej.pk/tin/index.php?QBOT.zip. [Qbot zip]", "fgsrDocRelocation.js", "roConfig.json", "invite-email_de.html.ftl", "hrsbsDocumentLinking.get.desc.xml", "rsoCreateFolder.js", "advUtils.js", "new-user-email_fr.html.ftl", "tasklist.get.html.ftl", "review-comm03.get.html.ftl", "capinfo.get.desc.xml", "my_summary.ftl", "198.54.115.46 [exploit_source]", "apsApplicationList.get.js", "2024-01-11-log.txt", "rsoprojectdetails.get.js", "apptStepZeroStarter.post.desc.xml", "scheduleRunEveryday3PMto11PM.js" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [] }, "other": { "adversary": [ "TA413 proposed (06.08.24), Callisto, APT38, APT 28/29 - too much time too many problems" ], "malware_families": [ "Vskimmer", "Suppobox", "Emotet", "Athena", "Andromeda", "Win. trojan.agent-292909", "Maltiverse", "Spyeye", "Win.ransomware.wanna-9769986-0", "Alinaos", "Win.trojan.fugrafa-9733007-0", "#virtool:win32/obfuscator", "Win32:evo-gen\\ [trj]", "Spitmo", "Betabot", "Xrat", "Win32:dh-a\\ [win32:fileinfector-c\\ [heur]", "Ramnit", "Citadel", "Bondat", "Alf:spikeaexr.pevpopc", "Virtool:win32/vbinject.ya!mtb", "Win32:malware-gen", "Trojan.cycbot-2671", "Installcore", "Hydra", "Dorkbot", "Mirai", "Win64:expiro-aj\\ [inf]", "Virut", "Win.malware.flystudio-6738927-0", "Backdoor:win32/small.ir", "Ascii", "Nsis", "Vawtrak", "Win.malware.agent-6598770-0", "Virtool:win32/obfuscator.jm", "Win32:trojanx-gen\\ [trj]", "Trojan:win32/danginex", "Redline stealer", "Trojan.redirector.js", "Artemis", "Win.trojan.agent-36211", "Plasma rat", "Nymaim", "Matsnu", "Win32:dh-a\\", "Hidelink", "Ransom:win32/wannacrypt.h", "Zeus", "Win.downloader.14593-1", "Sf:wncryldr-a\\ [trj]", "Pony", "Infy", "Gregory", "Ransomware", "Win.malware.snojan-6775202-0", "Dexter", "Pinkslipbot", "Win.trojan.application-1955.", "Pykspa", "Trojan.startpage-1612", "Trojanspy", "Hawkeye", "Covid19", "Qakbot", "Trojan:win32/bulta!rfn", "Neutrino", "Win.dropper.darkkomet-9370806-0", "Ransom:win32/cve-2017-0147.a", "Cutwail", "Win.ransomware.wannacry-6313787-0", "Simda", "Win32:banker-laa\\ [trj]", "Quasar", "Trojan/js.redirector.qno", "Grandcrab", "Cve-2017-0147", "Exploit:win32/cve-2017-0147.a", "Cycbot", "Win.trojan.vbgeneric-6989114-0", "Kraken", "Solar", "Unix.trojan.mirai-9441505-0", "Coolwebsearch", "Slingshot", "Bambernek", "Win.trojan.agent-336291", "Tulach", "Zbot" ], "industries": [ "Healthcare", "Technology", "Education", "Legal", "Telecommunications", "Government" ] } } }, "false_positive": [] }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 9, "pulses": [ { "id": "6a09b3b462c09a8bf0daa85b", "name": "Credit: Disable_Duck [\"UAlberta alfresco management\"]", "description": "", "modified": "2026-05-17T12:25:24.282000", "created": "2026-05-17T12:25:24.282000", "tags": [ "note", "home", "lucene paths", "json descriptor", "lucene path", "company home", "actividades", "pageuser", "sie knnen", "sie auf", "link klicken", "recente", "u kunt", "attivit", "possibile", "activits", "vous", "report", "web link", "cvs report", "link", "chs placement", "chs student", "placement", "team", "google form", "university", "alberta", "automation", "please", "following", "followers", "ihnen", "mitarbeitern", "mitarbeiter", "hello", "foreign visitor", "fvca", "human resource", "fvca assessment", "incomplete", "regards", "klik", "wachtwoord", "mijn profiel", "klik op", "hoogachtend", "alfresco", "bonjour", "cliquez sur", "nous", "pour ce", "mon profil", "changer", "invito", "caro", "fare", "password", "il mio", "cambia password", "per rifiutare", "cordiali saluti", "my profile", "change password", "konto", "sie erstellt", "passwort", "wir legen", "ihnen nahe", "passwort bei", "anmeldung zu", "ndern", "gehen sie", "mmm yyyy", "nome utente", "nombre", "contrasea", "para hacerlo", "mi perfil", "atentamente", "account", "alfresco share", "hola", "haga", "los datos", "y seleccione", "si desea", "click", "einladung von", "hallo", "sie eingeladen", "site", "klicken sie", "konto fr", "alfresco client", "kofax index", "inhaltselement", "zur site", "gren alfresco", "pledged gift", "office", "advancement", "datetime", "university vpn", "date", "shared", "support", "auxiliary", "process", "priority", "medium high", "pay action", "sincerely", "uofa ecm", "link um", "aufgaben stehen", "verfgung", "prioritt", "niedrig mittel", "hoch", "klicken", "aufgabe zu", "il seguente", "disponibile", "priorit", "bassa media", "alta", "clicca", "clicca su", "la tche", "tre rcupre", "basse moyenne", "leve", "cliquez", "cordialement", "prioriteit", "laag gemiddeld", "hoog", "la siguiente", "prioridad", "media alta", "saludos", "kb content", "links content", "content url", "download url", "webdav url", "ttulo", "descripcin", "ninguno", "ninguna", "creador", "creado", "modificador", "modificado", "tamao", "webdav", "titre", "aucun", "aucune", "modificateur", "modifi", "taille", "ko liens", "du contenu", "dossier du", "url webdav", "titolo", "nessuno", "nessuna", "creato", "modificato", "dimensioni", "kb link", "al contenuto", "cartella", "ingen", "beskrivelse", "tittel", "opprettet", "modifikator", "modifisert", "strrelse", "lenker for", "innhold mappe", "descrio", "nome", "nenhum", "nenhuma", "criador", "criado", "tamanho", "geen", "beschrijving", "titel", "maker", "gemaakt", "gewijzigd", "grootte", "contenturl", "downloadurl", "beschreibung", "url zum", "keiner", "keine", "ersteller", "erstellt", "bearbeiter", "gendert", "kb links", "download", "navigatebrowse", "pagesite", "readme file", "yesno", "user name", "main", "function", "log debug", "record", "sample rm", "import", "njson", "forms", "sites", "documenttype", "commonfolder", "error", "value", "jsonfile", "service", "false", "moving", "prop", "null", "bearer", "uappol", "uappol function", "contentid", "param", "id var", "call", "post request", "json", "config", "coveo", "uappol metadata", "content id", "and not", "loads", "update", "uploader", "inbox", "rnrn", "create", "contenteml", "inbox folder", "number", "normal", "textpart", "backup", "createchildren", "backupname", "childlist", "name", "content", "array", "write", "childname2", "childname3", "childname4", "reviewgroup", "groupsite", "starting", "started", "delete email", "command", "found", "create content", "resources", "unknown command", "globals", "var title", "rnrncopyright", "copyright", "csvtoarray", "regexp", "jsonstr", "daily", "review", "az09", "format", "hrsfilescanner", "hrs document", "fromscanner", "not type", "matches1", "employee id", "third", "tempfilename", "ldap", "version", "this", "file share", "folder", "trimlr", "namearr", "personid", "document name", "ales file", "scanned", "shared drive", "last", "document type", "document", "advising notes", "debug", "debugstr", "schedule", "descriptorpath", "web service", "inbound rule", "web services", "collaborator", "groupeveryone", "check", "index", "taskassignee", "taskenddate", "filename", "localisotime", "startdatetime", "timeperiod", "uofa edrms", "author", "descommonnode", "nomatch", "iddocumenttype", "siteid", "span", "path", "term", "core", "cap report", "template", "object", "cap mail", "dev testing", "application", "aps status", "cap generate", "monthly report", "extension", "alfresco locale", "september", "pm mdt", "school", "didx", "json response", "cap final", "rebcapiddict", "finalcapiddict", "aps process", "trigger", "chsdocument", "message", "func", "msgstr", "emailobj", "emailtemplate", "emailsubject", "sitepath", "chs docs", "studentfiles", "faculty", "true", "chssiteid", "type", "aspect", "chsdocs", "nodeidx", "find", "expired", "chs school", "defunc", "facultykey", "program", "spasite", "ldapperson", "parent name", "securitytype", "formsengg", "limit", "enggfilescanner", "stuccid", "csv file", "studdept", "supccid", "supdept", "cosupccid", "relocation", "fgsr", "records site", "fgsr doc", "department", "start fgsr", "department doc", "completion of", "oral hlth", "form", "application for", "report of", "admission", "master", "music", "unknown", "comp", "class", "leave", "supervisor", "currentline", "return", "studentid", "superccid", "revdate", "code", "apstaskproperty", "converttocsv", "aps guideline", "aps task", "newdata", "hyperlink", "certificate", "first", "info", "procid", "filecontentstr", "query sort", "create header", "person id", "subject title", "node", "studentccid", "yyyymmdd", "lookupjson", "propidx", "input date", "iso format", "folder level", "query", "duedate", "test java", "dailyschedule", "upload", "ro adm", "workflow", "offset", "adm workflow", "data length", "startindex", "json object", "aps group", "acs site", "user", "getgroupid", "am mst", "acsaps group", "user sync", "january", "start january", "february", "start february", "december", "start december", "march", "start march", "am mdt", "consumer march", "aps student", "april", "start april", "june", "start june", "pm mst", "ro backscan", "edrmsteam", "group", "group december", "aps ro", "copy file", "aps api", "maxfile", "creator", "rand", "hrsbs", "july", "august", "hrsbssyncccids", "zhrroleuserresp", "edrms", "ccids", "prefix", "createdirectory", "directory", "actionreason", "safefilename", "employeeclass", "carry", "csv data", "host", "bachelor", "college level", "mike", "propname", "maxitems", "currjson", "fvca status", "important", "prod", "manual data", "doctoratephd", "medicine", "nodename", "employeeccid", "managerccid", "employeeid", "workingtitle", "regtempdescr", "findkey", "email", "new document", "doctypelabel", "competitive bid", "bid exception", "pcm competitive", "and aspect", "competitive", "nodes", "bid update", "acommonfolder", "formspcm", "peoplesoft", "no data", "qaselectednode", "qaselected", "qanotselected", "qa folder", "preqa", "qa var", "documentcount", "passcount", "qadocument", "qa selected", "moved", "attempts", "accepted", "rm file", "plan", "rm filing", "min to", "rm system", "batch", "time limit", "rmcfg", "string", "already", "load", "valid", "graddate", "uathdep", "ccid", "title", "abstract", "embargo", "datestr", "searchresult", "alfresco afa", "admissions", "student case", "files", "and type", "institution", "inst", "json config", "institution not", "if file", "logger", "needle", "xmlstr", "staus", "document linkn", "getlogfile", "documentlist", "xml field", "not found", "addaspect", "move aspect", "duplicate file", "makes", "to max", "checks", "workflow name", "workflow link", "emplid", "due daten", "total afa", "not path", "afabundling", "change", "not aspect", "logs", "ephesoft", "document moved", "epehsoft", "xmlsourcenode", "batchsize", "filemappingpdf", "entry", "move file", "getcsvfile", "batchprocess", "logging", "completed", "document link", "groupn", "created date", "stdapl", "person", "workflow desc", "json file", "list", "lastmonth", "daily qa", "default", "qastartdate", "query language", "finished", "afa bundle", "transcriptarr", "lucene query", "qacounter", "rrfgroupname", "uaroemplid", "uaropriority", "uaroduedate", "documentlistarr", "uarmm", "profile", "courseauditform", "status", "jile", "searchmatchmove", "logfoldername", "backscanreview", "smfstr", "rosm", "converter", "shortxml", "failedcsvfolder", "xml file", "qaoperatorindex", "qaoperatorlabel", "script", "suresh", "aws promotion", "file", "tasks", "bundlingprop", "tasktype", "grps2", "uarotasktype", "comments", "test", "ro scripts", "xmlnode", "shortdescr", "xmlcont", "firstname", "orgid", "middlename", "lastname", "middle", "final", "script started", "to now", "received date", "first name", "receiveddatestr", "dateofbirthstr", "getdefination", "2005 aug", "dropbox", "foldercreate", "scan doc", "officiality", "search match", "running script", "materialextid", "studentref", "ceeb", "materialcode", "memo", "jsoncontent", "ro document", "paperfileutils", "afaconfig", "ro workflow", "paperfileconfig", "applicationjson", "formsrso", "targetfile", "property name", "pinames today", "addp", "science addp", "addp move", "ro code", "scifilescanner", "desconfnode", "grabnodeprop", "copy", "consumer", "initiators", "hiring", "consigno", "offer letter", "match", "apsmaster", "match2", "reappointment", "expiry date", "today", "finaldate", "task info", "psperson", "complete basic", "hiring info", "employee", "resultdata", "delegategroup", "delegate group", "verify", "bind", "aps appointment", "trevor report", "sfsussl", "drawdown", "refund", "reporttype", "var document", "shareurl", "newgroup", "parentgrp", "group created", "var logfile", "rule folder", "site running", "report on", "get site", "foldername", "create file", "reportlogslogs", "reportlogs", "ist site", "running report", "count", "tran", "var csvfile", "result length", "processid", "process id", "delimiters", "quoted", "standard", "starting name", "morechildren", "pdf var", "length", "newname", "fiscal", "docnamearr", "filenode", "calendar year", "versionhistory", "new doc", "web deployed", "var startdate", "startdate", "maxcount", "prevmonth", "monthcount", "application id", "delete", "get path", "if node", "search length", "arra y", "if csv", "version history", "graduate", "graduate folder", "children", "graduate file", "searchmatchdob", "career", "appl nbr", "jan04 now", "counter", "thesis", "runyear", "spring", "service log", "everything", "this determine", "thesis deposit", "archival", "problem", "filepath", "md import", "arraytocsv", "found document", "start", "food", "yumna", "start kofax", "kofax", "admin", "subject", "sample email", "execute", "koafx", "apasresponseid", "merge", "recruitment", "transcripts", "review request", "admindate", "requesteddate", "approveddate", "approvereject", "getemailbody", "taskid", "sendemail", "request status", "siteconsumer", "sitemanager", "eval", "acshost", "global env", "config file", "apsprod", "params", "alloc", "checkpath", "newpath", "adding entity", "surnamechar", "adding person", "jsonfunction", "text", "syntaxerror", "arraytoxml", "xml related", "change xml", "xmltoarray", "xmlutil", "common folder", "random2digit", "maxlimit", "jsonarchive", "very", "returns", "sitecontext", "arrcounter", "node id", "items", "array length", "therecord", "award sponsor", "rso project", "res0012345", "iso88591", "util function", "project id", "proposal id", "doc name", "newdocname", "prod url", "199899", "property", "typeprop", "barcode", "accepts", "parent", "xmlfilename", "siteconfigjson", "qabatchgrp", "signeddate", "ephdocumenttype", "json document", "qapercentage", "entity", "broker", "add error", "getexecutetime", "qaoperator", "retain title", "idnumber", "assocname", "metaarr", "fund report", "csvcontent", "input folder", "doc00c200004txg", "xmlfile", "node1", "node2", "540am", "240pm", "metadata", "var folder", "filter", "mappedobj", "09azaz", "conditionval", "foldercondition", "file name", "xmlfileobj", "alfresco prop", "setup error", "formatjson", "id property", "move", "getrandomnumber", "result", "newdoctype", "no title", "clioacs update", "clio", "patch", "system overview", "system", "overview", "purpose", "aims", "objectives", "prerequisites", "total", "expected effort", "domain", "urls", "dept param", "department name", "done", "submit form", "saving", "label", "input", "approvers", "information", "user group", "request", "group request", "users", "single family", "edmonton ab", "coverage", "common law", "step workflow", "care", "dental benefits", "direct", "web scripts", "get http", "documentation", "web script", "http method", "http", "apis", "development", "knowledge", "java", "empty argument", "e1234", "im system", "lookupentity", "configfilename", "namespace", "searchterm", "access", "jsonuser", "alfresco search", "page search", "expires", "signer", "reason", "utf8", "stripcharacter", "pull hiring", "getapsdbid", "save", "processsetidset", "saved", "returndata", "boolean", "start building", "varname", "fill", "time click", "initiated all", "submissions", "all submissions", "process landing", "page", "initiators all", "maps initiated", "post doc", "student term", "start form", "middle name", "email address", "retype", "cell", "phone no", "fellow", "secureorigin", "expand", "thank", "here", "please check", "aps list", "pang", "subset", "display", "args", "task", "username", "save form", "data need", "cdkey", "checkdict", "item", "column", "anchor", "multi", "tasks filter", "search", "trigger aps", "process api", "apsprocess", "authentication", "webscript", "getapsperson", "process info", "initsavestatus", "step0statusfail", "signer1", "signer2", "appointment", "taskjson", "groupapiaccess", "checkapiuser", "fgsrpr", "psaudit", "statusname", "unsuccessful1", "apptreappt", "emplobject", "caps aps", "cap epsb", "applicant", "form submitted", "board review", "form applicant", "school district", "start date", "cap application", "home help", "pdfa format", "larger", "upload file", "please click", "uofacap", "applications", "jstr", "processjson", "invalid url", "associate dean", "edmonton public", "october", "elk island", "reutrn false", "mapdoctypeurl", "doctype", "cap document", "doctypes", "doctypemap", "schools", "public schools", "foip", "edmonton area", "epsb", "capid", "server", "aps user", "groupcapadmin", "assignuser", "cap ea", "successfully", "please wait", "successfully ea", "apsservice", "apsserviceprod", "requireddate", "bibliography", "reb approval", "letter", "cprbls", "ahsrespect", "ahscon", "immformdocs", "picvsc", "whmis", "condissi", "hspnet", "conphoto", "conclin", "college", "health", "submission date", "effective date", "expiration date", "chs admin", "student view", "typekey", "placementdocs", "warning", "jobj", "abraniuk", "wendy", "terry harris", "directorhrsbs", "level", "holiday pay", "part time", "payroll", "salariedreg aux", "cheat", "paramname", "getallurlparams", "hrsbs config", "data dictionary", "field", "responsejson", "workflowid", "workflow id", "context", "event", "statusevent", "uaesign", "success", "permission", "progress report", "postdoctoral", "sorry", "deptjson", "fgsr student", "process status", "select", "currentuser", "reports", "student ccid", "populated", "invalid student", "supervisor ccid", "co supervisor", "due date", "freedom", "report process", "fgsr forms", "list fgsr", "report fgsr", "report sorry", "review process", "fgsr supervisor", "thesis programs", "programs", "please enter", "student id", "submit button", "var taskid", "var currentuser", "review sorry", "raheel", "added", "urlorigin", "need", "raheel var", "elmid", "commentkeyarr", "override", "menu", "colour bar", "mdphd", "absence", "completion", "mbameng", "mbamsc", "meng", "jason", "acs property", "available", "subdoctype", "test person", "test effective", "modelnodepath", "sitename", "metadatamap", "sitefile", "google addon", "gtagra", "gta gra", "zhreformengresp", "id otherwise", "university home", "indicate", "monday", "tuesday", "wednesday", "thursday", "friday", "na note", "services", "please contact", "documentname", "time", "docs", "documentlink", "employee ccid", "conflict", "task assigned", "ist coi", "declaration", "jsonobj3", "parse", "stringify", "grouplist", "json post", "taskfilter", "applies", "assigntogroup", "retrieves", "assignee", "queries", "expects", "uri args", "json containing", "applyfilter", "assignment", "avm folder", "avm store", "store id", "fullpath", "store", "storeid", "avm stores", "search term", "blog query", "category", "api call", "returns json", "cached data", "keylabel", "rest", "ldap query", "resultstr", "jsonoutput", "campusid", "jsonobj", "suresh joshee", "raheel bhojani", "desrochers", "first check", "set message", "materialkey", "acommonfolderid", "hasaccess", "siteconfig", "unprocesseddata", "savemetadata", "getcustomscript", "sitetitle", "error occured", "afa admission", "afas", "change log", "date name", "description", "ebeaton script", "tfrith", "afa main", "runasuser", "afas name", "afa paper", "file test", "utility enter", "does", "student", "bad query", "parameters", "add all", "or condition", "batch ids", "case files", "batchid", "afns", "agricultural", "anaesthes", "life", "environmental", "anaesthesiology", "uappol content", "deanaheed", "programyear", "province", "agreementtype", "safety manual", "mtis", "cree", "blackfoot", "nakota sioux", "iroquois", "dene", "treaties", "first nations", "next", "refresh", "site viewer", "facetkey", "sortparameter", "textjavascript", "public site", "viewer access", "acs cron", "job error", "alfrescos", "unauthorized", "enter", "bear tracks", "main department", "choose", "library", "john", "reviewer", "embargodate", "actiondate", "convocation", "graduation", "nodeid", "thesis status", "match result", "match list", "name dob", "view", "searchcriteria", "main function", "method", "chs upload", "stuln", "filetype", "stuid", "chs agreement", "health sciences", "recreation fomd", "dentistry fomd", "fomd", "therapy fomd", "consent for", "disclosure of", "alberta freedom", "protection", "privacy act", "alberta health", "chs form", "intake", "tasks dashlet", "doccd", "val2", "a my", "view error", "view warning", "keyword search", "refresh list" ], "references": [ "old-AlfrescoToolkit.conf", "AlfrescoToolkit.info", "AlfrescoToolkit.conf", "activities-email_es.ftl", "activities-email_ja.ftl", "activities-email_de.ftl", "activities-email_nl.ftl", "activities-email.ftl", "activities-email_it.ftl", "activities-email_fr.ftl", "CAP-notify-monthly-report.ftl", "chs-commentUpdate.ftl", "chs-studentUploadNotification.ftl", "chs-Invalid.ftl", "chs-studentExpireSoon.ftl", "chs-studentExpired.ftl", "following-email.html_it.ftl", "following-email.html_fr.ftl", "following-email.html_ja.ftl", "following-email.html_nl.ftl", "following-email_de.html.ftl", "following-email_fr.html.ftl", "following-email_ja.html.ftl", "following-email_it.html.ftl", "following-email_nl.html.ftl", "following-email.html.ftl", "following-email.html_de.ftl", "fvca-reminder-email.ftl", "fvca-corrections-email.ftl", "invite-email_nl.html.ftl", "invite-email-add-direct.html.ftl", "invite-email-add-direct.html_fr.ftl", "invite-email_fr.html.ftl", "invite-email_it.html.ftl", "invite-email-add-direct.html_es.ftl", "invite-email-add-direct.html_de.ftl", "invite-email_ja.html.ftl", "invite-email-add-direct.html_nl.ftl", "new-user-email.html.ftl", "new-user-email_de.html.ftl", "invite-email-add-direct.html_ja.ftl", "invite-email-moderated.html.ftl", "new-user-email_fr.html.ftl", "new-user-email_it.html.ftl", "new-user-email_ja.html.ftl", "new-user-email_es.html.ftl", "new-user-email_nl.html.ftl", "invite-email-add-direct.html_it.ftl", "new-user-email_nl.html", "invite-email.html_nl.ftl", "invite-email.ftl", "invite-email_es.html.ftl", "invite-email.html.ftl", "invite-email_de.html.ftl", "invite_user_email.ftl", "kofaxFailedEmailTemplate.ftl", "notify_user_email.ftl", "notify_nl.htm", "notify_user_email_es.html.ftl", "notify_user_email_de.html.ftl", "notify_user_email_ooa_failed.ftl", "notify_user_email.html.ftl", "notify_user_email_it.html.ftl", "notify_user_email_e-transcript_failed.ftl", "notify_user_email_ja.html.ftl", "notify_user_email_fr.html.ftl", "notify_user_email_nl.html.ftl", "OOA-notify-email-template.ftl", "ADV-notify-terms-types.ftl", "appt-final-reminder.ftl", "appt-halfway-reminder.ftl", "sfs-wf-email.html.ftl", "sfs-wf-completed-email.html.ftl", "payActionDecision.html.ftl", "departmentAdhocTask.html.ftl", "wf-email.html_de.ftl", "wf-email.html.ftl", "wf-email_it.html.ftl", "wf-email_fr.html.ftl", "wf-email_nl.html.ftl", "wf-email_ja.html.ftl", "wf-email.html_fr.ftl", "wf-email.html_nl.ftl", "wf-email_es.html.ftl", "wf-email.html_ja.ftl", "wf-email.html_it.ftl", "wf-email_de.html.ftl", "wf-email.html_es.ftl", "emailbody_textplain_alfresco.ftl", "emailbody_textplain_alfresco_es.ftl", "emailbody_textplain_alfresco_fr.ftl", "emailbody_textplain_alfresco_it.ftl", "emailbody_textplain_alfresco_ja.ftl", "emailbody_textplain_alfresco_nb.ftl", "emailbody_textplain_alfresco_pt_BR.ftl", "emailbody_textplain_alfresco_nl.ftl", "emailbody_textplain_alfresco_ru.ftl", "emailbody_textplain_alfresco_zh_CN.ftl", "emailbody_textplain_share.ftl", "emailbody_textplain_share_de.ftl", "emailbody_textplain_share_es.ftl", "emailbody_textplain_share_it.ftl", "emailbody_textplain_share_ja.ftl", "emailbody_textplain_share_nb.ftl", "emailbody_textplain_share_nl.ftl", "emailbody_textplain_share_ru.ftl", "emailbody-alfresco-textplain.ftl", "emailbody-share-textplain.ftl", "emailbody_textplain_alfresco_de.ftl", "emailbody_textplain_share_zh_CN.ftl", "emailbody_textplain_share_fr.ftl", "emailbody_textplain_share_pt_BR.ftl", "uofa-pc-model.xml", "uofa-pllc-model.xml", "uofa-science-model.xml", "uofa-rso-model.xml", "uofa-set-model.xml", "uofa-sfs-model.xml", "uofa-slate-model.xml", "uofa-uappol-model.xml", "advext-model.xml", "assocModel.xml", "adv-model.xml", "cbsr-model.xml", "dynamicSecurityMarksModel", "ephesoft-educational.xml", "facopr-model.xml", "fgsr-model.xml", "faculty-model.xml", "psAudit-model.xml", "FVCA.xml", "roDocProcessing-model.xml", "ro-model.xml", "fgsr-thesis-deposit.xml", "security-group-model.xml", "ua-audit-generic-model.xml", "ua-dummy.xml", "calendar-year-model.xml", "ua-error-model.xml", "uafgsrsup-model.xml", "uaqa-model.xml", "transcript-model.xml", "uAlbertaWorkflowGeneral.xml", "uarmm-supplement-scanning.xml", "uarm-rma-filing-model.xml", "ua-search-model.xml", "ro-search-match.xml", "uatraining.xml", "uofa-ales-model.xml", "uofa-arts-model.xml", "uofa-aps-model.xml", "uofa-base-model.xml", "uawfh-model.xml", "uofa-augustana-model.xml", "uofa-business-model.xml", "uarmTempModel.xml", "uofa-cap-model.xml", "uofa-chs-model.xml", "uofa-chs-agreements-model.xml", "uofa-common-model.xml", "uofa-education-model.xml", "tamis-model.xml", "uofa-engg-coop-model.xml", "uofa-engg-model.xml", "uofa-fo-model.xml", "uofa-extension-model.xml", "uofa-esign-model.xml", "uofa-hrsbs-model.xml", "uofa-law-model.xml", "uofa-caps-model.xml", "uofa-hrs-model.xml", "uofa-native-studies-model.xml", "uofa-pllc-model.json", "uofa-rso-model.json", "uofa-pc-model.json", "uofa-native-studies-model.json", "uofa-slate-model.json", "uofa-uappol-model.json", "uofa-science-model.json", "uofa-workflowGeneral.json", "uofa-sfs-model.json", "adv-model.json", "advext-model.json", "assocModel.json", "calendar-year-model.json", "facopr-model.json", "cbsr-model.json", "ephesoft-educational.json", "faculty-model.json", "faculty-model.xml.json", "rma-model.json", "fgsr-model.json", "FVCA.json", "psAudit-model.json", "ro-aug-model.json", "ro-search-match.json", "tamis-model.json", "security-group-model.json", "fgsr-thesis-deposit.json", "transcript-model.json", "ro-model.json", "ua-audit-generic-model.json", "uafgsrsup-model.json", "uaqa-model.json", "uarmm-supplement-scanning.json", "uAlbertaWorkflowGeneral.json", "ua-error-model.json", "uofa-ales-model.json", "ua-search-model.json", "uarmTempModel.json", "uofa-aps-model.json", "uawfh-model.json", "uofa-arts-model.json", "uofa-cap-model.json", "uofa-chs-agreements-model.json", "uofa-augustana-model.json", "uofa-base-model.json", "uofa-chs-model.json", "uofa-engg-coop-model.json", "uofa-common-model.json", "uofa-engg-model.json", "uofa-extension-model.json", "uofa-hrsbs-model.json", "uofa-fo-model.json", "uofa-education-model.json", "uofa-law-model.json", "uofa-hrs-model.json", "uofa-esign-model.json", "uofa-business-model.json", "faculty-of-science-site.json", "FandO-Organizations.json", "FandO-Programs.json", "fgsr-awards.json", "fgsr-category-list.json", "fgsr-exam-list.json", "fgsr-official-list.json", "fgsr-programOfStudy.json", "fgsr-site.json", "fo-emergency-response-manual.json", "graduate-student-records-site.json", "fo-site.json", "fo-utilities.json", "hrs-benefits.json", "hrsbs-action-reasons.json", "graduate-student-records-v2-site.json", "hrsbs-doc-list.json", "hrsbs-file-structure.json", "hrsbs-owner-details.json", "hrsbs-functionalroles.json", "hrsbs-function-module.json", "hrsbs-review-month.json", "hrsbs-security-class.json", "hrsbs-site.json", "hrs-employeeApprovedDeductions.json", "hrs-bulkId.json", "hrsbs-review-cycle.json", "hrs-employmentFinancial.json", "hrs-personalInformation.json", "hrs-pension.json", "hrs-security-list.json", "hrs-leaves.json", "Institutions.json", "ist-site.json", "hrs-site.json", "my-site-site.json", "law-security-list.json", "native-studies-doc-list.json", "fgsr-credential-list.json", "law-doc-list.json", "native-studies-security-list.json", "office-of-advancement-record-types.json", "office-of-advancement-site.json", "pcm-category.json", "pllc-doc-list.json", "ro-academic-pre-pro-programs.json", "pllc-security-list.json", "ro-acad-group.json", "ro-admitType.json", "ro-applicant-type.json", "ro-campusSolutionsTerm.json", "hrsbs-employee-class.json", "pllc-site.json", "ro-indigenous-type.json", "ro-doctypes.json", "pcm-site.json", "ro-official.json", "ro-org-desc.json", "ro-related-record-types.json", "ro-relationship-to-institution.json", "ro-search-match-status.json", "ro-authenticity.json", "ro-slate-folio-material-non-school-scope.json", "ro-slate-institution-material.json", "ro-slate-folio-material-school-scope.json", "ro-method-receipt.json", "ro-slate-institutions.json", "ro-test-id.json", "rso-accounts-receivable-accounts-payable-doc-type.json", "rso-agreements-doc-category.json", "rso-bulk-scan-doc-type.json", "rso-cfi-purchasing-doc-type.json", "rso-cfi-financials-doc-type.json", "rso-financial-reconciliation-doc-type.json", "rso-financial-reporting-doc-type.json", "rso-financials-doc-type.json", "rso-mask.json", "rso-site.json", "rso-sponsor-names.json", "science-doc-list.json", "science-security-list.json", "school-of-business-site.json", "sfs-ussl-report-status.json", "staff-training-site.json", "student-financial-services-doc-list.json", "student-financial-services-site.json", "student-records-bulk-load-testing-site.json", "student-records-training-site.json", "student-records-site.json", "student-transcripts-site.json", "rso-forms-form-type.json", "support-documentation-site.json", "test-site-site.json", "uappol-category-heirarchy.json", "uappol-type.json", "uappol-site.json", "uoda-faculties.json", "academic-department.json", "adv-correspondence-type.json", "uoda-departments.json", "advsearch.json", "ales-security-list.json", "ales-doc-list.json", "arts-doc-list.json", "arts-security-list.json", "augustana-security-list.json", "augustana-site.json", "augustana-legacy-transcript-doc-list.json", "rso-activation-report-doc-type.json", "business-doc-list.json", "business-security-list.json", "bulkload-testing-site.json", "cap-site.json", "caps-school-board-list.json", "cbsrsite-site.json", "cbsrsite-sopTypes.json", "cbsr-study.json", "cbsr-worksheetType.json", "augustana-doc-list.json", "chs-ag-type.json", "chs-agreements-site.json", "chs-campus-list.json", "chs-degProgram-list.json", "chs-emailNotification.json", "chs-document-status.json", "chs-faculty-list.json", "chs-programYear-list.json", "chs-program-list.json", "canada-provinces-list.json", "demo-site-site.json", "education-doc-list.json", "department.json", "education-security-list.json", "chs-stuEmailNotification.json", "college-of-health-sciences-site.json", "chs-provinces-list.json", "engineering-coop-doc-list.json", "engineering-coop-security-list.json", "engineering-co-op-site.json", "engineering-doc-list.json", "extension-doc-list.json", "extension-security-list.json", "facopr-planTypes.json", "facopr-supportinDocField.json", "faculty-of-ales-site.json", "engineering-security-list.json", "faculty-of-education-site.json", "faculty-of-extension-site.json", "faculty-of-native-studies-site.json", "faculty-of-law-site.json", "faculty-of-arts-site.json", "faculty-of-engineering-site.json", "my_docs_inline.ftl", "my_docs.ftl", "my_spaces.ftl", "recent_docs.ftl", "translatable.ftl", "readme.ftl", "show_audit.ftl", "general_example.ftl", "my_summary.ftl", "doc_info.ftl", "localizable.ftl", "recordsCustomModel.xml", "imapConfig.json", "rm_event_config.json", "rmScriptThrowError.js", "report_rmr_transferReport.html.ftl", "report_rmr_destructionReport.html.ftl", "report_rmr_holdReport.html.ftl", "notify-records-due-for-review-email.ftl", "record-rejected-email.ftl", "record-superseded-email.ftl", "onCreate_supersedes.js", "rma_isClosed.js", "PaperFileconfig.json", "MyTasks-config.json", "AFAconfig.json", "roDocumentTypes.json", "uappol-upload-rule.js", "uappolCreateFolderRule.js", "uappolCreateFolder.js", "uappol-api.js", "uappol-functions.js", "command-utils.js", "backup and log.js", "backup.js", "example test script.js", "test return value.js", "start-pooled-review-workflow.js", "command-processor.js", "command-search.js", "alfresco docs.js", "append copyright.js", "createDepartmentJSON.js", "hrsDaily.js", "hrsFolderCreateSchedule.js", "hrsScanned.js", "hrsCreateFolder.js", "hrsFolderCreateRule.js", "hrsFileShareFolder.js", "alesCreateFolderRestricted.js", "alesCreateFolderSchedule.js", "alesBulkShareFolder.js", "alesFileScanned.js", "alesCreateFolder.js", "alesDaily.js", "alesFileShareFolder.js", "alesCreateFolderConfidential.js", "alesCreateAdvisingNotes.js", "alesFolderCreateSchedule.js", "deployWebServiceDescriptor.js", "taskReportCSV-Appointment-prod.js", "artsFileScanned.js", "artsCreateFolderRule.js", "artsCreateFolder.js", "artsCreateFolderRestricted.js", "augCreateFolderRestricted.js", "augCreateFolder.js", "businessCreateFolderRule.js", "businessCreateFolder.js", "businessCreateFolderSchedule.js", "businessBulkShareFolder.js", "businessFileShareFolder.js", "businessCreateFolderRestricted.js", "businessDaily.js", "businessCreateAdvisingNotes.js", "businessFileScanned.js", "CAPSendMonthlyReportEmail.js", "CAPGenerateMonthlyReport.js", "CapFinalReportSubmit.js", "chsCreateFolderRule.js", "chsEmailOnUpdateComment.js", "chsReport.js", "EmailNotifCHSStudent.js", "SetExpiryDate.js", "chsCreateFolder.js", "chsFacultyReport.js", "chsAgreementCreateFolderRule.js", "chsAgreementCreateFolder.js", "scheduleJobTest.js", "every52MinPastHour.js", "every46MinPastHourBetween4PM12PM.js", "every57MinPastHour.js", "every47MinPastHourBetween4PM12PM.js", "everyDay4H30MinAM.js", "everyDay7H45MinAM.js", "every10MinStartingAt5MinPastHour.js", "every38MinPastHourBetween4PM12PM.js", "every20MinStartingAt15MinPastHour.js", "everyDay2H05MinAM.js", "every2MinStartingAt1MinPastHour.js", "everyDay1H05MinAM.js", "everyDay12H30MinAM.js", "everyDay7H30MinPM.js", "every30MinStartingAt19MinPastHour.js", "every30MinStartingAt11MinPastHour.js", "everyDay2H35MinAM.js", "every30MinStartingAt26MinPastHour.js", "every16MinPastHour.js", "everyDay1H45MinAM.js", "everyDay2H45MinAM.js", "every29MinPastHour.js", "every22MinPastHour.js", "everyDay11H30MinPM.js", "educationCreateFolderRule.js", "educationCreateFolder.js", "educationCreateAdvisingNotes.js", "enggCoopCreateFolderRestricted.js", "enggCoopCreateFolderRule.js", "enggCoopBulkUpload.js", "enggCreateFolderRule.js", "enggCreateFolderRestricted.js", "enggCreateFolder.js", "engineeringCreateAdvisingNotes.js", "enggCoopCreateFolder.js", "enggFileScanned.js", "enggCoopFileScanned.js", "extensionFileScanned.js", "extensionCreateFolder.js", "extensionCreateFolderRule.js", "fgsrCreateGuidelineAPSProcessFromCSV.js", "fgsrDocRestructure.js", "fgsrMigrationScript.js", "fgsrDocRelocation.js", "fgsrCreateFolderFromCSV.js", "guideline-reports.js", "fgsrMigrationScript-withTerminationLogic.js", "modfiyOrUpdatePropertyfromCSV.js", "fgsr-case-file-report.js", "fgsrCreateAPSProcessFromFolder.js", "fgsrCreateFolder.js", "fgsrCopyMetadataToFolderLevel.js", "fgsrCreateAPSProcessFromCSV.js", "foCreateFolder.js", "foCreateFolderRule.js", "Script1.js", "Script2.js", "scheduleRunEvery2-10PM.js", "scheduleRunEvery5PMTo10PM.js", "scheduleRunEvery30Minutes.js", "scheduleRunEvery60Minutes.js", "scheduleRunEveryday3PMto11PM.js", "scheduleRunEveryday12AMto6AM.js", "scheduleRunEvery20Minutes.js", "scheduleRunEvery2AM.js", "acsToApsUserUpdate.js", "2024-01-13-log.txt", "2024-01-15-log.txt", "2024-01-20-log.txt", "2024-01-21-log.txt", "2024-01-22-log.txt", "2024-01-23-log.txt", "2024-02-04-log.txt", "2024-02-05-log.txt", "2024-02-06-log.txt", "2024-02-07-log.txt", "2024-02-08-log.txt", "2024-01-14-log.txt", "2024-01-18-log.txt", "2024-01-11-log.txt", "2024-01-16-log.txt", "2024-01-19-log.txt", "2024-01-26-log.txt", "2024-01-28-log.txt", "2024-01-30-log.txt", "2024-01-12-log.txt", "2024-01-29-log.txt", "2024-01-27-log.txt", "2024-01-31-log.txt", "2024-01-24-log.txt", "2024-02-09-log.txt", "2024-02-02-log.txt", "2024-01-09-log.txt", "2024-02-03-log.txt", "2024-01-05-log.txt", "2024-01-06-log.txt", "2024-01-04-log.txt", "2024-02-01-log.txt", "2024-01-07-log.txt", "2024-01-08-log.txt", "2024-02-10-log.txt", "2024-02-11-log.txt", "2024-02-12-log.txt", "2024-02-13-log.txt", "2023-12-31-log.txt", "2024-02-15-log.txt", "2024-02-16-log.txt", "2024-02-14-log.txt", "2024-02-18-log.txt", "2024-02-20-log.txt", "2024-01-17-log.txt", "2024-02-19-log.txt", "2024-01-10-log.txt", "2024-02-23-log.txt", "2024-02-25-log.txt", "2024-02-21-log.txt", "2024-01-25-log.txt", "2024-02-28-log.txt", "2024-02-22-log.txt", "2024-02-29-log.txt", "2024-03-02-log.txt", "2024-03-03-log.txt", "2024-02-26-log.txt", "2024-03-04-log.txt", "2024-03-06-log.txt", "2024-03-07-log.txt", "2024-03-05-log.txt", "2024-03-08-log.txt", "2024-03-09-log.txt", "2024-03-11-log.txt", "2024-03-10-log.txt", "2024-03-12-log.txt", "2024-03-13-log.txt", "2024-03-14-log.txt", "2024-03-15-log.txt", "2024-03-16-log.txt", "2024-03-17-log.txt", "2024-03-18-log.txt", "2024-03-20-log.txt", "2024-03-21-log.txt", "2024-03-22-log.txt", "2024-03-19-log.txt", "2024-03-23-log.txt", "2024-03-01-log.txt", "2024-03-26-log.txt", "2024-03-25-log.txt", "2024-03-28-log.txt", "2024-03-29-log.txt", "2024-03-27-log.txt", "2024-03-24-log.txt", "2024-03-30-log.txt", "2024-04-02-log.txt", "2024-04-03-log.txt", "2024-03-31-log.txt", "2024-04-05-log.txt", "2024-04-06-log.txt", "2024-04-07-log.txt", "2024-04-08-log.txt", "2024-04-09-log.txt", "2024-04-04-log.txt", "2024-04-11-log.txt", "2024-04-12-log.txt", "2024-04-13-log.txt", "2024-02-17-log.txt", "2024-04-01-log.txt", "2024-04-16-log.txt", "2024-04-15-log.txt", "2024-04-10-log.txt", "2024-04-17-log.txt", "2024-02-24-log.txt", "2024-04-14-log.txt", "2024-04-19-log.txt", "2024-04-21-log.txt", "2024-04-22-log.txt", "2024-04-23-log.txt", "2024-04-24-log.txt", "2024-04-26-log.txt", "2024-04-25-log.txt", "2024-04-29-log.txt", "2024-04-30-log.txt", "2024-05-01-log.txt", "2024-05-02-log.txt", "2024-05-03-log.txt", "2024-05-04-log.txt", "2024-05-05-log.txt", "2024-05-06-log.txt", "2024-04-28-log.txt", "2024-05-07-log.txt", "2024-04-18-log.txt", "2024-05-08-log.txt", "2024-05-09-log.txt", "2024-05-10-log.txt", "2024-05-12-log.txt", "2024-05-14-log.txt", "2024-05-11-log.txt", "2024-05-16-log.txt", "2024-04-27-log.txt", "2024-05-17-log.txt", "2024-05-15-log.txt", "2024-05-18-log.txt", "2024-05-20-log.txt", "2024-05-21-log.txt", "2024-05-19-log.txt", "2024-05-22-log.txt", "2024-05-23-log.txt", "2024-05-25-log.txt", "2024-05-24-log.txt", "2024-05-26-log.txt", "2024-05-27-log.txt", "2024-05-28-log.txt", "2024-05-29-log.txt", "2024-05-30-log.txt", "2024-06-02-log.txt", "2024-05-13-log.txt", "2024-06-01-log.txt", "2024-05-31-log.txt", "2024-04-20-log.txt", "2024-06-03-log.txt", "2024-06-04-log.txt", "2024-06-05-log.txt", "2023-12-30-log.txt", "2023-12-01-log.txt", "2024-02-27-log.txt", "2023-12-29-log.txt", "gtaGraProcessToCSV.js", "gtaGraProcessToCSV-2AM.js", "hrs-benefit-report.js", "westCanDocumentMove.js", "hrsbsReviewCycleReport.js", "hrsbsCreateFolderRule.js", "HRSBS-SyncCCIDs.js", "hrsbsCreateFolder.js", "FVCA-data-import.js", "FVCA-manual-property-update.js", "istPerformanceReviewCreateFolder.js", "lawCreateFolderRestricted.js", "lawFileScanned.js", "lawCreateFolder.js", "lawCreateFolderRule.js", "nativeStudiesCreateFolderRestricted.js", "nsFolderCreateSchedule.js", "nativeStudiesCreateFolder.js", "nativeStudiesCreateFolderRule.js", "ADV-notify-type-mapping.json", "OOA-notify-email.js", "ADV-notify-terms-types.js", "pcm-grab-competitive-noderefs.js", "pcm-update-competitive-noderefs.js", "pcmCreateFolder.js", "psUpdateAlfrescoDepartment.js", "pllcCreateFolder.js", "qaProcess.js", "qaRelease.js", "rmOOABackgroundInformationFiling.js", "rmFilingDoc.js", "rmSearchmatchNomatchFiling.js", "rmFilingConfig.json", "thesisDestructionReport.js", "rmThesis.js", "add_document_type_ro.js", "updateSearchMatchStatus.js", "searchmatchFullDob.js", "createROReconciliationReports.js", "eTranscriptInstList.js", "folder-create-ro.js", "augTranscript.js", "addTimeStamp.js", "missingDocumentList-csv.js", "roAddAspectAndMoveAFA.js", "myTaskDownload.js", "roAddAspectAndMoveTranscript.js", "roAddBundlingAspect.js", "roAddSearchMatchAspect.js", "roCopyEphesoftMetadataXML.js", "roBatchScript.js", "addSearchMatchDocumentType.js", "roCreateEducationalCSV.js", "roCopyOlderScannedDocument.js", "roDocumentListAPLSTD.js", "roCopyOlderScannedDocumentAdHoc.js", "roEtranscriptReport.js", "roDailyQA.js", "roEtranscriptsBundleTest.js", "roFolderCreateLDAPLookup_no_notificatiion.js", "roFolderCreateLDAPLookup.js", "roEtranscriptsBundle.js", "roAddComment.js", "roCopyEphesoftMetadataScanned.js", "roMoveCompleted.js", "roMoveCompletedBackScan.js", "roMoveCompletedSearchMatch.js", "roEtranscriptPDFConverter.js", "roScanningMetadata.js", "roScript1.js", "RORoutingWorkflowUtil.js", "roScript3.js", "roScript2.js", "roScanningMetadataBackScan.js", "roScript7.js", "roScript6.js", "roScript9.js", "roScript1BackScan.js", "roSearchMatchNoMatchReport.js", "roSearchMatchQuery.js", "RONotification.js", "roSlateDocumentExport.js", "roTagAndFileRenderedPDFs.js", "roScript4.js", "roScript5.js", "roScript8.js", "createSlateFolioMaterialDropdown.js", "createSlateApplicationsCSV.js", "LaunchWorkflowUtils.js", "PaperFileUtils.js", "GenerateSponsornamesAndPinames.js", "rsoCreateFolder.js", "sciCreateFolderConfidential.js", "sciCreateFolderPublic.js", "sciCreateFolder.js", "sciCreateFolderRestricted.js", "scienceASDocumentImport.js", "sciFileADDPFileTypes.js", "sciFileShareFolder.js", "sciFileScanned.js", "sciBulkShareFolder.js", "copy-signed-offer-letter.js", "dept-config.js", "reappointment-generate-schedule.js", "reappointment-reminder-schedule.js", "reappointment-generate-process.js", "manual-generate-script.js", "reappointment-reminder-process.js", "reminder-email-util.js", "reappointment-tracking-schedule.js", "reappointment-tracking-process.js", "appointment-report.js", "appointment-report-schedule.js", "manual-tracking-script.js", "sfsCreateFolder.js", "sfsWorkflowStatus.js", "security-group-user.js", "createReportPermissionsFoldersInASite.js", "siteMembersReport.js", "createReportRecursiveGroupsAndUsersInASite.js", "search-responses.js", "advChangeDocumentType.js", "addFolderMetadata.js", "advChangeDocumentType_confidential.js", "consignOInitiatorOfferLetterChange.js", "advChangeDocumentType_background.js", "transcriptResponse.js", "change-fgsr-pdf-file-name-with-date.js", "copy-fgsr-to-graduate-students-records.js", "ADVDonationCalendarToFiscal.js", "document-query.js", "deletingCompletingWorkflow.js", "eTranscriptTemp.js", "eTranscript-bundled-02-jan.js", "eTranscriptVersionModifierFix.js", "fixCheckout.js", "removeDonationGrp.js", "eTranscriptVersioningFix.js", "move-fgsr-folder.js", "search-match-dob-add.js", "thesisDepositArchival.js", "moveThesesForTransfer.js", "eraReportGeneration.js", "kofaxMetadataMerge.js", "kofaxMetadataMergeMissing.js", "generic2min.js", "kofaxSendEmail.js", "PeopleSoft-eTranscript-XML-PDF.js", "startBenefitWorkflow.js", "peoplesoftMetadataMergeMissing.js", "securityWorkflowUtil.js", "startPayActionWorkflow.js", "startDepartmentAdhocApprovalWorkflow.js", "convertTranscript.js", "CreateTranscriptUserMemberships.js", "startTwoStepWorkflow.js", "fix_employee_names.js", "env.js", "folderCreateUtil.js", "folderCreateUtilAA.js", "generalSchedule.js", "JSON.js", "xmlUtil.js", "addPersonAspect.js", "addTimeStampRandomFileName.js", "archiveDocument.js", "luceneUtil.js", "util.js", "archivedItems.js", "getProjectDetails.js", "ADVChangeAuthor.js", "ADVcalendarToFiscal.js", "symplexUtils.js", "advBatchProcessing.js", "advChangeDocumentName.js", "ADVEphesoftMove.js", "advCreateFolderScheduled.js", "advErrorMessageReset.js", "advMetadataUpdate.js", "advMoveToFoldersScheduled.js", "ADVendFundReportFiling.js", "advReconcilliation.js", "ADVmoveRecordsToPreQA.js", "advScanningMetadata.js", "advScript2.js", "advScript3.js", "advScript4.js", "advScript1.js", "advScript5.js", "advScriptDaily.js", "advScriptMonthly.js", "advScriptKofax.js", "ADVSiteContext.js", "advMoveToFolder.js", "deleteEphesoftDoc.js", "advUtils.js", "folderCreateADV.js", "advScriptDaily30minFreq.js", "jsonUtils.js", "advScanning.js", "folderCreateDocumentADV.js", "moveToFolders.js", "symplexMetadataUpdate.js", "OOA_SOT_Name_change.js", "moveToFoldersRetainTitle.js", "advScriptWeekly.js", "symplexMoveToFolder.js", "clioToAcsDocUpdate.js", "ClioUpdateScheduledJob.js", "smartFoldersExample.json", "system-overview.html", "businessDocSetup.json", "uappolDocSetup.json", "businessConfig.json", "augConfig.json", "augDocSetup.json", "lawConfig.json", "uappolConfig.json", "UAlbertaSettings.json", "hrsbsDocSetup.json", "advConfig.json", "hrsbsConfig.json", "hrsConfig.json", "hrsDocSetup.json", "advSimplexMapping.json", "advDocSetup.json", "artsDocSetup.json", "alesConfig.json", "alesDocSetup.json", "archiveFolder.json", "artsConfig.json", "advScanningMapping.json", "collegeOfHealthSciencesConfig.json", "chsAgreementsConfig.json", "dropboxCommonAspects.json", "collegeOfHealthSciencesDocSetup.json", "chsAgreementsDocSetup.json", "educationConfig.json", "extensionConfig.json", "fgsrv2DocSetup.json", "foConfig.json", "foDocSetup.json", "educationDocSetup.json", "lawDocSetup.json", "nativeStudiesDocSetup.json", "pllcConfig.json", "pllcDocSetup.json", "roConfig.json", "fgsrv2Config.json", "rsoConfig.json", "rsoDocSetup.json", "sciConfig.json", "eTranscriptConfig.json", "sciDocSetup.json", "roDocSetup.json", "sfsDocSetup.json", "UAlbertaSettings.conf", "student-recordsConfig.json", "securityWorkflowSetting.json", "thesisDepositConfig.json", "globalHeader.html.ftl", "webFormDialog.html.ftl", "alfrescoUserGroupRequest.ftl", "pensionBenefit.html.ftl", "pinames.json", "sponsornames.json", "searchPageConfig.json", "pcmDocSetup.json", "pcmConfig.json", "qaConfig.json", "apsAppConfig.json", "fgsrCreateApsFromCSV.json", "fgsrCopyMetadata.json", "enggCoopDocSetup.json", "enggDocSetup.json", "enggConfig.json", "enggCoopConfig.json", "CapApsConfig.json", "extensionDocSetup.json", "readme.html", "readme_de.html", "readme_ja.html", "readme_fr.html", "advEndowmentName.get.desc.xml", "advEndowmentName.get.json.ftl", "advEndowmentName.get.js", "advEntityName.get.desc.xml", "advEntityName.get.js", "advEntityName.get.html.ftl", "search.get.desc.xml", "search.get.js", "search.get.html.ftl", "changeInitiatorAppt.put.desc.xml", "eSignatureStatusHistory.get.html.ftl", "changeInitiatorAppt.put.json.ftl", "eSignatureStatusHistory.get.desc.xml", "appointmentSubmit.get.js", "processIdProps.get.desc.xml", "changeInitiatorAppt.put.js", "processIdProps.get.json.ftl", "processIdProps.get.js", "appointmentLandingPage.get.desc.xml", "appointmentLandingPage.get.js", "appointmentLandingPage.get.html.ftl", "appointmentStart.get.desc.xml", "appointmentStart.get.html.ftl", "appointmentStart.get.js", "appointmentStartTest.get.desc.xml", "appointmentStartTest.get.js", "appointmentStartTest.get.html.ftl", "appointmentSubmit.get.desc.xml", "appointmentSubmit.get.html.ftl", "eSignatureStatusHistory.get.js", "apsApplicationList.get.desc.xml", "apsApplicationList.get.html.ftl", "assignuser.put.js", "assignuser.put.json.ftl", "claimtask.put.desc.xml", "claimtask.put.js", "claimtask.put.json.ftl", "completetask.post.desc.xml", "completetask.post.json.ftl", "completetask.post.js", "getapsdbid.get.desc.xml", "getapsdbid.get.json.ftl", "gettasks.get.desc.xml", "gettasks.get.json.ftl", "assignuser.put.desc.xml", "gettasks.get.js", "savetask.post.desc.xml", "savetask.post.js", "savetask.post.json.ftl", "taskForm.get.js", "taskForm.get.desc.xml", "tasklist.get.desc.xml", "apsApplicationList.get.js", "taskForm.get.json.ftl", "tasklist.get.html.ftl.jquery", "tasklist.get.html.ftl", "tasklist.get.js", "triggerapsprocess.post.desc.xml", "triggerapsprocess.post.js", "updatevariables.post.desc.xml.notused", "triggerapsprocess.post.json.ftl", "updatevariables.post.json.ftl.notused", "getapsdbid.get.js", "updatevariables.post.js.notused", "taskUtils.js", "apsGroupsConfig.json", "apsSitesConfig.json", "apptStepZeroStarter.post.desc.xml", "apptStepZeroStarter.post.json.ftl", "apptStepZeroStarter.post.js", "apptStepOneStarter.post.desc.xml", "apptStepOneStarter.post.js", "apptStepOneStarter.post.json.ftl", "apptStepOneSave.post.json.ftl", "apptStepOneSave.post.desc.xml", "apptStepOneSave.post.js", "apptStatusDocUpdate.post.desc.xml", "apptStatusDocUpdate.post.json.ftl", "apptStatusDocUpdate.post.js", "APSWorkflowStatus.get.desc.xml", "APSWorkflowStatus.put.html.ftl", "APSWorkflowStatus.get.html.ftl", "APSWorkflowInfo.put.html.ftl", "APSWorkflowStatus.put.desc.xml", "APSWorkflowInfo.put.desc.xml", "APSWorkflowStatus.get.js", "APSWorkflowStatus.put.js", "APSWorkflowInfo.put.js", "NodeInfo.get.desc.xml", "NodeInfo.get.html.ftl", "capinfo.get.js", "capstart.get.js", "epsb.get.js", "epsb.get.html.ftl", "capstart.get.html.ftl", "epsb.get.desc.xml", "schoolboard.get.html.ftl", "NodeInfo.get.js", "NodeInfoByCapId.get.desc.xml", "updateVariable.post.json.ftl", "updateVariable.post.js", "schoolboard.get.desc.xml", "updateVariable.post.desc.xml", "schoolboard.get.js", "capinfo.get.html.ftl.backup", "cap-file-load.post.json.ftl", "NodeInfoByCapId.get.js", "capinfo.get.html.ftl", "capstart.get.desc.xml", "cap-file-load.post.desc.xml", "capinfo.get.desc.xml", "cap-file-load.post.js", "capeamergedoc.get.js", "capeamergedoc.get.desc.xml", "capeamergedoc.get.html.ftl", "capConfig.js", "chsEnv.js", "chsConfig.js", "chsAdminStuView.get.desc.xml", "chsAdminStuView.get.html.ftl", "chsAdminStuView.get.js", "coupa.get.html.ftl", "coupa.get.desc.xml", "coupa.get.js", "coveoGetDocList.get.desc.xml", "coveoGetDocList.get.json.ftl", "coveoGetDocList.get.js", "getJson.get.desc.xml", "getJson.get.js", "getJson.get.json.ftl", "simpleupload.post.desc.xml", "simpleupload.post.json.ftl", "simpleupload.post.js", "consignoMessage.get.js", "consignoWebhook.post.js", "consignoWebhook.post.json.ftl", "consignoMessage.get.desc.xml", "consignoWebhook.post.desc.xml", "consignoMessage.get.json.ftl", "eSignDownload.get.js", "eSignDownload.get.html.ftl", "eSignDownload.get.desc.xml", "review-supervisorv2.get.desc.xml", "review-supervisorv2.get.js", "review-supervisorv2.get.html.ftl", "fgsrssgLanding.get.js", "review-comm01v2.get.desc.xml", "fgsrssgLanding.get.html.ftl", "review-comm01v2.get.html.ftl", "review-comm02v2.get.desc.xml", "review-comm02v2.get.html.ftl", "fgsrssgLanding.get.desc.xml", "review-studentv2.get.html.ftl", "review-comm03v2.get.html.ftl", "review-comm03v2.get.desc.xml", "review-studentv2.get.desc.xml", "review-cosupervisorv2.get.html.ftl", "review-comm02v2.get.js", "review-startv2.get.desc.xml", "review-studentv2.get.js", "review-cosupervisorv2.get.js", "review-startv2.get.js", "review-student-revisionv2.get.html.ftl", "review-student-revisionv2.get.desc.xml", "review-startv2.get.html.ftl", "review-comm03v2.get.js", "review-cosupervisorv2.get.desc.xml", "review-student-revisionv2.get.js", "review-comm01v2.get.js", "review-comm02.get.desc.xml", "review-comm02.get.html.ftl", "review-comm03.get.desc.xml", "review-comm02.get.js", "review-comm03.get.html.ftl", "review-cosupervisor.get.desc.xml", "review-cosupervisor.get.html.ftl", "review-cosupervisor.get.js", "review-nextdate.get.desc.xml", "review-comm03.get.js", "review-nextdate.get.js", "review-student.get.html.ftl", "review-student.get.js", "review-student-revision.get.desc.xml", "review-student.get.desc.xml", "review-student-revision.get.js", "review-studentTest.get.desc.xml", "review-supervisor.get.desc.xml", "review-studentTest.get.js", "review-supervisor.get.html.ftl", "review-supervisor.get.js", "review-comm01.get.desc.xml", "review-comm01.get.html.ftl", "review-comm01.get.js", "review-student-revision.get.html.ftl", "review-nextdate.get.html.ftl", "review-studentTest.get.html.ftl", "guidelines-supervisor.get.desc.xml", "guidelines-supervisor-revision.get.html.ftl", "guidelines-start.get.desc.xml", "guidelines-start.get.html.ftl", "guidelines-start.get.js", "guidelines-student.get.desc.xml", "guidelines-student.get.html.ftl", "guidelines-student-revision.get.js", "guidelines-student-revision.get.desc.xml", "guidelines-supervisor.get.html.ftl", "guidelines-supervisor-revision.get.desc.xml", "guidelines-student-revision.get.html.ftl", "guidelines-student.get.js", "guidelines-supervisor.get.js", "guidelines-supervisor-revision.get.js", "programExtensionScript.js", "customScript.js", "customCSS_FGSR2.css", "customCSS_FGSR.css", "fgsrEnv.js", "FGSR-Forms-Config.js", "config.js", "googleAddon.get.json.ftl", "googleAddon.get.desc.xml", "googleAddon.get.js", "gtaGraStatus.post.json.ftl", "gtaGraStatus.post.js", "gtaGraStatus.post.desc.xml", "wfh-manager.get.desc.xml", "wfh-form.get.js", "wfh-manager.get.html.ftl", "wfh-form.get.desc.xml", "wfh-revise.get.desc.xml", "wfh-revise.get.html.ftl", "wfh-revise.get.js", "wfh-seniormanager.get.desc.xml", "wfh-manager.get.js", "wfh-seniormanager.get.js", "wfh-seniormanager.get.html.ftl", "wfh-form.get.html.ftl", "hrsbsDocumentLinking.get.desc.xml", "hrsbsDocumentLinking.get.html.ftl", "hrsbsDocumentLinking.get.js", "coi-start.get.desc.xml", "coi-start.get.html.ftl", "coi-revise.get.html.ftl", "coi-employee.get.html.ftl", "coi-employee.get.desc.xml", "coi-revise.get.desc.xml", "coi-start.get.js", "coi-revise.get.js", "coi-supervisor.get.js", "coi-supervisor.get.desc.xml", "coi-employee.get.js", "coi-supervisor.get.html.ftl", "getTaskFilter.get.json.ftl", "queryTasks.get.json.ftl", "routableGroups.get.desc.xml", "routableGroups.get.js", "routableGroups.get.json.ftl", "queryTasks.get.desc.xml", "setTaskFilter.post.js", "setTaskFilter.post.json.ftl", "setTaskFilter.post.desc.xml", "applyTaskAction.post.js", "applyTaskAction.post.json.ftl", "applyTaskAction.post.desc.xml", "getTaskFilter.get.desc.xml", "getTaskFilter.get.js", "queryTasks.get.js", "avmbrowse.get.desc.xml", "avmbrowse.get.html.ftl", "avmbrowse.get.js", "avmstores.get.desc.xml", "avmstores.get.html.ftl", "blogsearch.get.atom.400.ftl", "blogsearch.get.html.400.ftl", "blogsearch.get.desc.xml", "blogsearch.get.js", "categorysearch.get.atom.404.ftl", "blogsearch.get.html.ftl", "categorysearch.get.html.404.ftl", "categorysearch.get.js", "categorysearch.get.html.ftl", "categorysearch.get.desc.xml", "folder.get.desc.xml", "folder.get.html.ftl", "folder.get.js", "psDeptAll.get.js", "psDeptSingle.get.json.ftl", "psDeptSingle.get.js", "psPerson.get.json.ftl", "psUtil.js", "psPerson.get.js", "psAcademicDeptAll.get.desc.xml", "psAcademicDeptAll.get.json.ftl", "psAuthorizedApprover.get.desc.xml", "psDeptAll.get.json.ftl", "psAuthorizedApprover.get.js", "psAuthorizedApprover.get.json.ftl", "psDeptAll.get.desc.xml", "psDeptSingle.get.desc.xml", "psPerson.get.desc.xml", "ceeb.get.desc.xml", "ceeb.get.json.ftl", "getSlateId.get.desc.xml", "getSlateId.get.js", "materials.get.json.ftl", "materials.get.desc.xml", "getSlateId.get.json.ftl", "ceeb.get.js", "materials.get.js", "edit.get.html.ftl", "edit.get.js", "save.post.js", "save.post.json.ftl", "scans.get.desc.xml", "scans.get.js", "uploadfile.post.desc.xml", "uploadfile.post.json.ftl", "edit.get.desc.xml", "uploadfile.post.js", "scans.get.html.ftl", "save.post.desc.xml", "AFA_Main.post.desc.xml", "AFA_MainFileOnly.post.desc.xml", "AFA_MainFileOnly.post.js", "AFA_Main.post.js", "AFA_MainFileOnly.post.json.ftl", "AFA_Main.post.json.ftl", "paperFileUtil.get.desc.xml", "paperFileUtil.get.js", "paperFileUtil.get.html.ftl", "rsoprojectdetails.get.html.ftl", "rsoprojectdetails.get.js", "rsoprojectdetails.get.desc.xml", "roslateapplist.get.html.ftl", "roslateapplist.get.desc.xml", "roslateapplist.get.json.ftl", "roslateexists.get.html.ftl", "roslateexists.get.desc.xml", "roslateapplist.get.js", "roslateexists.get.js", "uofaDepartmentList.get.desc.xml", "uofaDepartmentList.get.js", "uofaDepartmentList.get.html.ftl", "uofaDepartmentName.get.desc.xml", "uofaDepartmentName.get.html.ftl", "uofaFacultyList.get.html.ftl", "uofaFacultyList.get.desc.xml", "uofaDepartmentName.get.js", "uofapersonid.get.desc.xml", "uofapersonidrest.get.html.ftl", "uofapersonidrest.get.desc.xml", "uofapersonid.get.html.ftl", "uofapersonid.get.js", "uofapersonidrest.get.js", "uappolCategoryHeirarchy.get.desc.xml", "uappolCategoryHeirarchy.get.json.ftl", "uappol-metadata-query.get.desc.xml", "uappol-metadata-query.get.js", "uappol-metadata-query.get.json.ftl", "uappolCategoryHeirarchy.get.js", "siteFileViewer.get.desc.xml", "siteFileViewerConfig.js", "siteFileViewer.get.html.ftl", "siteFileViewer.get.js", "publicSiteFileViewer.get.html.ftl", "publicSiteFileViewer.get.desc.xml", "publicSiteFileViewer.get.js", "cronJob.post.desc.xml", "cronJob.post.js", "cronJob.post.json.ftl", "studentupload.get.html.ftl", "generatereport.get.json.ftl", "generatereport.get.desc.xml", "approvethesis.post.js", "generatereport.get.js", "search-match-attach.get.js", "search-match-list.get.html.ftl", "search-match-result.get.html.ftl", "search-match-result.get.js", "search-match-list.get.js.old", "chs-agreements.get.js", "chs-agreements.get.html.ftl", "chs-upload.get.html.ftl", "chs-upload.get.js", "uamytasks.config.get.js", "chsStudentView.get.js", "chsStudentView.get.html.ftl", "foModel.xml", "uofaDocTypes.xml", "uofaDocTypes.json", "foModel.json", "tim-sops", "FandO", "cbsr", "nanofab", "support-documentation", "Alfresco.zip - 1bf054bded99e2ae414154593d0892066b2e0c7add603f9321e157c77ae52075", "https://www.virustotal.com/graph/embed/g05f1796a358b458d95751d31d1d529aa378f8ffadf0b4305b7fa0bd1c64fe228?theme=dark", "https://www.virustotal.com/gui/collection/63819e07111e9665ba8602777d782527c54f3fad71ef36f977405a004484787c/iocs", "https://viz.greynoise.io/analysis/0cd9177e-8328-4355-a2c0-d05704a64c72", "components.zip - 2b91fcf852a5f1f57be71a269d82497b37c9f544ebd8f32aaa240e4cde0ffeea", "https://www.virustotal.com/graph/embed/g2948a5c332eb4614973872a8243215f6aa1fba79749a48ea92806e9b934db91f?theme=dark", "https://viz.greynoise.io/ip/analysis/2610b635-c05a-4f28-a112-7278de8fdf9b" ], "public": 1, "adversary": "TA413 proposed (06.08.24), Callisto, APT38, APT 28/29 - too much time too many problems", "targeted_countries": [ "Canada", "United States of America" ], "malware_families": [], "attack_ids": [], "industries": [ "Education", "Government", "Healthcare", "Technology", "Telecommunications" ], "TLP": "white", "cloned_from": "6665315e25f9dd42a99e4f2f", "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 7132, "hostname": 3118, "URL": 4909, "email": 20, "FileHash-SHA256": 2144, "FileHash-MD5": 29, "FileHash-SHA1": 29 }, "indicator_count": 17381, "is_author": false, "is_subscribing": null, "subscriber_count": 66, "modified_text": "15 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69c227fd2960e96cae88fb97", "name": "Dropbox Typo squatting campaign. CoolWebSearch, CycBot , Mirai and Ransomware | Many domains affected.", "description": "Dropbox Typo squatting campaign. Mirai and Ransomware | Many domains affected.\n\nHas been executed. Threat actor attacked bank/s and Dropbox via Drive by compromises and malicious redirects. Multiple Dropbox accounts added to customer accounts confuse bank and customers. All accounts kept until Bank experienced serious breach. Bank admits to breach. Unsure if made public. Customer suddenly loses all paid storage, business tools , registered domains , and investment accounts. Bank empathizes targeted attacks.\nOccurred post initial infection & Pegasus Attack by same threat actors.", "modified": "2026-04-23T04:01:31.987000", "created": "2026-03-24T05:58:21.777000", "tags": [ "domain", "ipv4", "ck t1045", "run keys", "startup", "web protocols", "tool transfer", "user execution", "dns", "accept", "active related", "adversaries", "alerts", "apache", "as133618", "ascii text", "australia asn", "av detections", "christopher p ahmann", "brian sabey", "ck id", "ck matrix", "delete", "data upload", "defense evasion", "data", "cycbot", "cowboy", "coolwebsearch", "content", "contacted", "command", "connection", "delphi", "detection", "drop", "location", "manu", "dynamicloader", "elite", "emails", "encrypt", "error", "external", "extraction", "exploit", "failed", "gmt", "format", "forbidden", "privacy", "files", "feat file", "score", "refresh", "!redirect", "ratio", "redacted", "cycbot", "mirai", "unix", "ransomware", "trojan", "ransom", "query", "proximity", "pragma", "pegasus relationship", "typo squatting", "over path", "texarac", "name tactics", "h6rryf", "meta", "mitre att", "redirect", "malware", "malicious", "gmt server", "http header", "local", "little endian", "javascript", "is elf", "learn", "ipv4", "lambda", "lamk", "installer", "hall render", "index", "http request", "high risk", "insert", "ids detections", "informative", "indicator", "facts", "script style", "win32danginex", "trojanclicker", "trojan spy", "spyware", "udp", "windows", "vtab", "virtool", "trojan", "script strings", "stop data", "upatre", "spawns", "united states", "trojanspy", "tam legal", "secchuaplatform", "secchua", "virtool", "ransom", "quasi" ], "references": [ "dropox.com", "Win.Trojan.Agent-31647 \u2022 IDS: Detections CoolWebSearch Spyware (Feat)", "IDS Detections: Query for .cc TLD 403 Forbidden", "103.224.212.215 \u2022 rigs.zu0x.com \u2022 Australia : AS133618 trellian pty. limited", "UDP Include internal to internal communication Top Source 192.168.122.131 Top Destination 8.8.8.8 x", "u47.cc \u2022 IP Address 13.248.169.48, 76.223.54.146 | United States ASN AS16509 amazon.com", "u47.cc \u2022 | Domain is sinkholed | Registrar: ENAME TECHNOLOGY CO., LTD., x", "The Lambda function associated with the CloudFront distribution was throttled.", "We can't connect to the server for this & x Lambda function", "Error https://otx.alienvault.com/indicator/hostname/lb-212-215.above.com", "https://hybrid-analysis.com/sample/6ac18dcdfd4164ed7beeffffc995c5349c52b01dfObe5000f25294d698faf3b9/69c1b" ], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Australia" ], "malware_families": [ { "id": "Mirai", "display_name": "Mirai", "target": null }, { "id": "Win. Trojan.Agent-292909", "display_name": "Win. Trojan.Agent-292909", "target": null }, { "id": "Win.Trojan.Agent-336291", "display_name": "Win.Trojan.Agent-336291", "target": null }, { "id": "Trojan.Cycbot-2671", "display_name": "Trojan.Cycbot-2671", "target": null }, { "id": "Virtool:Win32/Obfuscator.JM", "display_name": "Virtool:Win32/Obfuscator.JM", "target": "/malware/Virtool:Win32/Obfuscator.JM" }, { "id": "Win.Trojan.Agent-36211", "display_name": "Win.Trojan.Agent-36211", "target": null }, { "id": "Win.Malware.Agent-6598770-0", "display_name": "Win.Malware.Agent-6598770-0", "target": null }, { "id": "Win.Downloader.14593-1", "display_name": "Win.Downloader.14593-1", "target": null }, { "id": "Unix.Trojan.Mirai-9441505-0", "display_name": "Unix.Trojan.Mirai-9441505-0", "target": null }, { "id": "Win.Dropper.DarkKomet-9370806-0", "display_name": "Win.Dropper.DarkKomet-9370806-0", "target": null }, { "id": "Trojan:Win32/Danginex", "display_name": "Trojan:Win32/Danginex", "target": "/malware/Trojan:Win32/Danginex" }, { "id": "Trojan.Redirector.JS", "display_name": "Trojan.Redirector.JS", "target": null }, { "id": "Win.Ransomware.Wanna-9769986-0", "display_name": "Win.Ransomware.Wanna-9769986-0", "target": null }, { "id": "Ransom:Win32/WannaCrypt.H", "display_name": "Ransom:Win32/WannaCrypt.H", "target": "/malware/Ransom:Win32/WannaCrypt.H" }, { "id": "CoolWebSearch", "display_name": "CoolWebSearch", "target": null }, { "id": "CycBot", "display_name": "CycBot", "target": null }, { "id": "Trojan:Win32/Bulta!rfn", "display_name": "Trojan:Win32/Bulta!rfn", "target": "/malware/Trojan:Win32/Bulta!rfn" }, { "id": "Trojan:Win32/Bulta!rfn", "display_name": "Trojan:Win32/Bulta!rfn", "target": "/malware/Trojan:Win32/Bulta!rfn" }, { "id": "Trojan.Startpage-1612", "display_name": "Trojan.Startpage-1612", "target": null } ], "attack_ids": [ { "id": "T1045", "name": "Software Packing", "display_name": "T1045 - Software Packing" }, { "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "display_name": "T1048 - Exfiltration Over Alternative Protocol" }, { "id": "T1057", "name": "Process Discovery", "display_name": "T1057 - Process Discovery" }, { "id": "T1059", "name": "Command and Scripting Interpreter", "display_name": "T1059 - Command and Scripting Interpreter" }, { "id": "T1060", "name": "Registry Run Keys / Startup Folder", "display_name": "T1060 - Registry Run Keys / Startup Folder" }, { "id": "T1069", "name": "Permission Groups Discovery", "display_name": "T1069 - Permission Groups Discovery" }, { "id": "T1071", "name": "Application Layer Protocol", "display_name": "T1071 - Application Layer Protocol" }, { "id": "T1105", "name": "Ingress Tool Transfer", "display_name": "T1105 - Ingress Tool Transfer" }, { "id": "T1140", "name": "Deobfuscate/Decode Files or Information", "display_name": "T1140 - Deobfuscate/Decode Files or Information" }, { "id": "T1189", "name": "Drive-by Compromise", "display_name": "T1189 - Drive-by Compromise" }, { "id": "T1204", "name": "User Execution", "display_name": "T1204 - User Execution" }, { "id": "T1480", "name": "Execution Guardrails", "display_name": "T1480 - Execution Guardrails" }, { "id": "T1553", "name": "Subvert Trust Controls", "display_name": "T1553 - Subvert Trust Controls" }, { "id": "T1562", "name": "Impair Defenses", "display_name": "T1562 - Impair Defenses" }, { "id": "T1568", "name": "Dynamic Resolution", "display_name": "T1568 - Dynamic Resolution" }, { "id": "T1583", "name": "Acquire Infrastructure", "display_name": "T1583 - Acquire Infrastructure" }, { "id": "T1048.001", "name": "Exfiltration Over Symmetric Encrypted Non-C2 Protocol", "display_name": "T1048.001 - Exfiltration Over Symmetric Encrypted Non-C2 Protocol" }, { "id": "T1048.003", "name": "Exfiltration Over Unencrypted/Obfuscated Non-C2 Protocol", "display_name": "T1048.003 - Exfiltration Over Unencrypted/Obfuscated Non-C2 Protocol" }, { "id": "T1584.005", "name": "Botnet", "display_name": "T1584.005 - Botnet" }, { "id": "T1583.001", "name": "Domains", "display_name": "T1583.001 - Domains" }, { "id": "T1155", "name": "AppleScript", "display_name": "T1155 - AppleScript" }, { "id": "T1071.004", "name": "DNS", "display_name": "T1071.004 - DNS" }, { "id": "T1071.001", "name": "Web Protocols", "display_name": "T1071.001 - Web Protocols" }, { "id": "T1562.001", "name": "Disable or Modify Tools", "display_name": "T1562.001 - Disable or Modify Tools" }, { "id": "T1553.002", "name": "Code Signing", "display_name": "T1553.002 - Code Signing" }, { "id": "T1069.002", "name": "Domain Groups", "display_name": "T1069.002 - Domain Groups" }, { "id": "T1059.007", "name": "JavaScript", "display_name": "T1059.007 - JavaScript" } ], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Q.Vashti", "id": "337942", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 241, "FileHash-SHA1": 245, "FileHash-SHA256": 246, "URL": 548, "CVE": 1, "SSLCertFingerprint": 6, "domain": 198, "email": 6, "hostname": 337 }, "indicator_count": 1828, "is_author": false, "is_subscribing": null, "subscriber_count": 142, "modified_text": "39 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69c228009e33309be83b65b7", "name": "Dropbox Typo squatting campaign. CoolWebSearch, CycBot , Mirai and Ransomware | Many domains affected.", "description": "Dropbox Typo squatting campaign. Mirai and Ransomware | Many domains affected.