Windows Analysis Report
EPOXY PRIMER.eml

Phishing

Source: https://wilkopaintinc.com/	HTTP Parser: No favicon
Source: https://platform.twitter.com/widgets/widget_iframe.2f70fb173b9000da126c79afe2098f02.html?origin=https%3A%2F%2Fwilkopaintinc.com	HTTP Parser: No favicon

Compliance

Source: unknown	HTTPS traffic detected: 40.126.29.14:443 -> 192.168.2.16:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.16:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.16:49720 version: TLS 1.2

Software Vulnerabilities

Source: chrome.exe

Memory has grown: Private usage: 1MB later: 27MB

Networking

Source: Joe Sandbox View	IP Address: 146.75.124.157 146.75.124.157
Source: Joe Sandbox View	IP Address: 104.244.42.200 104.244.42.200
Source: Joe Sandbox View	IP Address: 104.244.42.72 104.244.42.72
Source: Joe Sandbox View	IP Address: 192.229.163.25 192.229.163.25

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.50.115.150
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.14
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.14
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.14
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.14
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.14
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.14
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.14
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.14
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.14
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.14
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.14
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.176.131
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.176.131

Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=e+cSUmXhEko3OgZ&MD=vw2nmoo4 HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /onboarding/smskillreader.txt HTTP/1.1Host: armmf.adobe.comConnection: keep-aliveAccept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ReaderServices/23.6.20320 Chrome/105.0.0.0 Safari/537.36Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=e+cSUmXhEko3OgZ&MD=vw2nmoo4 HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: wilkopaintinc.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/headway/library/compatibility/woocommerce/headway-storefront-wooc.css?ver=5.3.17 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/files/headway/cache/general-https-74593e1.css?ver=5.3.17 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/files/headway/cache/layout-front_page-https-0976298.css?ver=5.3.17 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/files/headway/cache/responsive-grid-https-d2119e4.css?ver=5.3.17 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/css/dist/block-library/style.min.css?ver=5.3.17 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/style.css?ver=2.5.14 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/carousel-horizontal-posts-content-slider-pro/assets/css/custom-style.css?ver=5.3.17 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/carousel-horizontal-posts-content-slider-pro/assets/css/magnific-popup/magnific-popup.css?ver=5.3.17 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.2.2 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/woocommerce-product-details-customiser/assets/css/layout.css?ver=5.3.17 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=3.9.5 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=3.9.5 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/easy-fancybox/fancybox/1.5.4/jquery.fancybox.min.css?ver=5.3.17 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/footable/css/footable.core.min.css?ver=0.3.1 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/footable/css/footable.standalone.min.css?ver=0.3.1 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/headway/library/blocks/slider/assets/flexslider.css?ver=5.3.17 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/slidedeck2-personal/css/slidedeck.css?ver=2.3.10 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-ui/css/wp-ui.css?ver=5.3.17 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-ui/css/themes/wpui-light.css?ver=5.3.17 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-ui/css/css.php?styles=wpui-light%7Cwpui-blue%7Cwpui-red%7Cwpui-green%7Cwpui-dark%7Cwpui-quark%7Cwpui-alma%7Cwpui-macish%7Cwpui-redmond%7Cwpui-sevin&ver=5.3.17 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.js?ver=1.12.4-wp HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/headway/library/media/js/jquery.fitvids.js?ver=5.3.17 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/files/headway/cache/responsive-grid-js-https-e6e6939.js?ver=5.3.17 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widgets.js?ver=1316526300 HTTP/1.1Host: platform.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/footable/js/footable.min.js?ver=0.3.1 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/footable/js/footable.sort.min.js?ver=0.3.1 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/footable/js/footable.filter.min.js?ver=0.3.1 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/ui/core.min.js?ver=1.11.4 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/ui/widget.min.js?ver=1.11.4 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/ui/tabs.min.js?ver=1.11.4 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/ui/mouse.min.js?ver=1.11.4 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/ui/accordion.min.js?ver=1.11.4 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/ui/resizable.min.js?ver=1.11.4 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/ui/draggable.min.js?ver=1.11.4 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/ui/button.min.js?ver=1.11.4 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/ui/position.min.js?ver=1.11.4 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/ui/dialog.min.js?ver=1.11.4 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/ui/sortable.min.js?ver=1.11.4 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?wpui-script=before&ver=5.3.17 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-ui/js/wp-ui.js?ver=0.8.8 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/headway/library/media/js/jquery.hoverintent.js?ver=5.3.17 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/headway/library/blocks/navigation/js/jquery.superfish.js?ver=5.3.17 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/headway/library/blocks/navigation/js/selectnav.js?ver=5.3.17 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/files/headway/cache/block-dynamic-js-layout-front_page-https-2863a3f.js?ver=5.3.17 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/slidedeck2-personal/js/jquery-mousewheel/jquery.mousewheel.min.js?ver=3.0.6 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/slidedeck2-personal/js/slidedeck.jquery.js?ver=1.4.1 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/slidedeck2-personal/js/slidedeck-public.js?ver=2.3.10 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/files/2015/01/wilko_slider_01.jpg HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/files/2015/06/wilco-logo5.png HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/files/2015/02/pipeline.jpg HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/files/2015/02/Yellow.jpg HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/files/2015/02/TT_60_nobackground.jpg HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/files/2015/02/wilko-slider-22779973.jpg HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/files/2015/02/wilko-slider-pipeline.jpg HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/files/2015/06/wilco-logo5.png HTTP/1.1Host: wilkopaintinc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/files/2015/01/wilko-slider-279953661.jpg HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/files/2015/02/pipeline.jpg HTTP/1.1Host: wilkopaintinc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/carousel-horizontal-posts-content-slider-pro/assets/js/caroufredsel/jquery.transit.min.js?ver=5.3.17 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/files/2015/01/wilko_slider_01.jpg HTTP/1.1Host: wilkopaintinc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/files/2015/02/wilko-slider-22779973.jpg HTTP/1.1Host: wilkopaintinc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1840770378.1714155882; _gid=GA1.2.594062742.1714155882; _gat=1
Source: global traffic	HTTP traffic detected: GET /wp-content/files/2015/02/TT_60_nobackground.jpg HTTP/1.1Host: wilkopaintinc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1840770378.1714155882; _gid=GA1.2.594062742.1714155882; _gat=1
Source: global traffic	HTTP traffic detected: GET /wp-content/files/2015/02/wilko-slider-pipeline.jpg HTTP/1.1Host: wilkopaintinc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1840770378.1714155882; _gid=GA1.2.594062742.1714155882; _gat=1
