Edit tour

Windows Analysis Report
https://dgpopup.app.link/hVidoedgAT

Overview

General Information

Sample URL:	https://dgpopup.app.link/hVidoedgAT
Analysis ID:	1475632
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2708 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3060 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1788,i,14683446140847902835,6872214354368846153,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6432 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://dgpopup.app.link/hVidoedgAT" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6432 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://dgpopup.app.link/hVidoedgAT MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6776 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1976,i,9617755207975311864,8278058680908410500,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /_/PlayStoreUi/cspreport/fine-allowlist HTTP/1.1Host: play.google.comConnection: keep-aliveContent-Length: 2391sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"Content-Type: application/csp-reportsec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*Origin: https://play.google.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: reportReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=XhwPU9MAa4ll8xGRfwcUYoCYBb9yB8fBOSAuqc5WcBeZJYy0Aio41uLV3SBiDJk84xQIuelHSDssmtj-OWvNOtmDo_0GeozYWLofs7U__ufIUAtuujZR8-k0RHLuofmkShFg-21JorkNjrITHOU_Y1BwJPWVpQRU4uoTMeDjgfM

Source: https://dgpopup.app.link/hVidoedgAT	HTTP Parser: No favicon
Source: https://apps.apple.com/us/app/double-good/id1401184723	HTTP Parser: No favicon
Source: https://apps.apple.com/us/app/double-good/id1401184723	HTTP Parser: No favicon
Source: https://apps.apple.com/us/app/double-good/id1401184723	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=invisible&cb=yaxayboz60pm	HTTP Parser: No favicon
Source: https://www.apple.com/	HTTP Parser: No favicon
Source: https://www.apple.com/	HTTP Parser: No favicon
Source: https://www.apple.com/	HTTP Parser: No favicon
Source: https://www.apple.com/	HTTP Parser: No favicon
Source: https://www.apple.com/store	HTTP Parser: No favicon
Source: https://www.apple.com/store	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49750 version: TLS 1.2

Source:	Binary string: oDb=function(a=Infinity){return _.qW(_.bW,a)};_.pDb=function(...a){return oDb(1)(hW(a,jW(a)))}; source: chromecache_302.2.dr
Source:	Binary string: yDb=function({bufferSize:a=Infinity,lH:b=Infinity,JM:c,scheduler:d}){let e,f=0,g;return(h,k)=>{f++;let m;e?m=e.subscribe(k):(e=new _.ADb(a,b,d),m=e.subscribe(k),g=h.subscribe({next(n){e.next(n)},error(n){const p=e;e=g=void 0;p.error(n)},complete(){g=void 0;e.complete()}}),g.closed&&(g=void 0));k.add(()=>{f--;m.unsubscribe();c&&f===0&&g&&(g.unsubscribe(),e=g=void 0)})}};_.zW=function(...a){const b=jW(a);return _.mW((c,d)=>{(b?_.pDb(a,c,b):_.pDb(a,c)).subscribe(d)})}; source: chromecache_302.2.dr

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_333.2.dr	String found in binary or memory: "https://www.facebook.com/Apple", equals www.facebook.com (Facebook)
Source: chromecache_333.2.dr	String found in binary or memory: "https://www.linkedin.com/company/apple", equals www.linkedin.com (Linkedin)
Source: chromecache_333.2.dr	String found in binary or memory: "https://www.twitter.com/Apple" equals www.twitter.com (Twitter)
Source: chromecache_333.2.dr	String found in binary or memory: "https://www.youtube.com/user/Apple", equals www.youtube.com (Youtube)
Source: chromecache_679.2.dr	String found in binary or memory: "https://www.facebook.com/AppStore/" equals www.facebook.com (Facebook)
Source: chromecache_538.2.dr	String found in binary or memory: L.getElementsByTagName("iframe"),oa=R.length,ma=0;ma<oa;ma++)if(!u&&c(R[ma],E.xe)){CI("https://www.youtube.com/iframe_api");u=!0;break}})}}else J(v.vtp_gtmOnSuccess)}var q=["www.youtube.com","www.youtube-nocookie.com"],r={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},t,u=!1;Z.__ytl=n;Z.__ytl.C="ytl";Z.__ytl.isVendorTemplate=!0;Z.__ytl.priorityOverride=0;Z.__ytl.isInfrastructure=!1; equals www.youtube.com (Youtube)
Source: chromecache_223.2.dr, chromecache_538.2.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Vj:function(){e=Cb()},od:function(){d()}}};var lc=ja(["data-gtm-yt-inspected-"]),gC=["www.youtube.com","www.youtube-nocookie.com"],hC,iC=!1; equals www.youtube.com (Youtube)
Source: chromecache_216.2.dr	String found in binary or memory: return a=n===l.CARD_DISPLAY_STYLES.appOfTheDay?_:n===l.CARD_DISPLAY_STYLES.gameOfTheDay?P:n===l.CARD_DISPLAY_STYLES.inAppPurchase?k:this.getTitleKey(e),this.i18n.t(a,{appName:r,storyTitle:i,_disableSafeString:!0})}getOGType(){return i.default.meta.og.type.story}getTwitterSite(){return this.appViewState.isMacAppStoreView?this.i18n.t("WEA.EditorialItemProductPages.Twitter.site.macOs",{_disableSafeString:!0}):super.getTwitterSite(...arguments)}getTwitterTitle(){return this.getOGTitle(...arguments)}getSchemaTags(e){const{product:t}=e.viewModel,r=E(t),[i]=r,n=(0,l.hasShelfDisplay)(i,"collectionLockup"),{lastPublishedDate:a}=t,o={"@type":"Organization",name:"Apple Inc",url:"http://www.apple.com",logo:{"@type":"ImageObject",url:"https://www.apple.com/ac/structured-data/images/knowledge_graph_logo.png"}},s=this.getOGImageTags(e).find((e=>"og:image"===e.name))\|\|{},p={"@context":"http://schema.org",name:this.getSeoTitle(e)??this.getTitle(e),description:this.getSeoDescription(e)??this.getDescription(e),image:s.content,author:o,publisher:o,headline:this.getOGTitle(e),dateModified:a,datePublished:a} equals www.twitter.com (Twitter)
Source: chromecache_529.2.dr	String found in binary or memory: return b}eC.J="internal.enableAutoEventOnTimer";var lc=ja(["data-gtm-yt-inspected-"]),gC=["www.youtube.com","www.youtube-nocookie.com"],hC,iC=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: dgpopup.app.link
Source: global traffic	DNS traffic detected: DNS query: cdn.branch.io
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: calleis.dgpopup.com
Source: global traffic	DNS traffic detected: DNS query: is1-ssl.mzstatic.com
Source: global traffic	DNS traffic detected: DNS query: is2-ssl.mzstatic.com
Source: global traffic	DNS traffic detected: DNS query: is5-ssl.mzstatic.com
Source: global traffic	DNS traffic detected: DNS query: is4-ssl.mzstatic.com
Source: global traffic	DNS traffic detected: DNS query: is3-ssl.mzstatic.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: play-lh.googleusercontent.com

Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50132
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1788,i,14683446140847902835,6872214354368846153,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://dgpopup.app.link/hVidoedgAT"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1976,i,9617755207975311864,8278058680908410500,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1788,i,14683446140847902835,6872214354368846153,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1976,i,9617755207975311864,8278058680908410500,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label	Link
https://dgpopup.app.link/hVidoedgAT	0%	Avira URL Cloud	safe
https://dgpopup.app.link/hVidoedgAT	0%	Virustotal		Browse