\n\nHas been executed. Threat actor attacked bank/s and Dropbox via Drive by compromises and malicious redirects. Multiple Dropbox accounts added to customer accounts confuse bank and customers. All accounts kept until Bank experienced serious breach. Bank admits to breach. Unsure if made public. Customer suddenly loses all paid storage, business tools , registered domains , and investment accounts. Bank empathizes targeted attacks.\nOccurred post initial infection & Pegasus Attack by same threat actors.", "modified": "2026-04-23T04:01:31.987000", "created": "2026-03-24T05:58:24.002000", "tags": [ "domain", "ipv4", "ck t1045", "run keys", "startup", "web protocols", "tool transfer", "user execution", "dns", "accept", "active related", "adversaries", "alerts", "apache", "as133618", "ascii text", "australia asn", "av detections", "christopher p ahmann", "brian sabey", "ck id", "ck matrix", "delete", "data upload", "defense evasion", "data", "cycbot", "cowboy", "coolwebsearch", "content", "contacted", "command", "connection", "delphi", "detection", "drop", "location", "manu", "dynamicloader", "elite", "emails", "encrypt", "error", "external", "extraction", "exploit", "failed", "gmt", "format", "forbidden", "privacy", "files", "feat file", "score", "refresh", "!redirect", "ratio", "redacted", "cycbot", "mirai", "unix", "ransomware", "trojan", "ransom", "query", "proximity", "pragma", "pegasus relationship", "typo squatting", "over path", "texarac", "name tactics", "h6rryf", "meta", "mitre att", "redirect", "malware", "malicious", "gmt server", "http header", "local", "little endian", "javascript", "is elf", "learn", "ipv4", "lambda", "lamk", "installer", "hall render", "index", "http request", "high risk", "insert", "ids detections", "informative", "indicator", "facts", "script style", "win32danginex", "trojanclicker", "trojan spy", "spyware", "udp", "windows", "vtab", "virtool", "trojan", "script strings", "stop data", "upatre", "spawns", "united states", "trojanspy", "tam legal", "secchuaplatform", "secchua", "virtool", "ransom", "quasi" ], "references": [ "dropox.com", "Win.Trojan.Agent-31647 \u2022 IDS: Detections CoolWebSearch Spyware (Feat)", "IDS Detections: Query for .cc TLD 403 Forbidden", "103.224.212.215 \u2022 rigs.zu0x.com \u2022 Australia : AS133618 trellian pty. limited", "UDP Include internal to internal communication Top Source 192.168.122.131 Top Destination 8.8.8.8 x", "u47.cc \u2022 IP Address 13.248.169.48, 76.223.54.146 | United States ASN AS16509 amazon.com", "u47.cc \u2022 | Domain is sinkholed | Registrar: ENAME TECHNOLOGY CO., LTD., x", "The Lambda function associated with the CloudFront distribution was throttled.", "We can't connect to the server for this & x Lambda function", "Error https://otx.alienvault.com/indicator/hostname/lb-212-215.above.com", "https://hybrid-analysis.com/sample/6ac18dcdfd4164ed7beeffffc995c5349c52b01dfObe5000f25294d698faf3b9/69c1b" ], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Australia" ], "malware_families": [ { "id": "Mirai", "display_name": "Mirai", "target": null }, { "id": "Win. Trojan.Agent-292909", "display_name": "Win. Trojan.Agent-292909", "target": null }, { "id": "Win.Trojan.Agent-336291", "display_name": "Win.Trojan.Agent-336291", "target": null }, { "id": "Trojan.Cycbot-2671", "display_name": "Trojan.Cycbot-2671", "target": null }, { "id": "Virtool:Win32/Obfuscator.JM", "display_name": "Virtool:Win32/Obfuscator.JM", "target": "/malware/Virtool:Win32/Obfuscator.JM" }, { "id": "Win.Trojan.Agent-36211", "display_name": "Win.Trojan.Agent-36211", "target": null }, { "id": "Win.Malware.Agent-6598770-0", "display_name": "Win.Malware.Agent-6598770-0", "target": null }, { "id": "Win.Downloader.14593-1", "display_name": "Win.Downloader.14593-1", "target": null }, { "id": "Unix.Trojan.Mirai-9441505-0", "display_name": "Unix.Trojan.Mirai-9441505-0", "target": null }, { "id": "Win.Dropper.DarkKomet-9370806-0", "display_name": "Win.Dropper.DarkKomet-9370806-0", "target": null }, { "id": "Trojan:Win32/Danginex", "display_name": "Trojan:Win32/Danginex", "target": "/malware/Trojan:Win32/Danginex" }, { "id": "Trojan.Redirector.JS", "display_name": "Trojan.Redirector.JS", "target": null }, { "id": "Win.Ransomware.Wanna-9769986-0", "display_name": "Win.Ransomware.Wanna-9769986-0", "target": null }, { "id": "Ransom:Win32/WannaCrypt.H", "display_name": "Ransom:Win32/WannaCrypt.H", "target": "/malware/Ransom:Win32/WannaCrypt.H" }, { "id": "CoolWebSearch", "display_name": "CoolWebSearch", "target": null }, { "id": "CycBot", "display_name": "CycBot", "target": null }, { "id": "Trojan:Win32/Bulta!rfn", "display_name": "Trojan:Win32/Bulta!rfn", "target": "/malware/Trojan:Win32/Bulta!rfn" }, { "id": "Trojan:Win32/Bulta!rfn", "display_name": "Trojan:Win32/Bulta!rfn", "target": "/malware/Trojan:Win32/Bulta!rfn" }, { "id": "Trojan.Startpage-1612", "display_name": "Trojan.Startpage-1612", "target": null } ], "attack_ids": [ { "id": "T1045", "name": "Software Packing", "display_name": "T1045 - Software Packing" }, { "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "display_name": "T1048 - Exfiltration Over Alternative Protocol" }, { "id": "T1057", "name": "Process Discovery", "display_name": "T1057 - Process Discovery" }, { "id": "T1059", "name": "Command and Scripting Interpreter", "display_name": "T1059 - Command and Scripting Interpreter" }, { "id": "T1060", "name": "Registry Run Keys / Startup Folder", "display_name": "T1060 - Registry Run Keys / Startup Folder" }, { "id": "T1069", "name": "Permission Groups Discovery", "display_name": "T1069 - Permission Groups Discovery" }, { "id": "T1071", "name": "Application Layer Protocol", "display_name": "T1071 - Application Layer Protocol" }, { "id": "T1105", "name": "Ingress Tool Transfer", "display_name": "T1105 - Ingress Tool Transfer" }, { "id": "T1140", "name": "Deobfuscate/Decode Files or Information", "display_name": "T1140 - Deobfuscate/Decode Files or Information" }, { "id": "T1189", "name": "Drive-by Compromise", "display_name": "T1189 - Drive-by Compromise" }, { "id": "T1204", "name": "User Execution", "display_name": "T1204 - User Execution" }, { "id": "T1480", "name": "Execution Guardrails", "display_name": "T1480 - Execution Guardrails" }, { "id": "T1553", "name": "Subvert Trust Controls", "display_name": "T1553 - Subvert Trust Controls" }, { "id": "T1562", "name": "Impair Defenses", "display_name": "T1562 - Impair Defenses" }, { "id": "T1568", "name": "Dynamic Resolution", "display_name": "T1568 - Dynamic Resolution" }, { "id": "T1583", "name": "Acquire Infrastructure", "display_name": "T1583 - Acquire Infrastructure" }, { "id": "T1048.001", "name": "Exfiltration Over Symmetric Encrypted Non-C2 Protocol", "display_name": "T1048.001 - Exfiltration Over Symmetric Encrypted Non-C2 Protocol" }, { "id": "T1048.003", "name": "Exfiltration Over Unencrypted/Obfuscated Non-C2 Protocol", "display_name": "T1048.003 - Exfiltration Over Unencrypted/Obfuscated Non-C2 Protocol" }, { "id": "T1584.005", "name": "Botnet", "display_name": "T1584.005 - Botnet" }, { "id": "T1583.001", "name": "Domains", "display_name": "T1583.001 - Domains" }, { "id": "T1155", "name": "AppleScript", "display_name": "T1155 - AppleScript" }, { "id": "T1071.004", "name": "DNS", "display_name": "T1071.004 - DNS" }, { "id": "T1071.001", "name": "Web Protocols", "display_name": "T1071.001 - Web Protocols" }, { "id": "T1562.001", "name": "Disable or Modify Tools", "display_name": "T1562.001 - Disable or Modify Tools" }, { "id": "T1553.002", "name": "Code Signing", "display_name": "T1553.002 - Code Signing" }, { "id": "T1069.002", "name": "Domain Groups", "display_name": "T1069.002 - Domain Groups" }, { "id": "T1059.007", "name": "JavaScript", "display_name": "T1059.007 - JavaScript" } ], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Q.Vashti", "id": "337942", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 241, "FileHash-SHA1": 245, "FileHash-SHA256": 246, "URL": 548, "CVE": 1, "SSLCertFingerprint": 6, "domain": 198, "email": 6, "hostname": 337 }, "indicator_count": 1828, "is_author": false, "is_subscribing": null, "subscriber_count": 143, "modified_text": "39 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69c06ca9341d6c063f652e33", "name": "ETERNALBLUE Probe MS17-010 | Wannacry Ransomware Domain - related to NSO Group Pegasus", "description": "Quasi governmental, Healthcare Law Firms , legal entities , as well as direct safety threats such as NSO Group Pegasus, Enterprise Cellebrite (in references) and other dangerous intimidation and life endangering tactics directed against a crime victim. Continuous harassment and threats of violence against victims family including 83 yo father. Veteran & hand picked Sr Systems Analyst and Engineer for Aegis Weapon System Team of 24. You\u2019re welcome America.. Victim left zero evidence with family. Documents shredded. Data stolen by parties named. She isn\u2019t the only one. These people do this for a living. Abuse of Palantir & Foundry tools.", "modified": "2026-04-21T22:07:35.710000", "created": "2026-03-22T22:26:49.205000", "tags": [ "ransomware", "united", "search", "asnone", "regsetvalueexa", "service", "regdword", "medium", "get na", "malware", "dock", "push", "write", "win32", "playgame", "unknown", "exploit", "cve", "wncry", "wannacry", "passive dns", "urls", "british virgin", "all url", "http", "ip address", "related nids", "files location", "virgin islands", "islands", "bgp", "virgin islands", "hijacked", "data upload", "extraction", "failed", "review iocs", "include ovo", "tovary review", "ids detec", "yara dete", "trior texarag", "drop or", "rrowse", "type", "extra data", "hurricane electric", "p2404", "p11629470400", "p11629107633", "artifacts v", "full reports", "v help", "info", "low l", "high ta0002", "techniques", "t1053", "command", "scripting inte", "low ta0003", "techniques high", "t1053 ite", "modify system", "pl t1543", "boot", "logon autostart", "ex t1547", "checks-disk-space", "checks-network-adapters", "detect-debug-environment", "direct-cpu-clock-access", "long-sleeps", "runtime-modules", "get http", "head http", "dns resolutions", "ip traffic", "53 tcp", "tls sni", "apple id", "webdisk", "expiration", "url http", "hostname", "no expiration", "iocs", "url https", "es included", "win32 exe", "pe32 executable", "ms windows", "intel", "ms visual", "win32 dynamic", "link library", "win16 ne", "learn", "ck id", "name tactics", "suspicious", "informative", "adversaries", "spawns", "t1204 user", "defense evasion", "over", "mitre att", "ck matrix", "ascii text", "hybrid", "general", "local", "path", "click", "strings", "javascript", "ssl certificate", "encrypt", "accept", "russia unknown", "meta", "record value", "aaaa", "link", "present jun", "apple", "remote access", "otx logo", "all ipv4", "url analysis", "files", "accept ch", "present dec", "content type", "x pcrew", "name servers", "present may", "body doctype", "title", "all domain", "servers", "china unknown", "found content", "gmt p3p", "cp oti", "dsp cor", "iva our", "ind com", "domain", "cname", "entries", "brian sabey", "hallrender", "christopher ahmann", "t1480 execution", "discovery att", "heur", "virtool", "win64", "mtb win32", "backdoor", "location china", "hangzhou", "china asn", "ransom", "wannadecryptor", "filehash", "yara detections", "msvisualcpp60", "related tags", "none file", "type pexe", "copy", "beginstring", "null", "refresh", "body", "span", "error", "tools", "look", "verify", "restart", "expl", "unknown cname", "hacktool", "domain address", "contacted hosts", "process details", "flag", "ipv4 add", "location united", "america flag", "exploit", "show", "all filehash", "expiration date", "gmt location", "gmt max", "domain add", "elite", "date", "cowboy", "United States", "present feb", "present oct", "creation date", "present nov", "moved", "emails" ], "references": [ "http://ww17.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com/", "Win32:CVE-2017-0147-B\\ [Expl] , Win.Ransomware.WannaCry-6313787-0 , Exploit:Win32/CVE-2017-0147.A", "IDS Detections: Observed WannaCry Domain (iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff .com in DNS Lookup)", "IDS Detections: Possible ETERNALBLUE Probe MS17-010 (MSF style) ETERNALBLUE Probe Vulnerable System Response MS17-010", "IDS Detections: Possible ETERNALBLUE Probe MS17-010 (Generic Flags)", "IDS Detections: Behavioral Unusual Port 445 traffic Potential Scan or Infection SMB-DS", "IDS Detections: IPC$ share access \u2022 SMB-DS IPC$ unicode share access \u2022 403 Forbidden", "Yara Detections: WannaCry_Ransomware , Wanna_Cry_Ransomware_Generic , WannaDecryptor", "Yara Detections: MS17_010_WanaCry_worm , stack_string , MS_Visual_Cpp_6_0 , Armadillov1xxv2xx", "Alerts: network_icmp nolookup_communication persistence_autorun modifies_proxy_wpad", "Alerts: network_cnc_http network_http allocates_rwx creates_exe creates_hidden_file", "Alerts: creates_service stealth_window antivm_network_adapters checks_debugger", "Alerts: peid_packer pe_unknown_resource_name", "IP\u2019s Contacted: 103.224.212.220 105.242.60.208 117.13.61.219 117.180.208.83 12.105.46.122", "IP\u2019s Contacted: 121.105.233.189 128.251.173.246 13.248.148.254 132.124.155.52 139.246.30.108", "Domains Contacted: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com", "Domains Contacted: ww38.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com", "FileHash-SHA256 002dee2db8b07b98b543ad99d0dd4e3e0ba7624f956d719ba803f57b426e30e7", "Names: Photo.scr \u2022 85115B0142902832C864B3009CAB1A00.RS (names of FileHash above)", "Crowdsourced IDS: Matches rule MALWARE-CNC DNS", "Crowdsourced IDS: Fast Flux attempt Matches rule ET INFO EXE IsDebuggerPresent (Used in Malware Anti-Debugging)", "Crowdsourced IDS: Matches rule ET POLICY PE EXE or DLL Windows file download HTTP", "apple.com-index.php-account-locked-verification.test2.aptaforum.com.cn", "apple.com-verify.account.manage.test2.aptaforum.com.cn", "appleid.apple.com-signin-8491e.test2.aptaforum.com.cn", "appleid.apple.com.secure1account.pagelogin.test2.aptaforum.com.cn", "web-secure-appleid-login.com.test2.aptaforum.com.cn", "http://apple.com-verify.account.manage.test2.aptaforum.com.cn/", "http://appleid.apple.com-signin-8491e.test2.aptaforum.com.cn/", "http://apple.sweetycat.com/ \u2022 https://apple.sweetycat.com/", "findmy.apple-uk.live", "apple.haipaoapp.com \u2022 http://apple.haipaoapp.com \u2022 http://apple.haipaoapp.com/ \u2022 https://apple.haipaoapp.com/", "http://apple.com-index.php-account-locked-verification.test2.aptaforum.com.cn/", "http://appleid.apple.com.secure1account.pagelogin.test2.aptaforum.com.cn/", "http://web-secure-appleid-login.com.test2.aptaforum.com.cn/", "Trojan/JS.Redirector.QNO SHA256:9e6e93c05a9736b95426fe0f492a18a2ac409bd9fb572dd3c982cb6de3ba0dbc", "VO7MU1HA.htm : https://hybrid-analysis.com/sample/9e6e93c05a9736b95426fe0f492a18a2ac409bd9fb572dd3c982cb6de3ba0dbc", "https://hybrid-analysis.com/sample/a638ece11c81bcac0002363eb3f75de35a46ce0e080b5de41162093181079a6b/69c018efcb875e4fb30cdfcc", "https://hybrid-analysis.com/sample/09610b7c855ef132a31f2e0136b4d62b9dbb04c6fcb42160d6d8409ef6394e40/69c0189c5e0483a78907cc39", "KeenDNS | keendnsaclremote805717135272048.qeenetic.link", "https://fonts.googleapis.com/css", "http://e7.c.lencr.org/74.crl \u2022 http://e7.i.lencr.org/", "Quasi Gov - Law firms stole victims clouds. Evidence, $Intellectual property, Memories of & victims family. Merciless", "www.remoteaccess.allied-media.com", "apple.com-index.php-account-locked-verification.test2.aptaforum.com.cn", "aptaforum.com.cn 182.61.201.90 , 182.61.201.91 China ASN AS38365 beijing baidu netcom science and technology co. ltd", "Emails:yejun.shou@yxips.com Name:\u7ebd\u8fea\u5e0c\u4e9a\u751f\u547d\u65e9\u671f\u8425\u517b\u54c1\u7ba1\u7406(\u4e0a\u6d77)\u6709\u9650\u516c\u53f8 Name Servers: dns17.hichina.com", "*unsigned Domain: aptaforum.com.cn Name Servers: dns18.hichina.com Registrar: \u963f\u91cc\u4e91\u8ba1\u7b97\u6709\u9650\u516c\u53f8\uff08\u4e07\u7f51\uff09Status: ok", "dns17.hichina.com", "dropbox.com - deleted victims DB post assault. Sabey + Ahmann repeatedly erased DB (ILLEGAL)", "Protected:SA\u2019r Jeffrey Scott Reimer, Mark Montano MD, John T. Sasha MD, Frederick P. Scherr , others.", "https://otx.alienvault.com/indicator/domain/qeenetic.link", "okg.and.googletagmanagers.com", "pcy.and.googletagmanagers.com", "pgj.and.googletagmanagers.com", "prb.and.googletagmanagers.com", "lkp.and.googletagmanagers.com", "jgw.and.googletagmanagers.com", "bzx.and.googletagmanagers.com", "msedge.b.tlu.dl.delivery.mp.microsoft.com", "http://prtests.ru/test.html?15%0Ahttp://profetest.ru/test.html?2%0Ahttp://qptest.ru/test.html?5%0Ahttp://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/3cf71a18-f999-4372-beac-67715d51bb62?P1=1629470400&P2=404&P3=2&P4=d%2520arRdiatcalmlQRKq2gm1LlFitNgIcLpnyzCIHYtf%2520ByXQF0JNptZ0rBDMKlLL%2520qsOzZdPICJjC7MWkkdm1Hg==%0Ahttp://stafftest.ru/test.html?0%0Ahttp://iqtesti.ru/test.html?17%0Ahttp://hrtests.ru/test.html?1%0Ahttp://pstests.ru/test.html?4%0Ahttp://prtests.ru/test.html?6%0Ahttp:/", "HallRender.com | Law Firm M. Brian Sabey Esq. | Pegasus related", "TAM Legal\u2019s Christopher P. \u2018Buzz\u2019 Ahmann Esq works for State Quasi Government in tandem w/ Hall Render", "https://otx.alienvault.com/pulse/69bf8e2663d5480917ddb699", "https://otx.alienvault.com/pulse/69bf261cc4e399447d78776c", "https://otx.alienvault.com/pulse/69bea426487bffa5384c6f38", "(?) https://living-sun.com/applescript/68281-is-there-a-way-to-disable-force-quit-while-applescript-application-is-still-running-applescript-quit.html", "https://otx.alienvault.com/pulse/69bf261cc4e399447d78776c", "https://otx.alienvault.com/pulse/69b49ad5dd40a24d83cd6a72" ], "public": 1, "adversary": "", "targeted_countries": [ "United States of America" ], "malware_families": [ { "id": "Ransomware", "display_name": "Ransomware", "target": null }, { "id": "Win.Ransomware.WannaCry-6313787-0", "display_name": "Win.Ransomware.WannaCry-6313787-0", "target": null }, { "id": "Exploit:Win32/CVE-2017-0147.A", "display_name": "Exploit:Win32/CVE-2017-0147.A", "target": "/malware/Exploit:Win32/CVE-2017-0147.A" }, { "id": "Trojan/JS.Redirector.QNO", "display_name": "Trojan/JS.Redirector.QNO", "target": null }, { "id": "Win.Trojan.Application-1955.", "display_name": "Win.Trojan.Application-1955.", "target": null }, { "id": "Win32:Banker-LAA\\ [Trj]", "display_name": "Win32:Banker-LAA\\ [Trj]", "target": null }, { "id": "Win.Malware.Snojan-6775202-0", "display_name": "Win.Malware.Snojan-6775202-0", "target": null }, { "id": "Win32:Evo-gen\\ [Trj]", "display_name": "Win32:Evo-gen\\ [Trj]", "target": null }, { "id": "Win64:Expiro-AJ\\ [Inf]", "display_name": "Win64:Expiro-AJ\\ [Inf]", "target": null }, { "id": "Win.Trojan.Fugrafa-9733007-0", "display_name": "Win.Trojan.Fugrafa-9733007-0", "target": null }, { "id": "Win32:TrojanX-gen\\ [Trj]", "display_name": "Win32:TrojanX-gen\\ [Trj]", "target": null }, { "id": "Win.Trojan.VBGeneric-6989114-0", "display_name": "Win.Trojan.VBGeneric-6989114-0", "target": null }, { "id": "VirTool:Win32/VBInject.YA!MTB", "display_name": "VirTool:Win32/VBInject.YA!MTB", "target": "/malware/VirTool:Win32/VBInject.YA!MTB" }, { "id": "Win32:Dh-A\\ [Win32:FileInfector-C\\ [Heur]", "display_name": "Win32:Dh-A\\ [Win32:FileInfector-C\\ [Heur]", "target": null }, { "id": "#VirTool:Win32/Obfuscator", "display_name": "#VirTool:Win32/Obfuscator", "target": "/malware/#VirTool:Win32/Obfuscator" }, { "id": "Backdoor:Win32/Small.IR", "display_name": "Backdoor:Win32/Small.IR", "target": "/malware/Backdoor:Win32/Small.IR" }, { "id": "Win64:Expiro-AJ\\ [Inf]", "display_name": "Win64:Expiro-AJ\\ [Inf]", "target": null }, { "id": "Win32:Dh-A\\", "display_name": "Win32:Dh-A\\", "target": null }, { "id": "CVE-2017-0147", "display_name": "CVE-2017-0147", "target": null }, { "id": "Ransom:Win32/CVE-2017-0147.A", "display_name": "Ransom:Win32/CVE-2017-0147.A", "target": "/malware/Ransom:Win32/CVE-2017-0147.A" }, { "id": "Win32:Malware-gen", "display_name": "Win32:Malware-gen", "target": null }, { "id": "Win.Malware.Flystudio-6738927-0", "display_name": "Win.Malware.Flystudio-6738927-0", "target": null }, { "id": "ALF:SpikeAexR.PEVPOPC", "display_name": "ALF:SpikeAexR.PEVPOPC", "target": null }, { "id": "Sf:WNCryLdr-A\\ [Trj]", "display_name": "Sf:WNCryLdr-A\\ [Trj]", "target": null }, { "id": "Win.Ransomware.WannaCry-6313787-0", "display_name": "Win.Ransomware.WannaCry-6313787-0", "target": null }, { "id": "ransom:Win32/WannaCrypt.H", "display_name": "ransom:Win32/WannaCrypt.H", "target": "/malware/ransom:Win32/WannaCrypt.H" } ], "attack_ids": [ { "id": "T1031", "name": "Modify Existing Service", "display_name": "T1031 - Modify Existing Service" }, { "id": "T1040", "name": "Network Sniffing", "display_name": "T1040 - Network Sniffing" }, { "id": "T1045", "name": "Software Packing", "display_name": "T1045 - Software Packing" }, { "id": "T1053", "name": "Scheduled Task/Job", "display_name": "T1053 - Scheduled Task/Job" }, { "id": "T1060", "name": "Registry Run Keys / Startup Folder", "display_name": "T1060 - Registry Run Keys / Startup Folder" }, { "id": "T1129", "name": "Shared Modules", "display_name": "T1129 - Shared Modules" }, { "id": "T1143", "name": "Hidden Window", "display_name": "T1143 - Hidden Window" }, { "id": "T1158", "name": "Hidden Files and Directories", "display_name": "T1158 - Hidden Files and Directories" }, { "id": "T1198", "name": "SIP and Trust Provider Hijacking", "display_name": "T1198 - SIP and Trust Provider Hijacking" }, { "id": "T1140", "name": "Deobfuscate/Decode Files or Information", "display_name": "T1140 - Deobfuscate/Decode Files or Information" }, { "id": "T1059", "name": "Command and Scripting Interpreter", "display_name": "T1059 - Command and Scripting Interpreter" }, { "id": "T1203", "name": "Exploitation for Client Execution", "display_name": "T1203 - Exploitation for Client Execution" }, { "id": "T1543", "name": "Create or Modify System Process", "display_name": "T1543 - Create or Modify System Process" }, { "id": "T1547", "name": "Boot or Logon Autostart Execution", "display_name": "T1547 - Boot or Logon Autostart Execution" }, { "id": "T1574", "name": "Hijack Execution Flow", "display_name": "T1574 - Hijack Execution Flow" }, { "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "display_name": "T1048 - Exfiltration Over Alternative Protocol" }, { "id": "T1057", "name": "Process Discovery", "display_name": "T1057 - Process Discovery" }, { "id": "T1069", "name": "Permission Groups Discovery", "display_name": "T1069 - Permission Groups Discovery" }, { "id": "T1071", "name": "Application Layer Protocol", "display_name": "T1071 - Application Layer Protocol" }, { "id": "T1105", "name": "Ingress Tool Transfer", "display_name": "T1105 - Ingress Tool Transfer" }, { "id": "T1204", "name": "User Execution", "display_name": "T1204 - User Execution" }, { "id": "T1480", "name": "Execution Guardrails", "display_name": "T1480 - Execution Guardrails" }, { "id": "T1568", "name": "Dynamic Resolution", "display_name": "T1568 - Dynamic Resolution" }, { "id": "T1069.002", "name": "Domain Groups", "display_name": "T1069.002 - Domain Groups" }, { "id": "T1568.002", "name": "Domain Generation Algorithms", "display_name": "T1568.002 - Domain Generation Algorithms" }, { "id": "T1071.001", "name": "Web Protocols", "display_name": "T1071.001 - Web Protocols" }, { "id": "T1071.004", "name": "DNS", "display_name": "T1071.004 - DNS" }, { "id": "T1048.003", "name": "Exfiltration Over Unencrypted/Obfuscated Non-C2 Protocol", "display_name": "T1048.003 - Exfiltration Over Unencrypted/Obfuscated Non-C2 Protocol" }, { "id": "T1189", "name": "Drive-by Compromise", "display_name": "T1189 - Drive-by Compromise" }, { "id": "T1553", "name": "Subvert Trust Controls", "display_name": "T1553 - Subvert Trust Controls" }, { "id": "T1583", "name": "Acquire Infrastructure", "display_name": "T1583 - Acquire Infrastructure" }, { "id": "T1543.001", "name": "Launch Agent", "display_name": "T1543.001 - Launch Agent" }, { "id": "T1210", "name": "Exploitation of Remote Services", "display_name": "T1210 - Exploitation of Remote Services" }, { "id": "T1022", "name": "Data Encrypted", "display_name": "T1022 - Data Encrypted" } ], "industries": [ "Government", "Legal", "Technology", "Healthcare" ], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 2, "follower_count": 0, "vote": 0, "author": { "username": "Q.Vashti", "id": "337942", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 3779, "FileHash-MD5": 422, "FileHash-SHA1": 411, "FileHash-SHA256": 1824, "domain": 979, "hostname": 2082, "CVE": 1, "BitcoinAddress": 3, "SSLCertFingerprint": 6, "email": 8 }, "indicator_count": 9515, "is_author": false, "is_subscribing": null, "subscriber_count": 143, "modified_text": "40 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68ddf5bda001ff2f840c20e7", "name": "Mofksys - Originated from an X.com image", "description": "Mofksys - Originated from an X.com image Clicked on image to expand. Image coded. IUQERFSODP9IFJAPOSDFJHGOSURIJFAEWRWERGWFF.COM - Seen before. Associated with Pegasus in the past. \n\n#wannacry #wannacrypt #ransomware #phishing #other_malware_packed#cabby#driveby #milesmx #keystrokes #record #screencapture #mofksys #remote access #fullaccess #code -#botnet #deadhost #otx_pulsed #hilo:", "modified": "2025-11-01T03:03:51.684000", "created": "2025-10-02T03:47:09.092000", "tags": [ "url http", "url https", "h oct", "united", "netherlands", "present apr", "passive dns", "ip address", "present jul", "domain add", "pulse pulses", "urls", "files", "trojan", "entries", "next associated", "mtb nov", "ipv4 add", "overview domain", "files ip", "address", "location united", "asn asnone", "whois registrar", "mtb apr", "files show", "date hash", "avast avg" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 7, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Q.Vashti", "id": "337942", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 3888, "domain": 1009, "hostname": 2134, "FileHash-SHA256": 2150, "CVE": 1, "FileHash-MD5": 106, "FileHash-SHA1": 107 }, "indicator_count": 9395, "is_author": false, "is_subscribing": null, "subscriber_count": 149, "modified_text": "212 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6665315e25f9dd42a99e4f2f", "name": "UAlberta Alfresco Management Software Abuse -> Admin/Backdoor Edmonton Police Services", "description": "Just pulled down what was in my employee profile (I don't work there).\nDiscovered after being directed to some management system (unknown at the time).\nPulled down and scanned: 1bf054bded99e2ae414154593d0892066b2e0c7add603f9321e157c77ae52075", "modified": "2025-10-10T19:03:58.376000", "created": "2024-06-09T04:36:46.536000", "tags": [ "note", "home", "lucene paths", "json descriptor", "lucene path", "company home", "actividades", "pageuser", "sie knnen", "sie auf", "link klicken", "recente", "u kunt", "attivit", "possibile", "activits", "vous", "report", "web link", "cvs report", "link", "chs placement", "chs student", "placement", "team", "google form", "university", "alberta", "automation", "please", "following", "followers", "ihnen", "mitarbeitern", "mitarbeiter", "hello", "foreign visitor", "fvca", "human resource", "fvca assessment", "incomplete", "regards", "klik", "wachtwoord", "mijn profiel", "klik op", "hoogachtend", "alfresco", "bonjour", "cliquez sur", "nous", "pour ce", "mon profil", "changer", "invito", "caro", "fare", "password", "il mio", "cambia password", "per rifiutare", "cordiali saluti", "my profile", "change password", "konto", "sie erstellt", "passwort", "wir legen", "ihnen nahe", "passwort bei", "anmeldung zu", "ndern", "gehen sie", "mmm yyyy", "nome utente", "nombre", "contrasea", "para hacerlo", "mi perfil", "atentamente", "account", "alfresco share", "hola", "haga", "los datos", "y seleccione", "si desea", "click", "einladung von", "hallo", "sie eingeladen", "site", "klicken sie", "konto fr", "alfresco client", "kofax index", "inhaltselement", "zur site", "gren alfresco", "pledged gift", "office", "advancement", "datetime", "university vpn", "date", "shared", "support", "auxiliary", "process", "priority", "medium high", "pay action", "sincerely", "uofa ecm", "link um", "aufgaben stehen", "verfgung", "prioritt", "niedrig mittel", "hoch", "klicken", "aufgabe zu", "il seguente", "disponibile", "priorit", "bassa media", "alta", "clicca", "clicca su", "la tche", "tre rcupre", "basse moyenne", "leve", "cliquez", "cordialement", "prioriteit", "laag gemiddeld", "hoog", "la siguiente", "prioridad", "media alta", "saludos", "kb content", "links content", "content url", "download url", "webdav url", "ttulo", "descripcin", "ninguno", "ninguna", "creador", "creado", "modificador", "modificado", "tamao", "webdav", "titre", "aucun", "aucune", "modificateur", "modifi", "taille", "ko liens", "du contenu", "dossier du", "url webdav", "titolo", "nessuno", "nessuna", "creato", "modificato", "dimensioni", "kb link", "al contenuto", "cartella", "ingen", "beskrivelse", "tittel", "opprettet", "modifikator", "modifisert", "strrelse", "lenker for", "innhold mappe", "descrio", "nome", "nenhum", "nenhuma", "criador", "criado", "tamanho", "geen", "beschrijving", "titel", "maker", "gemaakt", "gewijzigd", "grootte", "contenturl", "downloadurl", "beschreibung", "url zum", "keiner", "keine", "ersteller", "erstellt", "bearbeiter", "gendert", "kb links", "download", "navigatebrowse", "pagesite", "readme file", "yesno", "user name", "main", "function", "log debug", "record", "sample rm", "import", "njson", "forms", "sites", "documenttype", "commonfolder", "error", "value", "jsonfile", "service", "false", "moving", "prop", "null", "bearer", "uappol", "uappol function", "contentid", "param", "id var", "call", "post request", "json", "config", "coveo", "uappol metadata", "content id", "and not", "loads", "update", "uploader", "inbox", "rnrn", "create", "contenteml", "inbox folder", "number", "normal", "textpart", "backup", "createchildren", "backupname", "childlist", "name", "content", "array", "write", "childname2", "childname3", "childname4", "reviewgroup", "groupsite", "starting", "started", "delete email", "command", "found", "create content", "resources", "unknown command", "globals", "var title", "rnrncopyright", "copyright", "csvtoarray", "regexp", "jsonstr", "daily", "review", "az09", "format", "hrsfilescanner", "hrs document", "fromscanner", "not type", "matches1", "employee id", "third", "tempfilename", "ldap", "version", "this", "file share", "folder", "trimlr", "namearr", "personid", "document name", "ales file", "scanned", "shared drive", "last", "document type", "document", "advising notes", "debug", "debugstr", "schedule", "descriptorpath", "web service", "inbound rule", "web services", "collaborator", "groupeveryone", "check", "index", "taskassignee", "taskenddate", "filename", "localisotime", "startdatetime", "timeperiod", "uofa edrms", "author", "descommonnode", "nomatch", "iddocumenttype", "siteid", "span", "path", "term", "core", "cap report", "template", "object", "cap mail", "dev testing", "application", "aps status", "cap generate", "monthly report", "extension", "alfresco locale", "september", "pm mdt", "school", "didx", "json response", "cap final", "rebcapiddict", "finalcapiddict", "aps process", "trigger", "chsdocument", "message", "func", "msgstr", "emailobj", "emailtemplate", "emailsubject", "sitepath", "chs docs", "studentfiles", "faculty", "true", "chssiteid", "type", "aspect", "chsdocs", "nodeidx", "find", "expired", "chs school", "defunc", "facultykey", "program", "spasite", "ldapperson", "parent name", "securitytype", "formsengg", "limit", "enggfilescanner", "stuccid", "csv file", "studdept", "supccid", "supdept", "cosupccid", "relocation", "fgsr", "records site", "fgsr doc", "department", "start fgsr", "department doc", "completion of", "oral hlth", "form", "application for", "report of", "admission", "master", "music", "unknown", "comp", "class", "leave", "supervisor", "currentline", "return", "studentid", "superccid", "revdate", "code", "apstaskproperty", "converttocsv", "aps guideline", "aps task", "newdata", "hyperlink", "certificate", "first", "info", "procid", "filecontentstr", "query sort", "create header", "person id", "subject title", "node", "studentccid", "yyyymmdd", "lookupjson", "propidx", "input date", "iso format", "folder level", "query", "duedate", "test java", "dailyschedule", "upload", "ro adm", "workflow", "offset", "adm workflow", "data length", "startindex", "json object", "aps group", "acs site", "user", "getgroupid", "am mst", "acsaps group", "user sync", "january", "start january", "february", "start february", "december", "start december", "march", "start march", "am mdt", "consumer march", "aps student", "april", "start april", "june", "start june", "pm mst", "ro backscan", "edrmsteam", "group", "group december", "aps ro", "copy file", "aps api", "maxfile", "creator", "rand", "hrsbs", "july", "august", "hrsbssyncccids", "zhrroleuserresp", "edrms", "ccids", "prefix", "createdirectory", "directory", "actionreason", "safefilename", "employeeclass", "carry", "csv data", "host", "bachelor", "college level", "mike", "propname", "maxitems", "currjson", "fvca status", "important", "prod", "manual data", "doctoratephd", "medicine", "nodename", "employeeccid", "managerccid", "employeeid", "workingtitle", "regtempdescr", "findkey", "email", "new document", "doctypelabel", "competitive bid", "bid exception", "pcm competitive", "and aspect", "competitive", "nodes", "bid update", "acommonfolder", "formspcm", "peoplesoft", "no data", "qaselectednode", "qaselected", "qanotselected", "qa folder", "preqa", "qa var", "documentcount", "passcount", "qadocument", "qa selected", "moved", "attempts", "accepted", "rm file", "plan", "rm filing", "min to", "rm system", "batch", "time limit", "rmcfg", "string", "already", "load", "valid", "graddate", "uathdep", "ccid", "title", "abstract", "embargo", "datestr", "searchresult", "alfresco afa", "admissions", "student case", "files", "and type", "institution", "inst", "json config", "institution not", "if file", "logger", "needle", "xmlstr", "staus", "document linkn", "getlogfile", "documentlist", "xml field", "not found", "addaspect", "move aspect", "duplicate file", "makes", "to max", "checks", "workflow name", "workflow link", "emplid", "due daten", "total afa", "not path", "afabundling", "change", "not aspect", "logs", "ephesoft", "document moved", "epehsoft", "xmlsourcenode", "batchsize", "filemappingpdf", "entry", "move file", "getcsvfile", "batchprocess", "logging", "completed", "document link", "groupn", "created date", "stdapl", "person", "workflow desc", "json file", "list", "lastmonth", "daily qa", "default", "qastartdate", "query language", "finished", "afa bundle", "transcriptarr", "lucene query", "qacounter", "rrfgroupname", "uaroemplid", "uaropriority", "uaroduedate", "documentlistarr", "uarmm", "profile", "courseauditform", "status", "jile", "searchmatchmove", "logfoldername", "backscanreview", "smfstr", "rosm", "converter", "shortxml", "failedcsvfolder", "xml file", "qaoperatorindex", "qaoperatorlabel", "script", "suresh", "aws promotion", "file", "tasks", "bundlingprop", "tasktype", "grps2", "uarotasktype", "comments", "test", "ro scripts", "xmlnode", "shortdescr", "xmlcont", "firstname", "orgid", "middlename", "lastname", "middle", "final", "script started", "to now", "received date", "first name", "receiveddatestr", "dateofbirthstr", "getdefination", "2005 aug", "dropbox", "foldercreate", "scan doc", "officiality", "search match", "running script", "materialextid", "studentref", "ceeb", "materialcode", "memo", "jsoncontent", "ro document", "paperfileutils", "afaconfig", "ro workflow", "paperfileconfig", "applicationjson", "formsrso", "targetfile", "property name", "pinames today", "addp", "science addp", "addp move", "ro code", "scifilescanner", "desconfnode", "grabnodeprop", "copy", "consumer", "initiators", "hiring", "consigno", "offer letter", "match", "apsmaster", "match2", "reappointment", "expiry date", "today", "finaldate", "task info", "psperson", "complete basic", "hiring info", "employee", "resultdata", "delegategroup", "delegate group", "verify", "bind", "aps appointment", "trevor report", "sfsussl", "drawdown", "refund", "reporttype", "var document", "shareurl", "newgroup", "parentgrp", "group created", "var logfile", "rule folder", "site running", "report on", "get site", "foldername", "create file", "reportlogslogs", "reportlogs", "ist site", "running report", "count", "tran", "var csvfile", "result length", "processid", "process id", "delimiters", "quoted", "standard", "starting name", "morechildren", "pdf var", "length", "newname", "fiscal", "docnamearr", "filenode", "calendar year", "versionhistory", "new doc", "web deployed", "var startdate", "startdate", "maxcount", "prevmonth", "monthcount", "application id", "delete", "get path", "if node", "search length", "arra y", "if csv", "version history", "graduate", "graduate folder", "children", "graduate file", "searchmatchdob", "career", "appl nbr", "jan04 now", "counter", "thesis", "runyear", "spring", "service log", "everything", "this determine", "thesis deposit", "archival", "problem", "filepath", "md import", "arraytocsv", "found document", "start", "food", "yumna", "start kofax", "kofax", "admin", "subject", "sample email", "execute", "koafx", "apasresponseid", "merge", "recruitment", "transcripts", "review request", "admindate", "requesteddate", "approveddate", "approvereject", "getemailbody", "taskid", "sendemail", "request status", "siteconsumer", "sitemanager", "eval", "acshost", "global env", "config file", "apsprod", "params", "alloc", "checkpath", "newpath", "adding entity", "surnamechar", "adding person", "jsonfunction", "text", "syntaxerror", "arraytoxml", "xml related", "change xml", "xmltoarray", "xmlutil", "common folder", "random2digit", "maxlimit", "jsonarchive", "very", "returns", "sitecontext", "arrcounter", "node id", "items", "array length", "therecord", "award sponsor", "rso project", "res0012345", "iso88591", "util function", "project id", "proposal id", "doc name", "newdocname", "prod url", "199899", "property", "typeprop", "barcode", "accepts", "parent", "xmlfilename", "siteconfigjson", "qabatchgrp", "signeddate", "ephdocumenttype", "json document", "qapercentage", "entity", "broker", "add error", "getexecutetime", "qaoperator", "retain title", "idnumber", "assocname", "metaarr", "fund report", "csvcontent", "input folder", "doc00c200004txg", "xmlfile", "node1", "node2", "540am", "240pm", "metadata", "var folder", "filter", "mappedobj", "09azaz", "conditionval", "foldercondition", "file name", "xmlfileobj", "alfresco prop", "setup error", "formatjson", "id property", "move", "getrandomnumber", "result", "newdoctype", "no title", "clioacs update", "clio", "patch", "system overview", "system", "overview", "purpose", "aims", "objectives", "prerequisites", "total", "expected effort", "domain", "urls", "dept param", "department name", "done", "submit form", "saving", "label", "input", "approvers", "information", "user group", "request", "group request", "users", "single family", "edmonton ab", "coverage", "common law", "step workflow", "care", "dental benefits", "direct", "web scripts", "get http", "documentation", "web script", "http method", "http", "apis", "development", "knowledge", "java", "empty argument", "e1234", "im system", "lookupentity", "configfilename", "namespace", "searchterm", "access", "jsonuser", "alfresco search", "page search", "expires", "signer", "reason", "utf8", "stripcharacter", "pull hiring", "getapsdbid", "save", "processsetidset", "saved", "returndata", "boolean", "start building", "varname", "fill", "time click", "initiated all", "submissions", "all submissions", "process landing", "page", "initiators all", "maps initiated", "post doc", "student term", "start form", "middle name", "email address", "retype", "cell", "phone no", "fellow", "secureorigin", "expand", "thank", "here", "please check", "aps list", "pang", "subset", "display", "args", "task", "username", "save form", "data need", "cdkey", "checkdict", "item", "column", "anchor", "multi", "tasks filter", "search", "trigger aps", "process api", "apsprocess", "authentication", "webscript", "getapsperson", "process info", "initsavestatus", "step0statusfail", "signer1", "signer2", "appointment", "taskjson", "groupapiaccess", "checkapiuser", "fgsrpr", "psaudit", "statusname", "unsuccessful1", "apptreappt", "emplobject", "caps aps", "cap epsb", "applicant", "form submitted", "board review", "form applicant", "school district", "start date", "cap application", "home help", "pdfa format", "larger", "upload file", "please click", "uofacap", "applications", "jstr", "processjson", "invalid url", "associate dean", "edmonton public", "october", "elk island", "reutrn false", "mapdoctypeurl", "doctype", "cap document", "doctypes", "doctypemap", "schools", "public schools", "foip", "edmonton area", "epsb", "capid", "server", "aps user", "groupcapadmin", "assignuser", "cap ea", "successfully", "please wait", "successfully ea", "apsservice", "apsserviceprod", "requireddate", "bibliography", "reb approval", "letter", "cprbls", "ahsrespect", "ahscon", "immformdocs", "picvsc", "whmis", "condissi", "hspnet", "conphoto", "conclin", "college", "health", "submission date", "effective date", "expiration date", "chs admin", "student view", "typekey", "placementdocs", "warning", "jobj", "abraniuk", "wendy", "terry