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/carousel-horizontal-posts-content-slider-pro/assets/js/caroufredsel/jquery.lazyload.min.js?ver=5.3.17 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1840770378.1714155882; _gid=GA1.2.594062742.1714155882; _gat=1
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/carousel-horizontal-posts-content-slider-pro/assets/js/magnific-popup/jquery.magnific-popup.min.js?ver=5.3.17 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1840770378.1714155882; _gid=GA1.2.594062742.1714155882; _gat=1
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/carousel-horizontal-posts-content-slider-pro/assets/js/caroufredsel/jquery.carouFredSel-6.2.1-packed.js?ver=5.3.17 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1840770378.1714155882; _gid=GA1.2.594062742.1714155882; _gat=1
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/carousel-horizontal-posts-content-slider-pro/assets/js/caroufredsel/jquery.touchSwipe.min.js?ver=5.3.17 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1840770378.1714155882; _gid=GA1.2.594062742.1714155882; _gat=1
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.2.2 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1840770378.1714155882; _gid=GA1.2.594062742.1714155882; _gat=1
Source: global traffic	HTTP traffic detected: GET /wp-content/files/2015/02/Yellow.jpg HTTP/1.1Host: wilkopaintinc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1840770378.1714155882; _gid=GA1.2.594062742.1714155882; _gat=1
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.70 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1840770378.1714155882; _gid=GA1.2.594062742.1714155882; _gat=1
Source: global traffic	HTTP traffic detected: GET /wp-content/files/2015/01/wilko-slider-279953661.jpg HTTP/1.1Host: wilkopaintinc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1840770378.1714155882; _gid=GA1.2.594062742.1714155882; _gat=1
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=3.9.5 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1840770378.1714155882; _gid=GA1.2.594062742.1714155882; _gat=1
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1840770378.1714155882; _gid=GA1.2.594062742.1714155882; _gat=1
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=3.9.5 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1840770378.1714155882; _gid=GA1.2.594062742.1714155882; _gat=1
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=3.9.5 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1840770378.1714155882; _gid=GA1.2.594062742.1714155882; _gat=1
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/easy-fancybox/fancybox/1.5.4/jquery.fancybox.min.js?ver=5.3.17 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1840770378.1714155882; _gid=GA1.2.594062742.1714155882; _gat=1
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/slidedeck2-personal/js/jquery.easing.1.3.js?ver=1.3 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1840770378.1714155882; _gid=GA1.2.594062742.1714155882; _gat=1
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/easy-fancybox/vendor/jquery.mousewheel.min.js?ver=3.1.13 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1840770378.1714155882; _gid=GA1.2.594062742.1714155882; _gat=1
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/woocommerce/assets/js/flexslider/jquery.flexslider.min.js?ver=2.7.2 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1840770378.1714155882; _gid=GA1.2.594062742.1714155882; _gat=1
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-embed.min.js?ver=5.3.17 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1840770378.1714155882; _gid=GA1.2.594062742.1714155882; _gat=1
Source: global traffic	HTTP traffic detected: GET /wp-content/files/2015/01/wilko-slider-410185341.jpg HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1840770378.1714155882; _gid=GA1.2.594062742.1714155882; _gat=1; _ga_C6KWET3VXG=GS1.2.1714155884.1.0.1714155884.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/files/2015/01/wilko-slider-227799731.jpg HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1840770378.1714155882; _gid=GA1.2.594062742.1714155882; _gat=1; _ga_C6KWET3VXG=GS1.2.1714155884.1.0.1714155884.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/files/2015/01/slider-paint-cans.jpg HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1840770378.1714155882; _gid=GA1.2.594062742.1714155882; _gat=1; _ga_C6KWET3VXG=GS1.2.1714155884.1.0.1714155884.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/files/2015/02/Amex-Multi-4-Horiz-318x76.jpg HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1840770378.1714155882; _gid=GA1.2.594062742.1714155882; _gat=1; _ga_C6KWET3VXG=GS1.2.1714155884.1.0.1714155884.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-emoji-release.min.js?ver=5.3.17 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1840770378.1714155882; _gid=GA1.2.594062742.1714155882; _gat=1; _ga_C6KWET3VXG=GS1.2.1714155884.1.0.1714155884.0.0.0
Source: global traffic	HTTP traffic detected: GET /widgets/widget_iframe.2f70fb173b9000da126c79afe2098f02.html?origin=https%3A%2F%2Fwilkopaintinc.com HTTP/1.1Host: platform.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/files/2015/06/paint.jpg HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wilkopaintinc.com/wp-content/files/headway/cache/general-https-74593e1.css?ver=5.3.17Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1840770378.1714155882; _gid=GA1.2.594062742.1714155882; _gat=1; _ga_C6KWET3VXG=GS1.2.1714155884.1.0.1714155884.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/files/2015/02/Amex-Multi-4-Horiz-318x76.jpg HTTP/1.1Host: wilkopaintinc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1840770378.1714155882; _gid=GA1.2.594062742.1714155882; _gat=1; _ga_C6KWET3VXG=GS1.2.1714155884.1.0.1714155884.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=3.9.5 HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1840770378.1714155882; _gid=GA1.2.594062742.1714155882; _gat=1; _ga_C6KWET3VXG=GS1.2.1714155884.1.0.1714155884.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/files/2015/01/slider-paint-cans.jpg HTTP/1.1Host: wilkopaintinc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1840770378.1714155882; _gid=GA1.2.594062742.1714155882; _gat=1; _ga_C6KWET3VXG=GS1.2.1714155884.1.0.1714155884.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/files/2015/01/wilko-slider-410185341.jpg HTTP/1.1Host: wilkopaintinc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1840770378.1714155882; _gid=GA1.2.594062742.1714155882; _gat=1; _ga_C6KWET3VXG=GS1.2.1714155884.1.0.1714155884.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/files/2015/01/wilko-slider-227799731.jpg HTTP/1.1Host: wilkopaintinc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1840770378.1714155882; _gid=GA1.2.594062742.1714155882; _gat=1; _ga_C6KWET3VXG=GS1.2.1714155884.1.0.1714155884.0.0.0
Source: global traffic	HTTP traffic detected: GET /settings?session_id=4ca2f554dd064a90726e0698d6ae91f029fd1268 HTTP/1.1Host: syndication.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://platform.twitter.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://platform.twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/files/2015/06/paint.jpg HTTP/1.1Host: wilkopaintinc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1840770378.1714155882; _gid=GA1.2.594062742.1714155882; _gat=1; _ga_C6KWET3VXG=GS1.2.1714155884.1.0.1714155884.0.0.0
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: wilkopaintinc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1840770378.1714155882; _gid=GA1.2.594062742.1714155882; _gat=1; _ga_C6KWET3VXG=GS1.2.1714155884.1.0.1714155884.0.0.0
Source: global traffic	HTTP traffic detected: GET /settings?session_id=4ca2f554dd064a90726e0698d6ae91f029fd1268 HTTP/1.1Host: syndication.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wilkopaint/wp-content/themes/headway/library/blocks/slider/assets/bg_direction_nav.png HTTP/1.1Host: fetchtoto.hubris.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wilkopaintinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?wc-ajax=get_refreshed_fragments HTTP/1.1Host: wilkopaintinc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1840770378.1714155882; _gid=GA1.2.594062742.1714155882; _gat=1; _ga_C6KWET3VXG=GS1.2.1714155884.1.0.1714155884.0.0.0
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: wilkopaintinc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1840770378.1714155882; _gid=GA1.2.594062742.1714155882; _gat=1; _ga_C6KWET3VXG=GS1.2.1714155884.1.0.1714155884.0.0.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.wilkopaintinc.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_259.21.dr