IP	Domain	Country	ASN	ASN Name	Malicious
99.86.4.74	dgpopup.app.link	United States	16509	AMAZON-02US	false
216.58.206.54	play-lh.googleusercontent.com	United States	15169	GOOGLEUS	false
18.245.31.99	calleis.dgpopup.com	United States	16509	AMAZON-02US	false
99.86.4.58	unknown	United States	16509	AMAZON-02US	false
142.250.185.142	play.google.com	United States	15169	GOOGLEUS	false
142.250.185.68	unknown	United States	15169	GOOGLEUS	false
108.138.26.116	cdn.branch.io	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false
108.138.26.79	unknown	United States	16509	AMAZON-02US	false

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1475632
Start date and time:	2024-07-18 06:27:15 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 8s
Hypervisor based Inspection enabled:	false
Report type:	light
Cookbook file name:	browseurl.jbs
Sample URL:	https://dgpopup.app.link/hVidoedgAT
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@26/748@34/11
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://apps.apple.com/app/id1401184723 Browse: https://play.google.com/store/apps/details?id=com.doublegood.nativeapp Browse: https://www.apple.com/ Browse: https://www.apple.com/us/shop/goto/store

Input	Output
URL: https://dgpopup.app.link/hVidoedgAT Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form explicitly requesting sensitive information.","The text does not create a sense of urgency or interest by offering to view documents or invoices.","The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism."]}
Title: dgpopup.app.link/hVidoedgAT OCR: Scan to download the app DOUBLE GOOD Double Good Virtual Fundraising Download on Download on App Store Google play
URL: https://apps.apple.com/us/app/double-good/id1401184723 Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form, so there is no request for sensitive information.","The text does not create a sense of urgency, as it is just a description of the Double Good app and its features.","There is no CAPTCHA or any other anti-robot detection mechanism on the webpage."]}
Title: Double Good on the AppStore OCR: S tore iPad iPhone Watch Vision AirPods TV & Home Entertainment Accessories Support App Store Preview Open the Mac App Store to buy and download apps. Double Good #1 Virtual Fundraising App Double Good Designed for iPhone #137 in Productivity iPhone Screenshots Hello The Leaderboard Anastasia Philipps I. Cooch Doni SL312 2. Coopet Donin 9225 3. Larson SL123 4. Giana Bothman Sl,ogs $1,312 Enter an Event Code S, On-tar Joan team'S 6, Ahmad Gouse am raising tho funds tor my Organize an Event Track team at Katella High Makenna Donin a for
URL: https://apps.apple.com/us/app/double-good/id1401184723 Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form explicitly requesting sensitive information such as passwords, email addresses, usernames, phone numbers or credit card numbers (CVV).","The text does not create a sense of urgency by not including phrases like 'Click here to view document', 'To view secured document click here', or 'Open the link to see your invoice'.","The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism."]}
Title: Double Good on the AppStore OCR: S tore iPad iPhone Watch Vision AirPods TV & Home Entertainment Accessories Support App Store Preview Open the Mac App Store to buy and download apps. Double Good #1 Virtual Fundraising App Double Good Designed for iPhone #137 in Productivity 25.9K Ratings iPhone Screenshots Hello The Leaderboard Anastasia Philipps I. Cooch Doni SL312 2. Coopet Donin 9225 3. Larson SL123 4. Giana Bothman Sl,ogs $1,312 Enter an Event Code S, On-tar Joan team'S 6, Ahmad Gouse am raising tho funds tor my Organize an Event Track team at Katella High Makenna Donin a for
URL: https://play.google.com/store/apps/details?id=com.doublegood.nativeapp Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form, as there are no explicit requests for sensitive information such as passwords, email addresses, usernames, phone numbers, or credit card numbers.","The text does not create a sense of urgency, as there are no phrases that encourage immediate action such as 'Click here to view document', 'To view secured document click here', or 'Open the link to see your invoice'.","The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism."]}
Title: Double Good - Apps on Google Play OCR: Google Play O Q Games Apps Movies & TV Books Kids Good Double Double Good Technologies, LLC 4.9 100K* Everyone O 5.08K reviews Downloads Install Share Add to wishlist App support Philipps Similar apps Rubio's sl,sn Rubio's Restaurants, Inc. Tijuana Flats uc.NA Tijuana Flats 4.6 Colgate Connect About this app Colgate-Palmolive Company 4.6 Double Good is the #1 product-based virtual fundraising platform! An app designed to help youth teams and organizations do more ot what they love by selling our premium gourmet popcom to friends and family anywhere in the USA. So, say goodbye to the headaches of traditional fundraising! With Double Good, you
URL: https://play.google.com/store/apps/details?id=com.doublegood.nativeapp Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form, so there is no request for sensitive information.","The text does not create a sense of urgency, it is informative and promotional in nature.","There is no CAPTCHA or any other anti-robot detection mechanism present on the webpage."]}
Title: Double Good - Apps on Google Play OCR: Google Play O Q Games Apps Movies & TV Books Kids Double Good Double Good Technologies, LLC 4.9 100K* Everyone O 5.08K reviews Downloads Install Share Add to wishlist App support Philipps Similar apps Rubio's sl,sn Rubio's Restaurants, Inc. Tijuana Flats Tijuana Flats Colgate Connect About this app Colgate-Palmolive Company Double Good is the #1 product-based virtual fundraising platform! An app designed to help youth teams and organizations do more of what they love by selling our premium gourmet popcorn to friends and family anywhere in the USA. So, say goodbye to the headaches of traditional fundraising! With Double Good, you
URL: https://www.apple.com/ Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form, as there are no explicit requests for sensitive information such as passwords, email addresses, usernames, phone numbers, or credit card numbers.","The text does not create a sense of urgency, as there are no phrases that encourage immediate action such as 'Click here to view document' or 'To view secured document click here'.","The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism.","The text 'You've never seen everything like this before. Learn more' is informative and does not create a sense of urgency."]}
Title: Apple OCR: S tore iPad iPhone Watch Vision AirPods TV & Home Entertainment Accessories Support ii..Q 'Vision Pro fYOu've neverseeryeverything like thi before. Learn more
URL: https://www.apple.com/ Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form, as it does not request any sensitive information such as passwords, email addresses, usernames, phone numbers, or credit card numbers.","The text does not create a sense of urgency, as it does not use phrases such as 'Click here to view document', 'To view secured document click here', or 'Open the link to see your invoice'.","The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism."]}
Title: Apple OCR: S tore iPad iPhone Watch Vision AirPods TV & Home Entertainment Accessories Support 'Vision Pro ou've never seenyverything like this before. Learn more
URL: https://www.apple.com/store Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form, so the value for loginform is set to false.","The text 'Store Mac iPad iPhone Watch Vision AirPods TV & Home Entertainment Accessories Support Store. The best way to buy the Need shopping help? Ask a Specialist Z products you love. Visit an Apple Store Find one near you AirPods iPhone iPad Apple Watch Apple Vision Pro AirTag Apple TV 4K Mac The latest. Take a look at what's new, right now. APPLE VISION PRO Welcome to spatial computing. From $3499 or $291.58/mo. for 12 mo.* ' does not create a sense of urgency, so the value for urgency is set to false.","The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism, so the value for captcha is set to false."]}
Title: Apple Store Online - Apple OCR: S tore Mac iPad iPhone Watch Vision AirPods TV & Home Entertainment Accessories Support Store. The best way to buy the Need shopping help? Ask a Specialist Z products you love. Visit an Apple Store Find one near you AirPods iPhone iPad Apple Watch Apple Vision Pro AirTag Apple TV 4K Mac The latest. Take a look at what's new, right now. APPLE VISION PRO Welcome to spatial computing. From $3499 or $291.58/mo. for 12 mo.*
URL: https://www.apple.com/store Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form, as there are no explicit requests for sensitive information such as passwords, email addresses, usernames, phone numbers, or credit card numbers.","The text does not create a sense of urgency, as there are no phrases that encourage immediate action such as 'Click here to view document' or 'To view secured document click here'.","The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism."]}
Title: Apple Store Online - Apple OCR: S tore Mac iPad iPhone Watch Vision AirPods TV & Home Entertainment Accessories Support Store. The best way to buy the Need shopping help? Ask a Specialist products you love. Visit an Apple Store Find one near you > AirPods iPhone iPad Apple Watch Apple Vision Pro AirTag Apple TV 4K Mac The latest. Take a look at what's new, right now. IPAD PRO IPHONE 15 PRO APPLE VISION PRO Titanium Thinpossible. Welcome to spatial computing. From $999 or $83.25/mo. for 12 mo.* From $999 or $41.62/mo. for 24 mo.* From $3499 or $291.58/mo. for 12 mo.*

