Analysis Report https://otampadabola2.com

There are no high impact signatures.

Networking:

Connects to IPs without corresponding DNS lookups

Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.220.29
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.220.29
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.111.225
Source: unknown	TCP traffic detected without corresponding DNS query: 104.83.127.80
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.111.225
Source: unknown	TCP traffic detected without corresponding DNS query: 104.83.127.80
Source: unknown	TCP traffic detected without corresponding DNS query: 104.83.127.80
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.220.29
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.220.29
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.220.29
Source: unknown	TCP traffic detected without corresponding DNS query: 2.20.85.126
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.220.29
Source: unknown	TCP traffic detected without corresponding DNS query: 13.83.66.189
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.220.29
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.220.29
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.220.29
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.220.29
Source: unknown	TCP traffic detected without corresponding DNS query: 13.83.66.189
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.220.29

Found strings which match to known social media urls

Source: 6c66dcb53706dfab_0.0.dr	String found in binary or memory: "//www.youtube.com/embed/%id%?rel=0 equals www.youtube.com (Youtube)
Source: 6c66dcb53706dfab_0.0.dr	String found in binary or memory: //www.youtube.com/embed/%id%?rel=0 equals www.youtube.com (Youtube)

Performs DNS lookups

Source: unknown

DNS traffic detected: queries for: otampadabola2.com

Urls found in memory or binary data

Source: ad5c3af72a4b1a91_0.0.dr	String found in binary or memory: http://127.0.0.1/get_dwnld.cgi
Source: 2cc80dabc69f58b6_0.0.dr	String found in binary or memory: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt0
Source: 2cc80dabc69f58b6_0.0.dr	String found in binary or memory: http://cdp.geotrust.com/GeoTrustRSACA2018.crl0L
Source: 2cc80dabc69f58b6_0.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: 77EC63BDA74BD0D0E0426DC8F8008506.1.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: 2cc80dabc69f58b6_0.0.dr	String found in binary or memory: http://ocsp.digicert.com0B
Source: 2cc80dabc69f58b6_0.0.dr	String found in binary or memory: http://status.geotrust.com0=
Source: e96bc7d59d385e1a_0.0.dr	String found in binary or memory: http://www.apple.com/quicktime/download/
Source: 2cc80dabc69f58b6_0.0.dr	String found in binary or memory: http://www.coreldraw.com
Source: 2cc80dabc69f58b6_0.0.dr	String found in binary or memory: http://www.coreldraw.comXserver:
Source: e96bc7d59d385e1a_0.0.dr	String found in binary or memory: http://www.flip4mac.com/wmv_download.htm
Source: Reporting and NEL.1.dr	String found in binary or memory: https://a.nel.cloudflare.com/report?s=6Vu8SWkJCu4KI2tQJuLMzfq%2Fx%2BkaG6nfdrzOI1FNIImB5f27m2BsUdKAOX
Source: Reporting and NEL.1.dr	String found in binary or memory: https://a.nel.cloudflare.com/report?s=6YtAMcbuzTdTo8ki0pgzJL03niivCp43DyAOgJEYawW9N5vW5TZ0rs8W15YeXd
Source: Reporting and NEL.1.dr	String found in binary or memory: https://a.nel.cloudflare.com/report?s=dUOZAN6rSHJ3kUITvTLALTkZY4OREDmi4Ed%2BiKbqzu17Qo%2FXucb%2F94A9
Source: 7a7a3044cc4ae692_0.0.dr	String found in binary or memory: https://a.omappapi.com/app/js/webfont/1.5.18/webfont.js
Source: 7a7a3044cc4ae692_0.0.dr	String found in binary or memory: https://a.omappapi.com/app/js/webfont/1.5.18/webfont.jsaD
Source: 9434ea2adb137364_0.0.dr	String found in binary or memory: https://a.opmnstr.com/app/js/api.min.js
Source: 409d7183585b84f6_0.0.dr	String found in binary or memory: https://a.opmnstr.com/app/js/api.min.jsaD
Source: 055d6493-c82c-4766-9165-85e6491c28f9.tmp.1.dr, manifest.json0.0.dr	String found in binary or memory: https://accounts.google.com
Source: History-journal.0.dr, Favicons-journal.0.dr, History.0.dr	String found in binary or memory: https://adclick.g.doubleclick.net/aclk?sa=l&ai=CzIstF8G5X8rjNoGu3gPNj6-wD-DN6pNgz8DSx-wLnriItoMDEAEg
Source: History.0.dr	String found in binary or memory: https://ads.youtube.com/ads/preferences/getytcookie?sig=ACi0TChl3Vu8Mv0CmSPsbOdQum5eJ9ynM0sJSGd3XxKm
Source: 000c0213cc64d062_0.0.dr	String found in binary or memory: https://adsense.com.
Source: 000c0213cc64d062_0.0.dr	String found in binary or memory: https://adservice.google.com
Source: Current Session.0.dr	String found in binary or memory: https://adssettings.google.com
Source: Favicons.0.dr	String found in binary or memory: https://adssettings.google.com/
Source: History.0.dr	String found in binary or memory: https://adssettings.google.com/Ad
Source: Current Session.0.dr, History.0.dr	String found in binary or memory: https://adssettings.google.com/anonymous?sig=ACi0TCglfKTL0RGQcLyqKnB-bIc_WH6qxqnjkrK2emfUY-dmVXRdfa6
Source: History.0.dr	String found in binary or memory: https://adssettings.google.com/whythisad?reasons=AB3afGEAAASPW1tbW251bGwsWzEwXSxudWxsLG51bGwsbnVsbCx
Source: 84f9f4413dfeadac_0.0.dr	String found in binary or memory: https://aimtell.com/developers
Source: 84f9f4413dfeadac_0.0.dr	String found in binary or memory: https://aimtell.com/jserror/manifestexists
Source: Network Action Predictor.0.dr	String found in binary or memory: https://ajax.aspnetcdn.com/
Source: d7b107a561b4f0b9_0.0.dr, 996bdcade1a612cc_0.0.dr	String found in binary or memory: https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.11.2.min.js
Source: 996bdcade1a612cc_0.0.dr	String found in binary or memory: https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.11.2.min.jsaD
Source: 4cb013792b196a35_1.0.dr	String found in binary or memory: https://analytics.aimtell.com/push-click
Source: 4cb013792b196a35_1.0.dr	String found in binary or memory: https://analytics.aimtell.com/validate
Source: 4cb013792b196a35_1.0.dr	String found in binary or memory: https://analytics.aimtell.com/validate/subscription-change