String found in binary or memory: return b}yC.J="internal.enableAutoEventOnTimer";var dc=ka(["data-gtm-yt-inspected-"]),AC=["www.youtube.com","www.youtube-nocookie.com"],BC,CC=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: s.w.org
Source: global traffic	DNS traffic detected: DNS query: platform.twitter.com
Source: global traffic	DNS traffic detected: DNS query: syndication.twitter.com
Source: global traffic	DNS traffic detected: DNS query: fetchtoto.hubris.net

Source: unknown

HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 4742Host: login.live.com

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 26 Apr 2024 18:24:50 GMTContent-Type: text/htmlContent-Length: 1172Connection: close

Source: chromecache_269.21.dr	String found in binary or memory: http://adomas.org/javascript-mouse-wheel/
Source: chromecache_310.21.dr	String found in binary or memory: http://api.jqueryui.com/accordion/
Source: chromecache_291.21.dr	String found in binary or memory: http://api.jqueryui.com/button/
Source: chromecache_349.21.dr	String found in binary or memory: http://api.jqueryui.com/category/ui-core/
Source: chromecache_344.21.dr	String found in binary or memory: http://api.jqueryui.com/dialog/
Source: chromecache_258.21.dr	String found in binary or memory: http://api.jqueryui.com/draggable/
Source: chromecache_321.21.dr	String found in binary or memory: http://api.jqueryui.com/jQuery.widget/
Source: chromecache_311.21.dr	String found in binary or memory: http://api.jqueryui.com/mouse/
Source: chromecache_304.21.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_282.21.dr	String found in binary or memory: http://api.jqueryui.com/resizable/
Source: chromecache_343.21.dr	String found in binary or memory: http://api.jqueryui.com/sortable/
Source: chromecache_322.21.dr	String found in binary or memory: http://api.jqueryui.com/tabs/
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: http://b.c2r.ts.cdn.office.net/pr
Source: chromecache_269.21.dr	String found in binary or memory: http://brandonaaron.net)
Source: chromecache_319.21.dr	String found in binary or memory: http://cherne.net/brian/resources/jquery.hoverIntent.html
Source: chromecache_314.21.dr	String found in binary or memory: http://css-tricks.com
Source: chromecache_314.21.dr	String found in binary or memory: http://daverupert.com
Source: chromecache_283.21.dr	String found in binary or memory: http://dimsemenov.com/plugins/magnific-popup/
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: http://f.c2r.ts.cdn.office.net/pr
Source: chromecache_273.21.dr	String found in binary or memory: http://feross.org
Source: chromecache_294.21.dr	String found in binary or memory: http://fetchtoto.hubris.net/wilkopaint/epoxies/
Source: chromecache_294.21.dr	String found in binary or memory: http://fetchtoto.hubris.net/wilkopaint/polyurea/
Source: chromecache_294.21.dr	String found in binary or memory: http://fetchtoto.hubris.net/wilkopaint/services/
Source: chromecache_274.21.dr	String found in binary or memory: http://fooplugins.com/plugins/footable-jquery/
Source: chromecache_294.21.dr	String found in binary or memory: http://gmpg.org/xfn/11
Source: chromecache_330.21.dr	String found in binary or memory: http://gsgd.co.uk/sandbox/jquery/easing/
Source: chromecache_274.21.dr	String found in binary or memory: http://jquery.com/
Source: chromecache_344.21.dr, chromecache_349.21.dr, chromecache_310.21.dr, chromecache_321.21.dr, chromecache_291.21.dr, chromecache_322.21.dr, chromecache_304.21.dr, chromecache_311.21.dr, chromecache_282.21.dr, chromecache_258.21.dr, chromecache_343.21.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_344.21.dr, chromecache_349.21.dr, chromecache_310.21.dr, chromecache_321.21.dr, chromecache_291.21.dr, chromecache_322.21.dr, chromecache_304.21.dr, chromecache_311.21.dr, chromecache_282.21.dr, chromecache_258.21.dr, chromecache_343.21.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_342.21.dr	String found in binary or memory: http://kav.in
Source: chromecache_341.21.dr	String found in binary or memory: http://malsup.com/jquery/block/
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: http://olkflt.edog.officeapps.live.com/olkflt/outlookflighting.svc/api/glides
Source: chromecache_339.21.dr	String found in binary or memory: http://raphaeljs.com)
Source: chromecache_339.21.dr	String found in binary or memory: http://raphaeljs.com/license.html)
Source: chromecache_314.21.dr	String found in binary or memory: http://sam.zoy.org/wtfpl/
Source: chromecache_294.21.dr	String found in binary or memory: http://schema.org/ImageObject
Source: chromecache_294.21.dr	String found in binary or memory: http://schema.org/SiteNavigationElement
Source: chromecache_294.21.dr	String found in binary or memory: http://schema.org/WPSideBar
Source: chromecache_294.21.dr	String found in binary or memory: http://schema.org/WebPage
Source: chromecache_339.21.dr	String found in binary or memory: http://sencha.com)
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: http://weather.service.msn.com/data.aspx
Source: chromecache_294.21.dr	String found in binary or memory: http://wilkopaintinc.com/
Source: chromecache_294.21.dr	String found in binary or memory: http://wilkopaintinc.com/#webpage
Source: chromecache_294.21.dr	String found in binary or memory: http://wilkopaintinc.com/natural-gas-pipeline/
Source: chromecache_294.21.dr	String found in binary or memory: http://wilkopaintinc.com/polysiloxane/
Source: chromecache_294.21.dr	String found in binary or memory: http://wilkopaintinc.com/railcar/
Source: chromecache_294.21.dr	String found in binary or memory: http://wilkopaintinc.com/silicones/
Source: chromecache_294.21.dr	String found in binary or memory: http://wilkopaintinc.com/urethanes/
Source: chromecache_294.21.dr	String found in binary or memory: http://wilkopaintinc.com/wp-content/files/2015/01/slider-paint-cans.jpg
Source: chromecache_294.21.dr	String found in binary or memory: http://wilkopaintinc.com/wp-content/files/2015/01/wilko-slider-227799731.jpg
Source: chromecache_294.21.dr	String found in binary or memory: http://wilkopaintinc.com/wp-content/files/2015/01/wilko-slider-279953661.jpg
Source: chromecache_294.21.dr	String found in binary or memory: http://wilkopaintinc.com/wp-content/files/2015/01/wilko-slider-410185341.jpg
Source: chromecache_294.21.dr	String found in binary or memory: http://wilkopaintinc.com/wp-content/files/2015/01/wilko_slider_01.jpg
Source: chromecache_294.21.dr	String found in binary or memory: http://wilkopaintinc.com/wp-content/files/2015/02/Amex-Multi-4-Horiz-318x76.jpg
Source: chromecache_294.21.dr	String found in binary or memory: http://wilkopaintinc.com/wp-content/files/2015/02/TT_60_nobackground.jpg
Source: chromecache_294.21.dr	String found in binary or memory: http://wilkopaintinc.com/wp-content/files/2015/02/Yellow.jpg
Source: chromecache_294.21.dr	String found in binary or memory: http://wilkopaintinc.com/wp-content/files/2015/02/pipeline.jpg
Source: chromecache_294.21.dr	String found in binary or memory: http://wilkopaintinc.com/wp-content/files/2015/02/wilko-slider-22779973.jpg
Source: chromecache_294.21.dr	String found in binary or memory: http://wilkopaintinc.com/wp-content/files/2015/02/wilko-slider-pipeline.jpg
Source: chromecache_314.21.dr	String found in binary or memory: http://www.alistapart.com/articles/creating-intrinsic-ratios-for-video/
Source: chromecache_333.21.dr, chromecache_339.21.dr, chromecache_348.21.dr	String found in binary or memory: http://www.gnu.org/licenses/
Source: chromecache_320.21.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl-2.0.html
Source: chromecache_335.21.dr, chromecache_341.21.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl.html