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2916)
Category:	downloaded
Size (bytes):	7201
Entropy (8bit):	5.323614922185539
Encrypted:	false
SSDEEP:	192:ri9TDfZmRHx+tvDbXKzB7fk+sI4F1G6q/w:IeW7bXKpfk+sIi1/r
MD5:	CD86F4C84B8F7DF760E5F75A751DCB8D
SHA1:	319D6E15F9A24DE90F6242F034B9333E0435611E
SHA-256:	FFC4C06C650C9C84C44D48EB37A939922FD68651F49CCC456AF1E3DBFA1F65BC
SHA-512:	A8BE715C0BBC34803EF61B93E0F09AB6BEDE07A447EBCD86237ED4D4078B8E9FE3CF853B7738E15F02DD76DE85F946AA251DBF135D3D1DB6B1281E135C457410
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.143.51ab2213649d58cc21f3.js
Preview:	var __ember_auto_import__.!function(){var e,n,t,r,i,o={9605:function(e,n,t){e.exports=function(){var e=_eai_d,n=_eai_r.function r(e){return e&&e.__esModule?e:Object.assign({default:e},e)}window.emberAutoImportDynamic=function(e){return 1===arguments.length?n("_eai_dyn_"+e):n("_eai_dynt_"+e)(Array.prototype.slice.call(arguments,1))},window.emberAutoImportSync=function(e){return n("_eai_sync_"+e)(Array.prototype.slice.call(arguments,1))},e("@amp/affiliate-util",[],(function(){return r(t(2353))})),e("@amp/foundation/-internals/network",[],(function(){return r(t(73624))})),e("@amp/foundation/-internals/storage",[],(function(){return r(t(92141))})),e("@amp/media-api-config-amp-books-realm",[],(function(){return r(t(52215))})),e("@amp/media-api-config-amp-podcasts-realm",[],(function(){return r(t(61384))})),e("@amp/media-api-config-apps-realm",[],(function(){return r(t(61069))})),e("@amp/media-api-legacy",[],(function(){return r(t(89176))})),e("@amp/web-apps-featurekit",[],(function(){return

