Edit tour

Windows Analysis Report
http://ssa.gov

Overview

General Information

Sample URL:	http://ssa.gov
Analysis ID:	1445930
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 344 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2720 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=2028,i,5822282906315442648,11776700893767050102,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6664 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5908 --field-trial-handle=2028,i,5822282906315442648,11776700893767050102,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6680 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5996 --field-trial-handle=2028,i,5822282906315442648,11776700893767050102,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6364 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://ssa.gov" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-25977386-2&cid=759143496.1716400722&jid=99330978&gjid=173062518&_gid=39265678.1716400722&_u=aGBAiQAjBAAAAGAEK~&z=597917272 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: */*Origin: https://www.ssa.govX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.ssa.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://player.vimeo.com/video/377637921?h=05d28cce97&title=0&byline=0&portrait=0	HTTP Parser: No favicon
Source: https://player.vimeo.com/video/377637921?h=05d28cce97&title=0&byline=0&portrait=0	HTTP Parser: No favicon
Source: https://www.youtube-nocookie.com/embed/cyaUWTFLw3c?si=8N7Oq7jUv8TE6Dtd	HTTP Parser: No favicon
Source: https://www.youtube-nocookie.com/embed/0l5RX73PnFY?rel=0&autohide=1&modestbranding=1	HTTP Parser: No favicon
Source: https://secure.ssa.gov/RIL/SiView.action	HTTP Parser: No favicon
Source: https://secure.ssa.gov/RIL/SiView.action	HTTP Parser: No favicon
Source: https://secure.ssa.gov/RIL/SiView.action	HTTP Parser: No favicon

Source: https://secure.ssa.gov/RIL/SiView.action	HTTP Parser: No <meta name="author".. found
Source: https://secure.ssa.gov/RIL/SiView.action	HTTP Parser: No <meta name="author".. found
Source: https://secure.ssa.gov/RIL/SiView.action	HTTP Parser: No <meta name="author".. found

Source: https://secure.ssa.gov/RIL/SiView.action	HTTP Parser: No <meta name="copyright".. found
Source: https://secure.ssa.gov/RIL/SiView.action	HTTP Parser: No <meta name="copyright".. found
Source: https://secure.ssa.gov/RIL/SiView.action	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 2.18.97.153:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.18.97.153:443 -> 192.168.2.4:49748 version: TLS 1.2

Source: global traffic	TCP traffic: 192.168.2.4:51018 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.4:53226 -> 162.159.36.2:53

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: ssa.gov
Source: global traffic	DNS traffic detected: DNS query: www.ssa.gov
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: s.go-mpulse.net
Source: global traffic	DNS traffic detected: DNS query: c.go-mpulse.net
Source: global traffic	DNS traffic detected: DNS query: resources.digital-cloud-gov.medallia.com
Source: global traffic	DNS traffic detected: DNS query: dap.digitalgov.gov
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: js-agent.newrelic.com
Source: global traffic	DNS traffic detected: DNS query: bam.nr-data.net
Source: global traffic	DNS traffic detected: DNS query: 18.31.95.13.in-addr.arpa
Source: global traffic	DNS traffic detected: DNS query: www.youtube-nocookie.com
Source: global traffic	DNS traffic detected: DNS query: player.vimeo.com
Source: global traffic	DNS traffic detected: DNS query: f.vimeocdn.com
Source: global traffic	DNS traffic detected: DNS query: i.vimeocdn.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: fresnel.vimeocdn.com
Source: global traffic	DNS traffic detected: DNS query: vimeo.com
Source: global traffic	DNS traffic detected: DNS query: yt3.ggpht.com
Source: global traffic	DNS traffic detected: DNS query: secure.ssa.gov
Source: global traffic	DNS traffic detected: DNS query: play.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53288
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53292
Source: unknown	Network traffic detected: HTTP traffic on port 53311 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53251 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53383 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51152
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53295
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 53248 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 51082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 53288 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51154
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51159
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53337
Source: unknown	Network traffic detected: HTTP traffic on port 53292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51158
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51163
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51161
Source: unknown	Network traffic detected: HTTP traffic on port 53260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 51121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 51081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 51079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53295 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51044
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53395 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 53397 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53233
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53232
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51059
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 51083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53244
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53243
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53249
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53248
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51071
Source: unknown	Network traffic detected: HTTP traffic on port 53232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51074
Source: unknown	Network traffic detected: HTTP traffic on port 51074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53251
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53250
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51073
Source: unknown	Network traffic detected: HTTP traffic on port 53284 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51112
Source: unknown	Network traffic detected: HTTP traffic on port 53250 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53260
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51082
Source: unknown	Network traffic detected: HTTP traffic on port 51071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53385
Source: unknown	Network traffic detected: HTTP traffic on port 51092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53383
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51083
Source: unknown	Network traffic detected: HTTP traffic on port 51089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53382
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51084
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53306
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53389
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51089
Source: unknown	Network traffic detected: HTTP traffic on port 51159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53388
Source: unknown	Network traffic detected: HTTP traffic on port 53233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53386
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51121
Source: unknown	Network traffic detected: HTTP traffic on port 53388 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53269
Source: unknown	Network traffic detected: HTTP traffic on port 53385 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53270
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51090
Source: unknown	Network traffic detected: HTTP traffic on port 51103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53395
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51130
Source: unknown	Network traffic detected: HTTP traffic on port 53269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53311
Source: unknown	Network traffic detected: HTTP traffic on port 51112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53276
Source: unknown	Network traffic detected: HTTP traffic on port 53382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53397
Source: unknown	Network traffic detected: HTTP traffic on port 51154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53282
Source: unknown	Network traffic detected: HTTP traffic on port 53337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53284
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53283
Source: unknown	Network traffic detected: HTTP traffic on port 53306 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53354 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 53249 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53283 -> 443