Source: chromecache_269.21.dr	String found in binary or memory: http://www.mathias-bank.de)
Source: chromecache_335.21.dr, chromecache_341.21.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_284.21.dr	String found in binary or memory: http://www.quirksmode.org/js/events_properties.html
Source: chromecache_348.21.dr	String found in binary or memory: http://www.slidedeck.com/
Source: chromecache_348.21.dr	String found in binary or memory: http://www.slidedeck.com/usage-documentation
Source: chromecache_320.21.dr	String found in binary or memory: http://www.woothemes.com/flexslider/
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/app/acquisitionlogging
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/app/download
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/authenticated
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/preinstalled
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/unauthenticated
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/orgid/appinstall/authenticated
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/apps/remove
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/commerce/query
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/entitlement/query
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/orgid/apps/remove
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/orgid/entitlement/query
Source: chromecache_259.21.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_259.21.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_256.21.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://analysis.windows.net/powerbi/api
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://api.aadrm.com
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://api.aadrm.com/
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://api.addins.omex.office.net/api/addins/search
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://api.addins.omex.office.net/appinfo/query
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://api.addins.omex.office.net/appstate/query
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://api.addins.store.office.com/addinstemplate
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://api.addins.store.office.com/app/query
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://api.addins.store.officeppe.com/addinstemplate
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://api.cortana.ai
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://api.diagnostics.office.com
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://api.diagnosticssdf.office.com
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://api.diagnosticssdf.office.com/v2/feedback
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://api.diagnosticssdf.office.com/v2/file
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://api.microsoftstream.com
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://api.microsoftstream.com/api/
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://api.office.net
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://api.officescripts.microsoftusercontent.com/api
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://api.onedrive.com
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/datasets
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/groups
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/imports
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://api.scheduler.
Source: chromecache_294.21.dr	String found in binary or memory: https://api.w.org/
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://apis.live.net/v5.0/
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://apis.mobile.m365.svc.cloud.microsoft
Source: chromecache_294.21.dr	String found in binary or memory: https://apps.elfsight.com/panel/applications/google-maps/?utm_source=websites&utm_medium=clients&utm
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://arc.msn.com/v4/api/selection
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://asgsmsproxyapi.azurewebsites.net/
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://augloop.office.com
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://augloop.office.com/v2
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://augloop.office.com;https://augloop-int.officeppe.com;https://augloop-dogfood.officeppe.com;h
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://autodiscover-s.outlook.com/
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
Source: chromecache_259.21.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designer-mobile
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://cdn.entity.
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://cdn.hubblecontent.osi.office.net/
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://cdn.int.designerapp.osi.office.net/fonts
Source: 235859d0-ba31-4039-8d15-a58582b90f08.tmp.14.dr, 2732764e-c875-440b-bdfc-af792a11f7bf.tmp.14.dr	String found in binary or memory: https://chrome.cloudflare-dns.com
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://client-office365-tas.msedge.net/ab
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://clients.config.office.net
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://clients.config.office.net/
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://clients.config.office.net/c2r/v1.0/DeltaAdvisory
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://clients.config.office.net/c2r/v1.0/InteractiveInstallation
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/android/policies
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/ios
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/mac
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/tenantassociationkey
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://cloudfiles.onenote.com/upload.aspx
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://config.edge.skype.com
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://config.edge.skype.com/config/v1/Office
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://config.edge.skype.com/config/v2/Office
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://consent.config.office.com/consentcheckin/v1.0/consents
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://consent.config.office.com/consentweb/v1.0/consents
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://cortana.ai
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://cortana.ai/api
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://cr.office.com
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://d.docs.live.net
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://dataservice.o365filtering.com
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://dataservice.o365filtering.com/
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://designerapp.officeapps.live.com/designerapp
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://dev.cortana.ai
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://dev0-api.acompli.net/autodetect
Source: chromecache_297.21.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/CustomEvent/CustomEvent
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://devnull.onenote.com
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://directory.services.
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://ecs.office.com
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://ecs.office.com/config/v1/Designer
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://ecs.office.com/config/v2/Office
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://edge.skype.com/registrar/prod
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://edge.skype.com/rps
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://enrichment.osi.office.net/