Source	Detection	Scanner	Label	Link
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#localhost_support	0%	URL Reputation	safe
https://support.google.com	0%	URL Reputation	safe
https://support.google.com/recaptcha#6262736	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://support.google.com/recaptcha/?hl=en#6223828	0%	URL Reputation	safe
https://policies.google.com/terms	0%	URL Reputation	safe
https://www.youtube.com/iframe_api	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect	0%	URL Reputation	safe
https://openjsf.org/	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://www.apache.org/licenses/	0%	URL Reputation	safe
https://schema.org	0%	URL Reputation	safe
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	0%	URL Reputation	safe
http://underscorejs.org/LICENSE	0%	URL Reputation	safe
https://policies.google.com/privacy	0%	URL Reputation	safe
https://npms.io/search?q=ponyfill.	0%	URL Reputation	safe
http://schema.org	0%	URL Reputation	safe
https://www.gstatic.c..?/recaptcha/releases/rKbTvxTxwcw5VqzrtN-ICwWt/recaptcha__.	0%	URL Reputation	safe
http://jedwatson.github.io/classnames	0%	URL Reputation	safe
http://www.apache.org/licenses/LICENSE-2.0	0%	URL Reputation	safe
https://play.google.com/	0%	Avira URL Cloud	safe
https://myaccount.google.com/termsofservice	0%	Avira URL Cloud	safe
https://www.google.com/recaptcha/api.js?trustedtypes=true&render=$	0%	Avira URL Cloud	safe
https://play.google.com/	0%	Virustotal		Browse
https://is2-ssl.mzstatic.com	0%	Avira URL Cloud	safe
https://is1-ssl.mzstatic.com/image/thumb/Purple112/v4/a3/55/1b/a3551b0f-be17-5459-5fe1-80be760c77a1/	0%	Avira URL Cloud	safe
https://www.doublegood.com	0%	Avira URL Cloud	safe
https://www.youtube.com/user/Apple	0%	Avira URL Cloud	safe
https://is2-ssl.mzstatic.com	0%	Virustotal		Browse
about:blank	0%	Avira URL Cloud	safe
https://is1-ssl.mzstatic.com/image/thumb/PurpleSource116/v4/a9/87/84/a98784ca-b930-ca49-3f3a-edd89dd	0%	Avira URL Cloud	safe
https://play-lh.googleusercontent.com/vzhhZ5bXQHq-FXyv9nFxE4JSE8-WuOrcYqaOivoV_HJObVnQZi3R5Eg_pPr08OPIJPM=s64-rw	0%	Avira URL Cloud	safe
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt	0%	Avira URL Cloud	safe
https://myaccount.google.com/termsofservice	0%	Virustotal		Browse
https://www.youtube.com/user/Apple	0%	Virustotal		Browse
https://www.google.com	0%	Avira URL Cloud	safe
https://www.doublegood.com	0%	Virustotal		Browse
https://www.google.com	0%	Virustotal		Browse
https://play.google.com/about/comment-posting-policy?hl=	0%	Avira URL Cloud	safe
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt	0%	Virustotal		Browse
https://play-lh.googleusercontent.com/G4t8bo6LHFmJagnaSIZyd5KT_pXEFHzNP70zsnOAK1cJifUtsd1eXLCI7u06ZRdj2t4=w526-h296-rw	0%	Avira URL Cloud	safe
https://www.linkedin.com/company/apple	0%	Avira URL Cloud	safe
https://play-lh.googleusercontent.com/tr0VoNqq3gBqmraVhqR91OC2LHxGuVd7zOKX5OsH5GMttiksSo0qbiXNmVW8mfQP-GM=w240-h480-rw	0%	Avira URL Cloud	safe
https://github.com/w3c/IntersectionObserver.	0%	Avira URL Cloud	safe
https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/ef/8f/4b/ef8f4b61-961d-a364-92e2-f8c36b8d9c07/	0%	Avira URL Cloud	safe
https://play-lh.googleusercontent.com/Y4yB0iYXDTH3XtWxB9gEbRbV6AifRp1KpYrtLMSm8HGX0sjz3hRDAzbXH43tVBNXtaJU=s64-rw	0%	Avira URL Cloud	safe
https://play-lh.googleusercontent.com/QBx-arbJ1aLnRz_LhY5JmeLRrD1hvljiNZ73MShZdTSKgkPI4EVnySC_Qy6uOPUcTUc=s64-rw	0%	Avira URL Cloud	safe
https://play-lh.googleusercontent.com/a-/ALV-UjUUbkNyE3PaaH17Kuqf51kOJYDi8N58L3xMtxMYteoZ5qaz81_v=s32-rw	0%	Avira URL Cloud	safe
https://www.linkedin.com/company/apple	0%	Virustotal		Browse
https://policies.google.com/terms;target;_blank;class;cOP9Jc	0%	Avira URL Cloud	safe
https://play-lh.googleusercontent.com/12USW7aflgz466ifDehKTnMoAep_VHxDmKJ6jEBoDZWCSefOC-ThRX14Mqe0r8KF9XCzrpMqJts=s20-rw	0%	Avira URL Cloud	safe
https://github.com/w3c/IntersectionObserver.	0%	Virustotal		Browse
https://calleis.dgpopup.com/fundraising-platform/static/fb-share-kernel-chi-town-chow-down.png?o=%7B	0%	Avira URL Cloud	safe
https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/f0/7f/e9/f07fe907-86e5-d725-4d7a-8549f619150b/	0%	Avira URL Cloud	safe
https://is1-ssl.mzstatic.com/image/thumb/PurpleSource116/v4/4b/e2/ef/4be2efef-e4b7-9df0-5ab5-804a537	0%	Avira URL Cloud	safe
https://play-lh.googleusercontent.com/12USW7aflgz466ifDehKTnMoAep_VHxDmKJ6jEBoDZWCSefOC-ThRX14Mqe0r8KF9XCzrpMqJts=s20-rw	0%	Virustotal		Browse
https://support.google.com/googleplay/?p=report_content	0%	Avira URL Cloud	safe
https://www.twitter.com/Apple	0%	Avira URL Cloud	safe
https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/1c/ac/81/1cac81d8-ece3-8d4c-26ed-7e824bb5cc79/	0%	Avira URL Cloud	safe
https://git.io/fxCyr	0%	Avira URL Cloud	safe
https://play.google.com/_/PlayStoreUi/browserinfo?f.sid=6606219330935926145&bl=boq_playuiserver_20240716.01_p0&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=1728&rt=j	0%	Avira URL Cloud	safe
https://support.google.com/googleplay/?p=report_content	0%	Virustotal		Browse
https://git.io/fjule	0%	Avira URL Cloud	safe
https://raw.github.com/emberjs/ember.js/master/LICENSE	0%	Avira URL Cloud	safe
https://deprecations.emberjs.com/v1.x/#toc_binding-style-attributes.	0%	Avira URL Cloud	safe
https://support.google.com/googleplay/?p=remote_install_error	0%	Avira URL Cloud	safe
https://play-lh.googleusercontent.com/N33Lq9SyPb_gs3x--sCVG8ccFr2ocSOO-uIZUrVddoLfXmCnJW_NZmHCrND9gFf5JQw=s64-rw	0%	Avira URL Cloud	safe
https://is5-ssl.mzstatic.com	0%	Avira URL Cloud	safe
https://is1-ssl.mzstatic.com/image/thumb/PurpleSource116/v4/6e/5a/b1/6e5ab123-bce4-0801-c924-99d93b8	0%	Avira URL Cloud	safe
https://play.google.com/log?format=json&hasfast=true	0%	Avira URL Cloud	safe
https://play-lh.googleusercontent.com/EGemoI2NTXmTsBVtJqk8jxF9rh8ApRWfsIMQSt2uE4OcpQqbFu7f7NbTK05lx80nuSijCz7sc3a277R67g=s32-rw	0%	Avira URL Cloud	safe
https://play.google.com/about/play-terms/index.html	0%	Avira URL Cloud	safe
https://cdn.branch.io/branch-assets/1659570097391-og_image.png	0%	Avira URL Cloud	safe
https://is1-ssl.mzstatic.com/image/thumb/PurpleSource116/v4/4f/4b/b0/4f4bb01f-6496-dcee-2780-4384275	0%	Avira URL Cloud	safe
https://www.google.%/ads/ga-audiences	0%	Avira URL Cloud	safe
https://support.google.com/googleplay/answer/10066529	0%	Avira URL Cloud	safe
https://www.doublegood.com/privacy/	0%	Avira URL Cloud	safe
https://play-lh.googleusercontent.com/0apCRgnn7rmfimpMKLWLoxIgZT38zy43viBiFEWrlBz78etDfabSeBuV9JIbxXRlIg=w526-h296-rw	0%	Avira URL Cloud	safe
https://play-lh.googleusercontent.com/20JTuTxzqjXT2g9EWKqGLb8777WozXNGcXu9vl4L47jf7RjpXoI2DK3N8_QNSFEv_yE=w526-h296-rw	0%	Avira URL Cloud	safe
https://payments.sandbox.google.com/payments/v4/js/integrator.js?rk=1	0%	Avira URL Cloud	safe
https://play.google.com	0%	Avira URL Cloud	safe
http://www.wikidata.org/entity/Q312	0%	Avira URL Cloud	safe
https://dgpopup.app.link/favicon.ico	0%	Avira URL Cloud	safe
https://is1-ssl.mzstatic.com	0%	Avira URL Cloud	safe
https://www.goldmansachs.com/terms-and-conditions/Apple-Card-Customer-Agreement.pdf	0%	Avira URL Cloud	safe
https://is1-ssl.mzstatic.com/image/thumb/Purple116/v4/49/4c/bc/494cbcf1-b774-6b4c-dd73-e42982b9ebbc/	0%	Avira URL Cloud	safe
https://cloud.google.com/contact	0%	Avira URL Cloud	safe
https://play.google.com/_/PlayStoreUi/cspreport/fine-allowlist	0%	Avira URL Cloud	safe
https://play-lh.googleusercontent.com/ekBs763SFdG0zWgd3la3tYKqlUmt5VqJqVH-STUbVs1kMRX_TpoY5QMcWT48-yAOwtM=w526-h296-rw	0%	Avira URL Cloud	safe
https://www.wikidata.org/wiki/Q368215	0%	Avira URL Cloud	safe
https://www.google.com/tools/feedback/chat_load.js	0%	Avira URL Cloud	safe
https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/34/c0/7d/34c07d29-920d-8256-85b2-eb06131c97a1/	0%	Avira URL Cloud	safe
https://www.google.com/recaptcha/api2/clr?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0	0%	Avira URL Cloud	safe
https://support.google.com/googleplay/answer/6014972	0%	Avira URL Cloud	safe
https://support.google.com/googleplay?p=eligibility_requirements	0%	Avira URL Cloud	safe
https://play-lh.googleusercontent.com/2lOS0z6kF8J2xo5dJjzcsbsf8MB4DFC1Aw71XwtM_GabHRTsnKevS6fID1kl6XiuZ64=w526-h296-rw	0%	Avira URL Cloud	safe
https://play-lh.googleusercontent.com/a-/ALV-UjWuDlmlBYEPhLxKZUvX-UZkfsKyvu02TgJE-VZhnsYRbq-07T0jYg=s32-rw	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Antivirus Detection	Reputation
play.google.com	142.250.185.142	true	false	0%, Virustotal, Browse	unknown
cdn.branch.io	108.138.26.116	true	false	0%, Virustotal, Browse	unknown
dgpopup.app.link	99.86.4.74	true	false	0%, Virustotal, Browse	unknown
play-lh.googleusercontent.com	216.58.206.54	true	false	0%, Virustotal, Browse	unknown
www.google.com	142.250.186.164	true	false	0%, Virustotal, Browse	unknown
calleis.dgpopup.com	18.245.31.99	true	false	0%, Virustotal, Browse	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	0%, Virustotal, Browse	unknown
is2-ssl.mzstatic.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
is3-ssl.mzstatic.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
is1-ssl.mzstatic.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
is5-ssl.mzstatic.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
is4-ssl.mzstatic.com	unknown	unknown	false	0%, Virustotal, Browse	unknown