Source: 84f9f4413dfeadac_0.0.dr	String found in binary or memory: https://api.aimtell.com/prod
Source: 4cb013792b196a35_1.0.dr	String found in binary or memory: https://api.aimtell.com/prod/push/click/
Source: 055d6493-c82c-4766-9165-85e6491c28f9.tmp.1.dr, manifest.json0.0.dr	String found in binary or memory: https://apis.google.com
Source: 26d197d0a9d08372_0.0.dr	String found in binary or memory: https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.uhBKOtz6fOw.O/m=gapi_iframes
Source: 409d7183585b84f6_0.0.dr	String found in binary or memory: https://app.optinmonster.test/wp-content/optinmonster-api-js/dist/Api.js
Source: 409d7183585b84f6_0.0.dr	String found in binary or memory: https://app.optinmonster.test/wp-content/optinmonster-api-js/dist/ApiDebug.js
Source: 000c0213cc64d062_0.0.dr	String found in binary or memory: https://attestation.android.com
Source: 84f9f4413dfeadac_0.0.dr	String found in binary or memory: https://cdn.aimtell.com/config/optin/
Source: 84f9f4413dfeadac_0.0.dr	String found in binary or memory: https://cdn.aimtell.com/manifest/
Source: 2cc80dabc69f58b6_0.0.dr, 4cb013792b196a35_1.0.dr, 000003.log6.0.dr	String found in binary or memory: https://cdn.aimtell.com/sdk/aimtell-worker-sdk.js
Source: 4cb013792b196a35_1.0.dr	String found in binary or memory: https://cdn.aimtell.com/sdk/aimtell-worker-sdk.jsaD
Source: a5908dada370f37f_0.0.dr	String found in binary or memory: https://cdn.ywxi.net/js/1.js
Source: 055d6493-c82c-4766-9165-85e6491c28f9.tmp.1.dr	String found in binary or memory: https://clients2.google.com
Source: manifest.json0.0.dr	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: 055d6493-c82c-4766-9165-85e6491c28f9.tmp.1.dr	String found in binary or memory: https://clients2.googleusercontent.com
Source: manifest.json0.0.dr	String found in binary or memory: https://content.googleapis.com
Source: d7b107a561b4f0b9_0.0.dr, c9a88cbaf1d87ce3_0.0.dr, 86c674a180e61231_0.0.dr, d4a518ee22c34ba0_0.0.dr, 589df6f65d6011c3_0.0.dr, 99cf79b1ac0d33bd_0.0.dr, b7ae806201a9b4a0_0.0.dr, 3a429b03e7763408_0.0.dr	String found in binary or memory: https://coreldraw.com/
Source: 589df6f65d6011c3_0.0.dr	String found in binary or memory: https://coreldraw.com/$
Source: e80d5eb0d89256d9_0.0.dr	String found in binary or memory: https://coreldraw.com/%
Source: b4f06185546248b4_0.0.dr	String found in binary or memory: https://coreldraw.com/&zk
Source: be0ecee0de7a754d_0.0.dr	String found in binary or memory: https://coreldraw.com/)B
Source: 4bf729f8a79cee0b_0.0.dr	String found in binary or memory: https://coreldraw.com/-
Source: 3895dcfb6d378811_0.0.dr	String found in binary or memory: https://coreldraw.com/1
Source: 4a2181030e79f4da_0.0.dr, 9bef09f720f32f4f_0.0.dr	String found in binary or memory: https://coreldraw.com/A
Source: 3a429b03e7763408_0.0.dr	String found in binary or memory: https://coreldraw.com/C
Source: 261a8518a8c62b69_0.0.dr	String found in binary or memory: https://coreldraw.com/DO
Source: c16192a25ea652a4_0.0.dr	String found in binary or memory: https://coreldraw.com/G
Source: 4bf729f8a79cee0b_0.0.dr	String found in binary or memory: https://coreldraw.com/H%
Source: 3a429b03e7763408_0.0.dr	String found in binary or memory: https://coreldraw.com/I
Source: a2c4f6175af1bd71_0.0.dr	String found in binary or memory: https://coreldraw.com/J
Source: a5908dada370f37f_0.0.dr	String found in binary or memory: https://coreldraw.com/Kd
Source: c4688328069dbc86_0.0.dr	String found in binary or memory: https://coreldraw.com/Q
Source: 8c0eb26288a7740b_0.0.dr	String found in binary or memory: https://coreldraw.com/S
Source: 20d600d5c3cfa464_0.0.dr	String found in binary or memory: https://coreldraw.com/Uf
Source: 3a429b03e7763408_0.0.dr	String found in binary or memory: https://coreldraw.com/V
Source: 2d28c7d8ce7cd960_0.0.dr	String found in binary or memory: https://coreldraw.com/Wt
Source: 328d1a2fc68bd65c_0.0.dr	String found in binary or memory: https://coreldraw.com/Z
Source: b1eea72a9a753c29_0.0.dr	String found in binary or memory: https://coreldraw.com/b
Source: c16192a25ea652a4_0.0.dr	String found in binary or memory: https://coreldraw.com/c
Source: 5cc86c6607abbc80_0.0.dr	String found in binary or memory: https://coreldraw.com/cB
Source: 7a7a3044cc4ae692_0.0.dr	String found in binary or memory: https://coreldraw.com/cm
Source: e96bc7d59d385e1a_0.0.dr	String found in binary or memory: https://coreldraw.com/dP
Source: e80d5eb0d89256d9_0.0.dr	String found in binary or memory: https://coreldraw.com/hXi
Source: 3895dcfb6d378811_0.0.dr	String found in binary or memory: https://coreldraw.com/lwv
Source: 328d1a2fc68bd65c_0.0.dr	String found in binary or memory: https://coreldraw.com/m
Source: c16192a25ea652a4_0.0.dr	String found in binary or memory: https://coreldraw.com/nxv
Source: 2195b3c8c040aad7_0.0.dr	String found in binary or memory: https://coreldraw.com/o
Source: c16192a25ea652a4_0.0.dr	String found in binary or memory: https://coreldraw.com/r
Source: b7ae806201a9b4a0_0.0.dr	String found in binary or memory: https://coreldraw.com/t
Source: 4bf729f8a79cee0b_0.0.dr	String found in binary or memory: https://coreldraw.com/u
Source: a5908dada370f37f_0.0.dr	String found in binary or memory: https://coreldraw.com/v
Source: 589df6f65d6011c3_0.0.dr	String found in binary or memory: https://coreldraw.com/w
Source: 4a2181030e79f4da_0.0.dr	String found in binary or memory: https://coreldraw.com/x
Source: c9a88cbaf1d87ce3_0.0.dr	String found in binary or memory: https://coreldraw.com/x=a
Source: baf2fb638190cbf9_0.0.dr	String found in binary or memory: https://d2bqow4fb67vs2.cloudfront.net/9c608d5c.js
Source: baf2fb638190cbf9_0.0.dr	String found in binary or memory: https://d2bqow4fb67vs2.cloudfront.net/9c608d5c.jsaD
Source: 000003.log4.0.dr	String found in binary or memory: https://danv01ao0kdr2.cloudfront.net
Source: Current Session.0.dr	String found in binary or memory: https://danv01ao0kdr2.cloudfront.net/danv01ao0kdr.html
Source: ad5c3af72a4b1a91_0.0.dr	String found in binary or memory: https://dev.installer.public.corel.net/get_dwnld.cgi
Source: 0710eb439444cf98_0.0.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/DOM/MutationObserver