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Refresh/v1
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Resolve/v1
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Search/v1
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/StockHistory/v1
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/ipcheck/v1
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/v2.1601652342626
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/Metadata/
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/Metadata/metadata.json
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/view/desktop/main.cshtml
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/view/web/main.cshtml
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://entitlement.diagnostics.office.com
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://entitlement.diagnosticssdf.office.com
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://excel.uservoice.com/forums/304936-excel-for-mobile-devices-tablets-phones-android
Source: chromecache_316.21.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw0aXpsog.woff2)
Source: chromecache_316.21.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw2aXpsog.woff2)
Source: chromecache_316.21.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw3aXpsog.woff2)
Source: chromecache_316.21.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2)
Source: chromecache_316.21.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw9aXpsog.woff2)
Source: chromecache_316.21.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUJiZTaR.woff2)
Source: chromecache_316.21.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2)
Source: chromecache_316.21.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUhiZTaR.woff2)
Source: chromecache_316.21.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUliZTaR.woff2)
Source: chromecache_316.21.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUtiZTaR.woff2)
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://fpastorage.cdn.office.net/%s
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://fpastorage.cdn.office.net/firstpartyapp/addins.xml
Source: chromecache_345.21.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_284.21.dr	String found in binary or memory: https://github.com/lukaszfiszer/selectnav.js
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://globaldisco.crm.dynamics.com
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://graph.ppe.windows.net
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://graph.ppe.windows.net/
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://graph.windows.net
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://graph.windows.net/
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/api/pivots/
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/api/telemetry
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/browse?cp=remix3d
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/browse?secureurl=1
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=icons
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=stockimages
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=stockvideos
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsofticon?
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://ic3.teams.office.com
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://incidents.diagnostics.office.com
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://incidents.diagnosticssdf.office.com
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://inclient.store.office.com/gyro/client
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://inclient.store.office.com/gyro/clientstore
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=ClipArt
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Facebook
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/odc/insertmedia
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://invites.office.com/
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://learningtools.onenote.com/learningtoolsapi/v2.0/GetFreeformSpeech
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://learningtools.onenote.com/learningtoolsapi/v2.0/Getvoices
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://lifecycle.office.com
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://login.microsoftonline.com
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://login.microsoftonline.com/
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://login.windows-ppe.net/common/oauth2/authorize
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://login.windows.local
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://login.windows.net/common/oauth2/authorize
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://loki.delve.office.com/api/v1/configuration/officewin32/
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://lookup.onenote.com/lookup/geolocation/v1
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://make.powerautomate.com
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://management.azure.com
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://management.azure.com/
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://messagebroker.mobile.m365.svc.cloud.microsoft
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://messaging.action.office.com/
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://messaging.action.office.com/setcampaignaction
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://messaging.action.office.com/setuseraction16
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://messaging.engagement.office.com/
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://messaging.engagement.office.com/campaignmetadataaggregator
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://messaging.lifecycle.office.com/
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://messaging.lifecycle.office.com/getcustommessage16
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://messaging.office.com/
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://metadata.templates.cdn.office.net/client/log
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://my.microsoftpersonalcontent.com
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://ncus.contentsync.
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://ncus.pagecontentsync.
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://o365auditrealtimeingestion.manage.office.com/api/userauditrecord
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://ocos-office365-s2s.msedge.net/ab
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/stat/images/OneDriveUpsell.png
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/xml?resource=OneDriveSignUpUpsell
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/xml?resource=OneDriveSyncClientUpsell
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://ods-diagnostics-ppe.trafficmanager.net
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://ofcrecsvcapi-int.azurewebsites.net/
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://officeapps.live.com
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://officeci.azurewebsites.net/api/
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://officepyservice.office.net/
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://officepyservice.office.net/service.functionality
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://officesetup.getmicrosoftkey.com
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://ogma.osi.office.net/TradukoApi/api/v1.0/
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officeentities
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officeentitiesupdated