harris", "directorhrsbs", "level", "holiday pay", "part time", "payroll", "salariedreg aux", "cheat", "paramname", "getallurlparams", "hrsbs config", "data dictionary", "field", "responsejson", "workflowid", "workflow id", "context", "event", "statusevent", "uaesign", "success", "permission", "progress report", "postdoctoral", "sorry", "deptjson", "fgsr student", "process status", "select", "currentuser", "reports", "student ccid", "populated", "invalid student", "supervisor ccid", "co supervisor", "due date", "freedom", "report process", "fgsr forms", "list fgsr", "report fgsr", "report sorry", "review process", "fgsr supervisor", "thesis programs", "programs", "please enter", "student id", "submit button", "var taskid", "var currentuser", "review sorry", "raheel", "added", "urlorigin", "need", "raheel var", "elmid", "commentkeyarr", "override", "menu", "colour bar", "mdphd", "absence", "completion", "mbameng", "mbamsc", "meng", "jason", "acs property", "available", "subdoctype", "test person", "test effective", "modelnodepath", "sitename", "metadatamap", "sitefile", "google addon", "gtagra", "gta gra", "zhreformengresp", "id otherwise", "university home", "indicate", "monday", "tuesday", "wednesday", "thursday", "friday", "na note", "services", "please contact", "documentname", "time", "docs", "documentlink", "employee ccid", "conflict", "task assigned", "ist coi", "declaration", "jsonobj3", "parse", "stringify", "grouplist", "json post", "taskfilter", "applies", "assigntogroup", "retrieves", "assignee", "queries", "expects", "uri args", "json containing", "applyfilter", "assignment", "avm folder", "avm store", "store id", "fullpath", "store", "storeid", "avm stores", "search term", "blog query", "category", "api call", "returns json", "cached data", "keylabel", "rest", "ldap query", "resultstr", "jsonoutput", "campusid", "jsonobj", "suresh joshee", "raheel bhojani", "desrochers", "first check", "set message", "materialkey", "acommonfolderid", "hasaccess", "siteconfig", "unprocesseddata", "savemetadata", "getcustomscript", "sitetitle", "error occured", "afa admission", "afas", "change log", "date name", "description", "ebeaton script", "tfrith", "afa main", "runasuser", "afas name", "afa paper", "file test", "utility enter", "does", "student", "bad query", "parameters", "add all", "or condition", "batch ids", "case files", "batchid", "afns", "agricultural", "anaesthes", "life", "environmental", "anaesthesiology", "uappol content", "deanaheed", "programyear", "province", "agreementtype", "safety manual", "mtis", "cree", "blackfoot", "nakota sioux", "iroquois", "dene", "treaties", "first nations", "next", "refresh", "site viewer", "facetkey", "sortparameter", "textjavascript", "public site", "viewer access", "acs cron", "job error", "alfrescos", "unauthorized", "enter", "bear tracks", "main department", "choose", "library", "john", "reviewer", "embargodate", "actiondate", "convocation", "graduation", "nodeid", "thesis status", "match result", "match list", "name dob", "view", "searchcriteria", "main function", "method", "chs upload", "stuln", "filetype", "stuid", "chs agreement", "health sciences", "recreation fomd", "dentistry fomd", "fomd", "therapy fomd", "consent for", "disclosure of", "alberta freedom", "protection", "privacy act", "alberta health", "chs form", "intake", "tasks dashlet", "doccd", "val2", "a my", "view error", "view warning", "keyword search", "refresh list" ], "references": [ "old-AlfrescoToolkit.conf", "AlfrescoToolkit.info", "AlfrescoToolkit.conf", "activities-email_es.ftl", "activities-email_ja.ftl", "activities-email_de.ftl", "activities-email_nl.ftl", "activities-email.ftl", "activities-email_it.ftl", "activities-email_fr.ftl", "CAP-notify-monthly-report.ftl", "chs-commentUpdate.ftl", "chs-studentUploadNotification.ftl", "chs-Invalid.ftl", "chs-studentExpireSoon.ftl", "chs-studentExpired.ftl", "following-email.html_it.ftl", "following-email.html_fr.ftl", "following-email.html_ja.ftl", "following-email.html_nl.ftl", "following-email_de.html.ftl", "following-email_fr.html.ftl", "following-email_ja.html.ftl", "following-email_it.html.ftl", "following-email_nl.html.ftl", "following-email.html.ftl", "following-email.html_de.ftl", "fvca-reminder-email.ftl", "fvca-corrections-email.ftl", "invite-email_nl.html.ftl", "invite-email-add-direct.html.ftl", "invite-email-add-direct.html_fr.ftl", "invite-email_fr.html.ftl", "invite-email_it.html.ftl", "invite-email-add-direct.html_es.ftl", "invite-email-add-direct.html_de.ftl", "invite-email_ja.html.ftl", "invite-email-add-direct.html_nl.ftl", "new-user-email.html.ftl", "new-user-email_de.html.ftl", "invite-email-add-direct.html_ja.ftl", "invite-email-moderated.html.ftl", "new-user-email_fr.html.ftl", "new-user-email_it.html.ftl", "new-user-email_ja.html.ftl", "new-user-email_es.html.ftl", "new-user-email_nl.html.ftl", "invite-email-add-direct.html_it.ftl", "new-user-email_nl.html", "invite-email.html_nl.ftl", "invite-email.ftl", "invite-email_es.html.ftl", "invite-email.html.ftl", "invite-email_de.html.ftl", "invite_user_email.ftl", "kofaxFailedEmailTemplate.ftl", "notify_user_email.ftl", "notify_nl.htm", "notify_user_email_es.html.ftl", "notify_user_email_de.html.ftl", "notify_user_email_ooa_failed.ftl", "notify_user_email.html.ftl", "notify_user_email_it.html.ftl", "notify_user_email_e-transcript_failed.ftl", "notify_user_email_ja.html.ftl", "notify_user_email_fr.html.ftl", "notify_user_email_nl.html.ftl", "OOA-notify-email-template.ftl", "ADV-notify-terms-types.ftl", "appt-final-reminder.ftl", "appt-halfway-reminder.ftl", "sfs-wf-email.html.ftl", "sfs-wf-completed-email.html.ftl", "payActionDecision.html.ftl", "departmentAdhocTask.html.ftl", "wf-email.html_de.ftl", "wf-email.html.ftl", "wf-email_it.html.ftl", "wf-email_fr.html.ftl", "wf-email_nl.html.ftl", "wf-email_ja.html.ftl", "wf-email.html_fr.ftl", "wf-email.html_nl.ftl", "wf-email_es.html.ftl", "wf-email.html_ja.ftl", "wf-email.html_it.ftl", "wf-email_de.html.ftl", "wf-email.html_es.ftl", "emailbody_textplain_alfresco.ftl", "emailbody_textplain_alfresco_es.ftl", "emailbody_textplain_alfresco_fr.ftl", "emailbody_textplain_alfresco_it.ftl", "emailbody_textplain_alfresco_ja.ftl", "emailbody_textplain_alfresco_nb.ftl", "emailbody_textplain_alfresco_pt_BR.ftl", "emailbody_textplain_alfresco_nl.ftl", "emailbody_textplain_alfresco_ru.ftl", "emailbody_textplain_alfresco_zh_CN.ftl", "emailbody_textplain_share.ftl", "emailbody_textplain_share_de.ftl", "emailbody_textplain_share_es.ftl", "emailbody_textplain_share_it.ftl", "emailbody_textplain_share_ja.ftl", "emailbody_textplain_share_nb.ftl", "emailbody_textplain_share_nl.ftl", "emailbody_textplain_share_ru.ftl", "emailbody-alfresco-textplain.ftl", "emailbody-share-textplain.ftl", "emailbody_textplain_alfresco_de.ftl", "emailbody_textplain_share_zh_CN.ftl", "emailbody_textplain_share_fr.ftl", "emailbody_textplain_share_pt_BR.ftl", "uofa-pc-model.xml", "uofa-pllc-model.xml", "uofa-science-model.xml", "uofa-rso-model.xml", "uofa-set-model.xml", "uofa-sfs-model.xml", "uofa-slate-model.xml", "uofa-uappol-model.xml", "advext-model.xml", "assocModel.xml", "adv-model.xml", "cbsr-model.xml", "dynamicSecurityMarksModel", "ephesoft-educational.xml", "facopr-model.xml", "fgsr-model.xml", "faculty-model.xml", "psAudit-model.xml", "FVCA.xml", "roDocProcessing-model.xml", "ro-model.xml", "fgsr-thesis-deposit.xml", "security-group-model.xml", "ua-audit-generic-model.xml", "ua-dummy.xml", "calendar-year-model.xml", "ua-error-model.xml", "uafgsrsup-model.xml", "uaqa-model.xml", "transcript-model.xml", "uAlbertaWorkflowGeneral.xml", "uarmm-supplement-scanning.xml", "uarm-rma-filing-model.xml", "ua-search-model.xml", "ro-search-match.xml", "uatraining.xml", "uofa-ales-model.xml", "uofa-arts-model.xml", "uofa-aps-model.xml", "uofa-base-model.xml", "uawfh-model.xml", "uofa-augustana-model.xml", "uofa-business-model.xml", "uarmTempModel.xml", "uofa-cap-model.xml", "uofa-chs-model.xml", "uofa-chs-agreements-model.xml", "uofa-common-model.xml", "uofa-education-model.xml", "tamis-model.xml", "uofa-engg-coop-model.xml", "uofa-engg-model.xml", "uofa-fo-model.xml", "uofa-extension-model.xml", "uofa-esign-model.xml", "uofa-hrsbs-model.xml", "uofa-law-model.xml", "uofa-caps-model.xml", "uofa-hrs-model.xml", "uofa-native-studies-model.xml", "uofa-pllc-model.json", "uofa-rso-model.json", "uofa-pc-model.json", "uofa-native-studies-model.json", "uofa-slate-model.json", "uofa-uappol-model.json", "uofa-science-model.json", "uofa-workflowGeneral.json", "uofa-sfs-model.json", "adv-model.json", "advext-model.json", "assocModel.json", "calendar-year-model.json", "facopr-model.json", "cbsr-model.json", "ephesoft-educational.json", "faculty-model.json", "faculty-model.xml.json", "rma-model.json", "fgsr-model.json", "FVCA.json", "psAudit-model.json", "ro-aug-model.json", "ro-search-match.json", "tamis-model.json", "security-group-model.json", "fgsr-thesis-deposit.json", "transcript-model.json", "ro-model.json", "ua-audit-generic-model.json", "uafgsrsup-model.json", "uaqa-model.json", "uarmm-supplement-scanning.json", "uAlbertaWorkflowGeneral.json", "ua-error-model.json", "uofa-ales-model.json", "ua-search-model.json", "uarmTempModel.json", "uofa-aps-model.json", "uawfh-model.json", "uofa-arts-model.json", "uofa-cap-model.json", "uofa-chs-agreements-model.json", "uofa-augustana-model.json", "uofa-base-model.json", "uofa-chs-model.json", "uofa-engg-coop-model.json", "uofa-common-model.json", "uofa-engg-model.json", "uofa-extension-model.json", "uofa-hrsbs-model.json", "uofa-fo-model.json", "uofa-education-model.json", "uofa-law-model.json", "uofa-hrs-model.json", "uofa-esign-model.json", "uofa-business-model.json", "faculty-of-science-site.json", "FandO-Organizations.json", "FandO-Programs.json", "fgsr-awards.json", "fgsr-category-list.json", "fgsr-exam-list.json", "fgsr-official-list.json", "fgsr-programOfStudy.json", "fgsr-site.json", "fo-emergency-response-manual.json", "graduate-student-records-site.json", "fo-site.json", "fo-utilities.json", "hrs-benefits.json", "hrsbs-action-reasons.json", "graduate-student-records-v2-site.json", "hrsbs-doc-list.json", "hrsbs-file-structure.json", "hrsbs-owner-details.json", "hrsbs-functionalroles.json", "hrsbs-function-module.json", "hrsbs-review-month.json", "hrsbs-security-class.json", "hrsbs-site.json", "hrs-employeeApprovedDeductions.json", "hrs-bulkId.json", "hrsbs-review-cycle.json", "hrs-employmentFinancial.json", "hrs-personalInformation.json", "hrs-pension.json", "hrs-security-list.json", "hrs-leaves.json", "Institutions.json", "ist-site.json", "hrs-site.json", "my-site-site.json", "law-security-list.json", "native-studies-doc-list.json", "fgsr-credential-list.json", "law-doc-list.json", "native-studies-security-list.json", "office-of-advancement-record-types.json", "office-of-advancement-site.json", "pcm-category.json", "pllc-doc-list.json", "ro-academic-pre-pro-programs.json", "pllc-security-list.json", "ro-acad-group.json", "ro-admitType.json", "ro-applicant-type.json", "ro-campusSolutionsTerm.json", "hrsbs-employee-class.json", "pllc-site.json", "ro-indigenous-type.json", "ro-doctypes.json", "pcm-site.json", "ro-official.json", "ro-org-desc.json", "ro-related-record-types.json", "ro-relationship-to-institution.json", "ro-search-match-status.json", "ro-authenticity.json", "ro-slate-folio-material-non-school-scope.json", "ro-slate-institution-material.json", "ro-slate-folio-material-school-scope.json", "ro-method-receipt.json", "ro-slate-institutions.json", "ro-test-id.json", "rso-accounts-receivable-accounts-payable-doc-type.json", "rso-agreements-doc-category.json", "rso-bulk-scan-doc-type.json", "rso-cfi-purchasing-doc-type.json", "rso-cfi-financials-doc-type.json", "rso-financial-reconciliation-doc-type.json", "rso-financial-reporting-doc-type.json", "rso-financials-doc-type.json", "rso-mask.json", "rso-site.json", "rso-sponsor-names.json", "science-doc-list.json", "science-security-list.json", "school-of-business-site.json", "sfs-ussl-report-status.json", "staff-training-site.json", "student-financial-services-doc-list.json", "student-financial-services-site.json", "student-records-bulk-load-testing-site.json", "student-records-training-site.json", "student-records-site.json", "student-transcripts-site.json", "rso-forms-form-type.json", "support-documentation-site.json", "test-site-site.json", "uappol-category-heirarchy.json", "uappol-type.json", "uappol-site.json", "uoda-faculties.json", "academic-department.json", "adv-correspondence-type.json", "uoda-departments.json", "advsearch.json", "ales-security-list.json", "ales-doc-list.json", "arts-doc-list.json", "arts-security-list.json", "augustana-security-list.json", "augustana-site.json", "augustana-legacy-transcript-doc-list.json", "rso-activation-report-doc-type.json", "business-doc-list.json", "business-security-list.json", "bulkload-testing-site.json", "cap-site.json", "caps-school-board-list.json", "cbsrsite-site.json", "cbsrsite-sopTypes.json", "cbsr-study.json", "cbsr-worksheetType.json", "augustana-doc-list.json", "chs-ag-type.json", "chs-agreements-site.json", "chs-campus-list.json", "chs-degProgram-list.json", "chs-emailNotification.json", "chs-document-status.json", "chs-faculty-list.json", "chs-programYear-list.json", "chs-program-list.json", "canada-provinces-list.json", "demo-site-site.json", "education-doc-list.json", "department.json", "education-security-list.json", "chs-stuEmailNotification.json", "college-of-health-sciences-site.json", "chs-provinces-list.json", "engineering-coop-doc-list.json", "engineering-coop-security-list.json", "engineering-co-op-site.json", "engineering-doc-list.json", "extension-doc-list.json", "extension-security-list.json", "facopr-planTypes.json", "facopr-supportinDocField.json", "faculty-of-ales-site.json", "engineering-security-list.json", "faculty-of-education-site.json", "faculty-of-extension-site.json", "faculty-of-native-studies-site.json", "faculty-of-law-site.json", "faculty-of-arts-site.json", "faculty-of-engineering-site.json", "my_docs_inline.ftl", "my_docs.ftl", "my_spaces.ftl", "recent_docs.ftl", "translatable.ftl", "readme.ftl", "show_audit.ftl", "general_example.ftl", "my_summary.ftl", "doc_info.ftl", "localizable.ftl", "recordsCustomModel.xml", "imapConfig.json", "rm_event_config.json", "rmScriptThrowError.js", "report_rmr_transferReport.html.ftl", "report_rmr_destructionReport.html.ftl", "report_rmr_holdReport.html.ftl", "notify-records-due-for-review-email.ftl", "record-rejected-email.ftl", "record-superseded-email.ftl", "onCreate_supersedes.js", "rma_isClosed.js", "PaperFileconfig.json", "MyTasks-config.json", "AFAconfig.json", "roDocumentTypes.json", "uappol-upload-rule.js", "uappolCreateFolderRule.js", "uappolCreateFolder.js", "uappol-api.js", "uappol-functions.js", "command-utils.js", "backup and log.js", "backup.js", "example test script.js", "test return value.js", "start-pooled-review-workflow.js", "command-processor.js", "command-search.js", "alfresco docs.js", "append copyright.js", "createDepartmentJSON.js", "hrsDaily.js", "hrsFolderCreateSchedule.js", "hrsScanned.js", "hrsCreateFolder.js", "hrsFolderCreateRule.js", "hrsFileShareFolder.js", "alesCreateFolderRestricted.js", "alesCreateFolderSchedule.js", "alesBulkShareFolder.js", "alesFileScanned.js", "alesCreateFolder.js", "alesDaily.js", "alesFileShareFolder.js", "alesCreateFolderConfidential.js", "alesCreateAdvisingNotes.js", "alesFolderCreateSchedule.js", "deployWebServiceDescriptor.js", "taskReportCSV-Appointment-prod.js", "artsFileScanned.js", "artsCreateFolderRule.js", "artsCreateFolder.js", "artsCreateFolderRestricted.js", "augCreateFolderRestricted.js", "augCreateFolder.js", "businessCreateFolderRule.js", "businessCreateFolder.js", "businessCreateFolderSchedule.js", "businessBulkShareFolder.js", "businessFileShareFolder.js", "businessCreateFolderRestricted.js", "businessDaily.js", "businessCreateAdvisingNotes.js", "businessFileScanned.js", "CAPSendMonthlyReportEmail.js", "CAPGenerateMonthlyReport.js", "CapFinalReportSubmit.js", "chsCreateFolderRule.js", "chsEmailOnUpdateComment.js", "chsReport.js", "EmailNotifCHSStudent.js", "SetExpiryDate.js", "chsCreateFolder.js", "chsFacultyReport.js", "chsAgreementCreateFolderRule.js", "chsAgreementCreateFolder.js", "scheduleJobTest.js", "every52MinPastHour.js", "every46MinPastHourBetween4PM12PM.js", "every57MinPastHour.js", "every47MinPastHourBetween4PM12PM.js", "everyDay4H30MinAM.js", "everyDay7H45MinAM.js", "every10MinStartingAt5MinPastHour.js", "every38MinPastHourBetween4PM12PM.js", "every20MinStartingAt15MinPastHour.js", "everyDay2H05MinAM.js", "every2MinStartingAt1MinPastHour.js", "everyDay1H05MinAM.js", "everyDay12H30MinAM.js", "everyDay7H30MinPM.js", "every30MinStartingAt19MinPastHour.js", "every30MinStartingAt11MinPastHour.js", "everyDay2H35MinAM.js", "every30MinStartingAt26MinPastHour.js", "every16MinPastHour.js", "everyDay1H45MinAM.js", "everyDay2H45MinAM.js", "every29MinPastHour.js", "every22MinPastHour.js", "everyDay11H30MinPM.js", "educationCreateFolderRule.js", "educationCreateFolder.js", "educationCreateAdvisingNotes.js", "enggCoopCreateFolderRestricted.js", "enggCoopCreateFolderRule.js", "enggCoopBulkUpload.js", "enggCreateFolderRule.js", "enggCreateFolderRestricted.js", "enggCreateFolder.js", "engineeringCreateAdvisingNotes.js", "enggCoopCreateFolder.js", "enggFileScanned.js", "enggCoopFileScanned.js", "extensionFileScanned.js", "extensionCreateFolder.js", "extensionCreateFolderRule.js", "fgsrCreateGuidelineAPSProcessFromCSV.js", "fgsrDocRestructure.js", "fgsrMigrationScript.js", "fgsrDocRelocation.js", "fgsrCreateFolderFromCSV.js", "guideline-reports.js", "fgsrMigrationScript-withTerminationLogic.js", "modfiyOrUpdatePropertyfromCSV.js", "fgsr-case-file-report.js", "fgsrCreateAPSProcessFromFolder.js", "fgsrCreateFolder.js", "fgsrCopyMetadataToFolderLevel.js", "fgsrCreateAPSProcessFromCSV.js", "foCreateFolder.js", "foCreateFolderRule.js", "Script1.js", "Script2.js", "scheduleRunEvery2-10PM.js", "scheduleRunEvery5PMTo10PM.js", "scheduleRunEvery30Minutes.js", "scheduleRunEvery60Minutes.js", "scheduleRunEveryday3PMto11PM.js", "scheduleRunEveryday12AMto6AM.js", "scheduleRunEvery20Minutes.js", "scheduleRunEvery2AM.js", "acsToApsUserUpdate.js", "2024-01-13-log.txt", "2024-01-15-log.txt", "2024-01-20-log.txt", "2024-01-21-log.txt", "2024-01-22-log.txt", "2024-01-23-log.txt", "2024-02-04-log.txt", "2024-02-05-log.txt", "2024-02-06-log.txt", "2024-02-07-log.txt", "2024-02-08-log.txt", "2024-01-14-log.txt", "2024-01-18-log.txt", "2024-01-11-log.txt", "2024-01-16-log.txt", "2024-01-19-log.txt", "2024-01-26-log.txt", "2024-01-28-log.txt", "2024-01-30-log.txt", "2024-01-12-log.txt", "2024-01-29-log.txt", "2024-01-27-log.txt", "2024-01-31-log.txt", "2024-01-24-log.txt", "2024-02-09-log.txt", "2024-02-02-log.txt", "2024-01-09-log.txt", "2024-02-03-log.txt", "2024-01-05-log.txt", "2024-01-06-log.txt", "2024-01-04-log.txt", "2024-02-01-log.txt", "2024-01-07-log.txt", "2024-01-08-log.txt", "2024-02-10-log.txt", "2024-02-11-log.txt", "2024-02-12-log.txt", "2024-02-13-log.txt", "2023-12-31-log.txt", "2024-02-15-log.txt", "2024-02-16-log.txt", "2024-02-14-log.txt", "2024-02-18-log.txt", "2024-02-20-log.txt", "2024-01-17-log.txt", "2024-02-19-log.txt", "2024-01-10-log.txt", "2024-02-23-log.txt", "2024-02-25-log.txt", "2024-02-21-log.txt", "2024-01-25-log.txt", "2024-02-28-log.txt", "2024-02-22-log.txt", "2024-02-29-log.txt", "2024-03-02-log.txt", "2024-03-03-log.txt", "2024-02-26-log.txt", "2024-03-04-log.txt", "2024-03-06-log.txt", "2024-03-07-log.txt", "2024-03-05-log.txt", "2024-03-08-log.txt", "2024-03-09-log.txt", "2024-03-11-log.txt", "2024-03-10-log.txt", "2024-03-12-log.txt", "2024-03-13-log.txt", "2024-03-14-log.txt", "2024-03-15-log.txt", "2024-03-16-log.txt", "2024-03-17-log.txt", "2024-03-18-log.txt", "2024-03-20-log.txt", "2024-03-21-log.txt", "2024-03-22-log.txt", "2024-03-19-log.txt", "2024-03-23-log.txt", "2024-03-01-log.txt", "2024-03-26-log.txt", "2024-03-25-log.txt", "2024-03-28-log.txt", "2024-03-29-log.txt", "2024-03-27-log.txt", "2024-03-24-log.txt", "2024-03-30-log.txt", "2024-04-02-log.txt", "2024-04-03-log.txt", "2024-03-31-log.txt", "2024-04-05-log.txt", "2024-04-06-log.txt", "2024-04-07-log.txt", "2024-04-08-log.txt", "2024-04-09-log.txt", "2024-04-04-log.txt", "2024-04-11-log.txt", "2024-04-12-log.txt", "2024-04-13-log.txt", "2024-02-17-log.txt", "2024-04-01-log.txt", "2024-04-16-log.txt", "2024-04-15-log.txt", "2024-04-10-log.txt", "2024-04-17-log.txt", "2024-02-24-log.txt", "2024-04-14-log.txt", "2024-04-19-log.txt", "2024-04-21-log.txt", "2024-04-22-log.txt", "2024-04-23-log.txt", "2024-04-24-log.txt", "2024-04-26-log.txt", "2024-04-25-log.txt", "2024-04-29-log.txt", "2024-04-30-log.txt", "2024-05-01-log.txt", "2024-05-02-log.txt", "2024-05-03-log.txt", "2024-05-04-log.txt", "2024-05-05-log.txt", "2024-05-06-log.txt", "2024-04-28-log.txt", "2024-05-07-log.txt", "2024-04-18-log.txt", "2024-05-08-log.txt", "2024-05-09-log.txt", "2024-05-10-log.txt", "2024-05-12-log.txt", "2024-05-14-log.txt", "2024-05-11-log.txt", "2024-05-16-log.txt", "2024-04-27-log.txt", "2024-05-17-log.txt", "2024-05-15-log.txt", "2024-05-18-log.txt", "2024-05-20-log.txt", "2024-05-21-log.txt", "2024-05-19-log.txt", "2024-05-22-log.txt", "2024-05-23-log.txt", "2024-05-25-log.txt", "2024-05-24-log.txt", "2024-05-26-log.txt", "2024-05-27-log.txt", "2024-05-28-log.txt", "2024-05-29-log.txt", "2024-05-30-log.txt", "2024-06-02-log.txt", "2024-05-13-log.txt", "2024-06-01-log.txt", "2024-05-31-log.txt", "2024-04-20-log.txt", "2024-06-03-log.txt", "2024-06-04-log.txt", "2024-06-05-log.txt", "2023-12-30-log.txt", "2023-12-01-log.txt", "2024-02-27-log.txt", "2023-12-29-log.txt", "gtaGraProcessToCSV.js", "gtaGraProcessToCSV-2AM.js", "hrs-benefit-report.js", "westCanDocumentMove.js", "hrsbsReviewCycleReport.js", "hrsbsCreateFolderRule.js", "HRSBS-SyncCCIDs.js", "hrsbsCreateFolder.js", "FVCA-data-import.js", "FVCA-manual-property-update.js", "istPerformanceReviewCreateFolder.js", "lawCreateFolderRestricted.js", "lawFileScanned.js", "lawCreateFolder.js", "lawCreateFolderRule.js", "nativeStudiesCreateFolderRestricted.js", "nsFolderCreateSchedule.js", "nativeStudiesCreateFolder.js", "nativeStudiesCreateFolderRule.js", "ADV-notify-type-mapping.json", "OOA-notify-email.js", "ADV-notify-terms-types.js", "pcm-grab-competitive-noderefs.js", "pcm-update-competitive-noderefs.js", "pcmCreateFolder.js", "psUpdateAlfrescoDepartment.js", "pllcCreateFolder.js", "qaProcess.js", "qaRelease.js", "rmOOABackgroundInformationFiling.js", "rmFilingDoc.js", "rmSearchmatchNomatchFiling.js", "rmFilingConfig.json", "thesisDestructionReport.js", "rmThesis.js", "add_document_type_ro.js", "updateSearchMatchStatus.js", "searchmatchFullDob.js", "createROReconciliationReports.js", "eTranscriptInstList.js", "folder-create-ro.js", "augTranscript.js", "addTimeStamp.js", "missingDocumentList-csv.js", "roAddAspectAndMoveAFA.js", "myTaskDownload.js", "roAddAspectAndMoveTranscript.js", "roAddBundlingAspect.js", "roAddSearchMatchAspect.js", "roCopyEphesoftMetadataXML.js", "roBatchScript.js", "addSearchMatchDocumentType.js", "roCreateEducationalCSV.js", "roCopyOlderScannedDocument.js", "roDocumentListAPLSTD.js", "roCopyOlderScannedDocumentAdHoc.js", "roEtranscriptReport.js", "roDailyQA.js", "roEtranscriptsBundleTest.js", "roFolderCreateLDAPLookup_no_notificatiion.js", "roFolderCreateLDAPLookup.js", "roEtranscriptsBundle.js", "roAddComment.js", "roCopyEphesoftMetadataScanned.js", "roMoveCompleted.js", "roMoveCompletedBackScan.js", "roMoveCompletedSearchMatch.js", "roEtranscriptPDFConverter.js", "roScanningMetadata.js", "roScript1.js", "RORoutingWorkflowUtil.js", "roScript3.js", "roScript2.js", "roScanningMetadataBackScan.js", "roScript7.js", "roScript6.js", "roScript9.js", "roScript1BackScan.js", "roSearchMatchNoMatchReport.js", "roSearchMatchQuery.js", "RONotification.js", "roSlateDocumentExport.js", "roTagAndFileRenderedPDFs.js", "roScript4.js", "roScript5.js", "roScript8.js", "createSlateFolioMaterialDropdown.js", "createSlateApplicationsCSV.js", "LaunchWorkflowUtils.js", "PaperFileUtils.js", "GenerateSponsornamesAndPinames.js", "rsoCreateFolder.js", "sciCreateFolderConfidential.js", "sciCreateFolderPublic.js", "sciCreateFolder.js", "sciCreateFolderRestricted.js", "scienceASDocumentImport.js", "sciFileADDPFileTypes.js", "sciFileShareFolder.js", "sciFileScanned.js", "sciBulkShareFolder.js", "copy-signed-offer-letter.js", "dept-config.js", "reappointment-generate-schedule.js", "reappointment-reminder-schedule.js", "reappointment-generate-process.js", "manual-generate-script.js", "reappointment-reminder-process.js", "reminder-email-util.js", "reappointment-tracking-schedule.js", "reappointment-tracking-process.js", "appointment-report.js", "appointment-report-schedule.js", "manual-tracking-script.js", "sfsCreateFolder.js", "sfsWorkflowStatus.js", "security-group-user.js", "createReportPermissionsFoldersInASite.js", "siteMembersReport.js", "createReportRecursiveGroupsAndUsersInASite.js", "search-responses.js", "advChangeDocumentType.js", "addFolderMetadata.js", "advChangeDocumentType_confidential.js", "consignOInitiatorOfferLetterChange.js", "advChangeDocumentType_background.js", "transcriptResponse.js", "change-fgsr-pdf-file-name-with-date.js", "copy-fgsr-to-graduate-students-records.js", "ADVDonationCalendarToFiscal.js", "document-query.js", "deletingCompletingWorkflow.js", "eTranscriptTemp.js", "eTranscript-bundled-02-jan.js", "eTranscriptVersionModifierFix.js", "fixCheckout.js", "removeDonationGrp.js", "eTranscriptVersioningFix.js", "move-fgsr-folder.js", "search-match-dob-add.js", "thesisDepositArchival.js", "moveThesesForTransfer.js", "eraReportGeneration.js", "kofaxMetadataMerge.js", "kofaxMetadataMergeMissing.js", "generic2min.js", "kofaxSendEmail.js", "PeopleSoft-eTranscript-XML-PDF.js", "startBenefitWorkflow.js", "peoplesoftMetadataMergeMissing.js", "securityWorkflowUtil.js", "startPayActionWorkflow.js", "startDepartmentAdhocApprovalWorkflow.js", "convertTranscript.js", "CreateTranscriptUserMemberships.js", "startTwoStepWorkflow.js", "fix_employee_names.js", "env.js", "folderCreateUtil.js", "folderCreateUtilAA.js", "generalSchedule.js", "JSON.js", "xmlUtil.js", "addPersonAspect.js", "addTimeStampRandomFileName.js", "archiveDocument.js", "luceneUtil.js", "util.js", "archivedItems.js", "getProjectDetails.js", "ADVChangeAuthor.js", "ADVcalendarToFiscal.js", "symplexUtils.js", "advBatchProcessing.js", "advChangeDocumentName.js", "ADVEphesoftMove.js", "advCreateFolderScheduled.js", "advErrorMessageReset.js", "advMetadataUpdate.js", "advMoveToFoldersScheduled.js", "ADVendFundReportFiling.js", "advReconcilliation.js", "ADVmoveRecordsToPreQA.js", "advScanningMetadata.js", "advScript2.js", "advScript3.js", "advScript4.js", "advScript1.js", "advScript5.js", "advScriptDaily.js", "advScriptMonthly.js", "advScriptKofax.js", "ADVSiteContext.js", "advMoveToFolder.js", "deleteEphesoftDoc.js", "advUtils.js", "folderCreateADV.js", "advScriptDaily30minFreq.js", "jsonUtils.js", "advScanning.js", "folderCreateDocumentADV.js", "moveToFolders.js", "symplexMetadataUpdate.js", "OOA_SOT_Name_change.js", "moveToFoldersRetainTitle.js", "advScriptWeekly.js", "symplexMoveToFolder.js", "clioToAcsDocUpdate.js", "ClioUpdateScheduledJob.js", "smartFoldersExample.json", "system-overview.html", "businessDocSetup.json", "uappolDocSetup.json", "businessConfig.json", "augConfig.json", "augDocSetup.json", "lawConfig.json", "uappolConfig.json", "UAlbertaSettings.json", "hrsbsDocSetup.json", "advConfig.json", "hrsbsConfig.json", "hrsConfig.json", "hrsDocSetup.json", "advSimplexMapping.json", "advDocSetup.json", "artsDocSetup.json", "alesConfig.json", "alesDocSetup.json", "archiveFolder.json", "artsConfig.json", "advScanningMapping.json", "collegeOfHealthSciencesConfig.json", "chsAgreementsConfig.json", "dropboxCommonAspects.json", "collegeOfHealthSciencesDocSetup.json", "chsAgreementsDocSetup.json", "educationConfig.json", "extensionConfig.json", "fgsrv2DocSetup.json", "foConfig.json", "foDocSetup.json", "educationDocSetup.json", "lawDocSetup.json", "nativeStudiesDocSetup.json", "pllcConfig.json", "pllcDocSetup.json", "roConfig.json", "fgsrv2Config.json", "rsoConfig.json", "rsoDocSetup.json", "sciConfig.json", "eTranscriptConfig.json", "sciDocSetup.json", "roDocSetup.json", "sfsDocSetup.json", "UAlbertaSettings.conf", "student-recordsConfig.json", "securityWorkflowSetting.json", "thesisDepositConfig.json", "globalHeader.html.ftl", "webFormDialog.html.ftl", "alfrescoUserGroupRequest.ftl", "pensionBenefit.html.ftl", "pinames.json", "sponsornames.json", "searchPageConfig.json", "pcmDocSetup.json", "pcmConfig.json", "qaConfig.json", "apsAppConfig.json", "fgsrCreateApsFromCSV.json", "fgsrCopyMetadata.json", "enggCoopDocSetup.json", "enggDocSetup.json", "enggConfig.json", "enggCoopConfig.json", "CapApsConfig.json", "extensionDocSetup.json", "readme.html", "readme_de.html", "readme_ja.html", "readme_fr.html", "advEndowmentName.get.desc.xml", "advEndowmentName.get.json.ftl", "advEndowmentName.get.js", "advEntityName.get.desc.xml", "advEntityName.get.js", "advEntityName.get.html.ftl", "search.get.desc.xml", "search.get.js", "search.get.html.ftl", "changeInitiatorAppt.put.desc.xml", "eSignatureStatusHistory.get.html.ftl", "changeInitiatorAppt.put.json.ftl", "eSignatureStatusHistory.get.desc.xml", "appointmentSubmit.get.js", "processIdProps.get.desc.xml", "changeInitiatorAppt.put.js", "processIdProps.get.json.ftl", "processIdProps.get.js", "appointmentLandingPage.get.desc.xml", "appointmentLandingPage.get.js", "appointmentLandingPage.get.html.ftl", "appointmentStart.get.desc.xml", "appointmentStart.get.html.ftl", "appointmentStart.get.js", "appointmentStartTest.get.desc.xml", "appointmentStartTest.get.js", "appointmentStartTest.get.html.ftl", "appointmentSubmit.get.desc.xml", "appointmentSubmit.get.html.ftl", "eSignatureStatusHistory.get.js", "apsApplicationList.get.desc.xml", "apsApplicationList.get.html.ftl", "assignuser.put.js", "assignuser.put.json.ftl", "claimtask.put.desc.xml", "claimtask.put.js", "claimtask.put.json.ftl", "completetask.post.desc.xml", "completetask.post.json.ftl", "completetask.post.js", "getapsdbid.get.desc.xml", "getapsdbid.get.json.ftl", "gettasks.get.desc.xml", "gettasks.get.json.ftl", "assignuser.put.desc.xml", "gettasks.get.js", "savetask.post.desc.xml", "savetask.post.js", "savetask.post.json.ftl", "taskForm.get.js", "taskForm.get.desc.xml", "tasklist.get.desc.xml", "apsApplicationList.get.js", "taskForm.get.json.ftl", "tasklist.get.html.ftl.jquery", "tasklist.get.html.ftl", "tasklist.get.js", "triggerapsprocess.post.desc.xml", "triggerapsprocess.post.js", "updatevariables.post.desc.xml.notused", "triggerapsprocess.post.json.ftl", "updatevariables.post.json.ftl.notused", "getapsdbid.get.js", "updatevariables.post.js.notused", "taskUtils.js", "apsGroupsConfig.json", "apsSitesConfig.json", "apptStepZeroStarter.post.desc.xml", "apptStepZeroStarter.post.json.ftl", "apptStepZeroStarter.post.js", "apptStepOneStarter.post.desc.xml", "apptStepOneStarter.post.js", "apptStepOneStarter.post.json.ftl", "apptStepOneSave.post.json.ftl", "apptStepOneSave.post.desc.xml", "apptStepOneSave.post.js", "apptStatusDocUpdate.post.desc.xml", "apptStatusDocUpdate.post.json.ftl", "apptStatusDocUpdate.post.js", "APSWorkflowStatus.get.desc.xml", "APSWorkflowStatus.put.html.ftl", "APSWorkflowStatus.get.html.ftl", "APSWorkflowInfo.put.html.ftl", "APSWorkflowStatus.put.desc.xml", "APSWorkflowInfo.put.desc.xml", "APSWorkflowStatus.get.js", "APSWorkflowStatus.put.js", "APSWorkflowInfo.put.js", "NodeInfo.get.desc.xml", "NodeInfo.get.html.ftl", "capinfo.get.js", "capstart.get.js", "epsb.get.js", "epsb.get.html.ftl", "capstart.get.html.ftl", "epsb.get.desc.xml", "schoolboard.get.html.ftl", "NodeInfo.get.js", "NodeInfoByCapId.get.desc.xml", "updateVariable.post.json.ftl", "updateVariable.post.js", "schoolboard.get.desc.xml", "updateVariable.post.desc.xml", "schoolboard.get.js", "capinfo.get.html.ftl.backup", "cap-file-load.post.json.ftl", "NodeInfoByCapId.get.js", "capinfo.get.html.ftl", "capstart.get.desc.xml", "cap-file-load.post.desc.xml", "capinfo.get.desc.xml", "cap-file-load.post.js", "capeamergedoc.get.js", "capeamergedoc.get.desc.xml", "capeamergedoc.get.html.ftl", "capConfig.js", "chsEnv.js", "chsConfig.js", "chsAdminStuView.get.desc.xml", "chsAdminStuView.get.html.ftl", "chsAdminStuView.get.js", "coupa.get.html.ftl", "coupa.get.desc.xml", "coupa.get.js", "coveoGetDocList.get.desc.xml", "coveoGetDocList.get.json.ftl", "coveoGetDocList.get.js", "getJson.get.desc.xml", "getJson.get.js", "getJson.get.json.ftl", "simpleupload.post.desc.xml", "simpleupload.post.json.ftl", "simpleupload.post.js", "consignoMessage.get.js", "consignoWebhook.post.js", "consignoWebhook.post.json.ftl", "consignoMessage.get.desc.xml", "consignoWebhook.post.desc.xml", "consignoMessage.get.json.ftl", "eSignDownload.get.js", "eSignDownload.get.html.ftl", "eSignDownload.get.desc.xml", "review-supervisorv2.get.desc.xml", "review-supervisorv2.get.js", "review-supervisorv2.get.html.ftl", "fgsrssgLanding.get.js", "review-comm01v2.get.desc.xml", "fgsrssgLanding.get.html.ftl", "review-comm01v2.get.html.ftl", "review-comm02v2.get.desc.xml", "review-comm02v2.get.html.ftl", "fgsrssgLanding.get.desc.xml", "review-studentv2.get.html.ftl", "review-comm03v2.get.html.ftl", "review-comm03v2.get.desc.xml", "review-studentv2.get.desc.xml", "review-cosupervisorv2.get.html.ftl", "review-comm02v2.get.js", "review-startv2.get.desc.xml", "review-studentv2.get.js", "review-cosupervisorv2.get.js", "review-startv2.get.js", "review-student-revisionv2.get.html.ftl", "review-student-revisionv2.get.desc.xml", "review-startv2.get.html.ftl", "review-comm03v2.get.js", "review-cosupervisorv2.get.desc.xml", "review-student-revisionv2.get.js", "review-comm01v2.get.js", "review-comm02.get.desc.xml", "review-comm02.get.html.ftl", "review-comm03.get.desc.xml", "review-comm02.get.js", "review-comm03.get.html.ftl", "review-cosupervisor.get.desc.xml", "review-cosupervisor.get.html.ftl", "review-cosupervisor.get.js", "review-nextdate.get.desc.xml", "review-comm03.get.js", "review-nextdate.get.js", "review-student.get.html.ftl", "review-student.get.js", "review-student-revision.get.desc.xml", "review-student.get.desc.xml", "review-student-revision.get.js", "review-studentTest.get.desc.xml", "review-supervisor.get.desc.xml", "review-studentTest.get.js", "review-supervisor.get.html.ftl", "review-supervisor.get.js", "review-comm01.get.desc.xml", "review-comm01.get.html.ftl", "review-comm01.get.js", "review-student-revision.get.html.ftl", "review-nextdate.get.html.ftl", "review-studentTest.get.html.ftl", "guidelines-supervisor.get.desc.xml", "guidelines-supervisor-revision.get.html.ftl", "guidelines-start.get.desc.xml", "guidelines-start.get.html.ftl", "guidelines-start.get.js", "guidelines-student.get.desc.xml", "guidelines-student.get.html.ftl", "guidelines-student-revision.get.js", "guidelines-student-revision.get.desc.xml", "guidelines-supervisor.get.html.ftl", "guidelines-supervisor-revision.get.desc.xml", "guidelines-student-revision.get.html.ftl", "guidelines-student.get.js", "guidelines-supervisor.get.js", "guidelines-supervisor-revision.get.js", "programExtensionScript.js", "customScript.js", "customCSS_FGSR2.css", "customCSS_FGSR.css", "fgsrEnv.js", "FGSR-Forms-Config.js", "config.js", "googleAddon.get.json.ftl", "googleAddon.get.desc.xml", "googleAddon.get.js", "gtaGraStatus.post.json.ftl", "gtaGraStatus.post.js", "gtaGraStatus.post.desc.xml", "wfh-manager.get.desc.xml", "wfh-form.get.js", "wfh-manager.get.html.ftl", "wfh-form.get.desc.xml", "wfh-revise.get.desc.xml", "wfh-revise.get.html.ftl", "wfh-revise.get.js", "wfh-seniormanager.get.desc.xml", "wfh-manager.get.js", "wfh-seniormanager.get.js", "wfh-seniormanager.get.html.ftl", "wfh-form.get.html.ftl", "hrsbsDocumentLinking.get.desc.xml", "hrsbsDocumentLinking.get.html.ftl", "hrsbsDocumentLinking.get.js", "coi-start.get.desc.xml", "coi-start.get.html.ftl", "coi-revise.get.html.ftl", "coi-employee.get.html.ftl", "coi-employee.get.desc.xml", "coi-revise.get.desc.xml", "coi-start.get.js", "coi-revise.get.js", "coi-supervisor.get.js", "coi-supervisor.get.desc.xml", "coi-employee.get.js", "coi-supervisor.get.html.ftl", "getTaskFilter.get.json.ftl", "queryTasks.get.json.ftl", "routableGroups.get.desc.xml", "routableGroups.get.js", "routableGroups.get.json.ftl", "queryTasks.get.desc.xml", "setTaskFilter.post.js", "setTaskFilter.post.json.ftl", "setTaskFilter.post.desc.xml", "applyTaskAction.post.js", "applyTaskAction.post.json.ftl", "applyTaskAction.post.desc.xml", "getTaskFilter.get.desc.xml", "getTaskFilter.get.js", "queryTasks.get.js", "avmbrowse.get.desc.xml", "avmbrowse.get.html.ftl", "avmbrowse.get.js", "avmstores.get.desc.xml", "avmstores.get.html.ftl", "blogsearch.get.atom.400.ftl", "blogsearch.get.html.400.ftl", "blogsearch.get.desc.xml", "blogsearch.get.js", "categorysearch.get.atom.404.ftl", "blogsearch.get.html.ftl", "categorysearch.get.html.404.ftl", "categorysearch.get.js", "categorysearch.get.html.ftl", "categorysearch.get.desc.xml", "folder.get.desc.xml", "folder.get.html.ftl", "folder.get.js", "psDeptAll.get.js", "psDeptSingle.get.json.ftl", "psDeptSingle.get.js", "psPerson.get.json.ftl", "psUtil.js", "psPerson.get.js", "psAcademicDeptAll.get.desc.xml", "psAcademicDeptAll.get.json.ftl", "psAuthorizedApprover.get.desc.xml", "psDeptAll.get.json.ftl", "psAuthorizedApprover.get.js", "psAuthorizedApprover.get.json.ftl", "psDeptAll.get.desc.xml", "psDeptSingle.get.desc.xml", "psPerson.get.desc.xml", "ceeb.get.desc.xml", "ceeb.get.json.ftl", "getSlateId.get.desc.xml", "getSlateId.get.js", "materials.get.json.ftl", "materials.get.desc.xml", "getSlateId.get.json.ftl", "ceeb.get.js", "materials.get.js", "edit.get.html.ftl", "edit.get.js", "save.post.js", "save.post.json.ftl", "scans.get.desc.xml", "scans.get.js", "uploadfile.post.desc.xml", "uploadfile.post.json.ftl", "edit.get.desc.xml", "uploadfile.post.js", "scans.get.html.ftl", "save.post.desc.xml", "AFA_Main.post.desc.xml", "AFA_MainFileOnly.post.desc.xml", "AFA_MainFileOnly.post.js", "AFA_Main.post.js", "AFA_MainFileOnly.post.json.ftl", "AFA_Main.post.json.ftl", "paperFileUtil.get.desc.xml", "paperFileUtil.get.js", "paperFileUtil.get.html.ftl", "rsoprojectdetails.get.html.ftl", "rsoprojectdetails.get.js", "rsoprojectdetails.get.desc.xml", "roslateapplist.get.html.ftl", "roslateapplist.get.desc.xml", "roslateapplist.get.json.ftl", "roslateexists.get.html.ftl", "roslateexists.get.desc.xml", "roslateapplist.get.js", "roslateexists.get.js", "uofaDepartmentList.get.desc.xml", "uofaDepartmentList.get.js", "uofaDepartmentList.get.html.ftl", "uofaDepartmentName.get.desc.xml", "uofaDepartmentName.get.html.ftl", "uofaFacultyList.get.html.ftl", "uofaFacultyList.get.desc.xml", "uofaDepartmentName.get.js", "uofapersonid.get.desc.xml", "uofapersonidrest.get.html.ftl", "uofapersonidrest.get.desc.xml", "uofapersonid.get.html.ftl", "uofapersonid.get.js", "uofapersonidrest.get.js", "uappolCategoryHeirarchy.get.desc.xml", "uappolCategoryHeirarchy.get.json.ftl", "uappol-metadata-query.get.desc.xml", "uappol-metadata-query.get.js", "uappol-metadata-query.get.json.ftl", "uappolCategoryHeirarchy.get.js", "siteFileViewer.get.desc.xml", "siteFileViewerConfig.js", "siteFileViewer.get.html.ftl", "siteFileViewer.get.js", "publicSiteFileViewer.get.html.ftl", "publicSiteFileViewer.get.desc.xml", "publicSiteFileViewer.get.js", "cronJob.post.desc.xml", "cronJob.post.js", "cronJob.post.json.ftl", "studentupload.get.html.ftl", "generatereport.get.json.ftl", "generatereport.get.desc.xml", "approvethesis.post.js", "generatereport.get.js", "search-match-attach.get.js", "search-match-list.get.html.ftl", "search-match-result.get.html.ftl", "search-match-result.get.js", "search-match-list.get.js.old", "chs-agreements.get.js", "chs-agreements.get.html.ftl", "chs-upload.get.html.ftl", "chs-upload.get.js", "uamytasks.config.get.js", "chsStudentView.get.js", "chsStudentView.get.html.ftl", "foModel.xml", "uofaDocTypes.xml", "uofaDocTypes.json", "foModel.json", "tim-sops", "FandO", "cbsr", "nanofab", "support-documentation", "Alfresco.zip - 1bf054bded99e2ae414154593d0892066b2e0c7add603f9321e157c77ae52075", "https://www.virustotal.com/graph/embed/g05f1796a358b458d95751d31d1d529aa378f8ffadf0b4305b7fa0bd1c64fe228?theme=dark", "https://www.virustotal.com/gui/collection/63819e07111e9665ba8602777d782527c54f3fad71ef36f977405a004484787c/iocs", "https://viz.greynoise.io/analysis/0cd9177e-8328-4355-a2c0-d05704a64c72", "components.zip - 2b91fcf852a5f1f57be71a269d82497b37c9f544ebd8f32aaa240e4cde0ffeea", "https://www.virustotal.com/graph/embed/g2948a5c332eb4614973872a8243215f6aa1fba79749a48ea92806e9b934db91f?theme=dark", "https://viz.greynoise.io/ip/analysis/2610b635-c05a-4f28-a112-7278de8fdf9b" ], "public": 1, "adversary": "TA413 proposed (06.08.24), Callisto, APT38, APT 28/29 - too much time too many problems", "targeted_countries": [ "Canada", "United States of America" ], "malware_families": [], "attack_ids": [], "industries": [ "Education", "Government", "Healthcare", "Technology", "Telecommunications" ], "TLP": "white", "cloned_from": null, "export_count": 57, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 4, "follower_count": 0, "vote": 0, "author": { "username": "Disable_Duck", "id": "244325", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_244325/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 7132, "hostname": 3118, "URL": 4909, "email": 20, "FileHash-SHA256": 2144, "FileHash-MD5": 29, "FileHash-SHA1": 29 }, "indicator_count": 17381, "is_author": false, "is_subscribing": null, "subscriber_count": 131, "modified_text": "234 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6583e3a2d1432cbf9054d26d", "name": "Qkbot | Reddit", "description": "Qbot URL: https://seedbeej.pk/tin/index.php?QBOT.zip found in Reddit Honeypot link: https://www.reddit.com/user\nbackdoor second stage developed for distribution as a password stealer. Qbot, seemingly common; is a large botnetwork with many capabilities, attack methods and demands. An unsuspecting victim always be in botnetwork. Qbot encompasses many other bot networks, trojans, network rats, spyware, malvertizing, fraud services, full control of badly compromised digital profiles which have been discovered.", "modified": "2024-01-20T02:02:19.559000", "created": "2023-12-21T07:05:06.936000", "tags": [ "ssl certificate", "iocs", "ioc search", "new ioc", "teams api", "contact", "search", "threat", "paste", "blacklist https", "qakbot", "site", "cisco umbrella", "alexa top", "million", "ascii text", "pattern match", "file", "windows nt", "appdata", "indicator", "crlf line", "unicode text", "jpeg image", "mitre att", "hybrid", "general", "local", "error", "click", "strings", "microsoft", "threat analyzer", "urls https", "no data", "tag count", "threat report", "ip summary", "url summary", "summary", "heur", "malware site", "malicious site", "safe site", "malware", "html", "phishing site", "site top", "riskware", "unsafe", "artemis", "quasar rat", "downldr", "agent", "presenoker", "applicunwnt", "crack", "cve201711882", "win64", "iframe", "quasar", "trojanspy", "exit", "node tcp", "tor known", "tor relayrouter", "traffic", "anonymizer", "brasil", "phishing three", "united", "phishing bank", "virustotal", "tech", "bank", "maltiverse", "hidelink", "samples", "spyware", "injector", "mon jan", "tld count", "wed dec", "download", "first", "team", "simda", "bambernek", "simda simda", "infy", "alexa", "gregory", "cyber threat", "phishing", "engineering", "covid19", "telefonica co", "malicious", "zbot", "zeus", "betabot", "suppobox", "citadel", "pony", "kraken", "redline