Source: 055d6493-c82c-4766-9165-85e6491c28f9.tmp.1.dr, 8f18aad3-a095-43b8-9d0d-1e37922aceba.tmp.1.dr, 6c2a3b2b-ab71-4836-b495-614c1f8bbfe7.tmp.1.dr	String found in binary or memory: https://dns.google
Source: 6019ad028452e15e_0.0.dr, f8f5f6d11b80e0de_0.0.dr, e91571dba04d49f6_0.0.dr	String found in binary or memory: https://doubleclick.net/
Source: 160a04ebd7990d80_0.0.dr	String found in binary or memory: https://doubleclick.net/G
Source: 91c56cc36baae634_0.0.dr	String found in binary or memory: https://doubleclick.net/I
Source: 2a2a9a1a50374767_0.0.dr	String found in binary or memory: https://doubleclick.net/T
Source: da62ad1aefac2632_0.0.dr	String found in binary or memory: https://doubleclick.net/k
Source: manifest.json0.0.dr	String found in binary or memory: https://feedback.googleusercontent.com
Source: 055d6493-c82c-4766-9165-85e6491c28f9.tmp.1.dr	String found in binary or memory: https://fonts.googleapis.com
Source: Network Action Predictor.0.dr	String found in binary or memory: https://fonts.googleapis.com/
Source: manifest.json0.0.dr	String found in binary or memory: https://fonts.googleapis.com;
Source: 055d6493-c82c-4766-9165-85e6491c28f9.tmp.1.dr	String found in binary or memory: https://fonts.gstatic.com
Source: Network Action Predictor.0.dr	String found in binary or memory: https://fonts.gstatic.com/
Source: manifest.json0.0.dr	String found in binary or memory: https://fonts.gstatic.com;
Source: 6019ad028452e15e_0.0.dr	String found in binary or memory: https://fw.adsafeprotected.com/rjss/bgd/178215/37126869/xbbe/creative/adj?p=APEucNVh-EuYoOfbKuO_1Ulx
Source: 409d7183585b84f6_0.0.dr	String found in binary or memory: https://github.com/webpack-contrib/style-loader#insertat)
Source: b013e589bf9d74ca_0.0.dr	String found in binary or memory: https://google.com/
Source: 7595ebea1927a5a3_0.0.dr	String found in binary or memory: https://google.com/(
Source: 6838bc2f443ecd64_0.0.dr	String found in binary or memory: https://google.com/4
Source: 3bd902ca2fd015c3_0.0.dr	String found in binary or memory: https://google.com/?
Source: Current Session.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: QuotaManager.0.dr, 000003.log0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/
Source: History.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/ads/preferences/getcookie?sig=ACi0TCg_C7CUTj9C6KzIiY7rDWyks29Atw
Source: da62ad1aefac2632_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-DGhbDF6X1n84AiKEtKquDhA2rY6PdCYvU18vODZA4sUwh
Source: Current Session.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/ads?guci=1.2.0.0.2.2.0.0&client=ca-pub-6297011322179391&o
Source: Current Session.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/drt/s?v=r20120211
Source: Current Session.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/drt/si
Source: Current Session.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/html/r20201112/r20190131/zrt_lookup.html#
Source: Current Session.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/html/r20201112/r20190131/zrt_lookup.html?fsb=1
Source: Current Session.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/html/r20201112/r20190131/zrt_lookup.html?fsb=1#RS-0-&adk=
Source: a2c4f6175af1bd71_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/956202557/?random=1606041523893&cv=
Source: b4f06185546248b4_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/956202557/?random=1606041529983&cv=
Source: 2195b3c8c040aad7_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/956202557/?random=1606041547865&cv=
Source: 02da4a26b7e48bf2_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/956202557/?random=1606041553651&cv=
Source: a7093c940d86fb27_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/956202557/?random=1606041559417&cv=
Source: Current Session.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/xbbe/pixel?d=CMm_URCS9VUYrteTWTAB&v=APEucNWB0yqjDuJSgpQ-Dg2B613Q
Source: Current Session.0.dr	String found in binary or memory: https://googleads.g.doubleclick.neth
Source: 33f13506b973ed55_0.0.dr	String found in binary or memory: https://googlesyndication.com/
Source: manifest.json0.0.dr	String found in binary or memory: https://hangouts.google.com/
Source: 0710eb439444cf98_0.0.dr	String found in binary or memory: https://identify.hotjar.com
Source: ad5c3af72a4b1a91_0.0.dr	String found in binary or memory: https://installer.corel.com/get_dwnld.cgi
Source: 4cb013792b196a35_0.0.dr, 4cb013792b196a35_1.0.dr	String found in binary or memory: https://log.aimtell.com/error
Source: Network Action Predictor.0.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/
Source: 80b1748216058ce0_0.0.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js
Source: 80b1748216058ce0_0.0.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.jsaD
Source: 48f291afa9a147c0_0.0.dr	String found in binary or memory: https://munchkin.marketo.net/159/munchkin.js
Source: 48f291afa9a147c0_0.0.dr	String found in binary or memory: https://munchkin.marketo.net/159/munchkin.jsa
Source: 48f291afa9a147c0_0.0.dr	String found in binary or memory: https://munchkin.marketo.net/159/munchkin.jsaD
Source: abcafd9c117cf694_0.0.dr	String found in binary or memory: https://munchkin.marketo.net/munchkin.js
Source: abcafd9c117cf694_0.0.dr	String found in binary or memory: https://munchkin.marketo.net/munchkin.jsa
Source: abcafd9c117cf694_0.0.dr	String found in binary or memory: https://munchkin.marketo.net/munchkin.jsaD
Source: 4cb013792b196a35_0.0.dr, 4cb013792b196a35_1.0.dr	String found in binary or memory: https://network.aimtell.com/?u=
Source: 055d6493-c82c-4766-9165-85e6491c28f9.tmp.1.dr	String found in binary or memory: https://ogs.google.com
Source: Network Action Predictor.0.dr	String found in binary or memory: https://optanon.blob.core.windows.net/
Source: 4a2181030e79f4da_0.0.dr	String found in binary or memory: https://optanon.blob.core.windows.net/consent/c619603a-836b-497d-858f-1d3e16886f07.js
Source: c16192a25ea652a4_0.0.dr	String found in binary or memory: https://optanon.blob.core.windows.net/langswitch/acd3292e-7a87-44ef-86f9-22cd9126e088.js