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping344_760704676	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping344_760704676\sets.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping344_760704676\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping344_760704676\LICENSE	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping344_760704676\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping344_760704676\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping344_760704676\manifest.fingerprint	Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=2028,i,5822282906315442648,11776700893767050102,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://ssa.gov"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5908 --field-trial-handle=2028,i,5822282906315442648,11776700893767050102,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5996 --field-trial-handle=2028,i,5822282906315442648,11776700893767050102,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=2028,i,5822282906315442648,11776700893767050102,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5908 --field-trial-handle=2028,i,5822282906315442648,11776700893767050102,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5996 --field-trial-handle=2028,i,5822282906315442648,11776700893767050102,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: chromecache_345.2.dr	String found in binary or memory: <a class="social-media-link-icon--facebook" href="https://www.facebook.com/segurosocial" target="_blank" aria-label="Seguro Social en Facebook" title="Seguro Social en Facebook" > equals www.facebook.com (Facebook)
Source: chromecache_248.2.dr, chromecache_300.2.dr, chromecache_275.2.dr	String found in binary or memory: <a class="social-media-link-icon--facebook" href="https://www.facebook.com/socialsecurity" target="_blank" aria-label="Social Security on Facebook" title="Social Security on Facebook" > equals www.facebook.com (Facebook)
Source: chromecache_248.2.dr, chromecache_300.2.dr, chromecache_275.2.dr	String found in binary or memory: <a class="social-media-link-icon--linkedin" href="https://www.linkedin.com/company/ssa" target="_blank" aria-label="Social Security on LinkedIn" title="Social Security on LinkedIn" > equals www.linkedin.com (Linkedin)
Source: chromecache_345.2.dr	String found in binary or memory: <a class="social-media-link-icon--twitter" href="https://www.twitter.com/segurosocial" target="_blank" aria-label="Seguro Social en Twitter" title="Seguro Social en Twitter" > equals www.twitter.com (Twitter)
Source: chromecache_248.2.dr, chromecache_300.2.dr, chromecache_275.2.dr	String found in binary or memory: <a class="social-media-link-icon--twitter" href="https://www.twitter.com/socialsecurity" target="_blank" aria-label="Social Security on Twitter" title="Social Security on Twitter" > equals www.twitter.com (Twitter)
Source: chromecache_248.2.dr, chromecache_300.2.dr, chromecache_275.2.dr	String found in binary or memory: <a class="social-media-link-icon--youtube" href="https://www.youtube.com/user/socialsecurityonline" target="_blank" aria-label="Social Security on Youtube" title="Social Security on Youtube" > equals www.youtube.com (Youtube)
Source: chromecache_248.2.dr	String found in binary or memory: href="https://www.facebook.com/socialsecurity" equals www.facebook.com (Facebook)
Source: chromecache_248.2.dr	String found in binary or memory: href="https://www.linkedin.com/company/ssa" equals www.linkedin.com (Linkedin)
Source: chromecache_248.2.dr	String found in binary or memory: href="https://www.twitter.com/socialsecurity" equals www.twitter.com (Twitter)
Source: chromecache_248.2.dr	String found in binary or memory: href="https://www.youtube.com/user/socialsecurityonline" equals www.youtube.com (Youtube)
Source: chromecache_296.2.dr	String found in binary or memory: (g.dq(c,"redirector.googlevideo.com"),d=c.toString()):c.j.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.dq(c,"www.youtube.com"),d=c.toString()):(c=XBa(d),eJ(c)&&(d=c));c=new g.tP(d);c.set("cmo=pf","1");e&&c.set("cmo=td","a1.googlevideo.com");return c}; equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: (g.gq(c,"redirector.googlevideo.com"),d=c.toString()):c.j.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.gq(c,"www.youtube.com"),d=c.toString()):(c=YBa(d),fJ(c)&&(d=c));c=new g.sP(d);c.set("cmo=pf","1");e&&c.set("cmo=td","a1.googlevideo.com");return c}; equals www.youtube.com (Youtube)
Source: chromecache_296.2.dr	String found in binary or memory: VSa=function(a,b){if(!a.j["0"]){var c=new iK("0","fakesb",{video:new eK(0,0,0,void 0,void 0,"auto")});a.j["0"]=b?new vQ(new g.tP("http://www.youtube.com/videoplayback"),c,"fake"):new GQ(new g.tP("http://www.youtube.com/videoplayback"),c,new jQ(0,0),new jQ(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: VSa=function(a,b){if(!a.j["0"]){var c=new jK("0","fakesb",{video:new fK(0,0,0,void 0,void 0,"auto")});a.j["0"]=b?new uQ(new g.sP("http://www.youtube.com/videoplayback"),c,"fake"):new FQ(new g.sP("http://www.youtube.com/videoplayback"),c,new iQ(0,0),new iQ(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: a))):this.Md(g.QV(a.errorMessage)):this.Md(SV(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c=g.lo(c,{hl:a})),this.Md(SV(this,"GENERIC_WITH_LINK_AND_CPN",c,!0)),d.qc&&!d.D&&D_a(this,function(f){if(g.lU(f,b.api,!PR(b.api.U()))){f={as3:!1,html5:!0,player:!0,cpn:b.api.getVideoData().clientPlaybackNonce};var h=b.api;h.Ac("onFeedbackArticleRequest",{articleId:3037019,helpContext:"player_error", equals www.youtube.com (Youtube)
Source: chromecache_296.2.dr	String found in binary or memory: a))):this.Md(g.RV(a.errorMessage)):this.Md(TV(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c=g.to(c,{hl:a})),this.Md(TV(this,"GENERIC_WITH_LINK_AND_CPN",c,!0)),d.qc&&!d.D&&D_a(this,function(f){if(g.mU(f,b.api,!QR(b.api.U()))){f={as3:!1,html5:!0,player:!0,cpn:b.api.getVideoData().clientPlaybackNonce};var h=b.api;h.Ac("onFeedbackArticleRequest",{articleId:3037019,helpContext:"player_error", equals www.youtube.com (Youtube)
Source: chromecache_296.2.dr	String found in binary or memory: a.BASE_YT_URL)\|\|"")\|\|OBa(this.yf)\|\|this.protocol+"://www.youtube.com/";h=b?b.eventLabel:a.el;d="detailpage";"adunit"===h?d=this.D?"embedded":"detailpage":"embedded"===h\|\|this.N?d=wB(d,h,ZTa):h&&(d="embedded");this.La=d;vua();h=null;d=b?b.playerStyle:a.ps;f=g.Fb($Ta,d);!d\|\|f&&!this.N\|\|(h=d);this.playerStyle=h;this.qa=(this.K=g.Fb($Ta,this.playerStyle))&&"play"!==this.playerStyle&&"jamboard"!==this.playerStyle;this.gp=!this.qa;this.Sa=vB(!1,a.disableplaybackui);this.disablePaidContentOverlay=vB(!1, equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: a.BASE_YT_URL)\|\|"")\|\|PBa(this.yf)\|\|this.protocol+"://www.youtube.com/";h=b?b.eventLabel:a.el;d="detailpage";"adunit"===h?d=this.D?"embedded":"detailpage":"embedded"===h\|\|this.N?d=xB(d,h,ZTa):h&&(d="embedded");this.La=d;vua();h=null;d=b?b.playerStyle:a.ps;f=g.Fb($Ta,d);!d\|\|f&&!this.N\|\|(h=d);this.playerStyle=h;this.qa=(this.K=g.Fb($Ta,this.playerStyle))&&"play"!==this.playerStyle&&"jamboard"!==this.playerStyle;this.gp=!this.qa;this.Sa=wB(!1,a.disableplaybackui);this.disablePaidContentOverlay=wB(!1, equals www.youtube.com (Youtube)
Source: chromecache_296.2.dr	String found in binary or memory: a.hl);this.region=b?b.contentRegion\|\|"US":yB("US",a.cr);this.hostLanguage=b?b.hostLanguage\|\|"en":yB("en",a.host_language);this.Uo=!this.Bc&&Math.random()<g.DI(this.experiments,"web_player_api_logging_fraction");this.Za=!this.Bc;this.enabledEngageTypes=new Set;this.deviceIsAudioOnly=!(null==b\|\|!b.deviceIsAudioOnly);this.Jd=xB(this.Jd,a.ismb);this.gp?(r=a.vss_host\|\|"s.youtube.com","s.youtube.com"===r&&(r=MR(this.Ea)\|\|"www.youtube.com")):r="video.google.com";this.cn=r;dUa(this,a,!0);this.Na=new lR;g.N(this, equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: a.hl);this.region=b?b.contentRegion\|\|"US":zB("US",a.cr);this.hostLanguage=b?b.hostLanguage\|\|"en":zB("en",a.host_language);this.Uo=!this.Bc&&Math.random()<g.EI(this.experiments,"web_player_api_logging_fraction");this.Za=!this.Bc;this.enabledEngageTypes=new Set;this.deviceIsAudioOnly=!(null==b\|\|!b.deviceIsAudioOnly);this.Jd=yB(this.Jd,a.ismb);this.gp?(r=a.vss_host\|\|"s.youtube.com","s.youtube.com"===r&&(r=LR(this.Ga)\|\|"www.youtube.com")):r="video.google.com";this.cn=r;dUa(this,a,!0);this.Na=new kR;g.N(this, equals www.youtube.com (Youtube)
Source: chromecache_296.2.dr	String found in binary or memory: a.severity,e,UJ(a.details),f)}else this.ea.publish("nonfatalerror",a),d=/^pp/.test(this.videoData.clientPlaybackNonce),this.Wd(a.errorCode,a.details),d&&"manifest.net.connect"===a.errorCode&&(a="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.DC)(),AX(a,"manifest",function(h){b.K=!0;b.ma("pathprobe",h)},function(h){b.Wd(h.errorCode,h.details)}))}}; equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: a.severity,e,VJ(a.details),f)}else this.ea.publish("nonfatalerror",a),d=/^pp/.test(this.videoData.clientPlaybackNonce),this.Wd(a.errorCode,a.details),d&&"manifest.net.connect"===a.errorCode&&(a="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.EC)(),zX(a,"manifest",function(h){b.K=!0;b.ma("pathprobe",h)},function(h){b.Wd(h.errorCode,h.details)}))}}; equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: b=this.api.U();a=this.api.getVideoData();var c="";b.C\|\|(b=g.NR(b),0===b.indexOf("www.")&&(b=b.substring(4)),c=g.wT(a)?"Watch on YouTube Music":"youtube.com"===b?"Watch on YouTube":g.qJ("Watch on $WEBSITE",{WEBSITE:b}));this.updateValue("title",c)}; equals www.youtube.com (Youtube)
Source: chromecache_296.2.dr	String found in binary or memory: b=this.api.U();a=this.api.getVideoData();var c="";b.C\|\|(b=g.OR(b),0===b.indexOf("www.")&&(b=b.substring(4)),c=g.xT(a)?"Watch on YouTube Music":"youtube.com"===b?"Watch on YouTube":g.pJ("Watch on $WEBSITE",{WEBSITE:b}));this.updateValue("title",c)}; equals www.youtube.com (Youtube)
Source: chromecache_304.2.dr	String found in binary or memory: function(h){return h.form===g})};return{store:function(g,h){var m=f(g);m?m.button=h:e.push({form:g,button:h})},get:function(g){var h=f(g);return h?h.button:null}}}function d(e,f,g,h,m){var n=Iz("fsl",g?"nv.mwt":"mwt",0),p;p=g?Iz("fsl","nv.ids",[]):Iz("fsl","ids",[]);if(!p.length)return!0;var q=Nz(e,"gtm.formSubmit",p),r=e.action;r&&r.tagName&&(r=e.cloneNode(!1).action);q["gtm.elementUrl"]=r;O(121);if("https://www.facebook.com/tr/"===r)return O(122),!0;m&&(q["gtm.formSubmitElement"]=m);if(h&&n){if(!tI(q, equals www.facebook.com (Facebook)
Source: chromecache_296.2.dr	String found in binary or memory: g.$R=function(a){var b=g.OR(a);oUa.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: g.NR=function(a){a=LR(a.Ga);return"www.youtube-nocookie.com"===a?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: chromecache_296.2.dr	String found in binary or memory: g.OR=function(a){a=MR(a.Ea);return"www.youtube-nocookie.com"===a?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: g.Va("Goog_AdSense_Lidar_getUrlSignalsList",Dkb);var HBa=pa(["//tpc.googlesyndication.com/sodar/",""]);var ZNa={H6a:0,E6a:1,B6a:2,C6a:3,D6a:4,G6a:5,F6a:6};var Hpa=(new Date).getTime();var Fka="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),Gka=/\bocr\b/;var Ika=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;g.y(fv,g.Dd);fv.prototype.dispose=function(){window.removeEventListener("offline",this.C);window.removeEventListener("online",this.C);this.Vn.Oj(this.G);delete fv.instance}; equals www.youtube.com (Youtube)
Source: chromecache_296.2.dr	String found in binary or memory: g.Va("Goog_AdSense_Lidar_getUrlSignalsList",Fkb);var GBa=pa(["//tpc.googlesyndication.com/sodar/",""]);var ZNa={I6a:0,F6a:1,C6a:2,D6a:3,E6a:4,H6a:5,G6a:6};var Hpa=(new Date).getTime();var Eka="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),Fka=/\bocr\b/;var Hka=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;g.y(ev,g.Dd);ev.prototype.dispose=function(){window.removeEventListener("offline",this.C);window.removeEventListener("online",this.C);this.Vn.Pj(this.G);delete ev.instance}; equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: g.ZR=function(a){var b=g.NR(a);oUa.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: g.k.getVideoUrl=function(a,b,c,d,e,f,h){b={list:b};c&&(e?b.time_continue=c:b.t=c);c=h?"music.youtube.com":g.NR(this);e="www.youtube.com"===c;!f&&d&&e?f="https://youtu.be/"+a:g.HR(this)?(f="https://"+c+"/fire",b.v=a):(f&&e?(f=this.protocol+"://"+c+"/shorts/"+a,d&&(b.feature="share")):(f=this.protocol+"://"+c+"/watch",b.v=a),UC&&(a=vpa())&&(b.ebc=a));return g.lo(f,b)}; equals www.youtube.com (Youtube)
Source: chromecache_296.2.dr	String found in binary or memory: g.k.getVideoUrl=function(a,b,c,d,e,f,h){b={list:b};c&&(e?b.time_continue=c:b.t=c);c=h?"music.youtube.com":g.OR(this);e="www.youtube.com"===c;!f&&d&&e?f="https://youtu.be/"+a:g.IR(this)?(f="https://"+c+"/fire",b.v=a):(f&&e?(f=this.protocol+"://"+c+"/shorts/"+a,d&&(b.feature="share")):(f=this.protocol+"://"+c+"/watch",b.v=a),TC&&(a=vpa())&&(b.ebc=a));return g.to(f,b)}; equals www.youtube.com (Youtube)
Source: chromecache_337.2.dr	String found in binary or memory: if(oCONFIG.YOUTUBE){var tag=document.createElement("script");tag.src="https://www.youtube.com/iframe_api";var firstScriptTag=document.getElementsByTagName("script")[0];firstScriptTag.parentNode.insertBefore(tag,firstScriptTag);var videoArray=[],playerArray=[],_buckets=[],_milestoneController=oCONFIG.YT_MILESTONE,ytUtils=[];onYouTubeIframeAPIReady=function(){for(var a=0;a<videoArray.length;a++)playerArray[a]=new YT.Player(videoArray[a],{events:{onReady:onPlayerReady,onStateChange:onPlayerStateChange, equals www.youtube.com (Youtube)
Source: chromecache_392.2.dr, chromecache_370.2.dr	String found in binary or memory: ol",url:"/es",isLang:!0},{id:"2-other-languages",weight:2,text:"Other languages",url:"/site/languages/en/"},{id:"3-plain-language",weight:3,text:"Plain language",url:"/agency/plain-language"}]},{id:"3-services-for",sectionTitle:"Services for",links:[{id:"1-employers",weight:1,text:"Employers & businesses",url:"/employer"},{id:"2-representatives",weight:2,text:"Representatives",url:"/about-ssa/agency-resources#representatives"},{id:"3-government-agencies",weight:3,text:"Government agencies",url:"/about-ssa/agency-resources#government-agencies"},{id:"4-other-groups",weight:4,text:"Other groups",url:"/about-ssa/agency-resources#other-groups"}]},{id:"4-about",sectionTitle:"About",links:[{id:"1-about-ssa",weight:1,text:"About SSA",url:"/about-ssa"},{id:"2-communications",weight:2,text:"Communications",url:"/about-ssa/agency-resources#communications"},{id:"3-careers",weight:3,text:"Careers",url:"/careers/"},{id:"4-initiatives",weight:4,text:"Initiatives",url:"/about-ssa/agency-resources#initiatives"},{id:"5-research-policy",weight:5,text:"Research & policy",url:"/about-ssa/agency-resources#research-policy"},{id:"6-financial-reports",weight:6,text:"Financial Reports",url:"/finance"}]}],secondaryFooter:{statement:{title:"SSA.gov",line1:"An official website of the Social Security Administration.",line2:"Produced and published at taxpayer expense. "},socialMedia:{facebook:{url:"https://www.facebook.com/socialsecurity",title:"Social Security on Facebook"},twitter:{url:"https://www.twitter.com/socialsecurity",title:"Social Security on Twitter"},youtube:{url:"https://www.youtube.com/user/socialsecurityonline",title:"Social Security on Youtube"},instagram:{url:"https://www.instagram.com/socialsecurity",title:"Social Security on Instagram"},linkedin:{url:"https://www.linkedin.com/company/ssa",title:"Social Security on LinkedIn"}},additionalLinks:[{text:"Accessibility support",url:"/accessibility/"},{text:"Privacy policy",url:"/agency/privacy.html"},{text:"FOIA requests",url:"/foia/"},{text:"Civil Rights/Compliance",url:"/eeo"},{text:"Office of the Inspector General",url:"https://oig.ssa.gov/",isExternal:!0},{text:"Office of the Chief Actuary",url:"/OACT"},{text:"Performance reports",url:"/agency/performance/"}],usaGov:{text:"Looking for U.S. government information and services?",link:{title:"Visit USA.gov",url:"https://usa.gov"}}}}},es:{nav:{banner:{titleBar:{title:"Un sitio oficial del Gobierno de Estados Unidos",accordionTxt:"As equals www.facebook.com (Facebook)
Source: chromecache_392.2.dr, chromecache_370.2.dr	String found in binary or memory: ol",url:"/es",isLang:!0},{id:"2-other-languages",weight:2,text:"Other languages",url:"/site/languages/en/"},{id:"3-plain-language",weight:3,text:"Plain language",url:"/agency/plain-language"}]},{id:"3-services-for",sectionTitle:"Services for",links:[{id:"1-employers",weight:1,text:"Employers & businesses",url:"/employer"},{id:"2-representatives",weight:2,text:"Representatives",url:"/about-ssa/agency-resources#representatives"},{id:"3-government-agencies",weight:3,text:"Government agencies",url:"/about-ssa/agency-resources#government-agencies"},{id:"4-other-groups",weight:4,text:"Other groups",url:"/about-ssa/agency-resources#other-groups"}]},{id:"4-about",sectionTitle:"About",links:[{id:"1-about-ssa",weight:1,text:"About SSA",url:"/about-ssa"},{id:"2-communications",weight:2,text:"Communications",url:"/about-ssa/agency-resources#communications"},{id:"3-careers",weight:3,text:"Careers",url:"/careers/"},{id:"4-initiatives",weight:4,text:"Initiatives",url:"/about-ssa/agency-resources#initiatives"},{id:"5-research-policy",weight:5,text:"Research & policy",url:"/about-ssa/agency-resources#research-policy"},{id:"6-financial-reports",weight:6,text:"Financial Reports",url:"/finance"}]}],secondaryFooter:{statement:{title:"SSA.gov",line1:"An official website of the Social Security Administration.",line2:"Produced and published at taxpayer expense. "},socialMedia:{facebook:{url:"https://www.facebook.com/socialsecurity",title:"Social Security on Facebook"},twitter:{url:"https://www.twitter.com/socialsecurity",title:"Social Security on Twitter"},youtube:{url:"https://www.youtube.com/user/socialsecurityonline",title:"Social Security on Youtube"},instagram:{url:"https://www.instagram.com/socialsecurity",title:"Social Security on Instagram"},linkedin:{url:"https://www.linkedin.com/company/ssa",title:"Social Security on LinkedIn"}},additionalLinks:[{text:"Accessibility support",url:"/accessibility/"},{text:"Privacy policy",url:"/agency/privacy.html"},{text:"FOIA requests",url:"/foia/"},{text:"Civil Rights/Compliance",url:"/eeo"},{text:"Office of the Inspector General",url:"https://oig.ssa.gov/",isExternal:!0},{text:"Office of the Chief Actuary",url:"/OACT"},{text:"Performance reports",url:"/agency/performance/"}],usaGov:{text:"Looking for U.S. government information and services?",link:{title:"Visit USA.gov",url:"https://usa.gov"}}}}},es:{nav:{banner:{titleBar:{title:"Un sitio oficial del Gobierno de Estados Unidos",accordionTxt:"As equals www.linkedin.com (Linkedin)
Source: chromecache_392.2.dr, chromecache_370.2.dr	String found in binary or memory: ol",url:"/es",isLang:!0},{id:"2-other-languages",weight:2,text:"Other languages",url:"/site/languages/en/"},{id:"3-plain-language",weight:3,text:"Plain language",url:"/agency/plain-language"}]},{id:"3-services-for",sectionTitle:"Services for",links:[{id:"1-employers",weight:1,text:"Employers & businesses",url:"/employer"},{id:"2-representatives",weight:2,text:"Representatives",url:"/about-ssa/agency-resources#representatives"},{id:"3-government-agencies",weight:3,text:"Government agencies",url:"/about-ssa/agency-resources#government-agencies"},{id:"4-other-groups",weight:4,text:"Other groups",url:"/about-ssa/agency-resources#other-groups"}]},{id:"4-about",sectionTitle:"About",links:[{id:"1-about-ssa",weight:1,text:"About SSA",url:"/about-ssa"},{id:"2-communications",weight:2,text:"Communications",url:"/about-ssa/agency-resources#communications"},{id:"3-careers",weight:3,text:"Careers",url:"/careers/"},{id:"4-initiatives",weight:4,text:"Initiatives",url:"/about-ssa/agency-resources#initiatives"},{id:"5-research-policy",weight:5,text:"Research & policy",url:"/about-ssa/agency-resources#research-policy"},{id:"6-financial-reports",weight:6,text:"Financial Reports",url:"/finance"}]}],secondaryFooter:{statement:{title:"SSA.gov",line1:"An official website of the Social Security Administration.",line2:"Produced and published at taxpayer expense. "},socialMedia:{facebook:{url:"https://www.facebook.com/socialsecurity",title:"Social Security on Facebook"},twitter:{url:"https://www.twitter.com/socialsecurity",title:"Social Security on Twitter"},youtube:{url:"https://www.youtube.com/user/socialsecurityonline",title:"Social Security on Youtube"},instagram:{url:"https://www.instagram.com/socialsecurity",title:"Social Security on Instagram"},linkedin:{url:"https://www.linkedin.com/company/ssa",title:"Social Security on LinkedIn"}},additionalLinks:[{text:"Accessibility support",url:"/accessibility/"},{text:"Privacy policy",url:"/agency/privacy.html"},{text:"FOIA requests",url:"/foia/"},{text:"Civil Rights/Compliance",url:"/eeo"},{text:"Office of the Inspector General",url:"https://oig.ssa.gov/",isExternal:!0},{text:"Office of the Chief Actuary",url:"/OACT"},{text:"Performance reports",url:"/agency/performance/"}],usaGov:{text:"Looking for U.S. government information and services?",link:{title:"Visit USA.gov",url:"https://usa.gov"}}}}},es:{nav:{banner:{titleBar:{title:"Un sitio oficial del Gobierno de Estados Unidos",accordionTxt:"As equals www.twitter.com (Twitter)
Source: chromecache_392.2.dr, chromecache_370.2.dr	String found in binary or memory: ol",url:"/es",isLang:!0},{id:"2-other-languages",weight:2,text:"Other languages",url:"/site/languages/en/"},{id:"3-plain-language",weight:3,text:"Plain language",url:"/agency/plain-language"}]},{id:"3-services-for",sectionTitle:"Services for",links:[{id:"1-employers",weight:1,text:"Employers & businesses",url:"/employer"},{id:"2-representatives",weight:2,text:"Representatives",url:"/about-ssa/agency-resources#representatives"},{id:"3-government-agencies",weight:3,text:"Government agencies",url:"/about-ssa/agency-resources#government-agencies"},{id:"4-other-groups",weight:4,text:"Other groups",url:"/about-ssa/agency-resources#other-groups"}]},{id:"4-about",sectionTitle:"About",links:[{id:"1-about-ssa",weight:1,text:"About SSA",url:"/about-ssa"},{id:"2-communications",weight:2,text:"Communications",url:"/about-ssa/agency-resources#communications"},{id:"3-careers",weight:3,text:"Careers",url:"/careers/"},{id:"4-initiatives",weight:4,text:"Initiatives",url:"/about-ssa/agency-resources#initiatives"},{id:"5-research-policy",weight:5,text:"Research & policy",url:"/about-ssa/agency-resources#research-policy"},{id:"6-financial-reports",weight:6,text:"Financial Reports",url:"/finance"}]}],secondaryFooter:{statement:{title:"SSA.gov",line1:"An official website of the Social Security Administration.",line2:"Produced and published at taxpayer expense. "},socialMedia:{facebook:{url:"https://www.facebook.com/socialsecurity",title:"Social Security on Facebook"},twitter:{url:"https://www.twitter.com/socialsecurity",title:"Social Security on Twitter"},youtube:{url:"https://www.youtube.com/user/socialsecurityonline",title:"Social Security on Youtube"},instagram:{url:"https://www.instagram.com/socialsecurity",title:"Social Security on Instagram"},linkedin:{url:"https://www.linkedin.com/company/ssa",title:"Social Security on LinkedIn"}},additionalLinks:[{text:"Accessibility support",url:"/accessibility/"},{text:"Privacy policy",url:"/agency/privacy.html"},{text:"FOIA requests",url:"/foia/"},{text:"Civil Rights/Compliance",url:"/eeo"},{text:"Office of the Inspector General",url:"https://oig.ssa.gov/",isExternal:!0},{text:"Office of the Chief Actuary",url:"/OACT"},{text:"Performance reports",url:"/agency/performance/"}],usaGov:{text:"Looking for U.S. government information and services?",link:{title:"Visit USA.gov",url:"https://usa.gov"}}}}},es:{nav:{banner:{titleBar:{title:"Un sitio oficial del Gobierno de Estados Unidos",accordionTxt:"As equals www.youtube.com (Youtube)
Source: chromecache_309.2.dr, chromecache_434.2.dr, chromecache_359.2.dr, chromecache_430.2.dr, chromecache_363.2.dr, chromecache_360.2.dr, chromecache_304.2.dr, chromecache_449.2.dr	String found in binary or memory: return b}AC.K="internal.enableAutoEventOnTimer";var hc=ma(["data-gtm-yt-inspected-"]),CC=["www.youtube.com","www.youtube-nocookie.com"],DC,EC=!1; equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: this.W.Ca&&(a.authuser=this.W.Ca);this.W.pageId&&(a.pageid=this.W.pageId);isNaN(this.cryptoPeriodIndex)\|\|(a.cpi=this.cryptoPeriodIndex.toString());var e=(e=/_(TV\|STB\|GAME\|OTT\|ATV\|BDP)_/.exec(g.oc()))?e[1]:"";"ATV"===e&&(a.cdt=e);this.G=a;this.G.session_id=d;this.qa=!0;"widevine"===this.B.flavor&&(this.G.hdr="1");"playready"===this.B.flavor&&(b=Number(iR(b.experiments,"playready_first_play_expiration")),!isNaN(b)&&0<=b&&(this.G.mfpe=""+b),this.qa=!1);b="";g.aR(this.B)?$Q(this.B)?(d=c.B)&&(b="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)