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officesharedentities
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officesharedentitiesupdated
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://onedrive.live.com
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://onedrive.live.com/embed?
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://otelrules.azureedge.net
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://otelrules.svc.static.microsoft
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://outlook.office.com
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://outlook.office.com/
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://outlook.office.com/autosuggest/api/v1/init?cvid=
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://outlook.office365.com
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://outlook.office365.com/
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://outlook.office365.com/api/v1.0/me/Activities
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://outlook.office365.com/autodiscover/autodiscover.json
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://outlook.office365.com/connectors
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://ovisualuiapp.azurewebsites.net/pbiagave/
Source: chromecache_259.21.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_259.21.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://pages.store.office.com/appshome.aspx?productgroup=Outlook
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://pages.store.office.com/review/query
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://pages.store.office.com/webapplandingpage.aspx
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://partnerservices.getmicrosoftkey.com/PartnerProvisioning.svc/v1/subscriptions
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
Source: chromecache_294.21.dr	String found in binary or memory: https://platform.twitter.com/widgets.js?ver=1316526300
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://portal.office.com/account/?ref=ClientMeControl
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://posarprodcssservice.accesscontrol.windows.net/v2/OAuth2-13
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://powerlift-frontdesk.acompli.net
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://powerlift.acompli.net
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://prod-global-autodetect.acompli.net/autodetect
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://prod.mds.office.com/mds/api/v1.0/clientmodeldirectory
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://pushchannel.1drv.ms
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
Source: chromecache_273.21.dr, chromecache_337.21.dr	String found in binary or memory: https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://res.cdn.office.net
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://res.cdn.office.net/mro1cdnstorage/fonts/prod/4.39
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://res.cdn.office.net/polymer/models
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://res.getmicrosoftkey.com/api/redemptionevents
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://rpsticket.partnerservices.getmicrosoftkey.com
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://safelinks.protection.outlook.com/api/GetPolicy
Source: chromecache_294.21.dr	String found in binary or memory: https://schema.org
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://service.officepy.microsoftusercontent.com/
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://settings.outlook.com
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://shell.suite.office.com:1443
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://skyapi.live.net/Activity/
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://sr.outlook.office.net/ws/speech/recognize/assistant/work
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://staging.cortana.ai
Source: chromecache_259.21.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_259.21.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_256.21.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://storage.live.com/clientlogs/uploadlocation
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://store.office.cn/addinstemplate
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://store.office.de/addinstemplate
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://substrate.office.com
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://substrate.office.com/Notes-Internal.ReadWrite
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://substrate.office.com/search/api/v1/SearchHistory
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://substrate.office.com/search/api/v2/init
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
Source: chromecache_256.21.dr	String found in binary or memory: https://tagassistant.google.com/
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://tasks.office.com
Source: chromecache_259.21.dr	String found in binary or memory: https://td.doubleclick.net
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://templatesmetadata.office.net/
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://uci.cdn.office.net/mirrored/smartlookup/current/
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://uci.officeapps.live.com/OfficeInsights/web/views/insights.desktop.html
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://uci.officeapps.live.com/OfficeInsights/web/views/insights.immersive.html
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://useraudit.o365auditrealtimeingestion.manage.office.com
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://visio.uservoice.com/forums/368202-visio-on-devices
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://web.microsoftstream.com/video/
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://webshell.suite.office.com
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/#website
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/?s=
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/?wpui-script=before&ver=5.3.17
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/about/
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/alkyds-enamels/
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/comments/feed/
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/concrete-floor-coatings/
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/contact-us/
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/distributors/
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/downloads/
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/epoxies/
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/feed/
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/iso-12944-5-protective-coating-systems/
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/lacquers/
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/natural-gas-pipeline/
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/non-isocyanate/
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/original-equipment-manufacturers/
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/polysiloxane/
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/polyurea/
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/products/
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/railcar/
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/services/
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/silicones/
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/specialty-products/
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/track-paint/
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/urethanes/