Source: 409d7183585b84f6_0.0.dr	String found in binary or memory: https://optinmonster.com/?utm_source=plugin&utm_medium=link&utm_campaign=powered-by-link
Source: 000003.log4.0.dr	String found in binary or memory: https://otampadabola2.com
Source: c2301493f4f845fa_0.0.dr, Current Session.0.dr, History-journal.0.dr, e68d92e616a8d3fe_0.0.dr	String found in binary or memory: https://otampadabola2.com/
Source: History-journal.0.dr	String found in binary or memory: https://otampadabola2.com/&
Source: History Provider Cache.0.dr	String found in binary or memory: https://otampadabola2.com/2
Source: 5e5984a807e18440_0.0.dr	String found in binary or memory: https://otampadabola2.com/=m
Source: bc8ac2c440ab98b5_0.0.dr	String found in binary or memory: https://otampadabola2.com/?cH
Source: History-journal.0.dr	String found in binary or memory: https://otampadabola2.com/O
Source: 0bf3f108a330cf82_0.0.dr	String found in binary or memory: https://otampadabola2.com/RWD
Source: History.0.dr	String found in binary or memory: https://otampadabola2.com/VG6gH89EbqAfs1RuoB5bYG9gHANIICQiA4YAQEAEYH5oJL2h0dHBzOi8vd3d3LmNvcmVsZHJhd
Source: Favicons-journal.0.dr	String found in binary or memory: https://otampadabola2.com/f
Source: Current Session.0.dr, Favicons-journal.0.dr	String found in binary or memory: https://otampadabola2.com/online/
Source: History Provider Cache.0.dr	String found in binary or memory: https://otampadabola2.com/online/2
Source: History-journal.0.dr	String found in binary or memory: https://otampadabola2.com/online/O
Source: e58b157a3bf017dc_0.0.dr	String found in binary or memory: https://otampadabola2.com/p(T
Source: bc2f3f3c4ccbc8ec_0.0.dr	String found in binary or memory: https://otampadabola2.com/w
Source: 5e5984a807e18440_0.0.dr	String found in binary or memory: https://otampadabola2.com/wp-content/plugins/google-analytics-dashboard-for-wp/assets/js/frontend.mi
Source: 052494325eac1892_0.0.dr	String found in binary or memory: https://otampadabola2.com/wp-content/plugins/q2w3-fixed-widget/js/q2w3-fixed-widget.min.js?ver=5.1.9
Source: e68d92e616a8d3fe_0.0.dr	String found in binary or memory: https://otampadabola2.com/wp-content/themes/mh-magazine-lite/js/scripts.js?ver=2.8.6
Source: Favicons-journal.0.dr	String found in binary or memory: https://otampadabola2.com/wp-content/uploads/2020/10/cropped-Logo-O-Tampa-da-Bola-32x32.png
Source: Favicons-journal.0.dr	String found in binary or memory: https://otampadabola2.com/wp-content/uploads/2020/10/cropped-Logo-O-Tampa-da-Bola-32x32.pngf
Source: bc2f3f3c4ccbc8ec_0.0.dr	String found in binary or memory: https://otampadabola2.com/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp
Source: c7ad3049cf875f0e_0.0.dr	String found in binary or memory: https://otampadabola2.com/wp-includes/js/wp-embed.min.js?ver=5.5.3
Source: 94c05e03bdf09fdf_0.0.dr	String found in binary or memory: https://otampadabola2.com/wp-includes/js/wp-emoji-release.min.js?ver=5.5.3
Source: Current Session.0.dr	String found in binary or memory: https://otampadabola2.comh
Source: 019ce20e3b1e34ef_0.0.dr	String found in binary or memory: https://pagead2.googlesyndication.com/bg/7ACX1ll8pxmp-W5IFnwplmFbwq_vDvpxp5bFF4q7ftk.js
Source: 019ce20e3b1e34ef_0.0.dr	String found in binary or memory: https://pagead2.googlesyndication.com/bg/7ACX1ll8pxmp-W5IFnwplmFbwq_vDvpxp5bFF4q7ftk.jsaD
Source: 33f13506b973ed55_0.0.dr	String found in binary or memory: https://pagead2.googlesyndication.com/bg/TBttBoAOV_9P70wCNe1Yb7YwaEpF9SEuHDe9V7wzOiY.js
Source: 33f13506b973ed55_0.0.dr	String found in binary or memory: https://pagead2.googlesyndication.com/bg/TBttBoAOV_9P70wCNe1Yb7YwaEpF9SEuHDe9V7wzOiY.jsaD
Source: 000c0213cc64d062_0.0.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/
Source: 000c0213cc64d062_0.0.dr, 0bf3f108a330cf82_0.0.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
Source: 000c0213cc64d062_0.0.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.jsaD
Source: 000c0213cc64d062_0.0.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/managed/adsense/
Source: e58b157a3bf017dc_0.0.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/r20201112/r20190131/reactive_library_fy2019.js
Source: 22872dcab88d27a0_0.0.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/r20201112/r20190131/show_ads_impl_exp_fy2019.js?bust
Source: 46db41e78b4307cf_0.0.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/osd.js
Source: Current Session.0.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/s/cookie_push_onload.html#aHR0cHM6Ly9jbXMucXVhbnRzZXJ2Z
Source: manifest.json.0.dr	String found in binary or memory: https://payments.google.com/payments/v4/js/integrator.js
Source: 055d6493-c82c-4766-9165-85e6491c28f9.tmp.1.dr	String found in binary or memory: https://play.google.com
Source: 8c37d21e-0bf3-4b97-ac47-24277fe0db05.tmp.1.dr	String found in binary or memory: https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct
Source: 4cb013792b196a35_1.0.dr	String found in binary or memory: https://s3.amazonaws.com/cdn.aimtell.com/pushdata/push_data_settings.json?v=
Source: 84f9f4413dfeadac_0.0.dr	String found in binary or memory: https://s3.amazonaws.com/cdn.aimtell.com/trackpush/trackpush.min.js
Source: 84f9f4413dfeadac_0.0.dr	String found in binary or memory: https://s3.amazonaws.com/cdn.aimtell.com/trackpush/trackpush.min.jsaD
Source: manifest.json.0.dr	String found in binary or memory: https://sandbox.google.com/payments/v4/js/integrator.js
Source: b1eea72a9a753c29_0.0.dr	String found in binary or memory: https://script.hotjar.com/modules.ae930258b2386dc57451.js
Source: 0710eb439444cf98_0.0.dr	String found in binary or memory: https://script.hotjar.com/modules.ae930258b2386dc57451.jsaD
Source: df2db86ec0c3b16d_0.0.dr	String found in binary or memory: https://ssl.google-analytics.com/ga.js
Source: 055d6493-c82c-4766-9165-85e6491c28f9.tmp.1.dr	String found in binary or memory: https://ssl.gstatic.com
Source: 91c56cc36baae634_0.0.dr	String found in binary or memory: https://static.adsafeprotected.com/passback_300x250.js
Source: 58a27733a97c3858_0.0.dr	String found in binary or memory: https://static.adsafeprotected.com/sca.17.4.114.js
Source: 86c674a180e61231_0.0.dr	String found in binary or memory: https://static.hotjar.com/c/hotjar-1403528.js?sv=6
Source: Network Action Predictor.0.dr	String found in binary or memory: https://static.zdassets.com/
Source: 4bf729f8a79cee0b_0.0.dr	String found in binary or memory: https://static.zdassets.com/ekr/snippet.js?key=d3f88178-b699-4002-a1d6-f61fec7d4063
Source: ce82ddef4d22607d_0.0.dr	String found in binary or memory: https://static.zdassets.com/web_widget/latest/
Source: aba8b2f5a80a0575_0.0.dr	String found in binary or memory: https://static.zdassets.com/web_widget/latest/chat-sdk.cec40ba63b2a85de0a9c.chunk.js
Source: 2439443ce535a50e_0.0.dr	String found in binary or memory: https://static.zdassets.com/web_widget/latest/lazy/framework-boot.b3e9cfaf9bf021f9aa72.chunk.js
Source: 2439443ce535a50e_0.0.dr	String found in binary or memory: https://static.zdassets.com/web_widget/latest/lazy/framework-boot.b3e9cfaf9bf021f9aa72.chunk.jsaD
Source: be0ecee0de7a754d_0.0.dr	String found in binary or memory: https://static.zdassets.com/web_widget/latest/lazy/web_widget.ba9a857f2bb01785a8d1.chunk.js
Source: be0ecee0de7a754d_0.0.dr	String found in binary or memory: https://static.zdassets.com/web_widget/latest/lazy/web_widget.ba9a857f2bb01785a8d1.chunk.jsaD
Source: 4f11ebc47a2ae296_0.0.dr	String found in binary or memory: https://static.zdassets.com/web_widget/latest/locales/en-us-json.cc8e73e5fe307bb27426.chunk.js
Source: 5e1c6b7527d473cf_0.0.dr	String found in binary or memory: https://static.zdassets.com/web_widget/latest/locales/pt-br-json.b71a1a93f723f8a2873a.chunk.js
Source: 8c0eb26288a7740b_0.0.dr, ce82ddef4d22607d_0.0.dr	String found in binary or memory: https://static.zdassets.com/web_widget/latest/preload.b134a3818b60177eac5c.js
Source: ce82ddef4d22607d_0.0.dr	String found in binary or memory: https://static.zdassets.com/web_widget/latest/preload.b134a3818b60177eac5c.jsaD
Source: 831be288b6e21eaa_0.0.dr	String found in binary or memory: https://static.zdassets.com/web_widget/latest/vendors~web_widget.ca239eb7094b76c34e1a.chunk.js
Source: 4fad52a0da7e4e43_0.0.dr, c4688328069dbc86_0.0.dr	String found in binary or memory: https://static.zdassets.com/web_widget/latest/web_widget.b8c69218285d2e8094b2.chunk.js
Source: 4fad52a0da7e4e43_0.0.dr	String found in binary or memory: https://static.zdassets.com/web_widget/latest/web_widget.b8c69218285d2e8094b2.chunk.jsaD
Source: ad5c3af72a4b1a91_0.0.dr	String found in binary or memory: https://stg.installer.public.corel.net/get_dwnld.cgi
Source: messages.json41.0.dr	String found in binary or memory: https://support.google.com/chromecast/answer/2998456
Source: messages.json41.0.dr	String found in binary or memory: https://support.google.com/chromecast/troubleshooter/2995236
Source: e91571dba04d49f6_0.0.dr	String found in binary or memory: https://tpc.googlesyndication.com/pagead/js/r20201112/r20110914/abg_lite_fy2019.js
Source: e91571dba04d49f6_0.0.dr	String found in binary or memory: https://tpc.googlesyndication.com/pagead/js/r20201112/r20110914/abg_lite_fy2019.jsaD
Source: 2a2a9a1a50374767_0.0.dr	String found in binary or memory: https://tpc.googlesyndication.com/pagead/js/r20201112/r20110914/client/load_preloaded_resource_fy201
Source: 88626338336e809f_0.0.dr	String found in binary or memory: https://tpc.googlesyndication.com/pagead/js/r20201112/r20110914/client/one_click_handler_one_afma_fy
Source: 1ffb2099678dcd07_0.0.dr	String found in binary or memory: https://tpc.googlesyndication.com/pagead/js/r20201112/r20110914/client/qs_click_protection_fy2019.js
Source: 4741b837184733aa_0.0.dr	String found in binary or memory: https://tpc.googlesyndication.com/pagead/js/r20201112/r20110914/client/window_focus_fy2019.js
Source: 4741b837184733aa_0.0.dr	String found in binary or memory: https://tpc.googlesyndication.com/pagead/js/r20201112/r20110914/client/window_focus_fy2019.jsaD
Source: 7b33e1b314c92f93_0.0.dr	String found in binary or memory: https://tpc.googlesyndication.com/pagead/js/r20201112/r20110914/elements/html/interstitial_ad_frame_
Source: Current Session.0.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/Enqz_20U.html
Source: adba8338fc9be233_0.0.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/UFYwWwmt.js
Source: 2c4e23cad37709d9_0.0.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/sodar2.js
Source: Current Session.0.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/sodar2/219/runner.html
Source: 000003.log0.0.dr	String found in binary or memory: https://vars.hotjar.com/
Source: Current Session.0.dr	String found in binary or memory: https://vars.hotjar.com/box-469cf41adb11dc78be68c1ae7f9457a4.html
Source: 0710eb439444cf98_0.0.dr	String found in binary or memory: https://vc.hotjar.io/sessions
Source: 409d7183585b84f6_0.0.dr	String found in binary or memory: https://widget.manychat.com/
Source: Network Action Predictor.0.dr	String found in binary or memory: https://www.corel.com/
Source: cd63cfd94ea6e329_0.0.dr	String found in binary or memory: https://www.corel.com/static/common/scripts/gtm/gtm-container.min.js
Source: cd63cfd94ea6e329_0.0.dr	String found in binary or memory: https://www.corel.com/static/common/scripts/gtm/gtm-container.min.jsa
Source: cd63cfd94ea6e329_0.0.dr	String found in binary or memory: https://www.corel.com/static/common/scripts/gtm/gtm-container.min.jsaD
Source: e5ab37d46a06e4f2_0.0.dr	String found in binary or memory: https://www.corel.com/static/common/scripts/gtm/gtm-event-handlers.min.js
Source: e5ab37d46a06e4f2_0.0.dr	String found in binary or memory: https://www.corel.com/static/common/scripts/gtm/gtm-event-handlers.min.jsaD
Source: 000003.log4.0.dr	String found in binary or memory: https://www.coreldraw.com
Source: 000003.log6.0.dr	String found in binary or memory: https://www.coreldraw.com/
Source: QuotaManager.0.dr	String found in binary or memory: https://www.coreldraw.com//
Source: 000003.log6.0.dr	String found in binary or memory: https://www.coreldraw.com/0
Source: 000003.log6.0.dr	String found in binary or memory: https://www.coreldraw.com/aimtell-worker.js
Source: History.0.dr	String found in binary or memory: https://www.coreldraw.com/br/product/coreldraw/%3Ftopnav%3Dfalse%26trial%3Dbig%26sourceid%3Dcdgs2020
Source: Current Session.0.dr, History-journal.0.dr	String found in binary or memory: https://www.coreldraw.com/br/product/coreldraw/?topnav=false&trial=big&sourceid=cdgs2020-xx-ppc_ron&
Source: Favicons-journal.0.dr	String found in binary or memory: https://www.coreldraw.com/favicon.ico
Source: 99cf79b1ac0d33bd_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/cdgs/js/imgslider-1.2.1-min.js
Source: 99cf79b1ac0d33bd_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/cdgs/js/imgslider-1.2.1-min.jsaD
Source: d4a518ee22c34ba0_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/cdgs/js/jquery.main.js
Source: d4a518ee22c34ba0_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/cdgs/js/jquery.main.jsaD
Source: 6661e94a0ccb1861_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/cdgs/js/owl.carousel.js
Source: 6661e94a0ccb1861_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/cdgs/js/owl.carousel.jsa
Source: 6661e94a0ccb1861_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/cdgs/js/owl.carousel.jsaD
Source: ad5c3af72a4b1a91_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/cdgs/js/trial-installer.js
Source: ad5c3af72a4b1a91_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/cdgs/js/trial-installer.jsaD
Source: 016ee97b796b7b8c_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/common/scripts/css-phone-res.js
Source: 016ee97b796b7b8c_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/common/scripts/css-phone-res.jsa
Source: 016ee97b796b7b8c_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/common/scripts/css-phone-res.jsaD
Source: d010177029c605ae_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/common/scripts/css-phone.js
Source: d010177029c605ae_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/common/scripts/css-phone.jsa
Source: d010177029c605ae_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/common/scripts/css-phone.jsaD
Source: 20d600d5c3cfa464_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/common/scripts/dynamic-pricing/dynamic-pricing.min.js
Source: 20d600d5c3cfa464_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/common/scripts/dynamic-pricing/dynamic-pricing.min.jsaD
Source: cf344a248012861d_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/common/scripts/dynamic-pricing/dynamic-pricing.optinmonster.min.js
Source: cf344a248012861d_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/common/scripts/dynamic-pricing/dynamic-pricing.optinmonster.min.jsa
Source: 7b9cd0a6e51ca8f1_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/common/scripts/dynamic-pricing/dynamic-promotions.min.js
Source: 7b9cd0a6e51ca8f1_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/common/scripts/dynamic-pricing/dynamic-promotions.min.jsaD
Source: 4cf5a22a75d22bb9_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/common/scripts/dynamic-pricing/jquery.format-currency-1.4.0.min.js
Source: 4cf5a22a75d22bb9_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/common/scripts/dynamic-pricing/jquery.format-currency-1.4.0.min.jsa
Source: 132381413a5fb179_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/common/scripts/dynamic-pricing/jquery.format-currency.corel.min.js
Source: 132381413a5fb179_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/common/scripts/dynamic-pricing/jquery.format-currency.corel.min.jsa
Source: bfb390eef3503cea_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/common/scripts/gp/function.min.js
Source: bfb390eef3503cea_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/common/scripts/gp/function.min.jsaD
Source: a40672e534fe8c73_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/common/scripts/gp/main.min.js
Source: a40672e534fe8c73_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/common/scripts/gp/main.min.jsaD
Source: e96bc7d59d385e1a_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/common/scripts/gp/shadowbox.js
Source: e96bc7d59d385e1a_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/common/scripts/gp/shadowbox.jsaD
Source: 9bef09f720f32f4f_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/common/scripts/jquery.lazyloadxt.extra.min.js
Source: 9bef09f720f32f4f_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/common/scripts/jquery.lazyloadxt.extra.min.jsaD
Source: 6c66dcb53706dfab_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/common/scripts/jquery.magnific-popup.min.js
Source: 6c66dcb53706dfab_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/common/scripts/jquery.magnific-popup.min.jsa
Source: 6c66dcb53706dfab_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/common/scripts/jquery.magnific-popup.min.jsaD
Source: 261a8518a8c62b69_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/common/scripts/jquery.syotimer.js
Source: 261a8518a8c62b69_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/common/scripts/jquery.syotimer.jsaD
Source: 9f26e8b3e5102250_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/common/scripts/omni-tracking/omni-tracking.min.js
Source: 9f26e8b3e5102250_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/common/scripts/omni-tracking/omni-tracking.min.jsaD
Source: 5cc86c6607abbc80_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/common/scripts/responsiveslides.min.js
Source: 5cc86c6607abbc80_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/common/scripts/responsiveslides.min.jsaD
Source: 15e074aa4106d329_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/common/scripts/x-clickref.min.js
Source: 15e074aa4106d329_0.0.dr	String found in binary or memory: https://www.coreldraw.com/static/common/scripts/x-clickref.min.jsaD
Source: Current Session.0.dr	String found in binary or memory: https://www.coreldraw.comh
Source: 2cc80dabc69f58b6_0.0.dr	String found in binary or memory: https://www.digicert.com/CPS0
Source: 2d28c7d8ce7cd960_0.0.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: bc8ac2c440ab98b5_0.0.dr	String found in binary or memory: https://www.google-analytics.com/plugins/ua/linkid.js
Source: 055d6493-c82c-4766-9165-85e6491c28f9.tmp.1.dr, manifest.json0.0.dr	String found in binary or memory: https://www.google.com
Source: manifest.json.0.dr	String found in binary or memory: https://www.google.com/
Source: History.0.dr	String found in binary or memory: https://www.google.com/ads/preferences/checkgoog?continue=aHR0cHM6Ly9hZHNzZXR0aW5ncy5nb29nbGUuY29tL2
Source: History.0.dr	String found in binary or memory: https://www.google.com/ads/preferences?continue=aHR0cHM6Ly9hZHNzZXR0aW5ncy5nb29nbGUuY29tL2Fub255bW91
Source: 000c0213cc64d062_0.0.dr	String found in binary or memory: https://www.google.com/adsense
Source: Favicons.0.dr	String found in binary or memory: https://www.google.com/favicon.ico
Source: Favicons.0.dr	String found in binary or memory: https://www.google.com/favicon.ico)
Source: 409d7183585b84f6_0.0.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?render=
Source: manifest.json0.0.dr	String found in binary or memory: https://www.google.com;
Source: Network Action Predictor.0.dr	String found in binary or memory: https://www.googleadservices.com/
Source: History.0.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=CueNeF8G5X8rjNoGu3gPNj6-wD-DN6pNgz8DSx-wLnriIto
Source: 589df6f65d6011c3_0.0.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion_async.js
Source: 055d6493-c82c-4766-9165-85e6491c28f9.tmp.1.dr	String found in binary or memory: https://www.googleapis.com
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/calendar.readonly
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/cast-edu-messaging
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/chromewebstore
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/chromewebstore.readonly
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/clouddevices
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/hangouts
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/hangouts.readonly
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/meetings
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.peopleapi.readwrite
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/sierra
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/sierrasandbox
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/userinfo.email
Source: 3a429b03e7763408_0.0.dr	String found in binary or memory: https://www.googleoptimize.com/optimize.js?id=OPT-PJJD4J3
Source: 328d1a2fc68bd65c_0.0.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-QE2N8KSYQF&l=dataLayer&cx=c
Source: b7ae806201a9b4a0_0.0.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=GTM-5RC57S
Source: c9a88cbaf1d87ce3_0.0.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=GTM-KH8FLJ9&l=dataLayer
Source: c2301493f4f845fa_0.0.dr	String found in binary or memory: https://www.googletagservices.com/activeview/js/current/osd.js?cb=%2Fr20100101
Source: 46db41e78b4307cf_0.0.dr, f8f5f6d11b80e0de_0.0.dr	String found in binary or memory: https://www.googletagservices.com/activeview/js/current/osd_listener.js?cache=r20110914
Source: 46db41e78b4307cf_0.0.dr	String found in binary or memory: https://www.googletagservices.com/activeview/js/current/osd_listener.js?cache=r20110914aD
Source: 055d6493-c82c-4766-9165-85e6491c28f9.tmp.1.dr	String found in binary or memory: https://www.gstatic.com
Source: 6838bc2f443ecd64_0.0.dr	String found in binary or memory: https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AdsSettingsUi.en.54LqtFl99uk.es5.O/am
Source: 7595ebea1927a5a3_0.0.dr	String found in binary or memory: https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AdsSettingsUi.en.54LqtFl99uk.es5.O/ck
Source: eccc1967f8b2c165_0.0.dr	String found in binary or memory: https://www.gstatic.com/mysidia/67fe788dc4df5b9843ab0690c5436010.js?tag=mysidia_one_click_handler_on
Source: 5e62bb69a9c4f59a_0.0.dr	String found in binary or memory: https://www.gstatic.com/mysidia/d3537bc478bfa26a2c6e70b12aa4d45c.js?tag=client_fast_engine_2019
Source: 160a04ebd7990d80_0.0.dr	String found in binary or memory: https://www.gstatic.com/mysidia/dec8cae5017b94534ad9e9d42636c5f6.js?tag=text/ryuk
Source: 3bd902ca2fd015c3_0.0.dr	String found in binary or memory: https://www.gstatic.com/og/_/js/k=og.qtm.en_US.Uy00yW1PZ_k.O/rt=j/m=q_d
Source: manifest.json0.0.dr	String found in binary or memory: https://www.gstatic.com;
Source: 0710eb439444cf98_0.0.dr	String found in binary or memory: https://www.hotjar.com/?utm_source=client&utm_medium=survey&utm_campaign=insights
Source: 0710eb439444cf98_0.0.dr	String found in binary or memory: https://www.hotjar.com/feedback-polls?utm_source=client&utm_medium=poll&utm_campaign=insights
Source: 0710eb439444cf98_0.0.dr	String found in binary or memory: https://www.hotjar.com/incoming-feedback?utm_source=client&utm_medium=incoming_feedback&utm_campaign
Source: 0710eb439444cf98_0.0.dr	String found in binary or memory: https://www.hotjarconsent.com
Source: 0710eb439444cf98_0.0.dr	String found in binary or memory: https://www.hotjarconsent.com/de.html
Source: 0710eb439444cf98_0.0.dr	String found in binary or memory: https://www.hotjarconsent.com/el.html
Source: 0710eb439444cf98_0.0.dr	String found in binary or memory: https://www.hotjarconsent.com/es.html
Source: 0710eb439444cf98_0.0.dr	String found in binary or memory: https://www.hotjarconsent.com/fi.html
Source: 0710eb439444cf98_0.0.dr	String found in binary or memory: https://www.hotjarconsent.com/fr.html
Source: 0710eb439444cf98_0.0.dr	String found in binary or memory: https://www.hotjarconsent.com/it.html
Source: 0710eb439444cf98_0.0.dr	String found in binary or memory: https://www.hotjarconsent.com/nl.html
Source: 0710eb439444cf98_0.0.dr	String found in binary or memory: https://www.hotjarconsent.com/pl.html
Source: 0710eb439444cf98_0.0.dr	String found in binary or memory: https://www.hotjarconsent.com/pt.html
Source: 0710eb439444cf98_0.0.dr	String found in binary or memory: https://www.hotjarconsent.com/pt_br.html
Source: 0710eb439444cf98_0.0.dr	String found in binary or memory: https://www.hotjarconsent.com/ru.html
Source: 0710eb439444cf98_0.0.dr	String found in binary or memory: https://www.hotjarconsent.com/sq.html
Source: 0710eb439444cf98_0.0.dr	String found in binary or memory: https://www.hotjarconsent.com/sv.html
Source: 0710eb439444cf98_0.0.dr	String found in binary or memory: https://www.hotjarconsent.com/zh.html

Uses HTTPS

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49688
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49678
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443

System Summary:

Classification label

Source: classification engine

Classification label: clean0.win@50/302@54/47

Creates files inside the program directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Creates files inside the user directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Local\Google\Chrome\User Data\BrowserMetrics\BrowserMetrics-5FBA3FA1-1408.pma

Jump to behavior

Creates temporary files

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Local\Temp\e1d25040-f519-4bcc-b891-ce6af244d4b9.tmp

Jump to behavior

SQL strings found in memory and binary data

Source: QuotaManager.0.dr

Binary or memory string: CREATE TABLE HostQuotaTable(host TEXT NOT NULL, type INTEGER NOT NULL, quota INTEGER DEFAULT 0, UNIQUE(host, type));

Spawns processes

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --start-maximized 'https://otampadabola2.com'
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1564,10723194021886127913,5669998590995236100,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1756 /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1564,10723194021886127913,5669998590995236100,131072 --lang=en-US --service-sandbox-type=audio --enable-audio-service-sandbox --mojo-platform-channel-handle=5960 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1564,10723194021886127913,5669998590995236100,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1756 /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1564,10723194021886127913,5669998590995236100,131072 --lang=en-US --service-sandbox-type=audio --enable-audio-service-sandbox --mojo-platform-channel-handle=5960 /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Found graphical window changes (likely an installer)

Source: Window Recorder

Window detected: More than 3 window changes detected

Creates a directory in C:\Program Files

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic			Jump to behavior