Source: chromecache_443.2.dr, chromecache_403.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_443.2.dr	String found in binary or memory: http://jqueryui.com/themeroller/?bgShadowXPos=&bgOverlayXPos=&bgErrorXPos=&bgHighlightXPos=&bgConten
Source: chromecache_445.2.dr, chromecache_447.2.dr	String found in binary or memory: http://noelboss.github.io/featherlight/
Source: chromecache_347.2.dr, chromecache_439.2.dr, chromecache_296.2.dr, chromecache_450.2.dr	String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: chromecache_445.2.dr, chromecache_447.2.dr	String found in binary or memory: http://www.noelboss.com)
Source: chromecache_450.2.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: chromecache_296.2.dr, chromecache_450.2.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: chromecache_296.2.dr, chromecache_450.2.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: chromecache_296.2.dr, chromecache_450.2.dr	String found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: chromecache_296.2.dr, chromecache_450.2.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: sets.json.0.dr	String found in binary or memory: https://abczdrowie.pl
Source: chromecache_296.2.dr, chromecache_450.2.dr	String found in binary or memory: https://admin.youtube.com
Source: chromecache_309.2.dr, chromecache_430.2.dr, chromecache_360.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_309.2.dr, chromecache_430.2.dr, chromecache_360.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: sets.json.0.dr	String found in binary or memory: https://alice.tw
Source: chromecache_364.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_425.2.dr, chromecache_324.2.dr	String found in binary or memory: https://angular.io/license
Source: sets.json.0.dr	String found in binary or memory: https://autobild.de
Source: sets.json.0.dr	String found in binary or memory: https://baomoi.com
Source: sets.json.0.dr	String found in binary or memory: https://bild.de
Source: sets.json.0.dr	String found in binary or memory: https://blackrock.com
Source: sets.json.0.dr	String found in binary or memory: https://blackrockadvisorelite.it
Source: sets.json.0.dr	String found in binary or memory: https://bluradio.com
Source: sets.json.0.dr	String found in binary or memory: https://bolasport.com
Source: sets.json.0.dr	String found in binary or memory: https://bonvivir.com
Source: sets.json.0.dr	String found in binary or memory: https://bumbox.com
Source: sets.json.0.dr	String found in binary or memory: https://businessinsider.com.pl
Source: sets.json.0.dr	String found in binary or memory: https://cachematrix.com
Source: sets.json.0.dr	String found in binary or memory: https://cafemedia.com
Source: sets.json.0.dr	String found in binary or memory: https://caracoltv.com
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.be
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.com
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.fr
Source: sets.json.0.dr	String found in binary or memory: https://cardsayings.net
Source: chromecache_309.2.dr, chromecache_434.2.dr, chromecache_359.2.dr, chromecache_430.2.dr, chromecache_363.2.dr, chromecache_360.2.dr, chromecache_304.2.dr, chromecache_449.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: sets.json.0.dr	String found in binary or memory: https://chennien.com
Source: sets.json.0.dr	String found in binary or memory: https://clarosports.com
Source: sets.json.0.dr	String found in binary or memory: https://clmbtech.com
Source: sets.json.0.dr	String found in binary or memory: https://clubelpais.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://cmxd.com.mx