stealer", "ransomware", "vawtrak", "athena", "neutrino", "alina", "andromeda", "dexter", "unknown", "keylogger", "hawkeye", "phase", "jackpos", "plasma", "spyeye", "spitmo", "slingshot", "ramnit", "emotet", "pykspa", "virut", "installcore", "dorkbot", "bondat", "union", "vskimmer", "xtrat", "solar", "grandcrab", "nymaim", "matsnu", "cutwail", "cobalt strike", "hydra", "tinba", "nsis", "memscan", "deepscan", "runescape", "backdoor", "reddit", "tulach" ], "references": [ "https://seedbeej.pk/tin/index.php?QBOT.zip", "https://tulach.cc/ [phishing, exploits, malware spreader]", "https://www.hybrid-analysis.com/sample/a8decf589e5ec26f1e994a3923fc245db98f681f951d2bb8e1fcce1d8fef5293", "https://www.virustotal.com/gui/url/000c01d40db51f156933c624f23e776cb2c1fd60b8f1840b13b9622886a8e918/community", "198.54.115.46 [exploit_source]", "gadyniw.com [command_and_control]", "gahyqah.com [command_and_control]", "galyqaz.com [command_and_control]", "lyvyxor.com [command_and_control]", "puzylyp.com [command_and_control]", "malicious.high.ml [dropper]", "https://www.reddit.com/user" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [ { "id": "Qakbot", "display_name": "Qakbot", "target": null }, { "id": "Quasar", "display_name": "Quasar", "target": null }, { "id": "TrojanSpy", "display_name": "TrojanSpy", "target": null }, { "id": "Maltiverse", "display_name": "Maltiverse", "target": null }, { "id": "HideLink", "display_name": "HideLink", "target": null }, { "id": "Gregory", "display_name": "Gregory", "target": null }, { "id": "Cutwail", "display_name": "Cutwail", "target": null }, { "id": "Matsnu", "display_name": "Matsnu", "target": null }, { "id": "Vawtrak", "display_name": "Vawtrak", "target": null }, { "id": "XRat", "display_name": "XRat", "target": null }, { "id": "Zbot", "display_name": "Zbot", "target": null }, { "id": "Virut", "display_name": "Virut", "target": null }, { "id": "ZeuS", "display_name": "ZeuS", "target": null }, { "id": "vSkimmer", "display_name": "vSkimmer", "target": null }, { "id": "SuppoBox", "display_name": "SuppoBox", "target": null }, { "id": "Simda", "display_name": "Simda", "target": null }, { "id": "Pykspa", "display_name": "Pykspa", "target": null }, { "id": "SpyEye", "display_name": "SpyEye", "target": null }, { "id": "Spitmo", "display_name": "Spitmo", "target": null }, { "id": "Solar", "display_name": "Solar", "target": null }, { "id": "Nymaim", "display_name": "Nymaim", "target": null }, { "id": "DorkBot", "display_name": "DorkBot", "target": null }, { "id": "Slingshot", "display_name": "Slingshot", "target": null }, { "id": "Pony", "display_name": "Pony", "target": null }, { "id": "Plasma RAT", "display_name": "Plasma RAT", "target": null }, { "id": "Neutrino", "display_name": "Neutrino", "target": null }, { "id": "Ramnit", "display_name": "Ramnit", "target": null }, { "id": "NSIS", "display_name": "NSIS", "target": null }, { "id": "RedLine Stealer", "display_name": "RedLine Stealer", "target": null }, { "id": "InstallCore", "display_name": "InstallCore", "target": null }, { "id": "GrandCrab", "display_name": "GrandCrab", "target": null }, { "id": "Andromeda", "display_name": "Andromeda", "target": null }, { "id": "Alinaos", "display_name": "Alinaos", "target": null }, { "id": "HawkEye", "display_name": "HawkEye", "target": null }, { "id": "Kraken", "display_name": "Kraken", "target": null }, { "id": "Infy", "display_name": "Infy", "target": null }, { "id": "Dexter", "display_name": "Dexter", "target": null }, { "id": "Emotet", "display_name": "Emotet", "target": null }, { "id": "Artemis", "display_name": "Artemis", "target": null }, { "id": "ASCII", "display_name": "ASCII", "target": null }, { "id": "Athena", "display_name": "Athena", "target": null }, { "id": "Bambernek", "display_name": "Bambernek", "target": null }, { "id": "BetaBot", "display_name": "BetaBot", "target": null }, { "id": "COVID19", "display_name": "COVID19", "target": null }, { "id": "Citadel", "display_name": "Citadel", "target": null }, { "id": "Bondat", "display_name": "Bondat", "target": null }, { "id": "HideLink", "display_name": "HideLink", "target": null }, { "id": "Hydra", "display_name": "Hydra", "target": null }, { "id": "Tulach", "display_name": "Tulach", "target": null } ], "attack_ids": [ { "id": "T1059", "name": "Command and Scripting Interpreter", "display_name": "T1059 - Command and Scripting Interpreter" }, { "id": "T1071", "name": "Application Layer Protocol", "display_name": "T1071 - Application Layer Protocol" }, { "id": "T1105", "name": "Ingress Tool Transfer", "display_name": "T1105 - Ingress Tool Transfer" }, { "id": "T1497", "name": "Virtualization/Sandbox Evasion", "display_name": "T1497 - Virtualization/Sandbox Evasion" }, { "id": "T1547", "name": "Boot or Logon Autostart Execution", "display_name": "T1547 - Boot or Logon Autostart Execution" }, { "id": "T1140", "name": "Deobfuscate/Decode Files or Information", "display_name": "T1140 - Deobfuscate/Decode Files or Information" }, { "id": "T1027", "name": "Obfuscated Files or Information", "display_name": "T1027 - Obfuscated Files or Information" }, { "id": "T1204", "name": "User Execution", "display_name": "T1204 - User Execution" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 98, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "OctoSeek", "id": "243548", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_243548/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 8343, "FileHash-MD5": 953, "FileHash-SHA1": 489, "FileHash-SHA256": 3565, "domain": 1494, "hostname": 2218, "CVE": 6 }, "indicator_count": 17068, "is_author": false, "is_subscribing": null, "subscriber_count": 222, "modified_text": "863 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6583e3acc7f464d48a3503d1", "name": "Qkbot | Reddit", "description": "Qbot URL: https://seedbeej.pk/tin/index.php?QBOT.zip found in Reddit Honeypot link: https://www.reddit.com/user\nbackdoor second stage developed for distribution as a password stealer. Qbot, seemingly common; is a large botnetwork with many capabilities, attack methods and demands. An unsuspecting victim always be in botnetwork. Qbot encompasses many other bot networks, trojans, network rats, spyware, malvertizing, fraud services, full control of badly compromised digital profiles which have been discovered.", "modified": "2024-01-20T02:02:19.559000", "created": "2023-12-21T07:05:16.695000", "tags": [ "ssl certificate", "iocs", "ioc search", "new ioc", "teams api", "contact", "search", "threat", "paste", "blacklist https", "qakbot", "site", "cisco umbrella", "alexa top", "million", "ascii text", "pattern match", "file", "windows nt", "appdata", "indicator", "crlf line", "unicode text", "jpeg image", "mitre att", "hybrid", "general", "local", "error", "click", "strings", "microsoft", "threat analyzer", "urls https", "no data", "tag count", "threat report", "ip summary", "url summary", "summary", "heur", "malware site", "malicious site", "safe site", "malware", "html", "phishing site", "site top", "riskware", "unsafe", "artemis", "quasar rat", "downldr", "agent", "presenoker", "applicunwnt", "crack", "cve201711882", "win64", "iframe", "quasar", "trojanspy", "exit", "node tcp", "tor known", "tor relayrouter", "traffic", "anonymizer", "brasil", "phishing three", "united", "phishing bank", "virustotal", "tech", "bank", "maltiverse", "hidelink", "samples", "spyware", "injector", "mon jan", "tld count", "wed dec", "download", "first", "team", "simda", "bambernek", "simda simda", "infy", "alexa", "gregory", "cyber threat", "phishing", "engineering", "covid19", "telefonica co", "malicious", "zbot", "zeus", "betabot", "suppobox", "citadel", "pony", "kraken", "redline stealer", "ransomware", "vawtrak", "athena", "neutrino", "alina", "andromeda", "dexter", "unknown", "keylogger", "hawkeye", "phase", "jackpos", "plasma", "spyeye", "spitmo", "slingshot", "ramnit", "emotet", "pykspa", "virut", "installcore", "dorkbot", "bondat", "union", "vskimmer", "xtrat", "solar", "grandcrab", "nymaim", "matsnu", "cutwail", "cobalt strike", "hydra", "tinba", "nsis", "memscan", "deepscan", "runescape", "backdoor", "reddit", "tulach" ], "references": [ "https://seedbeej.pk/tin/index.php?QBOT.zip", "https://tulach.cc/ [phishing, exploits, malware spreader]", "https://www.hybrid-analysis.com/sample/a8decf589e5ec26f1e994a3923fc245db98f681f951d2bb8e1fcce1d8fef5293", "https://www.virustotal.com/gui/url/000c01d40db51f156933c624f23e776cb2c1fd60b8f1840b13b9622886a8e918/community", "198.54.115.46 [exploit_source]", "gadyniw.com [command_and_control]", "gahyqah.com [command_and_control]", "galyqaz.com [command_and_control]", "lyvyxor.com [command_and_control]", "puzylyp.com [command_and_control]", "malicious.high.ml [dropper]", "https://www.reddit.com/user" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [ { "id": "Qakbot", "display_name": "Qakbot", "target": null }, { "id": "Quasar", "display_name": "Quasar", "target": null }, { "id": "TrojanSpy", "display_name": "TrojanSpy", "target": null }, { "id": "Maltiverse", "display_name": "Maltiverse", "target": null }, { "id": "HideLink", "display_name": "HideLink", "target": null }, { "id": "Gregory", "display_name": "Gregory", "target": null }, { "id": "Cutwail", "display_name": "Cutwail", "target": null }, { "id": "Matsnu", "display_name": "Matsnu", "target": null }, { "id": "Vawtrak", "display_name": "Vawtrak", "target": null }, { "id": "XRat", "display_name": "XRat", "target": null }, { "id": "Zbot", "display_name": "Zbot", "target": null }, { "id": "Virut", "display_name": "Virut", "target": null }, { "id": "ZeuS", "display_name": "ZeuS", "target": null }, { "id": "vSkimmer", "display_name": "vSkimmer", "target": null }, { "id": "SuppoBox", "display_name": "SuppoBox", "target": null }, { "id": "Simda", "display_name": "Simda", "target": null }, { "id": "Pykspa", "display_name": "Pykspa", "target": null }, { "id": "SpyEye", "display_name": "SpyEye", "target": null }, { "id": "Spitmo", "display_name": "Spitmo", "target": null }, { "id": "Solar", "display_name": "Solar", "target": null }, { "id": "Nymaim", "display_name": "Nymaim", "target": null }, { "id": "DorkBot", "display_name": "DorkBot", "target": null }, { "id": "Slingshot", "display_name": "Slingshot", "target": null }, { "id": "Pony", "display_name": "Pony", "target": null }, { "id": "Plasma RAT", "display_name": "Plasma RAT", "target": null }, { "id": "Neutrino", "display_name": "Neutrino", "target": null }, { "id": "Ramnit", "display_name": "Ramnit", "target": null }, { "id": "NSIS", "display_name": "NSIS", "target": null }, { "id": "RedLine Stealer", "display_name": "RedLine Stealer", "target": null }, { "id": "InstallCore", "display_name": "InstallCore", "target": null }, { "id": "GrandCrab", "display_name": "GrandCrab", "target": null }, { "id": "Andromeda", "display_name": "Andromeda", "target": null }, { "id": "Alinaos", "display_name": "Alinaos", "target": null }, { "id": "HawkEye", "display_name": "HawkEye", "target": null }, { "id": "Kraken", "display_name": "Kraken", "target": null }, { "id": "Infy", "display_name": "Infy", "target": null }, { "id": "Dexter", "display_name": "Dexter", "target": null }, { "id": "Emotet", "display_name": "Emotet", "target": null }, { "id": "Artemis", "display_name": "Artemis", "target": null }, { "id": "ASCII", "display_name": "ASCII", "target": null }, { "id": "Athena", "display_name": "Athena", "target": null }, { "id": "Bambernek", "display_name": "Bambernek", "target": null }, { "id": "BetaBot", "display_name": "BetaBot", "target": null }, { "id": "COVID19", "display_name": "COVID19", "target": null }, { "id": "Citadel", "display_name": "Citadel", "target": null }, { "id": "Bondat", "display_name": "Bondat", "target": null }, { "id": "HideLink", "display_name": "HideLink", "target": null }, { "id": "Hydra", "display_name": "Hydra", "target": null }, { "id": "Tulach", "display_name": "Tulach", "target": null } ], "attack_ids": [ { "id": "T1059", "name": "Command and Scripting Interpreter", "display_name": "T1059 - Command and Scripting Interpreter" }, { "id": "T1071", "name": "Application Layer Protocol", "display_name": "T1071 - Application Layer Protocol" }, { "id": "T1105", "name": "Ingress Tool Transfer", "display_name": "T1105 - Ingress Tool Transfer" }, { "id": "T1497", "name": "Virtualization/Sandbox Evasion", "display_name": "T1497 - Virtualization/Sandbox Evasion" }, { "id": "T1547", "name": "Boot or Logon Autostart Execution", "display_name": "T1547 - Boot or Logon Autostart Execution" }, { "id": "T1140", "name": "Deobfuscate/Decode Files or Information", "display_name": "T1140 - Deobfuscate/Decode Files or Information" }, { "id": "T1027", "name": "Obfuscated Files or Information", "display_name": "T1027 - Obfuscated Files or Information" }, { "id": "T1204", "name": "User Execution", "display_name": "T1204 - User Execution" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 101, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "OctoSeek", "id": "243548", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_243548/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 8343, "FileHash-MD5": 953, "FileHash-SHA1": 489, "FileHash-SHA256": 3565, "domain": 1494, "hostname": 2218, "CVE": 6 }, "indicator_count": 17068, "is_author": false, "is_subscribing": null, "subscriber_count": 221, "modified_text": "863 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "658449d3f6ec1af2f3aace46", "name": "Qakbot | Reddit", "description": "Qbot URL: https://seedbeej.pk/tin/index.php?QBOT.zip Qbot zip found in Reddit Honeypot link: https://www.reddit.com/user backdoor second stage developed for distribution as a password stealer. Qbot, seemingly common; is a large botnetwork with many capabilities, attack methods and demands. An unsuspecting victim always be in botnetwork. Qbot encompasses many other bot networks, trojans, network rats, spyware malvertizing, fraud services, leads to full control of badly compromised digital profile.", "modified": "2024-01-20T02:02:19.559000", "created": "2023-12-21T14:21:07.435000", "tags": [ "ssl certificate", "iocs", "ioc search", "new ioc", "teams api", "contact", "search", "threat", "paste", "blacklist https", "qakbot", "site", "cisco umbrella", "alexa top", "million", "ascii text", "pattern match", "file", "windows nt", "appdata", "indicator", "crlf line", "unicode text", "jpeg image", "mitre att", "hybrid", "general", "local", "error", "click", "strings", "microsoft", "threat analyzer", "urls https", "no data", "tag count", "threat report", "ip summary", "url summary", "summary", "heur", "malware site", "malicious site", "safe site", "malware", "html", "phishing site", "site top", "riskware", "unsafe", "artemis", "quasar rat", "downldr", "agent", "presenoker", "applicunwnt", "crack", "cve201711882", "win64", "iframe", "quasar", "trojanspy", "exit", "node tcp", "tor known", "tor relayrouter", "traffic", "anonymizer", "brasil", "phishing three", "united", "phishing bank", "virustotal", "tech", "bank", "maltiverse", "hidelink", "samples", "spyware", "injector", "mon jan", "tld count", "wed dec", "download", "first", "team", "simda", "bambernek", "simda simda", "infy", "alexa", "gregory", "cyber threat", "phishing", "engineering", "covid19", "telefonica co", "malicious", "zbot", "zeus", "betabot", "suppobox", "citadel", "pony", "kraken", "redline stealer", "ransomware", "vawtrak", "athena", "neutrino", "alina", "andromeda", "dexter", "unknown", "keylogger", "hawkeye", "phase", "jackpos", "plasma", "spyeye", "spitmo", "slingshot", "ramnit", "emotet", "pykspa", "virut", "installcore", "dorkbot", "bondat", "union", "vskimmer", "xtrat", "solar", "grandcrab", "nymaim", "matsnu", "cutwail", "cobalt strike", "hydra", "tinba", "nsis", "memscan", "deepscan", "runescape", "backdoor", "reddit", "tulach", "password stealer", "active threat", "apple", "pinkslipbot", "icloud", "free", "apple" ], "references": [ "https://seedbeej.pk/tin/index.php?QBOT.zip. [Qbot zip]", "https://tulach.cc/ [Botnet phishing]", "https://www.hybrid-analysis.com/sample/a8decf589e5ec26f1e994a3923fc245db98f681f951d2bb8e1fcce1d8fef5293", "https://www.virustotal.com/gui/url/000c01d40db51f156933c624f23e776cb2c1fd60b8f1840b13b9622886a8e918/community", "198.54.115.46 [exploit_source]", "gadyniw.com [command_and_control]", "gahyqah.com [command_and_control]", "galyqaz.com [command_and_control]", "lyvyxor.com [command_and_control]", "puzylyp.com [command_and_control]", "malicious.high.ml [dropper]", "https://www.reddit.com/user [honeypot]", "beacons.bcp.gvt.com [tracking]", "https://www.norad.mil/ [tracking]", "www.norad.mil [tracking]", "www.apple.com [API property call]", "https://www.apple.com/qtactivex/qtplugin.cab [https://www.icloud.com .cab]", "yesporn.fun", "http://114.114.114.114:90/p/cdbdd4a09a64909694281aec503746fd/mobile_index.html?MTE0LjExNC4xMTQuMTE0L2xvZ2luP2hhc19vcmlfdXJp [Tulach | Malicious]", "114.114.114.114 [Tulach | Virus Network IP]" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [ { "id": "Qakbot", "display_name": "Qakbot", "target": null }, { "id": "Quasar", "display_name": "Quasar", "target": null }, { "id": "TrojanSpy", "display_name": "TrojanSpy", "target": null }, { "id": "Maltiverse", "display_name": "Maltiverse", "target": null }, { "id": "HideLink", "display_name": "HideLink", "target": null }, { "id": "Gregory", "display_name": "Gregory", "target": null }, { "id": "Cutwail", "display_name": "Cutwail", "target": null }, { "id": "Matsnu", "display_name": "Matsnu", "target": null }, { "id": "Vawtrak", "display_name": "Vawtrak", "target": null }, { "id": "XRat", "display_name": "XRat", "target": null }, { "id": "Zbot", "display_name": "Zbot", "target": null }, { "id": "Virut", "display_name": "Virut", "target": null }, { "id": "ZeuS", "display_name": "ZeuS", "target": null }, { "id": "vSkimmer", "display_name": "vSkimmer", "target": null }, { "id": "SuppoBox", "display_name": "SuppoBox", "target": null }, { "id": "Simda", "display_name": "Simda", "target": null }, { "id": "Pykspa", "display_name": "Pykspa", "target": null }, { "id": "SpyEye", "display_name": "SpyEye", "target": null }, { "id": "Spitmo", "display_name": "Spitmo", "target": null }, { "id": "Solar", "display_name": "Solar", "target": null }, { "id": "Nymaim", "display_name": "Nymaim", "target": null }, { "id": "DorkBot", "display_name": "DorkBot", "target": null }, { "id": "Slingshot", "display_name": "Slingshot", "target": null }, { "id": "Pony", "display_name": "Pony", "target": null }, { "id": "Plasma RAT", "display_name": "Plasma RAT", "target": null }, { "id": "Neutrino", "display_name": "Neutrino", "target": null }, { "id": "Ramnit", "display_name": "Ramnit", "target": null }, { "id": "NSIS", "display_name": "NSIS", "target": null }, { "id": "RedLine Stealer", "display_name": "RedLine Stealer", "target": null }, { "id": "InstallCore", "display_name": "InstallCore", "target": null }, { "id": "GrandCrab", "display_name": "GrandCrab", "target": null }, { "id": "Andromeda", "display_name": "Andromeda", "target": null }, { "id": "Alinaos", "display_name": "Alinaos", "target": null }, { "id": "HawkEye", "display_name": "HawkEye", "target": null }, { "id": "Kraken", "display_name": "Kraken", "target": null }, { "id": "Infy", "display_name": "Infy", "target": null }, { "id": "Dexter", "display_name": "Dexter", "target": null }, { "id": "Emotet", "display_name": "Emotet", "target": null }, { "id": "Artemis", "display_name": "Artemis", "target": null }, { "id": "ASCII", "display_name": "ASCII", "target": null }, { "id": "Athena", "display_name": "Athena", "target": null }, { "id": "Bambernek", "display_name": "Bambernek", "target": null }, { "id": "BetaBot", "display_name": "BetaBot", "target": null }, { "id": "COVID19", "display_name": "COVID19", "target": null }, { "id": "Citadel", "display_name": "Citadel", "target": null }, { "id": "Bondat", "display_name": "Bondat", "target": null }, { "id": "HideLink", "display_name": "HideLink", "target": null }, { "id": "Hydra", "display_name": "Hydra", "target": null }, { "id": "Tulach", "display_name": "Tulach", "target": null }, { "id": "Pinkslipbot", "display_name": "Pinkslipbot", "target": null } ], "attack_ids": [ { "id": "T1059", "name": "Command and Scripting Interpreter", "display_name": "T1059 - Command and Scripting Interpreter" }, { "id": "T1071", "name": "Application Layer Protocol", "display_name": "T1071 - Application Layer Protocol" }, { "id": "T1105", "name": "Ingress Tool Transfer", "display_name": "T1105 - Ingress Tool Transfer" }, { "id": "T1497", "name": "Virtualization/Sandbox Evasion", "display_name": "T1497 - Virtualization/Sandbox Evasion" }, { "id": "T1547", "name": "Boot or Logon Autostart Execution", "display_name": "T1547 - Boot or Logon Autostart Execution" }, { "id": "T1140", "name": "Deobfuscate/Decode Files or Information", "display_name": "T1140 - Deobfuscate/Decode Files or Information" }, { "id": "T1027", "name": "Obfuscated Files or Information", "display_name": "T1027 - Obfuscated Files or Information" }, { "id": "T1204", "name": "User Execution", "display_name": "T1204 - User Execution" } ], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 124, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "OctoSeek", "id": "243548", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_243548/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 8736, "FileHash-MD5": 953, "FileHash-SHA1": 489, "FileHash-SHA256": 3566, "domain": 1516, "hostname": 2221, "CVE": 6 }, "indicator_count": 17487, "is_author": false, "is_subscribing": null, "subscriber_count": 223, "modified_text": "863 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "tizermedias.com", "type": "Domain" }, "abuseipdb": null, "urlhaus": { "indicator": "tizermedias.com", "found": false, "verdict": "clean", "urls": [], "error": null }, "from_cache": true, "_cached_at": 1780343151.6927252 }