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/water-borne/
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/files/2015/06/wilco-logo5.png
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/files/headway/cache/block-dynamic-js-layout-front_page-https-28
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/files/headway/cache/general-https-74593e1.css?ver=5.3.17
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/files/headway/cache/layout-front_page-https-0976298.css?ver=5.3
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/files/headway/cache/responsive-grid-https-d2119e4.css?ver=5.3.1
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/files/headway/cache/responsive-grid-js-https-e6e6939.js?ver=5.3
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/plugins/carousel-horizontal-posts-content-slider-pro/assets/css
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/plugins/carousel-horizontal-posts-content-slider-pro/assets/js/
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.2.2
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.2.2
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/plugins/easy-fancybox/fancybox/1.5.4/jquery.fancybox.min.css?ve
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/plugins/easy-fancybox/fancybox/1.5.4/jquery.fancybox.min.js?ver
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/plugins/easy-fancybox/vendor/jquery.mousewheel.min.js?ver=3.1.1
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/plugins/footable/css/footable.core.min.css?ver=0.3.1
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/plugins/footable/css/footable.standalone.min.css?ver=0.3.1
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/plugins/footable/js/footable.filter.min.js?ver=0.3.1
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/plugins/footable/js/footable.min.js?ver=0.3.1
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/plugins/footable/js/footable.sort.min.js?ver=0.3.1
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/plugins/slidedeck2-personal
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/plugins/slidedeck2-personal/css/slidedeck.css?ver=2.3.10
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/plugins/slidedeck2-personal/js/jquery-mousewheel/jquery.mousewh
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/plugins/slidedeck2-personal/js/jquery.easing.1.3.js?ver=1.3
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/plugins/slidedeck2-personal/js/slidedeck-public.js?ver=2.3.10
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/plugins/slidedeck2-personal/js/slidedeck.jquery.js?ver=1.4.1
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/plugins/woocommerce-product-details-customiser/assets/css/layou
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=3.9.5
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=3.9.5
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/plugins/woocommerce/assets/js/flexslider/jquery.flexslider.min.
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=3
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ve
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=3
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/style.css
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/plugins/wp-ui/css/css.php?styles=wpui-light%7Cwpui-blue%7Cwpui-
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/plugins/wp-ui/css/themes/wpui-light.css?ver=5.3.17
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/plugins/wp-ui/css/wp-ui.css?ver=5.3.17
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/plugins/wp-ui/js/wp-ui.js?ver=0.8.8
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/themes/headway/library/blocks/navigation/js/jquery.superfish.js
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/themes/headway/library/blocks/navigation/js/selectnav.js?ver=5.
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/themes/headway/library/blocks/slider/assets/flexslider.css?ver=
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/themes/headway/library/compatibility/woocommerce/headway-storef
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/themes/headway/library/media/js/html5shiv.js
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/themes/headway/library/media/js/ie8.js
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/themes/headway/library/media/js/jquery.fitvids.js?ver=5.3.17
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-content/themes/headway/library/media/js/jquery.hoverintent.js?ver=5.3.1
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-includes/css/dist/block-library/style.min.css?ver=5.3.17
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-includes/js/jquery/ui/accordion.min.js?ver=1.11.4
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-includes/js/jquery/ui/button.min.js?ver=1.11.4
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-includes/js/jquery/ui/core.min.js?ver=1.11.4
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-includes/js/jquery/ui/dialog.min.js?ver=1.11.4
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-includes/js/jquery/ui/draggable.min.js?ver=1.11.4
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-includes/js/jquery/ui/mouse.min.js?ver=1.11.4
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-includes/js/jquery/ui/position.min.js?ver=1.11.4
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-includes/js/jquery/ui/resizable.min.js?ver=1.11.4
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-includes/js/jquery/ui/sortable.min.js?ver=1.11.4
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-includes/js/jquery/ui/tabs.min.js?ver=1.11.4
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-includes/js/jquery/ui/widget.min.js?ver=1.11.4
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-includes/js/wp-embed.min.js?ver=5.3.17
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-includes/wlwmanifest.xml
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-json/
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwilkopaintinc.com%2F
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwilkopaintinc.com%2F&forma
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/xmlrpc.php
Source: chromecache_294.21.dr	String found in binary or memory: https://wilkopaintinc.com/xmlrpc.php?rsd
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://word-edit.officeapps.live.com/we/rrdiscovery.ashx
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://wus2.contentsync.
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://wus2.pagecontentsync.
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://www.bingapis.com/api/v7/urlpreview/search?appid=E93048236FE27D972F67C5AF722136866DF65FA2
Source: chromecache_256.21.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_256.21.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_256.21.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_259.21.dr	String found in binary or memory: https://www.google.com
Source: chromecache_256.21.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_259.21.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_259.21.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_256.21.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_259.21.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://www.odwebp.svc.ms
Source: A884068C-D556-40F5-B294-25590D711D20.0.dr	String found in binary or memory: https://www.yammer.com
Source: chromecache_294.21.dr	String found in binary or memory: https://yoast.com/wordpress/plugins/seo/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 40.126.29.14:443 -> 192.168.2.16:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.16:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.16:49720 version: TLS 1.2