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://s2.go-mpulse.net/boomerang/	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://www.youtube.com/generate_204?cpn=	0%	URL Reputation	safe
https://player.vimeo.com/NOTICE.txt	0%	URL Reputation	safe
https://help.vimeo.com/hc/en-us/articles/115015677227-Troubleshoot-player-error-messages	0%	URL Reputation	safe
http://youtube.com/drm/2012/10/10	0%	URL Reputation	safe
http://jqueryui.com	0%	URL Reputation	safe
https://www.ssa.gov/espanol/beneficios/	0%	Avira URL Cloud	safe
https://bam.nr-data.net/events/1/NRJS-469e5c3a62582fe4b9d?a=1222707131&v=1.260.0&to=YVMHNRAAVxICUkcKXFgZJAIWCFYPTHVBFkNXWjkiDRNcPSVeQQ5vcFkXDCAUUA0HVEFODURTCwUHE2kNAlJWC1xaUgATJA5LDCJSRwpcWA%3D%3D&rst=10173&ck=0&s=a4d5481e8957fd05&ref=https://www.ssa.gov/&ptid=bc4529ccaaf4f8bf	0%	Avira URL Cloud	safe
https://www.ssa.gov/espanol/agencia/confidencialidad.html	0%	Avira URL Cloud	safe
https://mercadolivre.com	0%	Avira URL Cloud	safe
https://medonet.pl	0%	Avira URL Cloud	safe
https://wieistmeineip.de	0%	Avira URL Cloud	safe
https://ssa.gov/	0%	Avira URL Cloud	safe
https://mercadoshops.com.co	0%	Avira URL Cloud	safe
https://usa.gov	0%	Avira URL Cloud	safe
https://purl.eligrey.com/github/classList.js/blob/master/classList.js	0%	Avira URL Cloud	safe
https://baomoi.com	0%	Avira URL Cloud	safe
https://hearty.app	0%	Avira URL Cloud	safe
https://elfinancierocr.com	0%	Avira URL Cloud	safe
https://desimartini.com	0%	Avira URL Cloud	safe
https://mercadoshops.com	0%	Avira URL Cloud	safe
https://bolasport.com	0%	Avira URL Cloud	safe
https://bam.nr-data.net/1/NRJS-469e5c3a62582fe4b9d?a=1222707131&v=1.260.0&to=YVMHNRAAVxICUkcKXFgZJAIWCFYPTHVBFkNXWjkiDRNcPSVeQQ5vcFkXDCAUUA0HVEFODURTCwUHE2kNAlJWC1xaUgATJA5LDCJSRwpcWA%3D%3D&rst=17633&ck=0&s=a4d5481e8957fd05&ref=https://www.ssa.gov/&ptid=ceb4f5484711c147&qt=4&ap=254&be=2783&fe=13428&dc=3388&at=TRQEQ1gaRBw%3D&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1716400707372,%22n%22:0,%22f%22:1377,%22dn%22:1378,%22dne%22:1544,%22c%22:1544,%22s%22:1545,%22ce%22:2232,%22rq%22:2232,%22rp%22:2783,%22rpe%22:3035,%22di%22:6108,%22ds%22:6108,%22de%22:6171,%22dc%22:16209,%22l%22:16209,%22le%22:16211%7D,%22navigation%22:%7B%7D%7D&fp=5488&fcp=5488	0%	Avira URL Cloud	safe
https://mercadoshops.com.br	0%	Avira URL Cloud	safe
https://songshare.com	0%	Avira URL Cloud	safe
https://radio2.be	0%	Avira URL Cloud	safe
https://bam.nr-data.net/jserrors/1/NRJS-469e5c3a62582fe4b9d?a=1222707131&v=1.260.0&to=YVMHNRAAVxICUkcKXFgZJAIWCFYPTHVBFkNXWjkiDRNcPSVeQQ5vcFkXDCAUUA0HVEFODURTCwUHE2kNAlJWC1xaUgATJA5LDCJSRwpcWA%3D%3D&rst=10203&ck=0&s=a4d5481e8957fd05&ref=https://www.ssa.gov/&ptid=bc4529ccaaf4f8bf	0%	Avira URL Cloud	safe
https://vote.gov/	0%	Avira URL Cloud	safe
https://www.ssa.gov/eeo	0%	Avira URL Cloud	safe
https://mightytext.net	0%	Avira URL Cloud	safe
https://wildixin.com	0%	Avira URL Cloud	safe
https://gist.github.com/paulirish/1579671	0%	Avira URL Cloud	safe
https://joyreactor.com	0%	Avira URL Cloud	safe
https://eworkbookcloud.com	0%	Avira URL Cloud	safe
https://chennien.com	0%	Avira URL Cloud	safe
https://mercadopago.cl	0%	Avira URL Cloud	safe
https://wpext.pl	0%	Avira URL Cloud	safe
https://bonvivir.com	0%	Avira URL Cloud	safe
https://poalim.site	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
fastly-tls12-bam.nr-data.net	162.247.243.29	true	false	unknown
i.ytimg.com	142.250.185.150	true	false	unknown
d27f3qgc9anoq2.cloudfront.net	108.156.60.24	true	false	unknown
js-agent.newrelic.com	162.247.243.39	true	false	unknown
secure.ssa.gov	137.200.40.10	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
vimeo.com	162.159.128.61	true	false	unknown
stats.g.doubleclick.net	64.233.184.156	true	false	unknown
vimeo.map.fastly.net	151.101.192.217	true	false	unknown
youtube-ui.l.google.com	172.217.16.206	true	false	unknown
fresnel.vimeocdn.com	34.120.202.204	true	false	unknown
play.google.com	142.250.186.110	true	false	unknown
ssa.gov	137.200.39.19	true	false	unknown
photos-ugc.l.googleusercontent.com	142.250.186.97	true	false	unknown
www.google.com	216.58.206.68	true	false	unknown
vimeo-video.map.fastly.net	146.75.118.109	true	false	unknown
yt3.ggpht.com	unknown	unknown	false	unknown
resources.digital-cloud-gov.medallia.com	unknown	unknown	false	unknown
www.ssa.gov	unknown	unknown	false	unknown
s.go-mpulse.net	unknown	unknown	false	unknown
dap.digitalgov.gov	unknown	unknown	false	unknown
i.vimeocdn.com	unknown	unknown	false	unknown
bam.nr-data.net	unknown	unknown	false	unknown
18.31.95.13.in-addr.arpa	unknown	unknown	false	unknown
f.vimeocdn.com	unknown	unknown	false	unknown
player.vimeo.com	unknown	unknown	false	unknown
c.go-mpulse.net	unknown	unknown	false	unknown
www.youtube-nocookie.com	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://ssa.gov/	false	Avira URL Cloud: safe	unknown
https://bam.nr-data.net/events/1/NRJS-469e5c3a62582fe4b9d?a=1222707131&v=1.260.0&to=YVMHNRAAVxICUkcKXFgZJAIWCFYPTHVBFkNXWjkiDRNcPSVeQQ5vcFkXDCAUUA0HVEFODURTCwUHE2kNAlJWC1xaUgATJA5LDCJSRwpcWA%3D%3D&rst=10173&ck=0&s=a4d5481e8957fd05&ref=https://www.ssa.gov/&ptid=bc4529ccaaf4f8bf	false	Avira URL Cloud: safe	unknown
https://www.youtube-nocookie.com/embed/0l5RX73PnFY?rel=0&autohide=1&modestbranding=1	false		unknown
https://bam.nr-data.net/1/NRJS-469e5c3a62582fe4b9d?a=1222707131&v=1.260.0&to=YVMHNRAAVxICUkcKXFgZJAIWCFYPTHVBFkNXWjkiDRNcPSVeQQ5vcFkXDCAUUA0HVEFODURTCwUHE2kNAlJWC1xaUgATJA5LDCJSRwpcWA%3D%3D&rst=17633&ck=0&s=a4d5481e8957fd05&ref=https://www.ssa.gov/&ptid=ceb4f5484711c147&qt=4&ap=254&be=2783&fe=13428&dc=3388&at=TRQEQ1gaRBw%3D&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1716400707372,%22n%22:0,%22f%22:1377,%22dn%22:1378,%22dne%22:1544,%22c%22:1544,%22s%22:1545,%22ce%22:2232,%22rq%22:2232,%22rp%22:2783,%22rpe%22:3035,%22di%22:6108,%22ds%22:6108,%22de%22:6171,%22dc%22:16209,%22l%22:16209,%22le%22:16211%7D,%22navigation%22:%7B%7D%7D&fp=5488&fcp=5488	false	Avira URL Cloud: safe	unknown
https://bam.nr-data.net/jserrors/1/NRJS-469e5c3a62582fe4b9d?a=1222707131&v=1.260.0&to=YVMHNRAAVxICUkcKXFgZJAIWCFYPTHVBFkNXWjkiDRNcPSVeQQ5vcFkXDCAUUA0HVEFODURTCwUHE2kNAlJWC1xaUgATJA5LDCJSRwpcWA%3D%3D&rst=10203&ck=0&s=a4d5481e8957fd05&ref=https://www.ssa.gov/&ptid=bc4529ccaaf4f8bf	false	Avira URL Cloud: safe	unknown
https://www.ssa.gov/	false		unknown
https://www.youtube-nocookie.com/embed/cyaUWTFLw3c?si=8N7Oq7jUv8TE6Dtd	false		unknown
https://bam.nr-data.net/1/NRJS-469e5c3a62582fe4b9d?a=1222707131&v=1.260.0&to=YVMHNRAAVxICUkcKXFgZJAIWCFYPTEFSBFZpVQQCCgQ%3D&rst=9060&ck=0&s=a4d5481e8957fd05&ref=https://www.ssa.gov/es&ptid=556b58aee93cc892&ap=47&be=1275&fe=7643&dc=4724&at=TRQEQ1gaRBw%3D&fsh=0&perf=%7B%22timing%22:%7B%22of%22:1716400752504,%22n%22:0,%22f%22:4,%22dn%22:35,%22dne%22:35,%22c%22:35,%22s%22:41,%22ce%22:682,%22rq%22:682,%22rp%22:1276,%22rpe%22:1525,%22di%22:5807,%22ds%22:5809,%22de%22:5999,%22dc%22:8912,%22l%22:8912,%22le%22:8918%7D,%22navigation%22:%7B%7D%7D&fp=3029&fcp=3029&timestamp=1716400762224	false	Avira URL Cloud: safe	unknown
https://f.vimeocdn.com/p/4.33.7/js/vendor.module.js	false	Avira URL Cloud: safe	unknown
https://bam.nr-data.net/events/1/NRJS-469e5c3a62582fe4b9d?a=1222707131&v=1.260.0&to=YVMHNRAAVxICUkcKXFgZJAIWCFYPTHVBFkNXWjkiDRNcPSVeQQ5vcFkXDCAUUA0HVEFODURTCwUHE2kNAlJWC1xaUgATJA5LDCJSRwpcWA%3D%3D&rst=22293&ck=0&s=a4d5481e8957fd05&ref=https://www.ssa.gov/&ptid=ceb4f5484711c147	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-33523145-1&cid=759143496.1716400722&jid=1306024173&gjid=1372583839&_gid=39265678.1716400722&_u=SCCACQAjBAAAAGAHqC~&z=297888043	false	Avira URL Cloud: safe	unknown
https://f.vimeocdn.com/p/4.33.7/css/player.css	false	Avira URL Cloud: safe	unknown
https://www.ssa.gov/prepare/review-record-earnings	false		unknown
https://i.vimeocdn.com/video/839032788-1c1931ad54461ebaccaacfe333a1e41ed233a641a41a4461796f40ac9b8b5338-d?mw=80&q=85	false	Avira URL Cloud: safe	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://wieistmeineip.de	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://mercadoshops.com.co	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://purl.eligrey.com/github/classList.js/blob/master/classList.js	chromecache_256.2.dr, chromecache_271.2.dr	false	Avira URL Cloud: safe	unknown
https://s2.go-mpulse.net/boomerang/	chromecache_248.2.dr, chromecache_300.2.dr, chromecache_345.2.dr, chromecache_275.2.dr, chromecache_433.2.dr	false	URL Reputation: safe	unknown
https://mercadolivre.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://www.ssa.gov/espanol/beneficios/	chromecache_345.2.dr	false	Avira URL Cloud: safe	unknown
https://usa.gov	chromecache_248.2.dr, chromecache_300.2.dr, chromecache_275.2.dr	false	Avira URL Cloud: safe	unknown
https://www.ssa.gov/espanol/agencia/confidencialidad.html	chromecache_345.2.dr	false	Avira URL Cloud: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_364.2.dr	false	URL Reputation: safe	unknown
https://medonet.pl	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://mercadoshops.com.br	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://baomoi.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://elfinancierocr.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://bolasport.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://desimartini.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://hearty.app	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://mercadoshops.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://radio2.be	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://songshare.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://vote.gov/	chromecache_248.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/generate_204?cpn=	chromecache_296.2.dr, chromecache_450.2.dr	false	URL Reputation: safe	unknown
https://www.ssa.gov/eeo	chromecache_248.2.dr, chromecache_300.2.dr, chromecache_345.2.dr, chromecache_275.2.dr	false	Avira URL Cloud: safe	unknown
https://mightytext.net	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://joyreactor.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://wildixin.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://eworkbookcloud.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://gist.github.com/paulirish/1579671	chromecache_256.2.dr, chromecache_271.2.dr	false	Avira URL Cloud: safe	unknown
https://chennien.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://mercadopago.cl	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://bonvivir.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://wpext.pl	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://welt.de	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://poalim.site	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://www.ssa.gov/espanol/nombresdebebes	chromecache_345.2.dr	false	Avira URL Cloud: safe	unknown
https://blackrockadvisorelite.it	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://cafemedia.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://mercadoshops.com.ar	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://www.instagram.com/socialsecurity	chromecache_248.2.dr, chromecache_300.2.dr, chromecache_275.2.dr	false	Avira URL Cloud: safe	unknown
https://oig.ssa.gov/espanol	chromecache_392.2.dr, chromecache_370.2.dr	false	Avira URL Cloud: safe	unknown
https://commentcamarche.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://rws3nvtvt.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://mercadolivre.com.br	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://ssa.gov/agency/performance/	chromecache_248.2.dr, chromecache_300.2.dr, chromecache_345.2.dr, chromecache_275.2.dr	false	Avira URL Cloud: safe	unknown
https://clmbtech.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://salemovefinancial.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://mercadopago.com.br	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://www.ssa.gov/OACT/TR/2024/	chromecache_248.2.dr, chromecache_345.2.dr	false	Avira URL Cloud: safe	unknown
https://commentcamarche.net	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://oig.ssa.gov/	chromecache_248.2.dr, chromecache_300.2.dr, chromecache_275.2.dr	false	Avira URL Cloud: safe	unknown
https://hj.rs	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://youtu.be/	chromecache_296.2.dr, chromecache_450.2.dr	false	Avira URL Cloud: safe	unknown
https://hearty.me	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://mercadolibre.com.gt	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://idbs-staging.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://twitter.com/segurosocial	chromecache_345.2.dr	false	Avira URL Cloud: safe	unknown
https://mercadolibre.co.cr	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://consumer.ftc.gov/consumer-alerts/2023/11/new-help-spotting-avoiding-and-reporting-scams-mult	chromecache_433.2.dr	false	Avira URL Cloud: safe	unknown
https://prisjakt.no	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://kompas.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://wingify.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://player.pl	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://mercadopago.com.ar	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://secure.ssa.gov/acu/FIS/ap?idp=logingov&app=rir&target=/myssa/myhub	chromecache_300.2.dr	false	Avira URL Cloud: safe	unknown
https://mercadolibre.com.hn	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://www.ssa.gov/myaccount	chromecache_248.2.dr, chromecache_345.2.dr	false	Avira URL Cloud: safe	unknown
https://player.vimeo.com/NOTICE.txt	chromecache_366.2.dr, chromecache_322.2.dr	false	URL Reputation: safe	unknown
https://tucarro.com.co	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://een.be	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://www.usa.gov/where-report-scams	chromecache_433.2.dr	false	Avira URL Cloud: safe	unknown
https://www.ssa.gov/pubs/	chromecache_248.2.dr, chromecache_300.2.dr, chromecache_275.2.dr	false	Avira URL Cloud: safe	unknown
https://secure.ssa.gov/pfrf/home	chromecache_248.2.dr, chromecache_392.2.dr, chromecache_300.2.dr, chromecache_345.2.dr, chromecache_370.2.dr, chromecache_275.2.dr	false	Avira URL Cloud: safe	unknown
https://secure.ssa.gov/RIL/bso	chromecache_392.2.dr, chromecache_370.2.dr	false	Avira URL Cloud: safe	unknown
https://www.ssa.gov/locator/	chromecache_248.2.dr, chromecache_300.2.dr, chromecache_345.2.dr, chromecache_275.2.dr	false	Avira URL Cloud: safe	unknown
https://help.vimeo.com/hc/en-us/articles/115015677227-Troubleshoot-player-error-messages	chromecache_322.2.dr	false	URL Reputation: safe	unknown
https://www.ssa.gov/site/languages/	chromecache_392.2.dr, chromecache_370.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/dinbror/blazy/blob/master/LICENSE	chromecache_256.2.dr, chromecache_271.2.dr	false	Avira URL Cloud: safe	unknown
http://youtube.com/drm/2012/10/10	chromecache_296.2.dr, chromecache_450.2.dr	false	URL Reputation: safe	unknown
https://carcostadvisor.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://mercadopago.com.co	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://caracoltv.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://mercadolibre.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://mittanbud.no	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://www.ssa.gov/forms/	chromecache_248.2.dr, chromecache_300.2.dr, chromecache_345.2.dr, chromecache_275.2.dr	false	Avira URL Cloud: safe	unknown
https://dewarmsteweek.be	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
http://jqueryui.com	chromecache_443.2.dr, chromecache_403.2.dr	false	URL Reputation: safe	unknown
https://cricbuzz.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
64.233.184.154	unknown	United States	15169	GOOGLEUS	false
64.233.184.156	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
146.75.118.109	vimeo-video.map.fastly.net	Sweden	30051	SCCGOVUS	false
108.156.60.24	d27f3qgc9anoq2.cloudfront.net	United States	16509	AMAZON-02US	false
142.250.186.110	play.google.com	United States	15169	GOOGLEUS	false
162.247.243.39	js-agent.newrelic.com	United States	13335	CLOUDFLARENETUS	false
142.250.186.97	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false
172.217.16.206	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
151.101.192.217	vimeo.map.fastly.net	United States	54113	FASTLYUS	false
34.120.202.204	fresnel.vimeocdn.com	United States	15169	GOOGLEUS	false
142.251.168.154	unknown	United States	15169	GOOGLEUS	false
142.250.185.132	unknown	United States	15169	GOOGLEUS	false
137.200.39.19	ssa.gov	United States	11985	ASN-SSAUS	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.150	i.ytimg.com	United States	15169	GOOGLEUS	false
162.247.243.29	fastly-tls12-bam.nr-data.net	United States	13335	CLOUDFLARENETUS	false
137.200.40.10	secure.ssa.gov	United States	11985	ASN-SSAUS	false

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1445930
Start date and time:	2024-05-22 19:57:38 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 12s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://ssa.gov
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@34/369@56/20
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.ssa.gov/#main-content Browse: https://www.ssa.gov/scam/ Browse: https://www.ssa.gov/es?hid=015B7A338992F9B9CDD99756C86A919D&wordfence_lh=1 Browse: https://secure.ssa.gov/RIL/SiView.action Browse: https://www.ssa.gov/prepare/check-eligibility-for-benefits

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1558
Entropy (8bit):	5.11458514637545
Encrypted:	false
SSDEEP:	48:OBOCrYJ4rYJVwUCLHDy43HV713XEyMmZ3teTHn:LCrYJ4rYJVwUCHZ3Z13XtdUTH
MD5:	EE002CB9E51BB8DFA89640A406A1090A
SHA1:	49EE3AD535947D8821FFDEB67FFC9BC37D1EBBB2
SHA-256:	3DBD2C90050B652D63656481C3E5871C52261575292DB77D4EA63419F187A55B
SHA-512:	D1FDCC436B8CA8C68D4DC7077F84F803A535BF2CE31D9EB5D0C466B62D6567B2C59974995060403ED757E92245DB07E70C6BDDBF1C3519FED300CC5B9BF9177C
Malicious:	false
Reputation:	low
Preview:	// Copyright 2015 The Chromium Authors. All rights reserved..//.// Redistribution and use in source and binary forms, with or without.// modification, are permitted provided that the following conditions are.// met:.//.// * Redistributions of source code must retain the above copyright.// notice, this list of conditions and the following disclaimer..// * Redistributions in binary form must reproduce the above.// copyright notice, this list of conditions and the following disclaimer.// in the documentation and/or other materials provided with the.// distribution..// * Neither the name of Google Inc. nor the names of its.// contributors may be used to endorse or promote products derived from.// this software without specific prior written permission..//.// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS.// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT.// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR.// A PARTICULAR

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 22, 2024 19:58:26.878176928 CEST	53	63438	1.1.1.1	192.168.2.4
May 22, 2024 19:58:26.995359898 CEST	53	52053	1.1.1.1	192.168.2.4
May 22, 2024 19:58:27.953910112 CEST	58809	53	192.168.2.4	1.1.1.1
May 22, 2024 19:58:27.954036951 CEST	58597	53	192.168.2.4	1.1.1.1
May 22, 2024 19:58:27.985044956 CEST	53	58809	1.1.1.1	192.168.2.4
May 22, 2024 19:58:28.037205935 CEST	53	60434	1.1.1.1	192.168.2.4
May 22, 2024 19:58:28.062272072 CEST	53	58597	1.1.1.1	192.168.2.4
May 22, 2024 19:58:28.514791012 CEST	60556	53	192.168.2.4	1.1.1.1
May 22, 2024 19:58:28.514926910 CEST	59650	53	192.168.2.4	1.1.1.1
May 22, 2024 19:58:28.523684978 CEST	53	60556	1.1.1.1	192.168.2.4
May 22, 2024 19:58:28.532907009 CEST	53	59650	1.1.1.1	192.168.2.4
May 22, 2024 19:58:29.313966990 CEST	59420	53	192.168.2.4	1.1.1.1
May 22, 2024 19:58:29.314136982 CEST	62288	53	192.168.2.4	1.1.1.1
May 22, 2024 19:58:31.309798956 CEST	64760	53	192.168.2.4	1.1.1.1
May 22, 2024 19:58:31.309799910 CEST	56895	53	192.168.2.4	1.1.1.1
May 22, 2024 19:58:31.317423105 CEST	53	64760	1.1.1.1	192.168.2.4
May 22, 2024 19:58:31.327260971 CEST	53	56895	1.1.1.1	192.168.2.4
May 22, 2024 19:58:32.621923923 CEST	62328	53	192.168.2.4	1.1.1.1
May 22, 2024 19:58:32.622152090 CEST	55356	53	192.168.2.4	1.1.1.1
May 22, 2024 19:58:33.189555883 CEST	58863	53	192.168.2.4	1.1.1.1
May 22, 2024 19:58:33.189738989 CEST	56399	53	192.168.2.4	1.1.1.1
May 22, 2024 19:58:34.157011986 CEST	53	60760	1.1.1.1	192.168.2.4
May 22, 2024 19:58:34.848779917 CEST	49472	53	192.168.2.4	1.1.1.1
May 22, 2024 19:58:34.849144936 CEST	65317	53	192.168.2.4	1.1.1.1
May 22, 2024 19:58:36.118817091 CEST	61816	53	192.168.2.4	1.1.1.1
May 22, 2024 19:58:36.118956089 CEST	55424	53	192.168.2.4	1.1.1.1
May 22, 2024 19:58:37.163315058 CEST	51641	53	192.168.2.4	1.1.1.1
May 22, 2024 19:58:37.163805008 CEST	50392	53	192.168.2.4	1.1.1.1
May 22, 2024 19:58:37.177659035 CEST	53	61668	1.1.1.1	192.168.2.4
May 22, 2024 19:58:41.549221992 CEST	62431	53	192.168.2.4	1.1.1.1
May 22, 2024 19:58:41.549221992 CEST	65219	53	192.168.2.4	1.1.1.1
May 22, 2024 19:58:41.561518908 CEST	53	62431	1.1.1.1	192.168.2.4
May 22, 2024 19:58:41.572809935 CEST	53	65219	1.1.1.1	192.168.2.4
May 22, 2024 19:58:41.582225084 CEST	53	61213	1.1.1.1	192.168.2.4
May 22, 2024 19:58:43.790560007 CEST	61398	53	192.168.2.4	1.1.1.1
May 22, 2024 19:58:43.790695906 CEST	55952	53	192.168.2.4	1.1.1.1
May 22, 2024 19:58:43.851645947 CEST	53	61398	1.1.1.1	192.168.2.4
May 22, 2024 19:58:43.851660013 CEST	53	55952	1.1.1.1	192.168.2.4
May 22, 2024 19:58:44.171386003 CEST	53	63877	1.1.1.1	192.168.2.4
May 22, 2024 19:58:44.791088104 CEST	57172	53	192.168.2.4	1.1.1.1
May 22, 2024 19:58:44.791282892 CEST	60178	53	192.168.2.4	1.1.1.1
May 22, 2024 19:58:44.792318106 CEST	50960	53	192.168.2.4	1.1.1.1
May 22, 2024 19:58:44.792455912 CEST	56462	53	192.168.2.4	1.1.1.1
May 22, 2024 19:58:44.801424980 CEST	53	57172	1.1.1.1	192.168.2.4
May 22, 2024 19:58:44.806205034 CEST	53	56462	1.1.1.1	192.168.2.4
May 22, 2024 19:58:44.806214094 CEST	53	60178	1.1.1.1	192.168.2.4
May 22, 2024 19:58:44.806226969 CEST	53	50960	1.1.1.1	192.168.2.4
May 22, 2024 19:58:45.570991993 CEST	62465	53	192.168.2.4	1.1.1.1
May 22, 2024 19:58:45.570991993 CEST	57266	53	192.168.2.4	1.1.1.1
May 22, 2024 19:58:45.578381062 CEST	53	62465	1.1.1.1	192.168.2.4
May 22, 2024 19:58:45.585408926 CEST	53	57266	1.1.1.1	192.168.2.4
May 22, 2024 19:58:45.971261978 CEST	53	52922	1.1.1.1	192.168.2.4
May 22, 2024 19:58:46.372417927 CEST	52108	53	192.168.2.4	1.1.1.1
May 22, 2024 19:58:46.372581005 CEST	53773	53	192.168.2.4	1.1.1.1
May 22, 2024 19:58:46.381525040 CEST	53	52108	1.1.1.1	192.168.2.4
May 22, 2024 19:58:46.388771057 CEST	53	53773	1.1.1.1	192.168.2.4
May 22, 2024 19:58:51.871993065 CEST	138	138	192.168.2.4	192.168.2.255
May 22, 2024 19:58:58.726939917 CEST	53	51264	162.159.36.2	192.168.2.4
May 22, 2024 19:58:58.895874977 CEST	52796	53	192.168.2.4	1.1.1.1
May 22, 2024 19:58:58.895874977 CEST	56302	53	192.168.2.4	1.1.1.1
May 22, 2024 19:58:59.262511969 CEST	62859	53	192.168.2.4	1.1.1.1
May 22, 2024 19:58:59.355550051 CEST	53	62859	1.1.1.1	192.168.2.4
May 22, 2024 19:59:02.481808901 CEST	50337	53	192.168.2.4	1.1.1.1
May 22, 2024 19:59:02.485325098 CEST	56987	53	192.168.2.4	1.1.1.1
May 22, 2024 19:59:02.486365080 CEST	55142	53	192.168.2.4	1.1.1.1
May 22, 2024 19:59:02.487113953 CEST	53782	53	192.168.2.4	1.1.1.1
May 22, 2024 19:59:02.493582010 CEST	53	50337	1.1.1.1	192.168.2.4
May 22, 2024 19:59:02.496411085 CEST	53	56987	1.1.1.1	192.168.2.4
May 22, 2024 19:59:03.597712040 CEST	60538	53	192.168.2.4	1.1.1.1
May 22, 2024 19:59:03.600856066 CEST	49363	53	192.168.2.4	1.1.1.1
May 22, 2024 19:59:03.613785028 CEST	53	60538	1.1.1.1	192.168.2.4
May 22, 2024 19:59:03.620034933 CEST	53	49363	1.1.1.1	192.168.2.4
May 22, 2024 19:59:03.959328890 CEST	51911	53	192.168.2.4	1.1.1.1
May 22, 2024 19:59:03.968904972 CEST	53	51911	1.1.1.1	192.168.2.4
May 22, 2024 19:59:04.104773998 CEST	51089	53	192.168.2.4	1.1.1.1
May 22, 2024 19:59:04.120307922 CEST	53	51089	1.1.1.1	192.168.2.4
May 22, 2024 19:59:05.847842932 CEST	51646	53	192.168.2.4	1.1.1.1
May 22, 2024 19:59:05.859285116 CEST	53	51646	1.1.1.1	192.168.2.4
May 22, 2024 19:59:05.921664000 CEST	64736	53	192.168.2.4	1.1.1.1
May 22, 2024 19:59:06.754445076 CEST	55306	53	192.168.2.4	1.1.1.1
May 22, 2024 19:59:06.764173985 CEST	53	55306	1.1.1.1	192.168.2.4
May 22, 2024 19:59:07.430291891 CEST	61789	53	192.168.2.4	1.1.1.1
May 22, 2024 19:59:07.454694986 CEST	53	61789	1.1.1.1	192.168.2.4
May 22, 2024 19:59:07.543016911 CEST	63961	53	192.168.2.4	1.1.1.1
May 22, 2024 19:59:07.578639030 CEST	53	63961	1.1.1.1	192.168.2.4
May 22, 2024 19:59:11.157234907 CEST	52450	53	192.168.2.4	1.1.1.1
May 22, 2024 19:59:11.169538021 CEST	53	52450	1.1.1.1	192.168.2.4
May 22, 2024 19:59:13.109158039 CEST	54758	53	192.168.2.4	1.1.1.1
May 22, 2024 19:59:16.029033899 CEST	59442	53	192.168.2.4	1.1.1.1
May 22, 2024 19:59:22.146192074 CEST	52401	53	192.168.2.4	1.1.1.1
May 22, 2024 19:59:22.160260916 CEST	53	52401	1.1.1.1	192.168.2.4
May 22, 2024 19:59:25.089992046 CEST	63087	53	192.168.2.4	1.1.1.1
May 22, 2024 19:59:25.404731035 CEST	53	63087	1.1.1.1	192.168.2.4
May 22, 2024 19:59:27.153191090 CEST	53	49416	1.1.1.1	192.168.2.4
May 22, 2024 19:59:33.627541065 CEST	62442	53	192.168.2.4	1.1.1.1
May 22, 2024 19:59:33.641930103 CEST	53	62442	1.1.1.1	192.168.2.4
May 22, 2024 19:59:37.529558897 CEST	62198	53	192.168.2.4	1.1.1.1
May 22, 2024 19:59:38.176827908 CEST	49919	53	192.168.2.4	1.1.1.1
May 22, 2024 19:59:38.265436888 CEST	53	49919	1.1.1.1	192.168.2.4
May 22, 2024 19:59:38.545218945 CEST	62198	53	192.168.2.4	1.1.1.1
May 22, 2024 19:59:39.548558950 CEST	62198	53	192.168.2.4	1.1.1.1
May 22, 2024 19:59:40.866841078 CEST	53	62198	1.1.1.1	192.168.2.4
May 22, 2024 19:59:40.866872072 CEST	53	62198	1.1.1.1	192.168.2.4
May 22, 2024 19:59:40.866899014 CEST	53	62198	1.1.1.1	192.168.2.4

Timestamp	Source IP	Dest IP	Checksum	Code	Type
May 22, 2024 19:58:28.062338114 CEST	192.168.2.4	1.1.1.1	c211	(Port unreachable)	Destination Unreachable
May 22, 2024 19:59:57.236068964 CEST	192.168.2.4	1.1.1.1	c211	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 19:58:28.014327049 CEST	422	OUT	GET / HTTP/1.1 Host: ssa.gov Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 22, 2024 19:58:28.510994911 CEST	105	IN	HTTP/1.0 302 Moved Temporarily Location: https://ssa.gov/ Connection: Keep-Alive Content-Length: 0
May 22, 2024 19:59:13.514230967 CEST	6	OUT	Data Raw: 00 Data Ascii:
May 22, 2024 19:59:58.585081100 CEST	6	OUT	Data Raw: 00 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
2024-05-22 17:58:29 UTC	650	OUT	GET / HTTP/1.1 Host: ssa.gov Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-22 17:58:29 UTC	149	IN	Data Raw: 48 54 54 50 2f 31 2e 30 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 73 61 2e 67 6f 76 2f 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 0d 0a Data Ascii: HTTP/1.0 301 Moved PermanentlyLocation: https://www.ssa.gov/Strict-Transport-Security: max-age=31536000Connection: closeContent-Length: 0

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://ssa.gov

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping344_760704676\LICENSE

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping344_760704676\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping344_760704676\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping344_760704676\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping344_760704676\sets.json

Chrome Cache Entry: 244

Chrome Cache Entry: 245

Chrome Cache Entry: 246

Chrome Cache Entry: 247

Chrome Cache Entry: 248

Chrome Cache Entry: 249

Chrome Cache Entry: 250

Chrome Cache Entry: 251

Chrome Cache Entry: 252

Chrome Cache Entry: 253

Chrome Cache Entry: 254

Chrome Cache Entry: 255

Chrome Cache Entry: 256

Chrome Cache Entry: 257

Chrome Cache Entry: 258

Chrome Cache Entry: 259

Chrome Cache Entry: 260

Chrome Cache Entry: 261

Chrome Cache Entry: 262

Chrome Cache Entry: 263

Chrome Cache Entry: 264

Chrome Cache Entry: 265

Chrome Cache Entry: 266

Windows Analysis Report
http://ssa.gov

Timestamp	Bytes transferred	Direction	Data
2024-05-22 17:58:32 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-22 17:58:32 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=79847 Date: Wed, 22 May 2024 17:58:32 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-05-22 17:58:33 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-22 17:58:33 UTC	534	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=79898 Date: Wed, 22 May 2024 17:58:33 GMT Content-Length: 55 Connection: close X-CID: 2
2024-05-22 17:58:33 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-05-22 17:58:42 UTC	549	OUT	GET /Universal-Federated-Analytics-Min.js HTTP/1.1 Host: dap.digitalgov.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ssa.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-22 17:58:42 UTC	651	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 29521 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Fri, 03 May 2024 21:54:15 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: HZHZvyybCChmsVBApnOj6Ah4np6VgKQd Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 22 May 2024 03:46:27 GMT ETag: "0410cca56d2120b5d0b7143ca5bbe0df" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 db3ad39d2b444e5c9e38affc6638a5cc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 6pB0lNyVeGWol8uQDpY3XknyGWGauiG68atZHTu2dnrQ8ayRmuNwEg== Age: 53517
2024-05-22 17:58:42 UTC	15733	IN	Data Raw: 76 61 72 20 74 4f 62 6a 65 63 74 43 68 65 63 6b 2c 5f 61 6c 6c 6f 77 65 64 51 75 65 72 79 73 74 72 69 6e 67 73 3d 5b 5d 2c 69 73 53 65 61 72 63 68 3d 21 31 2c 6f 43 4f 4e 46 49 47 3d 7b 47 57 54 5f 55 41 49 44 3a 5b 22 55 41 2d 33 33 35 32 33 31 34 35 2d 31 22 5d 2c 47 57 54 5f 47 41 34 49 44 3a 5b 22 47 2d 43 53 4c 4c 34 5a 45 4b 34 4c 22 5d 2c 46 4f 52 43 45 5f 53 53 4c 3a 21 30 2c 41 4e 4f 4e 59 4d 49 5a 45 5f 49 50 3a 21 30 2c 41 47 45 4e 43 59 3a 22 22 2c 53 55 42 5f 41 47 45 4e 43 59 3a 22 22 2c 56 45 52 53 49 4f 4e 3a 22 32 30 32 34 30 35 30 33 20 76 37 2e 30 33 20 2d 20 44 75 61 6c 20 54 72 61 63 6b 69 6e 67 22 2c 53 49 54 45 5f 54 4f 50 49 43 3a 22 22 2c 53 49 54 45 5f 50 4c 41 54 46 4f 52 4d 3a 22 22 2c 53 43 52 49 50 54 5f 53 4f 55 52 43 45 3a Data Ascii: var tObjectCheck,_allowedQuerystrings=[],isSearch=!1,oCONFIG={GWT_UAID:["UA-33523145-1"],GWT_GA4ID:["G-CSLL4ZEK4L"],FORCE_SSL:!0,ANONYMIZE_IP:!0,AGENCY:"",SUB_AGENCY:"",VERSION:"20240503 v7.03 - Dual Tracking",SITE_TOPIC:"",SITE_PLATFORM:"",SCRIPT_SOURCE:
2024-05-22 17:58:42 UTC	13788	IN	Data Raw: 69 67 29 3f 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2b 67 3a 64 3b 61 3d 5f 55 52 49 48 61 6e 64 6c 65 72 28 5f 73 63 72 75 62 62 65 64 55 52 4c 28 63 29 29 3b 66 6f 72 28 63 3d 30 3b 63 3c 6f 43 4f 4e 46 49 47 2e 47 57 54 5f 47 41 34 49 44 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 30 3d 3d 3d 63 7c 7c 30 3c 63 26 26 6f 43 4f 4e 46 49 47 2e 55 53 45 5f 50 41 52 41 4c 4c 45 4c 5f 43 55 53 54 4f 4d 5f 44 49 4d 45 4e 53 49 4f 4e 53 3f 67 74 61 67 28 22 63 6f 6e 66 69 67 22 2c 6f 43 4f 4e 46 49 47 2e 47 57 54 5f 47 41 34 49 44 5b 63 5d 2c 0d 0a 7b 67 72 6f 75 70 73 3a 6f 43 4f 4e 46 49 47 2e 47 41 34 5f 4e 41 4d 45 2b 63 2c 63 6f 6f Data Ascii: ig)?document.location.protocol+"//"+document.location.hostname+g:d;a=_URIHandler(_scrubbedURL(c));for(c=0;c<oCONFIG.GWT_GA4ID.length;c++)0===c\|\|0<c&&oCONFIG.USE_PARALLEL_CUSTOM_DIMENSIONS?gtag("config",oCONFIG.GWT_GA4ID[c],{groups:oCONFIG.GA4_NAME+c,coo

Timestamp	Bytes transferred	Direction	Data
2024-05-22 17:58:44 UTC	853	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-25977386-2&cid=759143496.1716400722&jid=99330978&gjid=173062518&_gid=39265678.1716400722&_u=aGBAiQAjBAAAAGAEK~&z=597917272 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.ssa.gov X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.ssa.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-22 17:58:44 UTC	589	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.ssa.gov Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Wed, 22 May 2024 17:58:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-22 17:58:44 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Timestamp	Bytes transferred	Direction	Data
2024-05-22 17:58:45 UTC	563	OUT	GET /nr-rum-1.260.0.min.js HTTP/1.1 Host: js-agent.newrelic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.ssa.gov sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.ssa.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-22 17:58:45 UTC	801	IN	HTTP/1.1 200 OK Connection: close Content-Length: 50896 x-amz-id-2: bZCMsHyQ4FU8m9cBnqf0LNiZwW7WisHec6DuFRyYdUVjXb+Rj2HGzApVOhMyZiUgIRThGv6m25w= x-amz-request-id: 27D5GKE0SXFSDB8T Last-Modified: Mon, 13 May 2024 21:56:00 GMT ETag: "4a84a8fcc768c33188c67998b4f61db6" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400 x-amz-version-id: PHhaUkNeXeJnjzOBWMAzC.1dTsiS0ABs Content-Type: application/javascript Server: AmazonS3 Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 22 May 2024 17:58:45 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890084-NYC X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=300
2024-05-22 17:58:45 UTC	1378	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6e 72 2d 72 75 6d 2d 31 2e 32 36 30 2e 30 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 3a 4e 52 42 41 2d 31 2e 32 36 30 2e 30 2e 50 52 4f 44 22 5d 3d 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 3a 4e 52 42 41 2d 31 2e 32 36 30 2e 30 2e 50 52 4f 44 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 35 5d 2c 7b 32 35 37 33 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 6e 2e 64 28 65 2c 7b 6f 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 72 3d 6e 28 34 32 34 37 29 2c 69 3d 6e 28 31 31 31 37 29 2c 73 3d 6e 28 38 36 37 33 29 2c 61 3d 6e 28 Data Ascii: /! For license information please see nr-rum-1.260.0.min.js.LICENSE.txt /"use strict";(self["webpackChunk:NRBA-1.260.0.PROD"]=self["webpackChunk:NRBA-1.260.0.PROD"]\|\|[]).push([[75],{2573:(t,e,n)=>{n.d(e,{o:()=>c});var r=n(4247),i=n(1117),s=n(8673),a=n(
2024-05-22 17:58:45 UTC	1378	IN	Data Raw: 3a 65 2c 2e 2e 2e 74 7d 29 2c 21 69 29 72 65 74 75 72 6e 20 76 6f 69 64 28 74 68 69 73 2e 73 74 61 72 74 65 64 26 26 74 68 69 73 2e 73 63 68 65 64 75 6c 65 48 61 72 76 65 73 74 28 29 29 3b 69 3d 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 69 29 3f 69 3a 5b 69 5d 2c 73 2e 70 75 73 68 28 2e 2e 2e 69 29 7d 6c 65 74 20 61 3d 74 3d 3e 74 68 69 73 2e 68 61 72 76 65 73 74 2e 73 65 6e 64 58 28 74 29 3b 73 2e 6c 65 6e 67 74 68 3f 61 3d 74 68 69 73 2e 6f 70 74 73 2e 72 61 77 3f 74 3d 3e 74 68 69 73 2e 68 61 72 76 65 73 74 2e 5f 73 65 6e 64 28 74 29 3a 74 3d 3e 74 68 69 73 2e 68 61 72 76 65 73 74 2e 73 65 6e 64 28 74 29 3a 73 2e 70 75 73 68 28 76 6f 69 64 20 30 Data Ascii: :e,...t}),!i)return void(this.started&&this.scheduleHarvest());i="[object Array]"===Object.prototype.toString.call(i)?i:[i],s.push(...i)}let a=t=>this.harvest.sendX(t);s.length?a=this.opts.raw?t=>this.harvest._send(t):t=>this.harvest.send(t):s.push(void 0
2024-05-22 17:58:45 UTC	1378	IN	Data Raw: 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 7b 7d 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6e 29 2e 69 6e 63 6c 75 64 65 73 28 74 29 3f 22 22 3a 65 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 22 26 22 2b 74 2b 22 3d 22 2b 75 28 65 29 3a 22 22 7d 76 61 72 20 64 3d 6e 28 34 32 34 37 29 3b 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 72 65 74 75 72 6e 22 22 2b 6c 6f 63 61 74 69 6f 6e 7d 76 61 72 20 70 3d 6e 28 32 33 34 29 2c 6d 3d 6e 28 34 32 32 32 29 2c 67 3d 6e 28 33 32 33 39 29 2c 76 3d 6e 28 36 31 34 31 29 3b 66 75 6e 63 74 69 6f 6e 20 79 28 74 2c 65 29 7b 6c 65 74 20 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 Data Ascii: 2&&void 0!==arguments[2]?arguments[2]:{};return Object.keys(n).includes(t)?"":e&&"string"==typeof e?"&"+t+"="+u(e):""}var d=n(4247);function f(){return""+location}var p=n(234),m=n(4222),g=n(3239),v=n(6141);function y(t,e){let n=arguments.length>2&&void 0!
2024-05-22 17:58:45 UTC	1378	IN	Data Raw: 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 3b 63 6f 6e 73 74 7b 70 61 79 6c 6f 61 64 3a 6e 3d 7b 7d 7d 3d 65 3b 72 65 74 75 72 6e 20 79 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 6f 62 66 75 73 63 61 74 6f 72 2e 6f 62 66 75 73 63 61 74 65 53 74 72 69 6e 67 28 2e 2e 2e 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 22 73 74 72 69 6e 67 22 2c 5b 22 65 22 5d 29 2c 74 68 69 73 2e 5f 73 65 6e 64 28 7b 2e 2e 2e 65 2c 70 61 79 6c 6f 61 64 3a 6e 7d 29 7d 5f 73 65 6e 64 28 74 29 7b 6c 65 74 7b 65 6e 64 70 6f 69 6e 74 3a 65 2c 70 61 79 6c 6f 61 64 3a 6e 3d 7b 7d 2c 6f 70 74 73 3a 72 3d 7b 7d 2c 73 75 62 6d 69 74 4d 65 74 68 6f 64 3a 73 2c 63 62 46 69 6e 69 73 68 65 64 3a 61 2c 63 75 73 74 6f 6d 55 72 6c 3a 6f 2c 72 61 77 3a 63 2c 69 6e 63 6c 75 Data Ascii: rguments[0]:{};const{payload:n={}}=e;return y(n,(function(){return t.obfuscator.obfuscateString(...arguments)}),"string",["e"]),this._send({...e,payload:n})}_send(t){let{endpoint:e,payload:n={},opts:r={},submitMethod:s,cbFinished:a,customUrl:o,raw:c,inclu
2024-05-22 17:58:45 UTC	1378	IN	Data Raw: 61 69 6e 22 7d 29 3b 6c 65 74 20 78 3d 73 28 7b 75 72 6c 3a 44 2c 62 6f 64 79 3a 6d 2c 73 79 6e 63 3a 72 2e 75 6e 6c 6f 61 64 26 26 28 77 2e 76 36 7c 7c 77 2e 77 31 29 2c 68 65 61 64 65 72 73 3a 43 7d 29 3b 69 66 28 21 72 2e 75 6e 6c 6f 61 64 26 26 61 26 26 73 3d 3d 3d 64 2e 42 65 29 7b 63 6f 6e 73 74 20 74 3d 74 68 69 73 3b 78 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 65 6e 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 65 3d 7b 73 65 6e 74 3a 30 21 3d 3d 74 68 69 73 2e 73 74 61 74 75 73 2c 73 74 61 74 75 73 3a 74 68 69 73 2e 73 74 61 74 75 73 2c 78 68 72 3a 74 68 69 73 2c 66 75 6c 6c 55 72 6c 3a 44 7d 3b 34 32 39 3d 3d 3d 74 68 69 73 2e 73 74 61 74 75 73 3f 28 65 2e 72 65 74 72 79 3d 21 30 2c 65 2e 64 65 6c 61 Data Ascii: ain"});let x=s({url:D,body:m,sync:r.unload&&(w.v6\|\|w.w1),headers:C});if(!r.unload&&a&&s===d.Be){const t=this;x.addEventListener("loadend",(function(){const e={sent:0!==this.status,status:this.status,xhr:this,fullUrl:D};429===this.status?(e.retry=!0,e.dela
2024-05-22 17:58:45 UTC	1378	IN	Data Raw: 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 3f 74 2e 6c 65 6e 67 74 68 3e 30 3f 74 3a 6e 75 6c 6c 3a 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 74 7c 7c 7b 7d 29 2e 72 65 64 75 63 65 28 28 28 74 2c 65 29 3d 3e 7b 6c 65 74 5b 6e 2c 72 5d 3d 65 3b 72 65 74 75 72 6e 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 72 7c 7c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 72 26 26 72 2e 6c 65 6e 67 74 68 3e 30 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 72 26 26 4f 62 6a 65 63 74 2e 6b 65 79 73 28 72 7c 7c 7b 7d 29 2e 6c 65 6e 67 74 68 3e 30 29 26 26 28 74 5b 6e 5d 3d 72 29 2c 74 7d 29 2c 7b 7d 29 3b 72 65 74 75 72 6e 7b 62 6f 64 79 3a 65 28 74 2e 62 6f 64 79 29 2c 71 73 3a 65 28 74 2e 71 73 29 7d 7d 6f 6e 28 74 2c 65 29 7b 41 72 72 61 Data Ascii: ring"==typeof t?t.length>0?t:null:Object.entries(t\|\|{}).reduce(((t,e)=>{let[n,r]=e;return("number"==typeof r\|\|"string"==typeof r&&r.length>0\|\|"object"==typeof r&&Object.keys(r\|\|{}).length>0)&&(t[n]=r),t}),{});return{body:e(t.body),qs:e(t.qs)}}on(t,e){Arra
2024-05-22 17:58:45 UTC	1378	IN	Data Raw: 28 69 2c 73 29 7d 72 65 74 75 72 6e 20 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 74 29 7b 76 61 72 20 65 3d 5b 5d 2c 6e 3d 28 30 2c 72 2e 4d 74 29 28 74 2c 22 6f 62 66 75 73 63 61 74 65 22 29 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 65 3d 65 2e 63 6f 6e 63 61 74 28 6e 29 2c 28 30 2c 73 2e 56 29 28 29 26 26 65 2e 70 75 73 68 28 6f 29 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 21 31 2c 6e 3d 21 31 2c 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 22 72 65 67 65 78 22 69 6e 20 74 5b 72 5d 3f 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 5b 72 5d 2e 72 65 67 65 78 7c 7c 74 5b 72 5d 2e 72 65 67 65 78 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 7c 7c 28 28 30 2c 61 2e 5a 29 28 27 41 6e 20 6f 62 66 Data Ascii: (i,s)}return n}}function u(t){var e=[],n=(0,r.Mt)(t,"obfuscate")\|\|[];return e=e.concat(n),(0,s.V)()&&e.push(o),e}function l(t){for(var e=!1,n=!1,r=0;r<t.length;r++){"regex"in t[r]?"string"==typeof t[r].regex\|\|t[r].regex instanceof RegExp\|\|((0,a.Z)('An obf
2024-05-22 17:58:45 UTC	1378	IN	Data Raw: 53 48 49 46 54 3a 22 63 6c 73 22 2c 49 4e 54 45 52 41 43 54 49 4f 4e 5f 54 4f 5f 4e 45 58 54 5f 50 41 49 4e 54 3a 22 69 6e 70 22 2c 4c 4f 4e 47 5f 54 41 53 4b 3a 22 6c 74 22 2c 54 49 4d 45 5f 54 4f 5f 46 49 52 53 54 5f 42 59 54 45 3a 22 74 74 66 62 22 7d 7d 2c 36 30 36 39 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 6e 2e 64 28 65 2c 7b 79 3a 28 29 3d 3e 61 7d 29 3b 76 61 72 20 72 3d 6e 28 35 35 32 38 29 2c 69 3d 6e 28 33 38 35 29 2c 73 3d 6e 28 38 31 35 38 29 3b 63 6f 6e 73 74 20 61 3d 6e 65 77 28 6e 28 32 30 39 34 29 2e 55 29 28 73 2e 53 2e 46 49 52 53 54 5f 43 4f 4e 54 45 4e 54 46 55 4c 5f 50 41 49 4e 54 29 3b 69 66 28 69 2e 69 6c 29 69 66 28 69 2e 75 78 29 74 72 79 7b 69 66 28 21 69 2e 69 53 29 7b 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 Data Ascii: SHIFT:"cls",INTERACTION_TO_NEXT_PAINT:"inp",LONG_TASK:"lt",TIME_TO_FIRST_BYTE:"ttfb"}},6069:(t,e,n)=>{n.d(e,{y:()=>a});var r=n(5528),i=n(385),s=n(8158);const a=new(n(2094).U)(s.S.FIRST_CONTENTFUL_PAINT);if(i.il)if(i.ux)try{if(!i.iS){performance.getEntries
2024-05-22 17:58:45 UTC	1378	IN	Data Raw: 3f 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3f 2e 74 69 6d 69 6e 67 7c 7c 7b 7d 29 74 5b 65 5d 3d 4d 61 74 68 2e 6d 61 78 28 72 2e 5f 41 3f 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3f 2e 74 69 6d 69 6e 67 5b 65 5d 2d 72 2e 73 4b 2c 30 29 3b 6f 2e 75 70 64 61 74 65 28 7b 76 61 6c 75 65 3a 74 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 2c 61 74 74 72 73 3a 7b 6e 61 76 69 67 61 74 69 6f 6e 45 6e 74 72 79 3a 74 7d 7d 29 7d 7d 2c 32 30 39 34 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 6e 2e 64 28 65 2c 7b 55 3a 28 29 3d 3e 72 7d 29 3b 63 6c 61 73 73 20 72 7b 23 74 3d 6e 65 77 20 53 65 74 3b 68 69 73 74 6f 72 79 3d 5b 5d 3b 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 2c 65 29 7b 74 68 69 73 2e 6e 61 6d 65 3d 74 2c 74 68 69 73 2e 61 74 74 72 73 3d 7b 7d 2c 74 68 69 73 2e 72 6f 75 6e 64 69 Data Ascii: ?.performance?.timing\|\|{})t[e]=Math.max(r._A?.performance?.timing[e]-r.sK,0);o.update({value:t.responseStart,attrs:{navigationEntry:t}})}},2094:(t,e,n)=>{n.d(e,{U:()=>r});class r{#t=new Set;history=[];constructor(t,e){this.name=t,this.attrs={},this.roundi
2024-05-22 17:58:45 UTC	1378	IN	Data Raw: 64 6f 77 2c 22 52 65 61 63 74 52 65 64 75 78 22 29 7c 7c 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 5b 64 61 74 61 2d 72 65 61 63 74 72 6f 6f 74 5d 2c 20 5b 64 61 74 61 2d 72 65 61 63 74 69 64 5d 22 29 7c 7c 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 62 6f 64 79 20 3e 20 64 69 76 22 29 3b 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 74 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 5b 65 5d 2c 22 5f 72 65 61 63 74 52 6f 6f 74 43 6f 6e 74 61 69 6e 65 72 22 29 29 72 65 74 75 72 6e 21 30 7d 29 28 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 Data Ascii: dow,"ReactRedux")\|\|document.querySelector("[data-reactroot], [data-reactid]")\|\|(()=>{const t=document.querySelectorAll("body > div");for(let e=0;e<t.length;e++)if(Object.prototype.hasOwnProperty.call(t[e],"_reactRootContainer"))return!0})()}catch(t){retur

Timestamp	Bytes transferred	Direction	Data
2024-05-22 17:58:45 UTC	611	OUT	GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-25977386-2&cid=759143496.1716400722&jid=99330978&gjid=173062518&_gid=39265678.1716400722&_u=aGBAiQAjBAAAAGAEK~&z=597917272 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-22 17:58:45 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Wed, 22 May 2024 17:58:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-22 17:58:45 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Timestamp	Bytes transferred	Direction	Data
2024-05-22 17:58:46 UTC	1203	OUT	POST /1/NRJS-469e5c3a62582fe4b9d?a=1222707131&v=1.260.0&to=YVMHNRAAVxICUkcKXFgZJAIWCFYPTHVBFkNXWjkiDRNcPSVeQQ5vcFkXDCAUUA0HVEFODURTCwUHE2kNAlJWC1xaUgATJA5LDCJSRwpcWA%3D%3D&rst=17633&ck=0&s=a4d5481e8957fd05&ref=https://www.ssa.gov/&ptid=ceb4f5484711c147&qt=4&ap=254&be=2783&fe=13428&dc=3388&at=TRQEQ1gaRBw%3D&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1716400707372,%22n%22:0,%22f%22:1377,%22dn%22:1378,%22dne%22:1544,%22c%22:1544,%22s%22:1545,%22ce%22:2232,%22rq%22:2232,%22rp%22:2783,%22rpe%22:3035,%22di%22:6108,%22ds%22:6108,%22de%22:6171,%22dc%22:16209,%22l%22:16209,%22le%22:16211%7D,%22navigation%22:%7B%7D%7D&fp=5488&fcp=5488 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.ssa.gov Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.ssa.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-22 17:58:46 UTC	483	IN	HTTP/1.1 200 Connection: close Content-Length: 151 access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://www.ssa.gov access-control-expose-headers: Date timing-allow-origin: https://www.ssa.gov cross-origin-resource-policy: cross-origin content-type: text/plain server: envoy x-envoy-upstream-service-time: 3 date: Wed, 22 May 2024 17:58:46 GMT x-served-by: cache-nyc-kteb1890073-NYC
2024-05-22 17:58:46 UTC	151	IN	Data Raw: 7b 22 73 74 6e 22 3a 31 2c 22 65 72 72 22 3a 31 2c 22 69 6e 73 22 3a 31 2c 22 73 70 61 22 3a 31 2c 22 73 72 22 3a 30 2c 22 73 72 73 22 3a 30 2c 22 73 74 22 3a 31 2c 22 73 74 73 22 3a 30 2c 22 61 70 70 22 3a 7b 22 61 67 65 6e 74 73 22 3a 5b 7b 22 65 6e 74 69 74 79 47 75 69 64 22 3a 22 4d 6a 6b 30 4d 44 63 79 4e 48 78 43 55 6b 39 58 55 30 56 53 66 45 46 51 55 45 78 4a 51 30 46 55 53 55 39 4f 66 44 45 79 4d 6a 49 33 4e 54 6b 34 4d 7a 41 22 7d 5d 7d 7d Data Ascii: {"stn":1,"err":1,"ins":1,"spa":1,"sr":0,"srs":0,"st":1,"sts":0,"app":{"agents":[{"entityGuid":"Mjk0MDcyNHxCUk9XU0VSfEFQUExJQ0FUSU9OfDEyMjI3NTk4MzA"}]}}

Timestamp	Bytes transferred	Direction	Data
2024-05-22 17:58:46 UTC	961	OUT	GET /1/NRJS-469e5c3a62582fe4b9d?a=1222707131&v=1.260.0&to=YVMHNRAAVxICUkcKXFgZJAIWCFYPTHVBFkNXWjkiDRNcPSVeQQ5vcFkXDCAUUA0HVEFODURTCwUHE2kNAlJWC1xaUgATJA5LDCJSRwpcWA%3D%3D&rst=17633&ck=0&s=a4d5481e8957fd05&ref=https://www.ssa.gov/&ptid=ceb4f5484711c147&qt=4&ap=254&be=2783&fe=13428&dc=3388&at=TRQEQ1gaRBw%3D&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1716400707372,%22n%22:0,%22f%22:1377,%22dn%22:1378,%22dne%22:1544,%22c%22:1544,%22s%22:1545,%22ce%22:2232,%22rq%22:2232,%22rp%22:2783,%22rpe%22:3035,%22di%22:6108,%22ds%22:6108,%22de%22:6171,%22dc%22:16209,%22l%22:16209,%22le%22:16211%7D,%22navigation%22:%7B%7D%7D&fp=5488&fcp=5488 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-22 17:58:46 UTC	438	IN	HTTP/1.1 200 Connection: close Content-Length: 79 access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: Date timing-allow-origin: * cross-origin-resource-policy: cross-origin content-type: image/gif server: envoy x-envoy-upstream-service-time: 1 date: Wed, 22 May 2024 17:58:46 GMT x-served-by: cache-ewr18122-EWR
2024-05-22 17:58:46 UTC	79	IN	Data Raw: 5b 37 31 2c 20 37 33 2c 20 37 30 2c 20 35 36 2c 20 35 37 2c 20 39 37 2c 20 31 2c 20 30 2c 20 31 2c 20 30 2c 20 30 2c 20 30 2c 20 30 2c 20 34 34 2c 20 30 2c 20 30 2c 20 30 2c 20 30 2c 20 31 2c 20 30 2c 20 31 2c 20 30 2c 20 30 2c 20 32 5d Data Ascii: [71, 73, 70, 56, 57, 97, 1, 0, 1, 0, 0, 0, 0, 44, 0, 0, 0, 0, 1, 0, 1, 0, 0, 2]

Timestamp	Bytes transferred	Direction	Data
2024-05-22 17:58:49 UTC	854	OUT	POST /events/1/NRJS-469e5c3a62582fe4b9d?a=1222707131&v=1.260.0&to=YVMHNRAAVxICUkcKXFgZJAIWCFYPTHVBFkNXWjkiDRNcPSVeQQ5vcFkXDCAUUA0HVEFODURTCwUHE2kNAlJWC1xaUgATJA5LDCJSRwpcWA%3D%3D&rst=21163&ck=0&s=a4d5481e8957fd05&ref=https://www.ssa.gov/&ptid=ceb4f5484711c147 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 1075 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.ssa.gov Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.ssa.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-22 17:58:49 UTC	1075	OUT	Data Raw: 62 65 6c 2e 36 3b 65 2c 27 66 70 2c 34 38 67 2c 34 3b 35 2c 27 6e 65 74 2d 65 74 79 70 65 2c 27 33 67 3b 36 2c 27 6e 65 74 2d 72 74 74 2c 34 30 30 2e 3b 36 2c 27 6e 65 74 2d 64 6c 69 6e 6b 2c 31 2e 35 3b 36 2c 27 63 6c 73 2c 30 2e 30 30 34 33 33 37 36 39 39 39 34 39 39 34 35 39 36 3b 65 2c 27 66 63 70 2c 34 38 67 2c 37 3b 36 2c 27 74 69 6d 65 54 6f 46 69 72 73 74 42 79 74 65 2c 32 37 38 33 2e 32 30 30 30 30 30 30 30 30 30 31 31 36 3b 36 2c 27 66 69 72 73 74 42 79 74 65 54 6f 46 43 50 2c 32 37 30 35 2e 36 30 30 30 30 30 30 30 30 30 30 36 3b 35 2c 27 6c 6f 61 64 53 74 61 74 65 2c 27 6c 6f 61 64 69 6e 67 3b 35 2c 31 2c 32 3b 36 2c 33 2c 34 30 30 2e 3b 36 2c 34 2c 31 2e 35 3b 36 2c 35 2c 30 2e 30 30 34 33 33 37 36 39 39 39 34 39 39 34 35 39 36 3b 65 2c 27 6c Data Ascii: bel.6;e,'fp,48g,4;5,'net-etype,'3g;6,'net-rtt,400.;6,'net-dlink,1.5;6,'cls,0.00433769994994596;e,'fcp,48g,7;6,'timeToFirstByte,2783.2000000000116;6,'firstByteToFCP,2705.600000000006;5,'loadState,'loading;5,1,2;6,3,400.;6,4,1.5;6,5,0.00433769994994596;e,'l
2024-05-22 17:58:49 UTC	402	IN	HTTP/1.1 200 Connection: close Content-Length: 24 content-type: image/gif server: envoy access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://www.ssa.gov cross-origin-resource-policy: cross-origin x-envoy-upstream-service-time: 1 date: Wed, 22 May 2024 17:58:49 GMT x-served-by: cache-nyc-kteb1890080-NYC
2024-05-22 17:58:49 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Timestamp	Bytes transferred	Direction	Data
2024-05-22 17:58:49 UTC	855	OUT	POST /jserrors/1/NRJS-469e5c3a62582fe4b9d?a=1222707131&v=1.260.0&to=YVMHNRAAVxICUkcKXFgZJAIWCFYPTHVBFkNXWjkiDRNcPSVeQQ5vcFkXDCAUUA0HVEFODURTCwUHE2kNAlJWC1xaUgATJA5LDCJSRwpcWA%3D%3D&rst=21163&ck=0&s=a4d5481e8957fd05&ref=https://www.ssa.gov/&ptid=ceb4f5484711c147 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 712 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.ssa.gov Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.ssa.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-22 17:58:49 UTC	712	OUT	Data Raw: 7b 22 73 6d 22 3a 5b 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 47 65 6e 65 72 69 63 2f 4c 6f 61 64 65 72 54 79 70 65 2f 6c 69 74 65 2f 44 65 74 65 63 74 65 64 22 7d 2c 22 73 74 61 74 73 22 3a 7b 22 63 22 3a 31 7d 7d 2c 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 47 65 6e 65 72 69 63 2f 44 69 73 74 4d 65 74 68 6f 64 2f 43 44 4e 2f 44 65 74 65 63 74 65 64 22 7d 2c 22 73 74 61 74 73 22 3a 7b 22 63 22 3a 31 7d 7d 2c 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 47 65 6e 65 72 69 63 2f 52 75 6e 74 69 6d 65 2f 42 72 6f 77 73 65 72 2f 44 65 74 65 63 74 65 64 22 7d 2c 22 73 74 61 74 73 22 3a 7b 22 63 22 3a 31 7d 7d 2c 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 46 72 61 6d 65 77 6f 72 6b 2f 4a 71 75 65 72 79 2f Data Ascii: {"sm":[{"params":{"name":"Generic/LoaderType/lite/Detected"},"stats":{"c":1}},{"params":{"name":"Generic/DistMethod/CDN/Detected"},"stats":{"c":1}},{"params":{"name":"Generic/Runtime/Browser/Detected"},"stats":{"c":1}},{"params":{"name":"Framework/Jquery/
2024-05-22 17:58:49 UTC	402	IN	HTTP/1.1 200 Connection: close Content-Length: 24 content-type: image/gif server: envoy access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://www.ssa.gov cross-origin-resource-policy: cross-origin x-envoy-upstream-service-time: 0 date: Wed, 22 May 2024 17:58:49 GMT x-served-by: cache-nyc-kteb1890096-NYC
2024-05-22 17:58:49 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,