Name	Malicious	Antivirus Detection	Reputation
about:blank	false	Avira URL Cloud: safe	unknown
https://play-lh.googleusercontent.com/vzhhZ5bXQHq-FXyv9nFxE4JSE8-WuOrcYqaOivoV_HJObVnQZi3R5Eg_pPr08OPIJPM=s64-rw	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://play-lh.googleusercontent.com/G4t8bo6LHFmJagnaSIZyd5KT_pXEFHzNP70zsnOAK1cJifUtsd1eXLCI7u06ZRdj2t4=w526-h296-rw	false	Avira URL Cloud: safe	unknown
https://play-lh.googleusercontent.com/tr0VoNqq3gBqmraVhqR91OC2LHxGuVd7zOKX5OsH5GMttiksSo0qbiXNmVW8mfQP-GM=w240-h480-rw	false	Avira URL Cloud: safe	unknown
https://play-lh.googleusercontent.com/Y4yB0iYXDTH3XtWxB9gEbRbV6AifRp1KpYrtLMSm8HGX0sjz3hRDAzbXH43tVBNXtaJU=s64-rw	false	Avira URL Cloud: safe	unknown
https://play-lh.googleusercontent.com/QBx-arbJ1aLnRz_LhY5JmeLRrD1hvljiNZ73MShZdTSKgkPI4EVnySC_Qy6uOPUcTUc=s64-rw	false	Avira URL Cloud: safe	unknown
https://play-lh.googleusercontent.com/a-/ALV-UjUUbkNyE3PaaH17Kuqf51kOJYDi8N58L3xMtxMYteoZ5qaz81_v=s32-rw	false	Avira URL Cloud: safe	unknown
https://play-lh.googleusercontent.com/12USW7aflgz466ifDehKTnMoAep_VHxDmKJ6jEBoDZWCSefOC-ThRX14Mqe0r8KF9XCzrpMqJts=s20-rw	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://play.google.com/store/apps/details?id=com.doublegood.nativeapp	false		unknown
https://play.google.com/_/PlayStoreUi/browserinfo?f.sid=6606219330935926145&bl=boq_playuiserver_20240716.01_p0&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=1728&rt=j	false	Avira URL Cloud: safe	unknown
https://play-lh.googleusercontent.com/N33Lq9SyPb_gs3x--sCVG8ccFr2ocSOO-uIZUrVddoLfXmCnJW_NZmHCrND9gFf5JQw=s64-rw	false	Avira URL Cloud: safe	unknown
https://dgpopup.app.link/hVidoedgAT	false		unknown
https://play-lh.googleusercontent.com/EGemoI2NTXmTsBVtJqk8jxF9rh8ApRWfsIMQSt2uE4OcpQqbFu7f7NbTK05lx80nuSijCz7sc3a277R67g=s32-rw	false	Avira URL Cloud: safe	unknown
https://cdn.branch.io/branch-assets/1659570097391-og_image.png	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=invisible&cb=yaxayboz60pm	false		unknown
https://play-lh.googleusercontent.com/0apCRgnn7rmfimpMKLWLoxIgZT38zy43viBiFEWrlBz78etDfabSeBuV9JIbxXRlIg=w526-h296-rw	false	Avira URL Cloud: safe	unknown
https://play-lh.googleusercontent.com/20JTuTxzqjXT2g9EWKqGLb8777WozXNGcXu9vl4L47jf7RjpXoI2DK3N8_QNSFEv_yE=w526-h296-rw	false	Avira URL Cloud: safe	unknown
https://dgpopup.app.link/favicon.ico	false	Avira URL Cloud: safe	unknown
https://play.google.com/_/PlayStoreUi/cspreport/fine-allowlist	false	Avira URL Cloud: safe	unknown
https://play-lh.googleusercontent.com/ekBs763SFdG0zWgd3la3tYKqlUmt5VqJqVH-STUbVs1kMRX_TpoY5QMcWT48-yAOwtM=w526-h296-rw	false	Avira URL Cloud: safe	unknown
https://www.google.com/tools/feedback/chat_load.js	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/clr?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0	false	Avira URL Cloud: safe	unknown
https://play-lh.googleusercontent.com/2lOS0z6kF8J2xo5dJjzcsbsf8MB4DFC1Aw71XwtM_GabHRTsnKevS6fID1kl6XiuZ64=w526-h296-rw	false	Avira URL Cloud: safe	unknown
https://play-lh.googleusercontent.com/a-/ALV-UjWuDlmlBYEPhLxKZUvX-UZkfsKyvu02TgJE-VZhnsYRbq-07T0jYg=s32-rw	false	Avira URL Cloud: safe	unknown
https://www.google.com/js/bg/M0PoUEJl_fnJYmgoY8FD-fJDrK0lRvgMNfUAwPWo__M.js	false	Avira URL Cloud: safe	unknown
https://play-lh.googleusercontent.com/IciOnDFecb5Xt50Q2jlcNC0LPI7LEGxNojroo-s3AozcyS-vDCwtq4fn7u3wZmRna8OewG9PBrWC-i7i=w48-h16-rw	false	Avira URL Cloud: safe	unknown
https://play-lh.googleusercontent.com/CrYvPjqqkd2SYDUA7wPHn63wrHJgZMNavwvFb-_t1DkE8pnmMWbH0EK_3DsXjdCILq4=s64-rw	false	Avira URL Cloud: safe	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_529.2.dr	false	URL Reputation: safe	unknown
https://play.google.com/	chromecache_393.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_459.2.dr	false	URL Reputation: safe	unknown
https://myaccount.google.com/termsofservice	chromecache_556.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://support.google.com	chromecache_302.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/recaptcha/api.js?trustedtypes=true&render=$	chromecache_302.2.dr	false	Avira URL Cloud: safe	unknown
https://is2-ssl.mzstatic.com	chromecache_679.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha#6262736	chromecache_459.2.dr	false	URL Reputation: safe	unknown
https://is1-ssl.mzstatic.com/image/thumb/Purple112/v4/a3/55/1b/a3551b0f-be17-5459-5fe1-80be760c77a1/	chromecache_679.2.dr	false	Avira URL Cloud: safe	unknown
https://www.doublegood.com	chromecache_679.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_428.2.dr, chromecache_624.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/user/Apple	chromecache_333.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_459.2.dr	false	URL Reputation: safe	unknown
https://is1-ssl.mzstatic.com/image/thumb/PurpleSource116/v4/a9/87/84/a98784ca-b930-ca49-3f3a-edd89dd	chromecache_679.2.dr	false	Avira URL Cloud: safe	unknown
https://policies.google.com/terms	chromecache_302.2.dr	false	URL Reputation: safe	unknown
https://www.google.com	chromecache_529.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.youtube.com/iframe_api	chromecache_223.2.dr, chromecache_538.2.dr	false	URL Reputation: safe	unknown
https://play.google.com/about/comment-posting-policy?hl=	chromecache_302.2.dr, chromecache_390.2.dr	false	Avira URL Cloud: safe	unknown
https://www.linkedin.com/company/apple	chromecache_333.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/ef/8f/4b/ef8f4b61-961d-a364-92e2-f8c36b8d9c07/	chromecache_679.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/w3c/IntersectionObserver.	chromecache_311.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha/#6175971	chromecache_459.2.dr	false	URL Reputation: safe	unknown