System Summary

Source: classification engine

Classification label: clean2.winEML@38/262@12/9

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

File created: C:\Users\user\Documents\Outlook Files\~Outlook Data File - NoEmail.pst.tmp

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

File created: C:\Users\user\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_16827_20130-20240426T2023060326-7004.etl

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" /eml "C:\Users\user\Desktop\EPOXY PRIMER.eml"
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe "C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "9E92D656-43AB-41DE-9A59-CA10022FB90F" "58FC11A4-079A-4F01-A9A2-A333F4976CD1" "7004" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx"
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\N2NWVOQB\MG1500Y02 347.29 TDS (2).pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=1720 --field-trial-handle=1572,i,2272874066264292746,6878741164993548469,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\N2NWVOQB\347.129 LOW VOC Wilkopon Primer Yellow TDS copy.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://www.wilkopaintinc.com/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2204 --field-trial-handle=1948,i,826409000971433629,2370848980092189157,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe "C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "9E92D656-43AB-41DE-9A59-CA10022FB90F" "58FC11A4-079A-4F01-A9A2-A333F4976CD1" "7004" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx"			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\N2NWVOQB\MG1500Y02 347.29 TDS (2).pdf"			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\N2NWVOQB\347.129 LOW VOC Wilkopon Primer Yellow TDS copy.pdf"			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://www.wilkopaintinc.com/			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=1720 --field-trial-handle=1572,i,2272874066264292746,6878741164993548469,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2204 --field-trial-handle=1948,i,826409000971433629,2370848980092189157,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: apphelp.dll			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: c2r64.dll			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: userenv.dll			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: msasn1.dll			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: kernel.appcore.dll			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: cryptsp.dll			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: rsaenh.dll			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: cryptbase.dll			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: gpapi.dll			Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{F959DBBB-3867-41F2-8E5F-3B8BEFAA81B3}\InprocServer32

Jump to behavior

Source: Google Drive.lnk.20.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.20.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.20.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.20.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.20.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.20.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Window found: window name: SysTabControl32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Common

Jump to behavior

Boot Survival

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk			Jump to behavior

Hooking and other Techniques for Hiding and Protection

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior

Malware Analysis System Evasion

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

File Volume queried: C:\Windows\SysWOW64 FullSizeInformation

Jump to behavior

Source: EPOXY PRIMER.eml

Binary or memory string: xIj/H+KPJ1q5kh9I2vWLTpf8QEmukOQ10YWkMdqwFqvEP0EL3VjZnC+ZscIEIjRT/ojaa4aXi2+7

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Process information queried: ProcessInformation

Jump to behavior

Language, Device and Operating System Detection

Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe

Queries volume information: C:\Program Files (x86)\Microsoft Office\root\Office16\AI\WordCombinedFloatieLreOnline.onnx VolumeInformation

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior