Windows Analysis Report
https://research-polls.com/fLKO/T774676

Overview

General Information

Sample URL:	https://research-polls.com/fLKO/T774676
Analysis ID:	1428247
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Signatures

Uses insecure TLS / SSL version for HTTPS connection

Source: unknown

HTTPS traffic detected: 23.206.229.226:443 -> 192.168.2.8:49750 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.8:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.8:49735 version: TLS 1.2

Uses insecure TLS / SSL version for HTTPS connection

Source: unknown

HTTPS traffic detected: 23.206.229.226:443 -> 192.168.2.8:49750 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.205.67
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.205.67
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /fLKO/T774676 HTTP/1.1Host: research-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index.php/survey/index/sid/954791/newtest/Y/lang/en/?token=T774676 HTTP/1.1Host: insight-polls.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tmp/assets/78380aab/css/font-awesome.min.css HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://insight-polls.com/index.php/survey/index/sid/954791/newtest/Y/lang/en/?token=T774676Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b
Source: global traffic	HTTP traffic detected: GET /tmp/assets/f05851e/css/jquery-ui-custom.css HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://insight-polls.com/index.php/survey/index/sid/954791/newtest/Y/lang/en/?token=T774676Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b
Source: global traffic	HTTP traffic detected: GET /tmp/assets/f05851e/css/bootstrap-slider.css HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://insight-polls.com/index.php/survey/index/sid/954791/newtest/Y/lang/en/?token=T774676Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b
Source: global traffic	HTTP traffic detected: GET /tmp/assets/f05851e/css/awesome-bootstrap-checkbox/awesome-bootstrap-checkbox.css HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://insight-polls.com/index.php/survey/index/sid/954791/newtest/Y/lang/en/?token=T774676Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b
Source: global traffic	HTTP traffic detected: GET /tmp/assets/f05851e/css/fonts-and-modern.css HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://insight-polls.com/index.php/survey/index/sid/954791/newtest/Y/lang/en/?token=T774676Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b
Source: global traffic	HTTP traffic detected: GET /tmp/assets/f05851e/css/template.css HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://insight-polls.com/index.php/survey/index/sid/954791/newtest/Y/lang/en/?token=T774676Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b
Source: global traffic	HTTP traffic detected: GET /tmp/assets/f05851e/css/custom.css HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://insight-polls.com/index.php/survey/index/sid/954791/newtest/Y/lang/en/?token=T774676Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b
Source: global traffic	HTTP traffic detected: GET /tmp/assets/8b70dfe9/decimal.js HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://insight-polls.com/index.php/survey/index/sid/954791/newtest/Y/lang/en/?token=T774676Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b
Source: global traffic	HTTP traffic detected: GET /tmp/assets/b85f3eef/jquery-2.2.4.min.js HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://insight-polls.com/index.php/survey/index/sid/954791/newtest/Y/lang/en/?token=T774676Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b
Source: global traffic	HTTP traffic detected: GET /tmp/assets/5662c9fe/js/jquery-ui-1.11.4.min.js HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://insight-polls.com/index.php/survey/index/sid/954791/newtest/Y/lang/en/?token=T774676Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b
Source: global traffic	HTTP traffic detected: GET /tmp/assets/96a1b66f/jquery.ui.touch-punch.min.js HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://insight-polls.com/index.php/survey/index/sid/954791/newtest/Y/lang/en/?token=T774676Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b
Source: global traffic	HTTP traffic detected: GET /tmp/assets/f05851e/scripts/template.js HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://insight-polls.com/index.php/survey/index/sid/954791/newtest/Y/lang/en/?token=T774676Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b
Source: global traffic	HTTP traffic detected: GET /tmp/assets/f05851e/scripts/bootstrap-slider.js HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://insight-polls.com/index.php/survey/index/sid/954791/newtest/Y/lang/en/?token=T774676Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b
Source: global traffic	HTTP traffic detected: GET /tmp/assets/f05851e/scripts/question-scripts.min.js HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://insight-polls.com/index.php/survey/index/sid/954791/newtest/Y/lang/en/?token=T774676Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b
Source: global traffic	HTTP traffic detected: GET /scripts/survey_runtime.js HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://insight-polls.com/index.php/survey/index/sid/954791/newtest/Y/lang/en/?token=T774676Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b
Source: global traffic	HTTP traffic detected: GET /scripts/expressions/em_javascript.js HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://insight-polls.com/index.php/survey/index/sid/954791/newtest/Y/lang/en/?token=T774676Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b
Source: global traffic	HTTP traffic detected: GET /scripts/deactivatedebug.js HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://insight-polls.com/index.php/survey/index/sid/954791/newtest/Y/lang/en/?token=T774676Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b
Source: global traffic	HTTP traffic detected: GET /tmp/assets/2947cd54/js/bootstrap.min.js HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://insight-polls.com/index.php/survey/index/sid/954791/newtest/Y/lang/en/?token=T774676Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /tmp/assets/f05851e/fonts/Exo2-SemiBold.woff2 HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://insight-polls.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://insight-polls.com/tmp/assets/f05851e/css/fonts-and-modern.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b; pMode=3; rotationTracker=Intro; CRO=
Source: global traffic	HTTP traffic detected: GET /tmp/assets/f05851e/fonts/Exo2-Regular.woff2 HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://insight-polls.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://insight-polls.com/tmp/assets/f05851e/css/fonts-and-modern.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b; pMode=3; rotationTracker=Intro; CRO=
Source: global traffic	HTTP traffic detected: GET /tmp/assets/78380aab/fonts/fontawesome-webfont.woff2?v=4.6.1 HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://insight-polls.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://insight-polls.com/tmp/assets/78380aab/css/font-awesome.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b; pMode=3; rotationTracker=Intro; CRO=
Source: global traffic	HTTP traffic detected: GET /templates/blue/favicon.ico HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://insight-polls.com/index.php/survey/index/sid/954791/newtest/Y/lang/en/?token=T774676Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b; pMode=3; rotationTracker=Intro; CRO=; _gid=GA1.2.6719481.1713457016; _gat_gtag_UA_162268671_7=1; _ga_EGK6G7QJYS=GS1.1.1713457016.1.0.1713457016.0.0.0; _ga=GA1.1.707207172.1713457016
Source: global traffic	HTTP traffic detected: GET /templates/blue/favicon.ico HTTP/1.1Host: insight-polls.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b; pMode=3; rotationTracker=Intro; CRO=; _gid=GA1.2.6719481.1713457016; _gat_gtag_UA_162268671_7=1; _ga_EGK6G7QJYS=GS1.1.1713457016.1.0.1713457016.0.0.0; _ga=GA1.1.707207172.1713457016

Source: chromecache_98.2.dr, chromecache_110.2.dr

String found in binary or memory: return b}oC.H="internal.enableAutoEventOnTimer";var gc=ia(["data-gtm-yt-inspected-"]),qC=["www.youtube.com","www.youtube-nocookie.com"],rC,sC=!1; equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: research-polls.com

Source: unknown

HTTP traffic detected: POST /threshold/xls.aspx HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: */*Accept-Language: en-CHContent-type: text/xmlX-Agent-DeviceId: 01000A4109008217X-BM-CBT: 1696494873X-BM-DateFormat: dd/MM/yyyyX-BM-DeviceDimensions: 784x984X-BM-DeviceDimensionsLogical: 784x984X-BM-DeviceScale: 100X-BM-DTZ: 120X-BM-Market: CHX-BM-Theme: 000000;0078d7X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Device-ClientSession: 229C124F14F843F693B4EF574DFCAAABX-Device-isOptin: falseX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-Device-OSSKU: 48X-Device-Touch: falseX-DeviceID: 01000A4109008217X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,d-thshldspcl40X-MSEdge-ExternalExpType: JointCoordX-PositionerType: DesktopX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-UserAgeClass: UnknownAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comContent-Length: 516Connection: Keep-AliveCache-Control: no-cacheCookie: SRCHUID=V=2&GUID=7A0479E0E07C4D7D91A8C7552F34E6D4&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231005; SRCHHPGUSR=SRCHLANG=en&LUT=1696493908190&IPMH=7bc3b11d&IPMID=1696494873321&HV=1696494765; CortanaAppUID=0A2376201E427A029407F32A9072506A; MUID=4E6D5F19647E45969740B90CC0355D4C; _SS=SID=1F4D6C7F4B26664337657FDE4A3767CB&CPID=1696494874312&AC=1&CPH=893a1c21; _EDGE_S=SID=1F4D6C7F4B26664337657FDE4A3767CB; MUIDB=4E6D5F19647E45969740B90CC0355D4C

