Windows Analysis Report
https://e.trustifi.com/#/fff3a6/655618/6b960b/eb6fbf/0f1f42/43c464/f0c790/c3ed4c/e8666a/ef542d/85972d/627493/9a11d6/1f4096/1d247f/d0892c/c03583/d792ff/b0a902/7344c5/9089ad/a64a03/f70840/3edfe8/f48740/

Overview

General Information

Sample URL:	https://e.trustifi.com/#/fff3a6/655618/6b960b/eb6fbf/0f1f42/43c464/f0c790/c3ed4c/e8666a/ef542d/85972d/627493/9a11d6/1f4096/1d247f/d0892c/c03583/d792ff/b0a902/7344c5/9089ad/a64a03/f70840/3edfe8/f48740/
Analysis ID:	1428646
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTTP GET or POST without a user agent

Stores files to the Windows start menu directory

Classification

Signatures

Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.17:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.220.189.216:443 -> 192.168.2.17:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.220.189.216:443 -> 192.168.2.17:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.157.11:443 -> 192.168.2.17:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.17:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.17:49766 version: TLS 1.2

HTTP GET or POST without a user agent

Source: global traffic

HTTP traffic detected: GET /ab HTTP/1.1Host: evoke-windowsservices-tas.msedge.netCache-Control: no-store, no-cacheX-PHOTOS-CALLERID: 9NMPJ99VJBWVX-EVOKE-RING: X-WINNEXT-RING: PublicX-WINNEXT-TELEMETRYLEVEL: BasicX-WINNEXT-OSVERSION: 10.0.19045.0X-WINNEXT-APPVERSION: 1.23082.131.0X-WINNEXT-PLATFORM: DesktopX-WINNEXT-CANTAILOR: FalseX-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd}X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI=If-None-Match: 2056388360_-1434155563Accept-Encoding: gzip, deflate, br

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: e.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /runtime.dfef6da15346a2f0.js HTTP/1.1Host: e.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://e.trustifi.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /polyfills.18783eb4e207eb9f.js HTTP/1.1Host: e.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://e.trustifi.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /main.d18ae68a475d55e6.js HTTP/1.1Host: e.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://e.trustifi.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/5.15.4/css/all.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://e.trustifi.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/flag-icon-css/3.5.0/css/flag-icon.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://e.trustifi.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /styles.8f4ac4793e8484c7.css HTTP/1.1Host: e.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beacon.min.js/v55bfa2fee65d44688e90c00735ed189a1713218998793 HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://e.trustifi.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /styles.8f4ac4793e8484c7.css HTTP/1.1Host: e.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; _gat=1
Source: global traffic	HTTP traffic detected: GET /assets/i18n/us.json HTTP/1.1Host: e.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1Host: e.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/54ea73d52131/main.js HTTP/1.1Host: e.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; _gat=1
Source: global traffic	HTTP traffic detected: GET /api/o/v1/emailAccess/settings HTTP/1.1Host: be.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-access-enc: fff3a6/655618/6b960b/eb6fbf/0f1f42/43c464/f0c790/c3ed4c/e8666a/ef542d/85972d/627493/9a11d6/1f4096/1d247f/d0892c/c03583/d792ff/b0a902/7344c5/9089ad/a64a03/f70840/3edfe8/f48740/Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36x-trustifi-source: miniappsec-ch-ua-platform: "Windows"Origin: https://e.trustifi.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/i18n/us.json HTTP/1.1Host: e.trustifi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; _gat=1
Source: global traffic	HTTP traffic detected: GET /fa-solid-900.61c24412d6604f85.woff2 HTTP/1.1Host: e.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://e.trustifi.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; _gat=1
Source: global traffic	HTTP traffic detected: GET /api/o/v1/emailAccess/settings HTTP/1.1Host: be.trustifi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; _gat=1
Source: global traffic	HTTP traffic detected: GET /api/o/v1/emailAccess/authStatus HTTP/1.1Host: be.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-access-enc: fff3a6/655618/6b960b/eb6fbf/0f1f42/43c464/f0c790/c3ed4c/e8666a/ef542d/85972d/627493/9a11d6/1f4096/1d247f/d0892c/c03583/d792ff/b0a902/7344c5/9089ad/a64a03/f70840/3edfe8/f48740/Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36x-trustifi-source: miniappsec-ch-ua-platform: "Windows"Origin: https://e.trustifi.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/jsd/r/876bb34f2fbf4564 HTTP/1.1Host: e.trustifi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; _gat=1; cf_clearance=1Xx9bvdMVCLXr3RslSaiDDYalIUMDw9edZSOp7_Lv1I-1713517189-1.0.1.1-I4eHWwMGTKn4Glwi7JaSXqucrMc3uJ5GZnEksiSJoJR8vpNj5KpDppLtW1JGXYo8yxj104zXMY9sGO4iol.gEw
Source: global traffic	HTTP traffic detected: GET /assets/images/favicon/favicon.ico?=0.8111066925131345 HTTP/1.1Host: e.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; _gat=1; cf_clearance=1Xx9bvdMVCLXr3RslSaiDDYalIUMDw9edZSOp7_Lv1I-1713517189-1.0.1.1-I4eHWwMGTKn4Glwi7JaSXqucrMc3uJ5GZnEksiSJoJR8vpNj5KpDppLtW1JGXYo8yxj104zXMY9sGO4iol.gEw; _ga_VE1N32NCDX=GS1.2.1713517188.1.0.1713517188.0.0.0
Source: global traffic	HTTP traffic detected: GET /api/o/v1/emailAccess/authStatus HTTP/1.1Host: be.trustifi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; _gat=1; cf_clearance=1Xx9bvdMVCLXr3RslSaiDDYalIUMDw9edZSOp7_Lv1I-1713517189-1.0.1.1-I4eHWwMGTKn4Glwi7JaSXqucrMc3uJ5GZnEksiSJoJR8vpNj5KpDppLtW1JGXYo8yxj104zXMY9sGO4iol.gEw; _ga_VE1N32NCDX=GS1.2.1713517188.1.0.1713517188.0.0.0
Source: global traffic	HTTP traffic detected: GET /assets/images/blockedEmail.png HTTP/1.1Host: e.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; _gat=1; cf_clearance=1Xx9bvdMVCLXr3RslSaiDDYalIUMDw9edZSOp7_Lv1I-1713517189-1.0.1.1-I4eHWwMGTKn4Glwi7JaSXqucrMc3uJ5GZnEksiSJoJR8vpNj5KpDppLtW1JGXYo8yxj104zXMY9sGO4iol.gEw; _ga_VE1N32NCDX=GS1.2.1713517188.1.0.1713517188.0.0.0
Source: global traffic	HTTP traffic detected: GET /assets/images/favicon/favicon.ico?=0.8111066925131345 HTTP/1.1Host: e.trustifi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; _gat=1; cf_clearance=1Xx9bvdMVCLXr3RslSaiDDYalIUMDw9edZSOp7_Lv1I-1713517189-1.0.1.1-I4eHWwMGTKn4Glwi7JaSXqucrMc3uJ5GZnEksiSJoJR8vpNj5KpDppLtW1JGXYo8yxj104zXMY9sGO4iol.gEw; _ga_VE1N32NCDX=GS1.2.1713517188.1.0.1713517188.0.0.0
Source: global traffic	HTTP traffic detected: GET /assets/images/blockedEmail.png HTTP/1.1Host: e.trustifi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; _gat=1; cf_clearance=1Xx9bvdMVCLXr3RslSaiDDYalIUMDw9edZSOp7_Lv1I-1713517189-1.0.1.1-I4eHWwMGTKn4Glwi7JaSXqucrMc3uJ5GZnEksiSJoJR8vpNj5KpDppLtW1JGXYo8yxj104zXMY9sGO4iol.gEw; _ga_VE1N32NCDX=GS1.2.1713517188.1.0.1713517188.0.0.0
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=o2WtE327U1NTo4R&MD=dptnwGkA HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ab HTTP/1.1Host: evoke-windowsservices-tas.msedge.netCache-Control: no-store, no-cacheX-PHOTOS-CALLERID: 9NMPJ99VJBWVX-EVOKE-RING: X-WINNEXT-RING: PublicX-WINNEXT-TELEMETRYLEVEL: BasicX-WINNEXT-OSVERSION: 10.0.19045.0X-WINNEXT-APPVERSION: 1.23082.131.0X-WINNEXT-PLATFORM: DesktopX-WINNEXT-CANTAILOR: FalseX-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd}X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI=If-None-Match: 2056388360_-1434155563Accept-Encoding: gzip, deflate, br
Source: global traffic	HTTP traffic detected: GET /client/config?cc=CH&setlang=en-CH HTTP/1.1X-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateAccept-Encoding: gzip, deflateX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-UserAgeClass: UnknownX-BM-Market: CHX-BM-DateFormat: dd/MM/yyyyX-Device-OSSKU: 48X-BM-DTZ: 120X-DeviceID: 01000A41090080B6X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-BM-Theme: 000000;0078d7X-Search-RPSToken: t%3DEwDYAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAfETNPMbz5wmvKURKtZVaIV23ciNPRynxIAKgRqhdJqmlgZno/R4Dz1rRYU9HrhGr91LCsynhnNzY5k5X2pC%2BmEAFTqK6lRdizXXOBXTV2uw0a1x83ih00pNScgjOSoIFSCwhfKCY%2BIhE2hqw5ROYWG8Rmos%2Bi63bOruo4grdFw5L6BAC9K/r007zAPcJTZ5vBy9Zv62BgJ0Z4tUxCQchjtKBqFICRcY65t84bwQIr/Ut5kZmz5B2tz87Hmy4UL6c8ShXVABeoM0zux4I3UEDBce2eK7dIMZvbYCOuqhEk%2BvQVZPPPQHqkVgVoWWAczP0Si6CoXgVdTGnVDg9yYEwbIDZgAACCWJHp2q7ptXqAGFL2tfvPffH8pbNOmhA/7QwN5HhqRyn5ZDgkv%2BWxaf6VMrjirrUAiP2J35051Ajm2qovdzmEvpsSDAUbtCpU5Wigr1ZSz%2BNFe2Fm1HKUwX/itm9jGJR7BZtWbgBR1PqxU%2BPB3EadaYtQafvqTHGouASbem%2BE%2B0El%2Bf5DeA2VIOF%2BJR01lf0IJGXTasZMHIzrZncdti3MZ1nMo8%2BlFaorY2lmfa16ylpgjscQ7CH23mN5j1ce7jh9mVm5VVruhJ5QuHAopzNbItmVleI/PC3AEe8ljY5M/0pE8YKD1M9KOxfd%2BTU15eaMH6KeLMg5sOZ9Q0n7f4JKPARxP/AwU/vyZdwvO4v/uqYe8shTN3h1F5GHLqyabA4Sbbl7EkkkjMNHu0bBbIHjwGTOG20fo9OeumVLgzWjNZmVO3z3T0Y0B6w4ufDe4XCcZziBVyn91hCMeSs0aV7ovFLc/cx1C3sOUr21L4Xf6KJpVv0BZif6irYjXq5i87QC9sX1dXDFOAp0vAdHN3MJQodBjrBOtgY9Zg4HGJkH%2BO2A9z0xwsKdoRrliZpSw4r4Ax2AE%3D%26p%3DX-Agent-DeviceId: 01000A41090080B6X-BM-CBT: 1713517230User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045X-Device-isOptin: falseAccept-language: en-GB, en, en-USX-Device-Touch: falseX-Device-ClientSession: 54623BB61091453E88E8C3B2E4F23077X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIHost: www.bing.comConnection: Keep-AliveCookie: SRCHUID=V=2&GUID=C4EAB6C130004333A34B5668AE4E4D10&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=en; MUID=4590362BB5CF472B95BBEDB3112D4B7B; MUIDB=4590362BB5CF472B95BBEDB3112D4B7B
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=o2WtE327U1NTo4R&MD=dptnwGkA HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: e.trustifi.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; cf_clearance=1Xx9bvdMVCLXr3RslSaiDDYalIUMDw9edZSOp7_Lv1I-1713517189-1.0.1.1-I4eHWwMGTKn4Glwi7JaSXqucrMc3uJ5GZnEksiSJoJR8vpNj5KpDppLtW1JGXYo8yxj104zXMY9sGO4iol.gEw; _ga_VE1N32NCDX=GS1.2.1713517188.1.0.1713517188.0.0.0
Source: global traffic	HTTP traffic detected: GET /runtime.dfef6da15346a2f0.js HTTP/1.1Host: e.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://e.trustifi.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; cf_clearance=1Xx9bvdMVCLXr3RslSaiDDYalIUMDw9edZSOp7_Lv1I-1713517189-1.0.1.1-I4eHWwMGTKn4Glwi7JaSXqucrMc3uJ5GZnEksiSJoJR8vpNj5KpDppLtW1JGXYo8yxj104zXMY9sGO4iol.gEw; _ga_VE1N32NCDX=GS1.2.1713517188.1.0.1713517188.0.0.0
Source: global traffic	HTTP traffic detected: GET /polyfills.18783eb4e207eb9f.js HTTP/1.1Host: e.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://e.trustifi.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; cf_clearance=1Xx9bvdMVCLXr3RslSaiDDYalIUMDw9edZSOp7_Lv1I-1713517189-1.0.1.1-I4eHWwMGTKn4Glwi7JaSXqucrMc3uJ5GZnEksiSJoJR8vpNj5KpDppLtW1JGXYo8yxj104zXMY9sGO4iol.gEw; _ga_VE1N32NCDX=GS1.2.1713517188.1.0.1713517188.0.0.0
Source: global traffic	HTTP traffic detected: GET /main.d18ae68a475d55e6.js HTTP/1.1Host: e.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://e.trustifi.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; cf_clearance=1Xx9bvdMVCLXr3RslSaiDDYalIUMDw9edZSOp7_Lv1I-1713517189-1.0.1.1-I4eHWwMGTKn4Glwi7JaSXqucrMc3uJ5GZnEksiSJoJR8vpNj5KpDppLtW1JGXYo8yxj104zXMY9sGO4iol.gEw; _ga_VE1N32NCDX=GS1.2.1713517188.1.0.1713517188.0.0.0
Source: global traffic	HTTP traffic detected: GET /styles.8f4ac4793e8484c7.css HTTP/1.1Host: e.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; cf_clearance=1Xx9bvdMVCLXr3RslSaiDDYalIUMDw9edZSOp7_Lv1I-1713517189-1.0.1.1-I4eHWwMGTKn4Glwi7JaSXqucrMc3uJ5GZnEksiSJoJR8vpNj5KpDppLtW1JGXYo8yxj104zXMY9sGO4iol.gEw; _ga_VE1N32NCDX=GS1.2.1713517188.1.0.1713517188.0.0.0
Source: global traffic	HTTP traffic detected: GET /styles.8f4ac4793e8484c7.css HTTP/1.1Host: e.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; cf_clearance=1Xx9bvdMVCLXr3RslSaiDDYalIUMDw9edZSOp7_Lv1I-1713517189-1.0.1.1-I4eHWwMGTKn4Glwi7JaSXqucrMc3uJ5GZnEksiSJoJR8vpNj5KpDppLtW1JGXYo8yxj104zXMY9sGO4iol.gEw; _ga_VE1N32NCDX=GS1.2.1713517188.1.0.1713517188.0.0.0; _gat=1
Source: global traffic	HTTP traffic detected: GET /assets/i18n/us.json HTTP/1.1Host: e.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; cf_clearance=1Xx9bvdMVCLXr3RslSaiDDYalIUMDw9edZSOp7_Lv1I-1713517189-1.0.1.1-I4eHWwMGTKn4Glwi7JaSXqucrMc3uJ5GZnEksiSJoJR8vpNj5KpDppLtW1JGXYo8yxj104zXMY9sGO4iol.gEw; _ga_VE1N32NCDX=GS1.2.1713517188.1.0.1713517188.0.0.0; _gat=1
Source: global traffic	HTTP traffic detected: GET /api/o/v1/emailAccess/settings HTTP/1.1Host: be.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-access-enc: fff3a6/655618/6b960b/eb6fbf/0f1f42/43c464/f0c790/c3ed4c/e8666a/ef542d/85972d/627493/9a11d6/1f4096/1d247f/d0892c/c03583/d792ff/b0a902/7344c5/9089ad/a64a03/f70840/3edfe8/f48740/Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36x-trustifi-source: miniappsec-ch-ua-platform: "Windows"Origin: https://e.trustifi.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/o/v1/emailAccess/authStatus HTTP/1.1Host: be.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-access-enc: fff3a6/655618/6b960b/eb6fbf/0f1f42/43c464/f0c790/c3ed4c/e8666a/ef542d/85972d/627493/9a11d6/1f4096/1d247f/d0892c/c03583/d792ff/b0a902/7344c5/9089ad/a64a03/f70840/3edfe8/f48740/Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36x-trustifi-source: miniappsec-ch-ua-platform: "Windows"Origin: https://e.trustifi.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/i18n/us.json HTTP/1.1Host: e.trustifi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; cf_clearance=1Xx9bvdMVCLXr3RslSaiDDYalIUMDw9edZSOp7_Lv1I-1713517189-1.0.1.1-I4eHWwMGTKn4Glwi7JaSXqucrMc3uJ5GZnEksiSJoJR8vpNj5KpDppLtW1JGXYo8yxj104zXMY9sGO4iol.gEw; _ga_VE1N32NCDX=GS1.2.1713517188.1.0.1713517188.0.0.0; _gat=1
Source: global traffic	HTTP traffic detected: GET /fa-solid-900.61c24412d6604f85.woff2 HTTP/1.1Host: e.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://e.trustifi.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; cf_clearance=1Xx9bvdMVCLXr3RslSaiDDYalIUMDw9edZSOp7_Lv1I-1713517189-1.0.1.1-I4eHWwMGTKn4Glwi7JaSXqucrMc3uJ5GZnEksiSJoJR8vpNj5KpDppLtW1JGXYo8yxj104zXMY9sGO4iol.gEw; _ga_VE1N32NCDX=GS1.2.1713517188.1.0.1713517188.0.0.0; _gat=1
Source: global traffic	HTTP traffic detected: GET /api/o/v1/emailAccess/settings HTTP/1.1Host: be.trustifi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; cf_clearance=1Xx9bvdMVCLXr3RslSaiDDYalIUMDw9edZSOp7_Lv1I-1713517189-1.0.1.1-I4eHWwMGTKn4Glwi7JaSXqucrMc3uJ5GZnEksiSJoJR8vpNj5KpDppLtW1JGXYo8yxj104zXMY9sGO4iol.gEw; _gat=1; _ga_VE1N32NCDX=GS1.2.1713517188.1.1.1713517260.0.0.0
Source: global traffic	HTTP traffic detected: GET /assets/images/blockedEmail.png HTTP/1.1Host: e.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; cf_clearance=1Xx9bvdMVCLXr3RslSaiDDYalIUMDw9edZSOp7_Lv1I-1713517189-1.0.1.1-I4eHWwMGTKn4Glwi7JaSXqucrMc3uJ5GZnEksiSJoJR8vpNj5KpDppLtW1JGXYo8yxj104zXMY9sGO4iol.gEw; _gat=1; _ga_VE1N32NCDX=GS1.2.1713517188.1.1.1713517260.0.0.0
Source: global traffic	HTTP traffic detected: GET /api/o/v1/emailAccess/authStatus HTTP/1.1Host: be.trustifi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; cf_clearance=1Xx9bvdMVCLXr3RslSaiDDYalIUMDw9edZSOp7_Lv1I-1713517189-1.0.1.1-I4eHWwMGTKn4Glwi7JaSXqucrMc3uJ5GZnEksiSJoJR8vpNj5KpDppLtW1JGXYo8yxj104zXMY9sGO4iol.gEw; _gat=1; _ga_VE1N32NCDX=GS1.2.1713517188.1.1.1713517260.0.0.0
Source: global traffic	HTTP traffic detected: GET /assets/images/blockedEmail.png HTTP/1.1Host: e.trustifi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; cf_clearance=1Xx9bvdMVCLXr3RslSaiDDYalIUMDw9edZSOp7_Lv1I-1713517189-1.0.1.1-I4eHWwMGTKn4Glwi7JaSXqucrMc3uJ5GZnEksiSJoJR8vpNj5KpDppLtW1JGXYo8yxj104zXMY9sGO4iol.gEw; _gat=1; _ga_VE1N32NCDX=GS1.2.1713517188.1.1.1713517260.0.0.0
Source: global traffic	HTTP traffic detected: GET /assets/images/favicon/favicon.ico?=0.19651022570650856 HTTP/1.1Host: e.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; cf_clearance=1Xx9bvdMVCLXr3RslSaiDDYalIUMDw9edZSOp7_Lv1I-1713517189-1.0.1.1-I4eHWwMGTKn4Glwi7JaSXqucrMc3uJ5GZnEksiSJoJR8vpNj5KpDppLtW1JGXYo8yxj104zXMY9sGO4iol.gEw; _gat=1; _ga_VE1N32NCDX=GS1.2.1713517188.1.1.1713517260.0.0.0
Source: global traffic	HTTP traffic detected: GET /assets/images/favicon/favicon.ico?=0.19651022570650856 HTTP/1.1Host: e.trustifi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; cf_clearance=1Xx9bvdMVCLXr3RslSaiDDYalIUMDw9edZSOp7_Lv1I-1713517189-1.0.1.1-I4eHWwMGTKn4Glwi7JaSXqucrMc3uJ5GZnEksiSJoJR8vpNj5KpDppLtW1JGXYo8yxj104zXMY9sGO4iol.gEw; _gat=1; _ga_VE1N32NCDX=GS1.2.1713517188.1.1.1713517260.0.0.0

Source: chromecache_92.1.dr

String found in binary or memory: return b}vC.H="internal.enableAutoEventOnTimer";var dc=ia(["data-gtm-yt-inspected-"]),xC=["www.youtube.com","www.youtube-nocookie.com"],yC,zC=!1; equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: e.trustifi.com

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/g/jsd/r/876bb34f2fbf4564 HTTP/1.1Host: e.trustifi.comConnection: keep-aliveContent-Length: 15784sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: */*Origin: https://e.trustifi.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; _gat=1

Source: chromecache_92.1.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_92.1.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_89.1.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_87.1.dr	String found in binary or memory: https://bid.g.doubleclick.net/xbbe/pixel?d=KAE
Source: chromecache_92.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_94.1.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_94.1.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_92.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_87.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/
Source: chromecache_92.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_92.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_92.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_89.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_87.1.dr, chromecache_89.1.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_92.1.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_89.1.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_89.1.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_89.1.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_92.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_89.1.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_92.1.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_92.1.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_87.1.dr	String found in binary or memory: https://www.googletagmanager.com/debug/bootstrap
Source: chromecache_89.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_92.1.dr	String found in binary or memory: https://www.merchant-center-analytics.goog

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49696
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49692 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.17:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.220.189.216:443 -> 192.168.2.17:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.220.189.216:443 -> 192.168.2.17:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.157.11:443 -> 192.168.2.17:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.17:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.17:49766 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@13/28@16/10

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://e.trustifi.com/#/fff3a6/655618/6b960b/eb6fbf/0f1f42/43c464/f0c790/c3ed4c/e8666a/ef542d/85972d/627493/9a11d6/1f4096/1d247f/d0892c/c03583/d792ff/b0a902/7344c5/9089ad/a64a03/f70840/3edfe8/f48740/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2112 --field-trial-handle=2012,i,2597764809865968814,7641956660817323542,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2112 --field-trial-handle=2012,i,2597764809865968814,7641956660817323542,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.26.5.170	unknown	United States	13335	CLOUDFLARENETUS	false
74.125.136.106	www.google.com	United States	15169	GOOGLEUS	false
104.26.4.170	be.trustifi.com	United States	13335	CLOUDFLARENETUS	false
104.16.80.73	static.cloudflareinsights.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
172.67.72.31	e.trustifi.com	United States	13335	CLOUDFLARENETUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.17
192.168.2.23

Contacted Domains

Name	IP	Active
be.trustifi.com	104.26.4.170	true
a.nel.cloudflare.com	35.190.80.1	true
e.trustifi.com	172.67.72.31	true
static.cloudflareinsights.com	104.16.80.73	true
cdnjs.cloudflare.com	104.17.25.14	true
www.google.com	74.125.136.106	true

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://e.trustifi.com/main.d18ae68a475d55e6.js	false		unknown
https://e.trustifi.com/fa-solid-900.61c24412d6604f85.woff2	false		unknown
https://cdnjs.cloudflare.com/ajax/libs/flag-icon-css/3.5.0/css/flag-icon.min.css	false		high
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.css	false		high
https://e.trustifi.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/54ea73d52131/main.js	false		unknown
https://e.trustifi.com/styles.8f4ac4793e8484c7.css	false		unknown
https://e.trustifi.com/assets/images/blockedEmail.png	false		unknown
https://static.cloudflareinsights.com/beacon.min.js/v55bfa2fee65d44688e90c00735ed189a1713218998793	false	0%, Virustotal, Browse	unknown
https://e.trustifi.com/assets/images/favicon/favicon.ico?=0.19651022570650856	false		unknown
https://e.trustifi.com/assets/i18n/us.json	false		unknown
about:blank	false		low
https://e.trustifi.com/	false	0%, Virustotal, Browse	unknown
https://e.trustifi.com/assets/images/favicon/favicon.ico?=0.8111066925131345	false		unknown
https://e.trustifi.com/cdn-cgi/rum?	false		unknown
https://be.trustifi.com/api/o/v1/emailAccess/settings	false		unknown
https://a.nel.cloudflare.com/report/v4?s=J9NoNh9I1%2BhSQQGzaKcg%2F7hFOG3Yok5xvUj1mq6IZZPfQY9OG8NBAWukMDtME6KVaNlUZqTh6hw3XcwFr%2Ft730sh5GYxHBMFjLI4EHRK5GI83%2B9UnR4d5I3LT74ysxn5	false		high
https://cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css	false		high
https://e.trustifi.com/polyfills.18783eb4e207eb9f.js	false		unknown
https://be.trustifi.com/api/o/v1/emailAccess/authStatus	false		unknown
https://e.trustifi.com/cdn-cgi/challenge-platform/scripts/jsd/main.js	false		unknown
https://e.trustifi.com/cdn-cgi/challenge-platform/h/g/jsd/r/876bb34f2fbf4564	false		unknown
https://e.trustifi.com/runtime.dfef6da15346a2f0.js	false		unknown
https://e.trustifi.com/#/fff3a6/655618/6b960b/eb6fbf/0f1f42/43c464/f0c790/c3ed4c/e8666a/ef542d/85972d/627493/9a11d6/1f4096/1d247f/d0892c/c03583/d792ff/b0a902/7344c5/9089ad/a64a03/f70840/3edfe8/f48740/	false		unknown

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 07:59:46 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	68B41283E9CA25C18ACE501A18A41438	8E69D70CB17390440495152568FF924F061E186C	8CBBE2060479C893B377553AF6678E754AC7225A404F771674773F256CB458E6
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 07:59:46 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	8D94F4BE30FAFB593A8E0028DA13DF93	98750ABF7F8682721E693167900CD9A450C73260	2D87384348453B32F03E62F591ECA31E51E15B2AB9E5818AC616339F3DBACD43
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:54:41 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	D519E65C5382126CA27DC568D560B761	8E5AA02B121EF932464C7AF7027DDA0D7C76EC9D	686A98EC15894837B48AD69B4271BD0C71F98F3035D924F8CC7E28FCA2859E3D
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 07:59:46 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	CE2A6818ECED1EBBC76A088C35CCA487	2107FEFF38C717D360847975988328CB3587BFD4	DF3F389432E376B35A9D7E19AAC8FE614828872F18B9A4548163587AE846A517
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 07:59:46 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	1926AE5B9FA67FD7D0F56E94554C4664	3D1F10EA8AAE482C9EADA378A63FE4152C5DA290	2B7A8569C80618537FE67E722B466136D7B67FD4F83A6B2AE4B938E044EE2037
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 07:59:46 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	BB1628E734A455A7667E025A7F5A90F7	5083D9FDD7EEB5500EF5B40A585DB4F9AEF98341	EC30E02C19C0DC4583ED361F2409FA74050EC9D1AEF3A6A4E1752305E0AF2BA6
Chrome Cache Entry: 84	ASCII text, with very long lines (19261), with no line terminators	3BE93FD15D2F7DEE2FC0C8981C6FA5C6	8CD88C36FAD3E96641DBC4D781F5DDBE5123312F	17106BF803D42BCF2F2BDF778ECE084D3F91C68E7EA41DAE7BFF61FEFA573DEE
Chrome Cache Entry: 85	Web Open Font Format (Version 2), TrueType, length 45904, version 1.0	229D0D8510F648277A253709AE2C3395	C86265D72A3B219F153152F4269477A2001FB15B	C56952AE9D023F3ECF38D991F095AC9545CB932F919C7963C6140FD6CF8F9650
Chrome Cache Entry: 86	ASCII text, with very long lines (65536), with no line terminators	E9365FE85B7E4DB79A87015E52C3DB6C	2E2B5EB6E08F0F3D11FE0ADA97C962A23BA6A0D9	DEC3E9F0190A504ED0C8F4A5E957C107206BA106CAC4A1BBB6CBAC6369A16D56
Chrome Cache Entry: 87	ASCII text, with very long lines (2037)	E5EA4FB87A6A1AF6E2642139ED156F26	FCB80A0AD9547DBE7B1085FE10E0C3B0C8858CED	5F04C9DA3DEB24C2E6DE27C963DFA343104F2327F5B03D9B4EF8F44ABE8869B5
Chrome Cache Entry: 88	ASCII text, with very long lines (7857), with no line terminators	026A467DA6693ED6282AB230DC9078A6	CA554B5B36157C0D43BADA96346C0A83B9FA257D	E858F4F80EA5BABFBAE5463CFB196899A6BBFB78945C25FBFD263DB703593B49
Chrome Cache Entry: 89	ASCII text, with very long lines (2343)	575B5480531DA4D14E7453E2016FE0BC	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
Chrome Cache Entry: 90	Web Open Font Format (Version 2), TrueType, length 11040, version 1.0	5E22A46C04D947A36EA0CAD07AFCC9E1	6091D981C2A4EE975C7F6B56186EE698040BB804	0F53E8B0A717CA4CE313EEC62B90D41DB62C2F4946259A65C93BF8E84C5B0C44
Chrome Cache Entry: 91	Web Open Font Format (Version 2), TrueType, length 11028, version 1.0	1F6D3CF6D38F25D83D95F5A800B8CAC3	279F300CA2CBBDF9F5036EF2F438607FBF377DAA	796DE064B8D80EBA7CCACB8BA67D77FDBCDF4B385C844645D452C24537B3108F
Chrome Cache Entry: 92	ASCII text, with very long lines (5955)	0D64E7B9553752BEA914ACC85BB21176	F8234105B8AAFBB2F61C0FA55DBE73EE6023D678	F431F98876D4392333C0C016B24A27C540BEF07D7081721FD099C92043335334
Chrome Cache Entry: 93	ASCII text, with very long lines (33960)	1C7783936DB99706C52EDB52174B0D86	F9DFB9D7CF68CB78A5E1619CFA3E3EF361879DB0	D27E980D821EC562661F24CAB514474D7BE86A742B5E915FA6C7EFD21E77AAF9
Chrome Cache Entry: 94	ASCII text, with very long lines (59119)	ECD507B3125EDC4D2A03AA6AE5D07DA9	A57EE68D11601B0FD8E5037FC241FF65A754473C	99464CEB71BC9BBDCC72275FAEFE44F98EB5CBB6B5D8EE665B87B35376F1A96E

Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.17:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.220.189.216:443 -> 192.168.2.17:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.220.189.216:443 -> 192.168.2.17:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.157.11:443 -> 192.168.2.17:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.17:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.17:49766 version: TLS 1.2

HTTP GET or POST without a user agent

Source: global traffic

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: e.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /runtime.dfef6da15346a2f0.js HTTP/1.1Host: e.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://e.trustifi.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /polyfills.18783eb4e207eb9f.js HTTP/1.1Host: e.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://e.trustifi.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /main.d18ae68a475d55e6.js HTTP/1.1Host: e.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://e.trustifi.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/5.15.4/css/all.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://e.trustifi.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/flag-icon-css/3.5.0/css/flag-icon.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://e.trustifi.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /styles.8f4ac4793e8484c7.css HTTP/1.1Host: e.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beacon.min.js/v55bfa2fee65d44688e90c00735ed189a1713218998793 HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://e.trustifi.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /styles.8f4ac4793e8484c7.css HTTP/1.1Host: e.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; _gat=1
Source: global traffic	HTTP traffic detected: GET /assets/i18n/us.json HTTP/1.1Host: e.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1Host: e.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/54ea73d52131/main.js HTTP/1.1Host: e.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; _gat=1
Source: global traffic	HTTP traffic detected: GET /api/o/v1/emailAccess/settings HTTP/1.1Host: be.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-access-enc: fff3a6/655618/6b960b/eb6fbf/0f1f42/43c464/f0c790/c3ed4c/e8666a/ef542d/85972d/627493/9a11d6/1f4096/1d247f/d0892c/c03583/d792ff/b0a902/7344c5/9089ad/a64a03/f70840/3edfe8/f48740/Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36x-trustifi-source: miniappsec-ch-ua-platform: "Windows"Origin: https://e.trustifi.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/i18n/us.json HTTP/1.1Host: e.trustifi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; _gat=1
Source: global traffic	HTTP traffic detected: GET /fa-solid-900.61c24412d6604f85.woff2 HTTP/1.1Host: e.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://e.trustifi.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; _gat=1
Source: global traffic	HTTP traffic detected: GET /api/o/v1/emailAccess/settings HTTP/1.1Host: be.trustifi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; _gat=1
Source: global traffic	HTTP traffic detected: GET /api/o/v1/emailAccess/authStatus HTTP/1.1Host: be.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-access-enc: fff3a6/655618/6b960b/eb6fbf/0f1f42/43c464/f0c790/c3ed4c/e8666a/ef542d/85972d/627493/9a11d6/1f4096/1d247f/d0892c/c03583/d792ff/b0a902/7344c5/9089ad/a64a03/f70840/3edfe8/f48740/Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36x-trustifi-source: miniappsec-ch-ua-platform: "Windows"Origin: https://e.trustifi.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/jsd/r/876bb34f2fbf4564 HTTP/1.1Host: e.trustifi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; _gat=1; cf_clearance=1Xx9bvdMVCLXr3RslSaiDDYalIUMDw9edZSOp7_Lv1I-1713517189-1.0.1.1-I4eHWwMGTKn4Glwi7JaSXqucrMc3uJ5GZnEksiSJoJR8vpNj5KpDppLtW1JGXYo8yxj104zXMY9sGO4iol.gEw
Source: global traffic	HTTP traffic detected: GET /assets/images/favicon/favicon.ico?=0.8111066925131345 HTTP/1.1Host: e.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; _gat=1; cf_clearance=1Xx9bvdMVCLXr3RslSaiDDYalIUMDw9edZSOp7_Lv1I-1713517189-1.0.1.1-I4eHWwMGTKn4Glwi7JaSXqucrMc3uJ5GZnEksiSJoJR8vpNj5KpDppLtW1JGXYo8yxj104zXMY9sGO4iol.gEw; _ga_VE1N32NCDX=GS1.2.1713517188.1.0.1713517188.0.0.0
Source: global traffic	HTTP traffic detected: GET /api/o/v1/emailAccess/authStatus HTTP/1.1Host: be.trustifi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; _gat=1; cf_clearance=1Xx9bvdMVCLXr3RslSaiDDYalIUMDw9edZSOp7_Lv1I-1713517189-1.0.1.1-I4eHWwMGTKn4Glwi7JaSXqucrMc3uJ5GZnEksiSJoJR8vpNj5KpDppLtW1JGXYo8yxj104zXMY9sGO4iol.gEw; _ga_VE1N32NCDX=GS1.2.1713517188.1.0.1713517188.0.0.0
Source: global traffic	HTTP traffic detected: GET /assets/images/blockedEmail.png HTTP/1.1Host: e.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; _gat=1; cf_clearance=1Xx9bvdMVCLXr3RslSaiDDYalIUMDw9edZSOp7_Lv1I-1713517189-1.0.1.1-I4eHWwMGTKn4Glwi7JaSXqucrMc3uJ5GZnEksiSJoJR8vpNj5KpDppLtW1JGXYo8yxj104zXMY9sGO4iol.gEw; _ga_VE1N32NCDX=GS1.2.1713517188.1.0.1713517188.0.0.0
Source: global traffic	HTTP traffic detected: GET /assets/images/favicon/favicon.ico?=0.8111066925131345 HTTP/1.1Host: e.trustifi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; _gat=1; cf_clearance=1Xx9bvdMVCLXr3RslSaiDDYalIUMDw9edZSOp7_Lv1I-1713517189-1.0.1.1-I4eHWwMGTKn4Glwi7JaSXqucrMc3uJ5GZnEksiSJoJR8vpNj5KpDppLtW1JGXYo8yxj104zXMY9sGO4iol.gEw; _ga_VE1N32NCDX=GS1.2.1713517188.1.0.1713517188.0.0.0
Source: global traffic	HTTP traffic detected: GET /assets/images/blockedEmail.png HTTP/1.1Host: e.trustifi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; _gat=1; cf_clearance=1Xx9bvdMVCLXr3RslSaiDDYalIUMDw9edZSOp7_Lv1I-1713517189-1.0.1.1-I4eHWwMGTKn4Glwi7JaSXqucrMc3uJ5GZnEksiSJoJR8vpNj5KpDppLtW1JGXYo8yxj104zXMY9sGO4iol.gEw; _ga_VE1N32NCDX=GS1.2.1713517188.1.0.1713517188.0.0.0
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=o2WtE327U1NTo4R&MD=dptnwGkA HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ab HTTP/1.1Host: evoke-windowsservices-tas.msedge.netCache-Control: no-store, no-cacheX-PHOTOS-CALLERID: 9NMPJ99VJBWVX-EVOKE-RING: X-WINNEXT-RING: PublicX-WINNEXT-TELEMETRYLEVEL: BasicX-WINNEXT-OSVERSION: 10.0.19045.0X-WINNEXT-APPVERSION: 1.23082.131.0X-WINNEXT-PLATFORM: DesktopX-WINNEXT-CANTAILOR: FalseX-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd}X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI=If-None-Match: 2056388360_-1434155563Accept-Encoding: gzip, deflate, br
Source: global traffic	HTTP traffic detected: GET /client/config?cc=CH&setlang=en-CH HTTP/1.1X-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateAccept-Encoding: gzip, deflateX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-UserAgeClass: UnknownX-BM-Market: CHX-BM-DateFormat: dd/MM/yyyyX-Device-OSSKU: 48X-BM-DTZ: 120X-DeviceID: 01000A41090080B6X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-BM-Theme: 000000;0078d7X-Search-RPSToken: t%3DEwDYAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAfETNPMbz5wmvKURKtZVaIV23ciNPRynxIAKgRqhdJqmlgZno/R4Dz1rRYU9HrhGr91LCsynhnNzY5k5X2pC%2BmEAFTqK6lRdizXXOBXTV2uw0a1x83ih00pNScgjOSoIFSCwhfKCY%2BIhE2hqw5ROYWG8Rmos%2Bi63bOruo4grdFw5L6BAC9K/r007zAPcJTZ5vBy9Zv62BgJ0Z4tUxCQchjtKBqFICRcY65t84bwQIr/Ut5kZmz5B2tz87Hmy4UL6c8ShXVABeoM0zux4I3UEDBce2eK7dIMZvbYCOuqhEk%2BvQVZPPPQHqkVgVoWWAczP0Si6CoXgVdTGnVDg9yYEwbIDZgAACCWJHp2q7ptXqAGFL2tfvPffH8pbNOmhA/7QwN5HhqRyn5ZDgkv%2BWxaf6VMrjirrUAiP2J35051Ajm2qovdzmEvpsSDAUbtCpU5Wigr1ZSz%2BNFe2Fm1HKUwX/itm9jGJR7BZtWbgBR1PqxU%2BPB3EadaYtQafvqTHGouASbem%2BE%2B0El%2Bf5DeA2VIOF%2BJR01lf0IJGXTasZMHIzrZncdti3MZ1nMo8%2BlFaorY2lmfa16ylpgjscQ7CH23mN5j1ce7jh9mVm5VVruhJ5QuHAopzNbItmVleI/PC3AEe8ljY5M/0pE8YKD1M9KOxfd%2BTU15eaMH6KeLMg5sOZ9Q0n7f4JKPARxP/AwU/vyZdwvO4v/uqYe8shTN3h1F5GHLqyabA4Sbbl7EkkkjMNHu0bBbIHjwGTOG20fo9OeumVLgzWjNZmVO3z3T0Y0B6w4ufDe4XCcZziBVyn91hCMeSs0aV7ovFLc/cx1C3sOUr21L4Xf6KJpVv0BZif6irYjXq5i87QC9sX1dXDFOAp0vAdHN3MJQodBjrBOtgY9Zg4HGJkH%2BO2A9z0xwsKdoRrliZpSw4r4Ax2AE%3D%26p%3DX-Agent-DeviceId: 01000A41090080B6X-BM-CBT: 1713517230User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045X-Device-isOptin: falseAccept-language: en-GB, en, en-USX-Device-Touch: falseX-Device-ClientSession: 54623BB61091453E88E8C3B2E4F23077X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIHost: www.bing.comConnection: Keep-AliveCookie: SRCHUID=V=2&GUID=C4EAB6C130004333A34B5668AE4E4D10&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=en; MUID=4590362BB5CF472B95BBEDB3112D4B7B; MUIDB=4590362BB5CF472B95BBEDB3112D4B7B
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=o2WtE327U1NTo4R&MD=dptnwGkA HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: e.trustifi.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; cf_clearance=1Xx9bvdMVCLXr3RslSaiDDYalIUMDw9edZSOp7_Lv1I-1713517189-1.0.1.1-I4eHWwMGTKn4Glwi7JaSXqucrMc3uJ5GZnEksiSJoJR8vpNj5KpDppLtW1JGXYo8yxj104zXMY9sGO4iol.gEw; _ga_VE1N32NCDX=GS1.2.1713517188.1.0.1713517188.0.0.0
Source: global traffic	HTTP traffic detected: GET /runtime.dfef6da15346a2f0.js HTTP/1.1Host: e.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://e.trustifi.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; cf_clearance=1Xx9bvdMVCLXr3RslSaiDDYalIUMDw9edZSOp7_Lv1I-1713517189-1.0.1.1-I4eHWwMGTKn4Glwi7JaSXqucrMc3uJ5GZnEksiSJoJR8vpNj5KpDppLtW1JGXYo8yxj104zXMY9sGO4iol.gEw; _ga_VE1N32NCDX=GS1.2.1713517188.1.0.1713517188.0.0.0
Source: global traffic	HTTP traffic detected: GET /polyfills.18783eb4e207eb9f.js HTTP/1.1Host: e.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://e.trustifi.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; cf_clearance=1Xx9bvdMVCLXr3RslSaiDDYalIUMDw9edZSOp7_Lv1I-1713517189-1.0.1.1-I4eHWwMGTKn4Glwi7JaSXqucrMc3uJ5GZnEksiSJoJR8vpNj5KpDppLtW1JGXYo8yxj104zXMY9sGO4iol.gEw; _ga_VE1N32NCDX=GS1.2.1713517188.1.0.1713517188.0.0.0
Source: global traffic	HTTP traffic detected: GET /main.d18ae68a475d55e6.js HTTP/1.1Host: e.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://e.trustifi.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; cf_clearance=1Xx9bvdMVCLXr3RslSaiDDYalIUMDw9edZSOp7_Lv1I-1713517189-1.0.1.1-I4eHWwMGTKn4Glwi7JaSXqucrMc3uJ5GZnEksiSJoJR8vpNj5KpDppLtW1JGXYo8yxj104zXMY9sGO4iol.gEw; _ga_VE1N32NCDX=GS1.2.1713517188.1.0.1713517188.0.0.0
Source: global traffic	HTTP traffic detected: GET /styles.8f4ac4793e8484c7.css HTTP/1.1Host: e.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; cf_clearance=1Xx9bvdMVCLXr3RslSaiDDYalIUMDw9edZSOp7_Lv1I-1713517189-1.0.1.1-I4eHWwMGTKn4Glwi7JaSXqucrMc3uJ5GZnEksiSJoJR8vpNj5KpDppLtW1JGXYo8yxj104zXMY9sGO4iol.gEw; _ga_VE1N32NCDX=GS1.2.1713517188.1.0.1713517188.0.0.0
Source: global traffic	HTTP traffic detected: GET /styles.8f4ac4793e8484c7.css HTTP/1.1Host: e.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; cf_clearance=1Xx9bvdMVCLXr3RslSaiDDYalIUMDw9edZSOp7_Lv1I-1713517189-1.0.1.1-I4eHWwMGTKn4Glwi7JaSXqucrMc3uJ5GZnEksiSJoJR8vpNj5KpDppLtW1JGXYo8yxj104zXMY9sGO4iol.gEw; _ga_VE1N32NCDX=GS1.2.1713517188.1.0.1713517188.0.0.0; _gat=1
Source: global traffic	HTTP traffic detected: GET /assets/i18n/us.json HTTP/1.1Host: e.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; cf_clearance=1Xx9bvdMVCLXr3RslSaiDDYalIUMDw9edZSOp7_Lv1I-1713517189-1.0.1.1-I4eHWwMGTKn4Glwi7JaSXqucrMc3uJ5GZnEksiSJoJR8vpNj5KpDppLtW1JGXYo8yxj104zXMY9sGO4iol.gEw; _ga_VE1N32NCDX=GS1.2.1713517188.1.0.1713517188.0.0.0; _gat=1
Source: global traffic	HTTP traffic detected: GET /api/o/v1/emailAccess/settings HTTP/1.1Host: be.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-access-enc: fff3a6/655618/6b960b/eb6fbf/0f1f42/43c464/f0c790/c3ed4c/e8666a/ef542d/85972d/627493/9a11d6/1f4096/1d247f/d0892c/c03583/d792ff/b0a902/7344c5/9089ad/a64a03/f70840/3edfe8/f48740/Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36x-trustifi-source: miniappsec-ch-ua-platform: "Windows"Origin: https://e.trustifi.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/o/v1/emailAccess/authStatus HTTP/1.1Host: be.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-access-enc: fff3a6/655618/6b960b/eb6fbf/0f1f42/43c464/f0c790/c3ed4c/e8666a/ef542d/85972d/627493/9a11d6/1f4096/1d247f/d0892c/c03583/d792ff/b0a902/7344c5/9089ad/a64a03/f70840/3edfe8/f48740/Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36x-trustifi-source: miniappsec-ch-ua-platform: "Windows"Origin: https://e.trustifi.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/i18n/us.json HTTP/1.1Host: e.trustifi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; cf_clearance=1Xx9bvdMVCLXr3RslSaiDDYalIUMDw9edZSOp7_Lv1I-1713517189-1.0.1.1-I4eHWwMGTKn4Glwi7JaSXqucrMc3uJ5GZnEksiSJoJR8vpNj5KpDppLtW1JGXYo8yxj104zXMY9sGO4iol.gEw; _ga_VE1N32NCDX=GS1.2.1713517188.1.0.1713517188.0.0.0; _gat=1
Source: global traffic	HTTP traffic detected: GET /fa-solid-900.61c24412d6604f85.woff2 HTTP/1.1Host: e.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://e.trustifi.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; cf_clearance=1Xx9bvdMVCLXr3RslSaiDDYalIUMDw9edZSOp7_Lv1I-1713517189-1.0.1.1-I4eHWwMGTKn4Glwi7JaSXqucrMc3uJ5GZnEksiSJoJR8vpNj5KpDppLtW1JGXYo8yxj104zXMY9sGO4iol.gEw; _ga_VE1N32NCDX=GS1.2.1713517188.1.0.1713517188.0.0.0; _gat=1
Source: global traffic	HTTP traffic detected: GET /api/o/v1/emailAccess/settings HTTP/1.1Host: be.trustifi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; cf_clearance=1Xx9bvdMVCLXr3RslSaiDDYalIUMDw9edZSOp7_Lv1I-1713517189-1.0.1.1-I4eHWwMGTKn4Glwi7JaSXqucrMc3uJ5GZnEksiSJoJR8vpNj5KpDppLtW1JGXYo8yxj104zXMY9sGO4iol.gEw; _gat=1; _ga_VE1N32NCDX=GS1.2.1713517188.1.1.1713517260.0.0.0
Source: global traffic	HTTP traffic detected: GET /assets/images/blockedEmail.png HTTP/1.1Host: e.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; cf_clearance=1Xx9bvdMVCLXr3RslSaiDDYalIUMDw9edZSOp7_Lv1I-1713517189-1.0.1.1-I4eHWwMGTKn4Glwi7JaSXqucrMc3uJ5GZnEksiSJoJR8vpNj5KpDppLtW1JGXYo8yxj104zXMY9sGO4iol.gEw; _gat=1; _ga_VE1N32NCDX=GS1.2.1713517188.1.1.1713517260.0.0.0
Source: global traffic	HTTP traffic detected: GET /api/o/v1/emailAccess/authStatus HTTP/1.1Host: be.trustifi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; cf_clearance=1Xx9bvdMVCLXr3RslSaiDDYalIUMDw9edZSOp7_Lv1I-1713517189-1.0.1.1-I4eHWwMGTKn4Glwi7JaSXqucrMc3uJ5GZnEksiSJoJR8vpNj5KpDppLtW1JGXYo8yxj104zXMY9sGO4iol.gEw; _gat=1; _ga_VE1N32NCDX=GS1.2.1713517188.1.1.1713517260.0.0.0
Source: global traffic	HTTP traffic detected: GET /assets/images/blockedEmail.png HTTP/1.1Host: e.trustifi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; cf_clearance=1Xx9bvdMVCLXr3RslSaiDDYalIUMDw9edZSOp7_Lv1I-1713517189-1.0.1.1-I4eHWwMGTKn4Glwi7JaSXqucrMc3uJ5GZnEksiSJoJR8vpNj5KpDppLtW1JGXYo8yxj104zXMY9sGO4iol.gEw; _gat=1; _ga_VE1N32NCDX=GS1.2.1713517188.1.1.1713517260.0.0.0
Source: global traffic	HTTP traffic detected: GET /assets/images/favicon/favicon.ico?=0.19651022570650856 HTTP/1.1Host: e.trustifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; cf_clearance=1Xx9bvdMVCLXr3RslSaiDDYalIUMDw9edZSOp7_Lv1I-1713517189-1.0.1.1-I4eHWwMGTKn4Glwi7JaSXqucrMc3uJ5GZnEksiSJoJR8vpNj5KpDppLtW1JGXYo8yxj104zXMY9sGO4iol.gEw; _gat=1; _ga_VE1N32NCDX=GS1.2.1713517188.1.1.1713517260.0.0.0
Source: global traffic	HTTP traffic detected: GET /assets/images/favicon/favicon.ico?=0.19651022570650856 HTTP/1.1Host: e.trustifi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1413357027.1713517187; _gid=GA1.2.201971229.1713517187; cf_clearance=1Xx9bvdMVCLXr3RslSaiDDYalIUMDw9edZSOp7_Lv1I-1713517189-1.0.1.1-I4eHWwMGTKn4Glwi7JaSXqucrMc3uJ5GZnEksiSJoJR8vpNj5KpDppLtW1JGXYo8yxj104zXMY9sGO4iol.gEw; _gat=1; _ga_VE1N32NCDX=GS1.2.1713517188.1.1.1713517260.0.0.0

Source: chromecache_92.1.dr

Source: unknown

DNS traffic detected: queries for: e.trustifi.com

Source: unknown

Source: chromecache_92.1.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_92.1.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_89.1.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_87.1.dr	String found in binary or memory: https://bid.g.doubleclick.net/xbbe/pixel?d=KAE
Source: chromecache_92.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_94.1.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_94.1.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_92.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_87.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/
Source: chromecache_92.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_92.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_92.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_89.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_87.1.dr, chromecache_89.1.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_92.1.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_89.1.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_89.1.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_89.1.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_92.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_89.1.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_92.1.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_92.1.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_87.1.dr	String found in binary or memory: https://www.googletagmanager.com/debug/bootstrap
Source: chromecache_89.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_92.1.dr	String found in binary or memory: https://www.merchant-center-analytics.goog

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49696
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49692 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.17:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.220.189.216:443 -> 192.168.2.17:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.220.189.216:443 -> 192.168.2.17:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.157.11:443 -> 192.168.2.17:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.17:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.17:49766 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@13/28@16/10

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://e.trustifi.com/#/fff3a6/655618/6b960b/eb6fbf/0f1f42/43c464/f0c790/c3ed4c/e8666a/ef542d/85972d/627493/9a11d6/1f4096/1d247f/d0892c/c03583/d792ff/b0a902/7344c5/9089ad/a64a03/f70840/3edfe8/f48740/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2112 --field-trial-handle=2012,i,2597764809865968814,7641956660817323542,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2112 --field-trial-handle=2012,i,2597764809865968814,7641956660817323542,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

ID:	1428646
Product:	CloudBasic
Start time:	10:59:18
Start date:	19.04.2024
Cookbook:	defaultwindowsinteractivecookbook.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Windows Analysis Report
https://e.trustifi.com/#/fff3a6/655618/6b960b/eb6fbf/0f1f42/43c464/f0c790/c3ed4c/e8666a/ef542d/85972d/627493/9a11d6/1f4096/1d247f/d0892c/c03583/d792ff/b0a902/7344c5/9089ad/a64a03/f70840/3edfe8/f48740/

Overview

General Information

Detection

Signatures

Classification

Signatures

Compliance

Networking

System Summary

Boot Survival

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://e.trustifi.com/#/fff3a6/655618/6b960b/eb6fbf/0f1f42/43c464/f0c790/c3ed4c/e8666a/ef542d/85972d/627493/9a11d6/1f4096/1d247f/d0892c/c03583/d792ff/b0a902/7344c5/9089ad/a64a03/f70840/3edfe8/f48740/

Overview

General Information

Detection

Signatures

Classification

Signatures

Compliance

Networking

System Summary

Boot Survival

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://e.trustifi.com/#/fff3a6/655618/6b960b/eb6fbf/0f1f42/43c464/f0c790/c3ed4c/e8666a/ef542d/85972d/627493/9a11d6/1f4096/1d247f/d0892c/c03583/d792ff/b0a902/7344c5/9089ad/a64a03/f70840/3edfe8/f48740/