Source: chromecache_93.2.dr	String found in binary or memory: http://aidanlister.com/)
Source: chromecache_93.2.dr	String found in binary or memory: http://amatiasq.com)
Source: chromecache_93.2.dr	String found in binary or memory: http://benblume.co.uk/)
Source: chromecache_93.2.dr	String found in binary or memory: http://blog.kukawski.pl)
Source: chromecache_93.2.dr	String found in binary or memory: http://blog.kukawski.pl/)
Source: chromecache_93.2.dr	String found in binary or memory: http://blog.stevenlevithan.com)
Source: chromecache_104.2.dr	String found in binary or memory: http://bootswatch.com
Source: chromecache_93.2.dr	String found in binary or memory: http://brett-zamir.me)
Source: chromecache_93.2.dr	String found in binary or memory: http://caioariede.com)
Source: chromecache_93.2.dr	String found in binary or memory: http://carrot.org/)
Source: chromecache_93.2.dr	String found in binary or memory: http://developer.yahoo.com/yui/docs/YAHOO.util.DateLocale.html
Source: chromecache_93.2.dr	String found in binary or memory: http://difane.com/)
Source: chromecache_93.2.dr	String found in binary or memory: http://doubleaw.com/)
Source: chromecache_93.2.dr	String found in binary or memory: http://dt.in.th/2008-09-16.string-length-in-bytes.html)
Source: chromecache_92.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_92.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_93.2.dr	String found in binary or memory: http://geekfg.blogspot.com)
Source: chromecache_86.2.dr, chromecache_104.2.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_93.2.dr	String found in binary or memory: http://getsprink.com)
Source: chromecache_93.2.dr	String found in binary or memory: http://github.com/plepe)
Source: chromecache_93.2.dr	String found in binary or memory: http://hacks.bluesmoon.info/strftime/strftime.js
Source: chromecache_93.2.dr	String found in binary or memory: http://hexmen.com/blog/)
Source: chromecache_93.2.dr	String found in binary or memory: http://http/my.opera.com/fearphage/)
Source: chromecache_93.2.dr	String found in binary or memory: http://innerdom.sourceforge.net/)
Source: chromecache_93.2.dr	String found in binary or memory: http://javascript.crockford.com)
Source: chromecache_95.2.dr, chromecache_107.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_95.2.dr	String found in binary or memory: http://jqueryui.com/themeroller/?ffDefault=Arial%2CHelvetica%2Csans-serif&fsDefault=1em&fwDefault=no
Source: chromecache_93.2.dr, chromecache_102.2.dr	String found in binary or memory: http://kevin.vanzonneveld.net
Source: chromecache_93.2.dr	String found in binary or memory: http://kevin.vanzonneveld.net)
Source: chromecache_93.2.dr	String found in binary or memory: http://kevin.vanzonneveld.net/)
Source: chromecache_93.2.dr	String found in binary or memory: http://kukawski.pl)
Source: chromecache_93.2.dr	String found in binary or memory: http://kvz.io)
Source: chromecache_93.2.dr	String found in binary or memory: http://locutus.io/php/strtotime/
Source: chromecache_93.2.dr	String found in binary or memory: http://lucassmith.name)
Source: chromecache_93.2.dr	String found in binary or memory: http://magnetiq.com)
Source: chromecache_93.2.dr	String found in binary or memory: http://mg-crea.com/)
Source: chromecache_93.2.dr	String found in binary or memory: http://onlineaspect.com/2007/06/08/auto-detect-a-time-zone-with-javascript/)
Source: chromecache_93.2.dr	String found in binary or memory: http://oskar-lh.name/)
Source: chromecache_93.2.dr	String found in binary or memory: http://pear.php.net/user/jausions)
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/authors)
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/380:380#comment_137122)
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/addslashes
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/checkdate
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/get_html_translation_table
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/get_html_translation_table:416#comment_97660
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/gmdate
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/html_entity_decode
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/htmlentities
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/htmlentities:425#comment_134018)
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/htmlspecialchars
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/htmlspecialchars_decode
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/idate
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/is_bool
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/is_int/
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/is_numeric/
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/ltrim
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/mktime
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/nl2br/
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/quoted_printable_decode
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/quotemeta
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/rtrim
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/sprintf
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/str_pad
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/str_repeat
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/strcasecmp
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/strcmp
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/strip_tags
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/stripos
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/stristr
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/strrev
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/strstr
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/substr
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/time
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/trim
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/ucwords
Source: chromecache_93.2.dr	String found in binary or memory: http://rumkin.com)
Source: chromecache_93.2.dr	String found in binary or memory: http://ryan.10e.us)
Source: chromecache_93.2.dr	String found in binary or memory: http://sammy.ru)
Source: chromecache_93.2.dr	String found in binary or memory: http://simonwillison.net)
Source: chromecache_93.2.dr	String found in binary or memory: http://snippets.dzone.com/user/AlexanderErmolaev)
Source: chromecache_91.2.dr	String found in binary or memory: http://stackoverflow.com/questions/10454518/javascript-how-to-retrieve-the-number-of-decimals-of-a-s
Source: chromecache_93.2.dr	String found in binary or memory: http://stackoverflow.com/questions/57803/how-to-convert-decimal-to-hex-in-javascript
Source: chromecache_91.2.dr	String found in binary or memory: http://stackoverflow.com/questions/846221/logarithmic-slider
Source: chromecache_93.2.dr	String found in binary or memory: http://tech.bluesmoon.info/)
Source: chromecache_93.2.dr	String found in binary or memory: http://thiagomata.blog.com)
Source: chromecache_93.2.dr	String found in binary or memory: http://unicode.org/reports/tr44/#Property_Table
Source: chromecache_93.2.dr	String found in binary or memory: http://web2.bitbaro.hu/)
Source: chromecache_93.2.dr	String found in binary or memory: http://webdevhobo.blogspot.com/)
Source: chromecache_93.2.dr	String found in binary or memory: http://webreflection.blogspot.com)
Source: chromecache_93.2.dr	String found in binary or memory: http://wermann.com.br)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.3rd-Eden.com)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.alfonsojimenez.com)
Source: chromecache_94.2.dr, chromecache_91.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_93.2.dr	String found in binary or memory: http://www.bjornroesbeke.be/)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.brantmessenger.com/)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.breakingpar.com/bkp/home.nsf/0/87256B280015193F87256CFB006C45F7)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.debuggable.com/felix)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.distantia.ca/)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.erlenwiese.de/)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.freaky-media.com/)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.frontierwebdev.com/)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.itsacon.net/)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.james-bell.co.uk/)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.jd-tech.net)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.jsfromhell.com)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.json.org/json2.js)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.kingsquare.nl)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.letorbi.de/)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.mastersoup.com/)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.mdsjack.bo.it)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.myipdf.com/)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.nbill.co.uk/)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.nervous.nl/)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.pedrotainha.com)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.phpvrouwen.nl)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.premasolutions.com/)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.quirksmode.org/js/beat.html)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.residence-mixte.com/)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.svest.org/)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.terabit.ca/)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.webapp.fr)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.webfaktory.info/)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.webtoolkit.info/)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.weedem.fr/)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.winternet.no)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.ws3.es/)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.xorax.info)
Source: chromecache_93.2.dr	String found in binary or memory: http://yass.meetcweb.com)
Source: chromecache_98.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_98.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_90.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_98.2.dr, chromecache_110.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_93.2.dr	String found in binary or memory: https://developer.mozilla.org/En/Using_XMLHttpRequest
Source: chromecache_103.2.dr	String found in binary or memory: https://github.com/MikeMcl/decimal.js
Source: chromecache_103.2.dr	String found in binary or memory: https://github.com/MikeMcl/decimal.js/LICENCE
Source: chromecache_104.2.dr	String found in binary or memory: https://github.com/h5bp/html5-boilerplate/blob/master/src/css/main.css
Source: chromecache_104.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_93.2.dr	String found in binary or memory: https://manual.limesurvey.org/Project_ideas_for_GSoC_2015#Expression_Manager_JavaScript_optimization
Source: chromecache_98.2.dr, chromecache_110.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_98.2.dr, chromecache_110.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_93.2.dr	String found in binary or memory: https://sourceforge.net/projects/bcmath-js/)
Source: chromecache_93.2.dr	String found in binary or memory: https://sourceforge.net/projects/bcmath-js/this.)
Source: chromecache_98.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_98.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_90.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_90.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_98.2.dr, chromecache_110.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_110.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_90.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_90.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_90.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_98.2.dr, chromecache_110.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_90.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_98.2.dr, chromecache_110.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_98.2.dr, chromecache_110.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_90.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_98.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443

Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.8:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.8:49735 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@17/57@8/6

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=1956,i,7160089607047078356,21755619593161457,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://research-polls.com/fLKO/T774676"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=1956,i,7160089607047078356,21755619593161457,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.105.103	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
3.208.204.145	insight-polls.com	United States	14618	AMAZON-AESUS	false
3.211.52.151	research-polls.com	United States	14618	AMAZON-AESUS	false

Private

IP
192.168.2.8
192.168.2.16

Contacted Domains

Name	IP	Active
research-polls.com	3.211.52.151	true
www.google.com	142.250.105.103	true
insight-polls.com	3.208.204.145	true
fp2e7a.wpc.phicdn.net	192.229.211.108	true

Contacted URLs

Name	Malicious	Reputation
https://insight-polls.com/scripts/survey_runtime.js	false	unknown
https://insight-polls.com/tmp/assets/96a1b66f/jquery.ui.touch-punch.min.js	false	unknown
https://insight-polls.com/tmp/assets/f05851e/scripts/template.js	false	unknown
https://insight-polls.com/templates/blue/favicon.ico	false	unknown
https://insight-polls.com/tmp/assets/f05851e/css/template.css	false	unknown
https://insight-polls.com/tmp/assets/8b70dfe9/decimal.js	false	unknown
https://research-polls.com/fLKO/T774676	false	unknown
https://insight-polls.com/tmp/assets/f05851e/fonts/Exo2-SemiBold.woff2	false	unknown
https://insight-polls.com/tmp/assets/2947cd54/js/bootstrap.min.js	false	unknown
https://insight-polls.com/scripts/deactivatedebug.js	false	unknown
https://insight-polls.com/tmp/assets/f05851e/css/jquery-ui-custom.css	false	unknown
https://insight-polls.com/tmp/assets/f05851e/css/bootstrap-slider.css	false	unknown
https://insight-polls.com/tmp/assets/f05851e/css/custom.css	false	unknown

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 15:16:50 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	C114787BA84F2BE32AC844CE87951E55	73C0BF7CE7759322BB931D18DE939FD06C8EAC6B	3F3317B1F52AD5BB415C55E13E0AFA46C3392EC3F27E013DA72C9BD9686F1775
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 15:16:50 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	D4F49CE24525EA45C7264D4580F93449	E8B0ACE1BDEE111F9CDD3844A8DCCBFDC94F8E22	ADE0DAF1E997E4B101EDCAB00918726425B40FD673A2DF8CE4C6AA23C7D37EED
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 07:00:51 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	28C0D4CEF93F4AB4AD78EB6159FC80BA	272E2FCC463223D78815BE5C88081C8CE8CCB8CB	429BB905F2C5ECD8FDD878173C06D09FF2EF9B657F6580C442A13FFF92257777
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 15:16:50 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	EDE75058DA5C6A013F1D67BFED1E036A	063E16A6F1504B99E74A10B287E17EB499AF8CDC	1A86A4208EE31BA4DAD856FBFABAFA671DAFEA78AF685F7575C88FB8E1534744
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 15:16:50 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	6C8D24CE03055D551A67EEB18B5989C6	3F66619DEED877DAE8486AE15F58BBF0DB799128	17866DE5E0793C3C6CF18A8CFA4F05D5048E186E41908F45B4B8196070C9294A
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 15:16:50 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	035E40C7503D04CA0C8E8C0C04E52493	9850C2695D07AF1566ED6C7C06DF2EE0F84B050A	629DE33217BA22324E624004A73D51244BD0A1261622789B213A7F9A85D61F59
Chrome Cache Entry: 100	ASCII text	A143BF23BD341B2729D41DAD8FC936FD	2A8543BB39AE31D9F81C517777EFEC32E37B5808	8025D0E719DF26250EB49E463A0DE8C918A4A3847DB2E9876993D0AAA1D5464A
Chrome Cache Entry: 101	Unicode text, UTF-8 text	13DDE1B3D36647DBE8345564F37AE4EF	BD51CE7E5D07AC8D4E3EFB39618E4192FCE7A81D	0C364B577B064F27C9930E18F250C703753FC1114105B8885ACB88FC5986A565
Chrome Cache Entry: 102	ASCII text, with very long lines (530)	CC11327276449E1A8F09B184D1100C38	3D785494B53EC609F02D9F766217B4EC3AA6D5E6	63282C9D924BBC9AAA04760B8836C0B341511C393B3B63D3B4AF9E966DF0B457
Chrome Cache Entry: 103	Unicode text, UTF-8 text, with very long lines (1040)	EB43AA1A76B80D7438AD02819B3E2868	D42411A9C662669FF327ECFD6BF99471F36BA071	BEE8FBC2B07E7A69A4A5B0E4F99EFDB874B77474FECEC3129CE6C84E8FC886A4
Chrome Cache Entry: 104	ASCII text, with very long lines (540)	B89E994FC6D0B811A15F17E2F2D0124B	8F04A3828D2893CA134AD08BC12AC6FC37066C70	110E3F856EE1430A2BEA718939CF7FFC2941B72F856B6266E63BFA6CA07911D4
Chrome Cache Entry: 105	Web Open Font Format (Version 2), TrueType, length 41796, version 1.0	5059452EE1E9CBF9A744B794AEE56F24	EFBA0706E9DDB0306FA13A928D94FE95A2F8AEB3	E49067B08C979352FF8338BD56A50FD5EDE023BD4C30DF9A4130240BE9B55603
Chrome Cache Entry: 106	ASCII text	47F40BEFA13AE82D72F17C084022E556	7498EFB52A15081CC5BAA8E515EB995A6B2FAA02	8C8D55753E29ED4A781107EB879B4F9B3AC21BACFA38BF0D079DC11DE9222716
Chrome Cache Entry: 107	ASCII text, with very long lines (33392)	4E240683463930FA3CC7713D755D3D3D	208F10512C987C773604D8C7492549F57F4626C5	90104417E6A670574DE3FBDB995220F9E8E849DF2CD92607560AB1B64FA438FA
Chrome Cache Entry: 108	ASCII text, with very long lines (997)	0E390E86B02E36B6240EF27C01B63A4B	0D216C812C71059D1526D4C558277E51E4495D8A	8074D47B5FC9E9BDCB9656D4F775B9CE839EFD9060C3640ED434BFA1F88BA94D
Chrome Cache Entry: 109	MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel	8644B4E12D708F7B192FAC19521349DE	6EEF7734ACF07C245A005D605B564C2CC9BD3C38	82E7B4184424D798A3201CC68BCEE6DEE91439D76E0AD1AF906B36EC4D9B8BF4
Chrome Cache Entry: 110	ASCII text, with very long lines (4179)	7B62B55190426A38477867C1CA1A07D9	95FA821351F0FBB6F3CB3A54CE98035DFB2EE6FF	B0D6BDE1BD97638B3FC10285151671B87479293DF6A894C07E454C1405756129
Chrome Cache Entry: 85	assembler source, Unicode text, UTF-8 text	7ECBAB0239D830B376B2E6522D996035	A116894ABFB46CB58A54B2B3D0335E50C26A439B	AD0CA379D38DEAFEB5D343847F87512A4D92688560B10BF1F24FCFDEF67AA9D3
Chrome Cache Entry: 86	ASCII text, with very long lines (32034)	4BECDC9104623E891FBB9D38BBA01BE4	6C264E0E0026AB5ECE49350C6A8812398E696CBB	4A4DE7903EA62D330E17410EA4DB6C22BCBEB350AC6AA402D6B54B4C0CBED327
Chrome Cache Entry: 87	ASCII text, with very long lines (32065)	2F6B11A7E914718E0290410E85366FE9	69BB69E25CA7D5EF0935317584E6153F3FD9A88C	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
Chrome Cache Entry: 88	ASCII text, with very long lines (10685)	171F512081D5D895D87753FC8F1BBD02	FC908ACD6991DDD0AA4725CB1510DC721411FAC1	AF663B5B6FE5BEED7C6006E1C91F1DEFBD3F57AC3862E6C3538EA91AA811B23F
Chrome Cache Entry: 89	ASCII text	1E8D08FBD4EF627258E432D760AD515B	D47AD6A6E204E9FCC498B54A81C1FEFF41B3BDBB	3E3C3767A6AA14404D6579E34268C237168D13A4A912365D56DA8209366926E1
Chrome Cache Entry: 90	ASCII text, with very long lines (2343)	575B5480531DA4D14E7453E2016FE0BC	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
Chrome Cache Entry: 91	ASCII text	A10E659B26EAC433758F36611AC1BE7D	AB90AA35BABE296DA10F471CE2EC68A9CDB2D86E	FC290EB325CA2C9872CB8A0244E2B48AE3D89F01C117BED5CFAAC76F7A1260D8
Chrome Cache Entry: 92	ASCII text, with very long lines (28596)	89916FA773CE96569604016EF25CAB50	6F794D3B074C0275E3213AF5611A67817979E207	B5D7707EA8FC00AAE40BF500AC7498D7F32F6B1BBFF7B4FDE976A40345EB5F9D
Chrome Cache Entry: 93	Unicode text, UTF-8 text	FAAD5BE2797B67032B37DA9F280D4192	BAE6B1E00E31ACF4E915CB178D19B0E1C921E4C3	91C40912146CA3E79EDDF01C11498556347FFDF92FEDFB588DC90C8D96809EFD
Chrome Cache Entry: 94	ASCII text	C1422B1F3DC61E3C9635969694BA434E	8C0E41F526E74CF5ECFF41E0EE1CE807A030E9EF	51022942D2EF668DA1A8AF839EA563BFFD5C08EEFFAC6BB89ED8AF5424746D2B
Chrome Cache Entry: 95	ASCII text, with very long lines (1165)	87F1DE38605F5C84112F2A548D77CBF3	E74E10C20CFCE7C84E8E748A771A708C577568C7	0A43D6E1FE78797FD412B522510F96861CF993C4B749D594C60D1B0A4A0C14B3
Chrome Cache Entry: 96	Web Open Font Format (Version 2), TrueType, length 70728, version 4.393	926C93D201FE51C8F351E858468980C3	977357F82830F57FBDAC2492DD421E5DCCE44A1A	D3EBB498192527B985939AE62CC4E5EB5C108EFC1896184126B45D866868E73D
Chrome Cache Entry: 97	MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel	8644B4E12D708F7B192FAC19521349DE	6EEF7734ACF07C245A005D605B564C2CC9BD3C38	82E7B4184424D798A3201CC68BCEE6DEE91439D76E0AD1AF906B36EC4D9B8BF4
Chrome Cache Entry: 98	ASCII text, with very long lines (4179)	5246981E8D0BA3CABEA796403D118A64	5AFBC343CC75E7A76551344A7551BBB3679D4186	ABD69ACD7A3BF70BF346FFE7B1C98769E28DCC66E6FD9707CF69739049D42380
Chrome Cache Entry: 99	Web Open Font Format (Version 2), TrueType, length 40188, version 1.0	EE1DD19BF89A3472C238FE4959644322	5FFF2458E0B97404E49021BEB5DC2943D0EFC4E5	8803496AE247956A7189BA9C1FA4FE053D5FD43FBE362935313E279B4D9AFB50

Uses insecure TLS / SSL version for HTTPS connection

Source: unknown

HTTPS traffic detected: 23.206.229.226:443 -> 192.168.2.8:49750 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.8:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.8:49735 version: TLS 1.2

Uses insecure TLS / SSL version for HTTPS connection

Source: unknown

HTTPS traffic detected: 23.206.229.226:443 -> 192.168.2.8:49750 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.205.67
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.205.67
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /fLKO/T774676 HTTP/1.1Host: research-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index.php/survey/index/sid/954791/newtest/Y/lang/en/?token=T774676 HTTP/1.1Host: insight-polls.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tmp/assets/78380aab/css/font-awesome.min.css HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://insight-polls.com/index.php/survey/index/sid/954791/newtest/Y/lang/en/?token=T774676Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b
Source: global traffic	HTTP traffic detected: GET /tmp/assets/f05851e/css/jquery-ui-custom.css HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://insight-polls.com/index.php/survey/index/sid/954791/newtest/Y/lang/en/?token=T774676Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b
Source: global traffic	HTTP traffic detected: GET /tmp/assets/f05851e/css/bootstrap-slider.css HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://insight-polls.com/index.php/survey/index/sid/954791/newtest/Y/lang/en/?token=T774676Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b
Source: global traffic	HTTP traffic detected: GET /tmp/assets/f05851e/css/awesome-bootstrap-checkbox/awesome-bootstrap-checkbox.css HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://insight-polls.com/index.php/survey/index/sid/954791/newtest/Y/lang/en/?token=T774676Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b
Source: global traffic	HTTP traffic detected: GET /tmp/assets/f05851e/css/fonts-and-modern.css HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://insight-polls.com/index.php/survey/index/sid/954791/newtest/Y/lang/en/?token=T774676Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b
Source: global traffic	HTTP traffic detected: GET /tmp/assets/f05851e/css/template.css HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://insight-polls.com/index.php/survey/index/sid/954791/newtest/Y/lang/en/?token=T774676Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b
Source: global traffic	HTTP traffic detected: GET /tmp/assets/f05851e/css/custom.css HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://insight-polls.com/index.php/survey/index/sid/954791/newtest/Y/lang/en/?token=T774676Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b
Source: global traffic	HTTP traffic detected: GET /tmp/assets/8b70dfe9/decimal.js HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://insight-polls.com/index.php/survey/index/sid/954791/newtest/Y/lang/en/?token=T774676Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b
Source: global traffic	HTTP traffic detected: GET /tmp/assets/b85f3eef/jquery-2.2.4.min.js HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://insight-polls.com/index.php/survey/index/sid/954791/newtest/Y/lang/en/?token=T774676Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b
Source: global traffic	HTTP traffic detected: GET /tmp/assets/5662c9fe/js/jquery-ui-1.11.4.min.js HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://insight-polls.com/index.php/survey/index/sid/954791/newtest/Y/lang/en/?token=T774676Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b
Source: global traffic	HTTP traffic detected: GET /tmp/assets/96a1b66f/jquery.ui.touch-punch.min.js HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://insight-polls.com/index.php/survey/index/sid/954791/newtest/Y/lang/en/?token=T774676Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b
Source: global traffic	HTTP traffic detected: GET /tmp/assets/f05851e/scripts/template.js HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://insight-polls.com/index.php/survey/index/sid/954791/newtest/Y/lang/en/?token=T774676Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b
Source: global traffic	HTTP traffic detected: GET /tmp/assets/f05851e/scripts/bootstrap-slider.js HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://insight-polls.com/index.php/survey/index/sid/954791/newtest/Y/lang/en/?token=T774676Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b
Source: global traffic	HTTP traffic detected: GET /tmp/assets/f05851e/scripts/question-scripts.min.js HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://insight-polls.com/index.php/survey/index/sid/954791/newtest/Y/lang/en/?token=T774676Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b
Source: global traffic	HTTP traffic detected: GET /scripts/survey_runtime.js HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://insight-polls.com/index.php/survey/index/sid/954791/newtest/Y/lang/en/?token=T774676Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b
Source: global traffic	HTTP traffic detected: GET /scripts/expressions/em_javascript.js HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://insight-polls.com/index.php/survey/index/sid/954791/newtest/Y/lang/en/?token=T774676Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b
Source: global traffic	HTTP traffic detected: GET /scripts/deactivatedebug.js HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://insight-polls.com/index.php/survey/index/sid/954791/newtest/Y/lang/en/?token=T774676Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b
Source: global traffic	HTTP traffic detected: GET /tmp/assets/2947cd54/js/bootstrap.min.js HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://insight-polls.com/index.php/survey/index/sid/954791/newtest/Y/lang/en/?token=T774676Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /tmp/assets/f05851e/fonts/Exo2-SemiBold.woff2 HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://insight-polls.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://insight-polls.com/tmp/assets/f05851e/css/fonts-and-modern.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b; pMode=3; rotationTracker=Intro; CRO=
Source: global traffic	HTTP traffic detected: GET /tmp/assets/f05851e/fonts/Exo2-Regular.woff2 HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://insight-polls.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://insight-polls.com/tmp/assets/f05851e/css/fonts-and-modern.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b; pMode=3; rotationTracker=Intro; CRO=
Source: global traffic	HTTP traffic detected: GET /tmp/assets/78380aab/fonts/fontawesome-webfont.woff2?v=4.6.1 HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://insight-polls.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://insight-polls.com/tmp/assets/78380aab/css/font-awesome.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b; pMode=3; rotationTracker=Intro; CRO=
Source: global traffic	HTTP traffic detected: GET /templates/blue/favicon.ico HTTP/1.1Host: insight-polls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://insight-polls.com/index.php/survey/index/sid/954791/newtest/Y/lang/en/?token=T774676Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b; pMode=3; rotationTracker=Intro; CRO=; _gid=GA1.2.6719481.1713457016; _gat_gtag_UA_162268671_7=1; _ga_EGK6G7QJYS=GS1.1.1713457016.1.0.1713457016.0.0.0; _ga=GA1.1.707207172.1713457016
Source: global traffic	HTTP traffic detected: GET /templates/blue/favicon.ico HTTP/1.1Host: insight-polls.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=blf8u7jg84i7mv6ju92ccg3egs; YII_CSRF_TOKEN=6a8af9f9b52eb90486faf1013a008ebb9c29f66b; pMode=3; rotationTracker=Intro; CRO=; _gid=GA1.2.6719481.1713457016; _gat_gtag_UA_162268671_7=1; _ga_EGK6G7QJYS=GS1.1.1713457016.1.0.1713457016.0.0.0; _ga=GA1.1.707207172.1713457016

Source: chromecache_98.2.dr, chromecache_110.2.dr

Source: unknown

DNS traffic detected: queries for: research-polls.com

Source: unknown

Source: chromecache_93.2.dr	String found in binary or memory: http://aidanlister.com/)
Source: chromecache_93.2.dr	String found in binary or memory: http://amatiasq.com)
Source: chromecache_93.2.dr	String found in binary or memory: http://benblume.co.uk/)
Source: chromecache_93.2.dr	String found in binary or memory: http://blog.kukawski.pl)
Source: chromecache_93.2.dr	String found in binary or memory: http://blog.kukawski.pl/)
Source: chromecache_93.2.dr	String found in binary or memory: http://blog.stevenlevithan.com)
Source: chromecache_104.2.dr	String found in binary or memory: http://bootswatch.com
Source: chromecache_93.2.dr	String found in binary or memory: http://brett-zamir.me)
Source: chromecache_93.2.dr	String found in binary or memory: http://caioariede.com)
Source: chromecache_93.2.dr	String found in binary or memory: http://carrot.org/)
Source: chromecache_93.2.dr	String found in binary or memory: http://developer.yahoo.com/yui/docs/YAHOO.util.DateLocale.html
Source: chromecache_93.2.dr	String found in binary or memory: http://difane.com/)
Source: chromecache_93.2.dr	String found in binary or memory: http://doubleaw.com/)
Source: chromecache_93.2.dr	String found in binary or memory: http://dt.in.th/2008-09-16.string-length-in-bytes.html)
Source: chromecache_92.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_92.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_93.2.dr	String found in binary or memory: http://geekfg.blogspot.com)
Source: chromecache_86.2.dr, chromecache_104.2.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_93.2.dr	String found in binary or memory: http://getsprink.com)
Source: chromecache_93.2.dr	String found in binary or memory: http://github.com/plepe)
Source: chromecache_93.2.dr	String found in binary or memory: http://hacks.bluesmoon.info/strftime/strftime.js
Source: chromecache_93.2.dr	String found in binary or memory: http://hexmen.com/blog/)
Source: chromecache_93.2.dr	String found in binary or memory: http://http/my.opera.com/fearphage/)
Source: chromecache_93.2.dr	String found in binary or memory: http://innerdom.sourceforge.net/)
Source: chromecache_93.2.dr	String found in binary or memory: http://javascript.crockford.com)
Source: chromecache_95.2.dr, chromecache_107.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_95.2.dr	String found in binary or memory: http://jqueryui.com/themeroller/?ffDefault=Arial%2CHelvetica%2Csans-serif&fsDefault=1em&fwDefault=no
Source: chromecache_93.2.dr, chromecache_102.2.dr	String found in binary or memory: http://kevin.vanzonneveld.net
Source: chromecache_93.2.dr	String found in binary or memory: http://kevin.vanzonneveld.net)
Source: chromecache_93.2.dr	String found in binary or memory: http://kevin.vanzonneveld.net/)
Source: chromecache_93.2.dr	String found in binary or memory: http://kukawski.pl)
Source: chromecache_93.2.dr	String found in binary or memory: http://kvz.io)
Source: chromecache_93.2.dr	String found in binary or memory: http://locutus.io/php/strtotime/
Source: chromecache_93.2.dr	String found in binary or memory: http://lucassmith.name)
Source: chromecache_93.2.dr	String found in binary or memory: http://magnetiq.com)
Source: chromecache_93.2.dr	String found in binary or memory: http://mg-crea.com/)
Source: chromecache_93.2.dr	String found in binary or memory: http://onlineaspect.com/2007/06/08/auto-detect-a-time-zone-with-javascript/)
Source: chromecache_93.2.dr	String found in binary or memory: http://oskar-lh.name/)
Source: chromecache_93.2.dr	String found in binary or memory: http://pear.php.net/user/jausions)
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/authors)
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/380:380#comment_137122)
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/addslashes
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/checkdate
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/get_html_translation_table
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/get_html_translation_table:416#comment_97660
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/gmdate
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/html_entity_decode
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/htmlentities
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/htmlentities:425#comment_134018)
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/htmlspecialchars
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/htmlspecialchars_decode
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/idate
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/is_bool
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/is_int/
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/is_numeric/
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/ltrim
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/mktime
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/nl2br/
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/quoted_printable_decode
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/quotemeta
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/rtrim
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/sprintf
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/str_pad
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/str_repeat
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/strcasecmp
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/strcmp
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/strip_tags
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/stripos
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/stristr
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/strrev
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/strstr
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/substr
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/time
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/trim
Source: chromecache_93.2.dr	String found in binary or memory: http://phpjs.org/functions/ucwords
Source: chromecache_93.2.dr	String found in binary or memory: http://rumkin.com)
Source: chromecache_93.2.dr	String found in binary or memory: http://ryan.10e.us)
Source: chromecache_93.2.dr	String found in binary or memory: http://sammy.ru)
Source: chromecache_93.2.dr	String found in binary or memory: http://simonwillison.net)
Source: chromecache_93.2.dr	String found in binary or memory: http://snippets.dzone.com/user/AlexanderErmolaev)
Source: chromecache_91.2.dr	String found in binary or memory: http://stackoverflow.com/questions/10454518/javascript-how-to-retrieve-the-number-of-decimals-of-a-s
Source: chromecache_93.2.dr	String found in binary or memory: http://stackoverflow.com/questions/57803/how-to-convert-decimal-to-hex-in-javascript
Source: chromecache_91.2.dr	String found in binary or memory: http://stackoverflow.com/questions/846221/logarithmic-slider
Source: chromecache_93.2.dr	String found in binary or memory: http://tech.bluesmoon.info/)
Source: chromecache_93.2.dr	String found in binary or memory: http://thiagomata.blog.com)
Source: chromecache_93.2.dr	String found in binary or memory: http://unicode.org/reports/tr44/#Property_Table
Source: chromecache_93.2.dr	String found in binary or memory: http://web2.bitbaro.hu/)
Source: chromecache_93.2.dr	String found in binary or memory: http://webdevhobo.blogspot.com/)
Source: chromecache_93.2.dr	String found in binary or memory: http://webreflection.blogspot.com)
Source: chromecache_93.2.dr	String found in binary or memory: http://wermann.com.br)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.3rd-Eden.com)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.alfonsojimenez.com)
Source: chromecache_94.2.dr, chromecache_91.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_93.2.dr	String found in binary or memory: http://www.bjornroesbeke.be/)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.brantmessenger.com/)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.breakingpar.com/bkp/home.nsf/0/87256B280015193F87256CFB006C45F7)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.debuggable.com/felix)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.distantia.ca/)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.erlenwiese.de/)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.freaky-media.com/)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.frontierwebdev.com/)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.itsacon.net/)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.james-bell.co.uk/)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.jd-tech.net)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.jsfromhell.com)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.json.org/json2.js)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.kingsquare.nl)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.letorbi.de/)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.mastersoup.com/)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.mdsjack.bo.it)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.myipdf.com/)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.nbill.co.uk/)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.nervous.nl/)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.pedrotainha.com)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.phpvrouwen.nl)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.premasolutions.com/)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.quirksmode.org/js/beat.html)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.residence-mixte.com/)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.svest.org/)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.terabit.ca/)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.webapp.fr)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.webfaktory.info/)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.webtoolkit.info/)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.weedem.fr/)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.winternet.no)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.ws3.es/)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.xorax.info)
Source: chromecache_93.2.dr	String found in binary or memory: http://yass.meetcweb.com)
Source: chromecache_98.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_98.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_90.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_98.2.dr, chromecache_110.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_93.2.dr	String found in binary or memory: https://developer.mozilla.org/En/Using_XMLHttpRequest
Source: chromecache_103.2.dr	String found in binary or memory: https://github.com/MikeMcl/decimal.js
Source: chromecache_103.2.dr	String found in binary or memory: https://github.com/MikeMcl/decimal.js/LICENCE
Source: chromecache_104.2.dr	String found in binary or memory: https://github.com/h5bp/html5-boilerplate/blob/master/src/css/main.css
Source: chromecache_104.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_93.2.dr	String found in binary or memory: https://manual.limesurvey.org/Project_ideas_for_GSoC_2015#Expression_Manager_JavaScript_optimization
Source: chromecache_98.2.dr, chromecache_110.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_98.2.dr, chromecache_110.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_93.2.dr	String found in binary or memory: https://sourceforge.net/projects/bcmath-js/)
Source: chromecache_93.2.dr	String found in binary or memory: https://sourceforge.net/projects/bcmath-js/this.)
Source: chromecache_98.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_98.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_90.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_90.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_98.2.dr, chromecache_110.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_110.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_90.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_90.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_90.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_98.2.dr, chromecache_110.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_90.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_98.2.dr, chromecache_110.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_98.2.dr, chromecache_110.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_90.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_98.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443

Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.8:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.8:49735 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@17/57@8/6

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=1956,i,7160089607047078356,21755619593161457,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://research-polls.com/fLKO/T774676"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=1956,i,7160089607047078356,21755619593161457,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

ID:	1428247
Product:	CloudBasic
Start time:	18:15:53
Start date:	18.04.2024
Cookbook:	browseurl.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Windows Analysis Report
https://research-polls.com/fLKO/T774676

Overview

General Information

Detection

Signatures

Classification

Signatures

Compliance

Networking

System Summary

Boot Survival

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://research-polls.com/fLKO/T774676

Overview

General Information

Detection

Signatures

Classification

Signatures

Compliance

Networking

System Summary

Boot Survival

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://research-polls.com/fLKO/T774676