https://policies.google.com/terms;target;_blank;class;cOP9Jc	chromecache_390.2.dr	false	Avira URL Cloud: safe	unknown
https://calleis.dgpopup.com/fundraising-platform/static/fb-share-kernel-chi-town-chow-down.png?o=%7B	chromecache_219.2.dr	false	Avira URL Cloud: safe	unknown
https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/f0/7f/e9/f07fe907-86e5-d725-4d7a-8549f619150b/	chromecache_679.2.dr	false	Avira URL Cloud: safe	unknown
https://is1-ssl.mzstatic.com/image/thumb/PurpleSource116/v4/4b/e2/ef/4be2efef-e4b7-9df0-5ab5-804a537	chromecache_679.2.dr	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/j/collect	chromecache_624.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/googleplay/?p=report_content	chromecache_390.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://openjsf.org/	chromecache_630.2.dr, chromecache_533.2.dr	false	URL Reputation: safe	unknown
https://www.twitter.com/Apple	chromecache_333.2.dr	false	Avira URL Cloud: safe	unknown
https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/1c/ac/81/1cac81d8-ece3-8d4c-26ed-7e824bb5cc79/	chromecache_679.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha	chromecache_459.2.dr	false	URL Reputation: safe	unknown
https://git.io/fxCyr	chromecache_385.2.dr	false	Avira URL Cloud: safe	unknown
https://git.io/fjule	chromecache_574.2.dr, chromecache_385.2.dr	false	Avira URL Cloud: safe	unknown
https://www.apache.org/licenses/	chromecache_459.2.dr	false	URL Reputation: safe	unknown
https://schema.org	chromecache_679.2.dr, chromecache_390.2.dr	false	URL Reputation: safe	unknown
https://deprecations.emberjs.com/v1.x/#toc_binding-style-attributes.	chromecache_572.2.dr, chromecache_492.2.dr	false	Avira URL Cloud: safe	unknown
https://cct.google/taggy/agent.js	chromecache_223.2.dr, chromecache_538.2.dr, chromecache_529.2.dr	false	URL Reputation: safe	unknown
https://raw.github.com/emberjs/ember.js/master/LICENSE	chromecache_572.2.dr, chromecache_492.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/googleplay/?p=remote_install_error	chromecache_393.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_459.2.dr	false	URL Reputation: safe	unknown
https://is5-ssl.mzstatic.com	chromecache_679.2.dr	false	Avira URL Cloud: safe	unknown
http://underscorejs.org/LICENSE	chromecache_630.2.dr, chromecache_533.2.dr	false	URL Reputation: safe	unknown
https://is1-ssl.mzstatic.com/image/thumb/PurpleSource116/v4/6e/5a/b1/6e5ab123-bce4-0801-c924-99d93b8	chromecache_679.2.dr	false	Avira URL Cloud: safe	unknown
https://play.google.com/log?format=json&hasfast=true	chromecache_459.2.dr	false	Avira URL Cloud: safe	unknown
https://play.google.com/about/play-terms/index.html	chromecache_302.2.dr	false	Avira URL Cloud: safe	unknown
https://is1-ssl.mzstatic.com/image/thumb/PurpleSource116/v4/4f/4b/b0/4f4bb01f-6496-dcee-2780-4384275	chromecache_679.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.%/ads/ga-audiences	chromecache_428.2.dr, chromecache_624.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/googleplay/answer/10066529	chromecache_302.2.dr, chromecache_390.2.dr	false	Avira URL Cloud: safe	unknown
https://www.doublegood.com/privacy/	chromecache_679.2.dr	false	Avira URL Cloud: safe	unknown
https://policies.google.com/privacy	chromecache_302.2.dr, chromecache_390.2.dr, chromecache_556.2.dr	false	URL Reputation: safe	unknown
https://npms.io/search?q=ponyfill.	chromecache_630.2.dr, chromecache_533.2.dr	false	URL Reputation: safe	unknown
https://payments.sandbox.google.com/payments/v4/js/integrator.js?rk=1	chromecache_393.2.dr	false	Avira URL Cloud: safe	unknown
https://play.google.com	chromecache_302.2.dr	false	Avira URL Cloud: safe	unknown
http://www.wikidata.org/entity/Q312	chromecache_333.2.dr	false	Avira URL Cloud: safe	unknown
https://is1-ssl.mzstatic.com	chromecache_679.2.dr	false	Avira URL Cloud: safe	unknown
https://www.goldmansachs.com/terms-and-conditions/Apple-Card-Customer-Agreement.pdf	chromecache_333.2.dr	false	Avira URL Cloud: safe	unknown
https://is1-ssl.mzstatic.com/image/thumb/Purple116/v4/49/4c/bc/494cbcf1-b774-6b4c-dd73-e42982b9ebbc/	chromecache_679.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/contact	chromecache_459.2.dr	false	Avira URL Cloud: safe	unknown
https://www.wikidata.org/wiki/Q368215	chromecache_679.2.dr	false	Avira URL Cloud: safe	unknown
http://schema.org	chromecache_216.2.dr	false	URL Reputation: safe	unknown
https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/34/c0/7d/34c07d29-920d-8256-85b2-eb06131c97a1/	chromecache_679.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/googleplay/answer/6014972	chromecache_393.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/googleplay?p=eligibility_requirements	chromecache_390.2.dr	false	Avira URL Cloud: safe	unknown
https://maps.google.com/?q=	chromecache_302.2.dr, chromecache_390.2.dr	false	Avira URL Cloud: safe	unknown
https://www.gstatic.c..?/recaptcha/releases/rKbTvxTxwcw5VqzrtN-ICwWt/recaptcha__.	chromecache_459.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/recaptcha/api2/	chromecache_459.2.dr, chromecache_683.2.dr	false	Avira URL Cloud: safe	unknown
https://play.google.com/store/apps/details?id=com.apple.android.music&referrer=utm_source=$	chromecache_216.2.dr	false	Avira URL Cloud: safe	unknown
https://is3-ssl.mzstatic.com	chromecache_679.2.dr	false	Avira URL Cloud: safe	unknown
https://twitter.com/AppStore	chromecache_679.2.dr	false	Avira URL Cloud: safe	unknown
http://jedwatson.github.io/classnames	chromecache_586.2.dr, chromecache_248.2.dr, chromecache_476.2.dr, chromecache_249.2.dr, chromecache_233.2.dr	false	URL Reputation: safe	unknown
http://www.apache.org/licenses/LICENSE-2.0	chromecache_302.2.dr	false	URL Reputation: safe	unknown

Source	URL
Screenshot	https://dgpopup.app.link/hVidoedgAT
Screenshot	https://dgpopup.app.link/hVidoedgAT
Screenshot	https://dgpopup.app.link/hVidoedgAT

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 18, 2024 06:28:01.561806917 CEST	49675	443	192.168.2.4	173.222.162.32
Jul 18, 2024 06:28:11.169831991 CEST	49675	443	192.168.2.4	173.222.162.32
Jul 18, 2024 06:28:11.358583927 CEST	49735	443	192.168.2.4	99.86.4.74
Jul 18, 2024 06:28:11.358669043 CEST	443	49735	99.86.4.74	192.168.2.4
Jul 18, 2024 06:28:11.358843088 CEST	49736	443	192.168.2.4	99.86.4.74
Jul 18, 2024 06:28:11.358843088 CEST	49735	443	192.168.2.4	99.86.4.74
Jul 18, 2024 06:28:11.358870029 CEST	443	49736	99.86.4.74	192.168.2.4
Jul 18, 2024 06:28:11.358947992 CEST	49736	443	192.168.2.4	99.86.4.74
Jul 18, 2024 06:28:11.359062910 CEST	49735	443	192.168.2.4	99.86.4.74
Jul 18, 2024 06:28:11.359096050 CEST	443	49735	99.86.4.74	192.168.2.4
Jul 18, 2024 06:28:11.359209061 CEST	49736	443	192.168.2.4	99.86.4.74
Jul 18, 2024 06:28:11.359226942 CEST	443	49736	99.86.4.74	192.168.2.4
Jul 18, 2024 06:28:12.090853930 CEST	443	49735	99.86.4.74	192.168.2.4
Jul 18, 2024 06:28:12.091265917 CEST	49735	443	192.168.2.4	99.86.4.74
Jul 18, 2024 06:28:12.091329098 CEST	443	49735	99.86.4.74	192.168.2.4
Jul 18, 2024 06:28:12.092793941 CEST	443	49735	99.86.4.74	192.168.2.4
Jul 18, 2024 06:28:12.093005896 CEST	49735	443	192.168.2.4	99.86.4.74
Jul 18, 2024 06:28:12.094059944 CEST	49735	443	192.168.2.4	99.86.4.74
Jul 18, 2024 06:28:12.094141960 CEST	49735	443	192.168.2.4	99.86.4.74
Jul 18, 2024 06:28:12.094170094 CEST	443	49735	99.86.4.74	192.168.2.4
Jul 18, 2024 06:28:12.094193935 CEST	443	49735	99.86.4.74	192.168.2.4
Jul 18, 2024 06:28:12.116065979 CEST	443	49736	99.86.4.74	192.168.2.4
Jul 18, 2024 06:28:12.116337061 CEST	49736	443	192.168.2.4	99.86.4.74
Jul 18, 2024 06:28:12.116364002 CEST	443	49736	99.86.4.74	192.168.2.4
Jul 18, 2024 06:28:12.117790937 CEST	443	49736	99.86.4.74	192.168.2.4
Jul 18, 2024 06:28:12.117863894 CEST	49736	443	192.168.2.4	99.86.4.74
Jul 18, 2024 06:28:12.118277073 CEST	49736	443	192.168.2.4	99.86.4.74
Jul 18, 2024 06:28:12.118359089 CEST	443	49736	99.86.4.74	192.168.2.4
Jul 18, 2024 06:28:12.142853022 CEST	49735	443	192.168.2.4	99.86.4.74
Jul 18, 2024 06:28:12.142868996 CEST	443	49735	99.86.4.74	192.168.2.4
Jul 18, 2024 06:28:12.158191919 CEST	49736	443	192.168.2.4	99.86.4.74
Jul 18, 2024 06:28:12.158205032 CEST	443	49736	99.86.4.74	192.168.2.4
Jul 18, 2024 06:28:12.189878941 CEST	49735	443	192.168.2.4	99.86.4.74
Jul 18, 2024 06:28:12.205007076 CEST	49736	443	192.168.2.4	99.86.4.74
Jul 18, 2024 06:28:12.506051064 CEST	443	49735	99.86.4.74	192.168.2.4
Jul 18, 2024 06:28:12.506314039 CEST	443	49735	99.86.4.74	192.168.2.4
Jul 18, 2024 06:28:12.506519079 CEST	49735	443	192.168.2.4	99.86.4.74
Jul 18, 2024 06:28:12.506907940 CEST	49735	443	192.168.2.4	99.86.4.74
Jul 18, 2024 06:28:12.506954908 CEST	443	49735	99.86.4.74	192.168.2.4
Jul 18, 2024 06:28:12.506985903 CEST	49735	443	192.168.2.4	99.86.4.74
Jul 18, 2024 06:28:12.507014036 CEST	49735	443	192.168.2.4	99.86.4.74
Jul 18, 2024 06:28:12.510814905 CEST	49736	443	192.168.2.4	99.86.4.74
Jul 18, 2024 06:28:12.552541018 CEST	443	49736	99.86.4.74	192.168.2.4
Jul 18, 2024 06:28:12.893193007 CEST	443	49736	99.86.4.74	192.168.2.4
Jul 18, 2024 06:28:12.893255949 CEST	443	49736	99.86.4.74	192.168.2.4
Jul 18, 2024 06:28:12.893316984 CEST	49736	443	192.168.2.4	99.86.4.74
Jul 18, 2024 06:28:12.893361092 CEST	443	49736	99.86.4.74	192.168.2.4
Jul 18, 2024 06:28:12.893707991 CEST	443	49736	99.86.4.74	192.168.2.4
Jul 18, 2024 06:28:12.893729925 CEST	443	49736	99.86.4.74	192.168.2.4
Jul 18, 2024 06:28:12.893769979 CEST	49736	443	192.168.2.4	99.86.4.74
Jul 18, 2024 06:28:12.893790007 CEST	443	49736	99.86.4.74	192.168.2.4
Jul 18, 2024 06:28:12.893826008 CEST	49736	443	192.168.2.4	99.86.4.74
Jul 18, 2024 06:28:12.896393061 CEST	443	49736	99.86.4.74	192.168.2.4
Jul 18, 2024 06:28:12.896464109 CEST	49736	443	192.168.2.4	99.86.4.74
Jul 18, 2024 06:28:12.896990061 CEST	49736	443	192.168.2.4	99.86.4.74
Jul 18, 2024 06:28:12.896991014 CEST	49736	443	192.168.2.4	99.86.4.74
Jul 18, 2024 06:28:12.897023916 CEST	443	49736	99.86.4.74	192.168.2.4
Jul 18, 2024 06:28:12.897083044 CEST	49736	443	192.168.2.4	99.86.4.74
Jul 18, 2024 06:28:13.027816057 CEST	49741	443	192.168.2.4	108.138.26.116
Jul 18, 2024 06:28:13.027844906 CEST	443	49741	108.138.26.116	192.168.2.4
Jul 18, 2024 06:28:13.027905941 CEST	49741	443	192.168.2.4	108.138.26.116
Jul 18, 2024 06:28:13.028192997 CEST	49742	443	192.168.2.4	108.138.26.116
Jul 18, 2024 06:28:13.028209925 CEST	443	49742	108.138.26.116	192.168.2.4
Jul 18, 2024 06:28:13.028273106 CEST	49742	443	192.168.2.4	108.138.26.116
Jul 18, 2024 06:28:13.028584957 CEST	49742	443	192.168.2.4	108.138.26.116
Jul 18, 2024 06:28:13.028610945 CEST	443	49742	108.138.26.116	192.168.2.4
Jul 18, 2024 06:28:13.028937101 CEST	49741	443	192.168.2.4	108.138.26.116
Jul 18, 2024 06:28:13.028960943 CEST	443	49741	108.138.26.116	192.168.2.4
Jul 18, 2024 06:28:13.746789932 CEST	443	49741	108.138.26.116	192.168.2.4
Jul 18, 2024 06:28:13.747071028 CEST	49741	443	192.168.2.4	108.138.26.116
Jul 18, 2024 06:28:13.747128010 CEST	443	49741	108.138.26.116	192.168.2.4
Jul 18, 2024 06:28:13.748032093 CEST	443	49741	108.138.26.116	192.168.2.4
Jul 18, 2024 06:28:13.748087883 CEST	49741	443	192.168.2.4	108.138.26.116
Jul 18, 2024 06:28:13.748348951 CEST	443	49742	108.138.26.116	192.168.2.4
Jul 18, 2024 06:28:13.748532057 CEST	49742	443	192.168.2.4	108.138.26.116
Jul 18, 2024 06:28:13.748539925 CEST	443	49742	108.138.26.116	192.168.2.4
Jul 18, 2024 06:28:13.749950886 CEST	443	49742	108.138.26.116	192.168.2.4
Jul 18, 2024 06:28:13.750009060 CEST	49742	443	192.168.2.4	108.138.26.116
Jul 18, 2024 06:28:13.817790031 CEST	49741	443	192.168.2.4	108.138.26.116
Jul 18, 2024 06:28:13.817857027 CEST	443	49741	108.138.26.116	192.168.2.4
Jul 18, 2024 06:28:13.817944050 CEST	49742	443	192.168.2.4	108.138.26.116
Jul 18, 2024 06:28:13.818160057 CEST	49741	443	192.168.2.4	108.138.26.116
Jul 18, 2024 06:28:13.818173885 CEST	443	49741	108.138.26.116	192.168.2.4
Jul 18, 2024 06:28:13.818200111 CEST	49742	443	192.168.2.4	108.138.26.116
Jul 18, 2024 06:28:13.818205118 CEST	443	49742	108.138.26.116	192.168.2.4
Jul 18, 2024 06:28:13.818247080 CEST	443	49742	108.138.26.116	192.168.2.4
Jul 18, 2024 06:28:13.827166080 CEST	49743	443	192.168.2.4	142.250.186.164
Jul 18, 2024 06:28:13.827189922 CEST	443	49743	142.250.186.164	192.168.2.4
Jul 18, 2024 06:28:13.827254057 CEST	49743	443	192.168.2.4	142.250.186.164
Jul 18, 2024 06:28:13.828066111 CEST	49743	443	192.168.2.4	142.250.186.164
Jul 18, 2024 06:28:13.828083038 CEST	443	49743	142.250.186.164	192.168.2.4
Jul 18, 2024 06:28:13.860758066 CEST	49741	443	192.168.2.4	108.138.26.116
Jul 18, 2024 06:28:13.860785007 CEST	49742	443	192.168.2.4	108.138.26.116
Jul 18, 2024 06:28:13.860790968 CEST	443	49742	108.138.26.116	192.168.2.4
Jul 18, 2024 06:28:13.905015945 CEST	49742	443	192.168.2.4	108.138.26.116
Jul 18, 2024 06:28:14.020643950 CEST	443	49741	108.138.26.116	192.168.2.4
Jul 18, 2024 06:28:14.020662069 CEST	443	49741	108.138.26.116	192.168.2.4
Jul 18, 2024 06:28:14.020668983 CEST	443	49741	108.138.26.116	192.168.2.4
Jul 18, 2024 06:28:14.020729065 CEST	443	49741	108.138.26.116	192.168.2.4
Jul 18, 2024 06:28:14.020745039 CEST	49741	443	192.168.2.4	108.138.26.116

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 18, 2024 06:28:09.594181061 CEST	53	53352	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:09.600723982 CEST	53	56205	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:10.636593103 CEST	53	55510	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:11.332231998 CEST	60626	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:11.332398891 CEST	62931	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:11.341414928 CEST	53	62931	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:11.341617107 CEST	53	60626	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:13.004385948 CEST	53	51810	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:13.006246090 CEST	53	62060	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:13.019373894 CEST	54447	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:13.019834042 CEST	60485	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:13.026299953 CEST	53	54447	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:13.026978970 CEST	53	60485	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:13.816906929 CEST	53193	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:13.817187071 CEST	49450	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:13.824244022 CEST	53	53193	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:13.824281931 CEST	53	49450	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:14.073851109 CEST	50644	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:14.074404001 CEST	52221	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:14.103991985 CEST	53	52221	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:14.104021072 CEST	53	50644	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:14.750561953 CEST	58106	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:14.750957966 CEST	57992	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:14.758483887 CEST	53	57992	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:14.758549929 CEST	53	58106	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:17.511583090 CEST	58824	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:17.511840105 CEST	57572	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:17.520951986 CEST	53	57572	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:17.521357059 CEST	53	58824	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:26.243710995 CEST	53603	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:26.243875980 CEST	57863	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:26.244671106 CEST	62157	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:26.244827986 CEST	61104	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:26.276822090 CEST	64692	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:26.277122974 CEST	53261	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:26.277455091 CEST	60265	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:26.277554989 CEST	49164	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:26.317025900 CEST	55282	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:26.317214012 CEST	60550	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:28.086946964 CEST	53	62249	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:28.714914083 CEST	138	138	192.168.2.4	192.168.2.255
Jul 18, 2024 06:28:28.985800028 CEST	51517	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:28.986246109 CEST	63522	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:37.973439932 CEST	52302	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:37.973647118 CEST	55253	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:37.982510090 CEST	53	52302	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:37.982923031 CEST	53	55253	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:38.990736961 CEST	53	64336	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:39.758228064 CEST	53	52865	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:39.820298910 CEST	49894	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:39.820473909 CEST	49556	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:39.827450991 CEST	53	49894	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:39.827775002 CEST	53	49556	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:40.364761114 CEST	53	59130	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:40.682372093 CEST	53	49657	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:40.774131060 CEST	56383	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:40.774287939 CEST	51361	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:40.780956984 CEST	53	56383	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:40.784193039 CEST	53	51361	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:42.437562943 CEST	53	56517	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:44.880934954 CEST	53	55010	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:45.596314907 CEST	53	61417	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:45.596327066 CEST	53	53729	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:46.826802015 CEST	61657	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:46.827599049 CEST	58086	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:46.840550900 CEST	53	61657	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:46.840950012 CEST	53	58086	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:46.977710962 CEST	53	61561	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:47.113276958 CEST	53	65443	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:47.116709948 CEST	53	65186	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:48.269136906 CEST	53	51752	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:50.084125042 CEST	62507	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:50.084427118 CEST	59436	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:50.090881109 CEST	53	62507	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:50.091013908 CEST	53	59436	1.1.1.1	192.168.2.4
Jul 18, 2024 06:29:08.740142107 CEST	53	51316	1.1.1.1	192.168.2.4
Jul 18, 2024 06:29:09.282650948 CEST	53	49226	1.1.1.1	192.168.2.4
Jul 18, 2024 06:29:09.586404085 CEST	53	60517	1.1.1.1	192.168.2.4
Jul 18, 2024 06:29:37.694339991 CEST	53	61410	1.1.1.1	192.168.2.4

Target ID:	0
Start time:	00:28:04
Start date:	18/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Target ID:	2
Start time:	00:28:07
Start date:	18/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1788,i,14683446140847902835,6872214354368846153,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Target ID:	3
Start time:	00:28:10
Start date:	18/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://dgpopup.app.link/hVidoedgAT"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://dgpopup.app.link/hVidoedgAT

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

QR Codes

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 211

Chrome Cache Entry: 212

Chrome Cache Entry: 213

Chrome Cache Entry: 214

Chrome Cache Entry: 215

Chrome Cache Entry: 216

Chrome Cache Entry: 217

Chrome Cache Entry: 218

Chrome Cache Entry: 219

Chrome Cache Entry: 220

Chrome Cache Entry: 221

Chrome Cache Entry: 222

Chrome Cache Entry: 223

Chrome Cache Entry: 224

Chrome Cache Entry: 225

Chrome Cache Entry: 226

Chrome Cache Entry: 227

Chrome Cache Entry: 228

Chrome Cache Entry: 229

Chrome Cache Entry: 230

Chrome Cache Entry: 231

Chrome Cache Entry: 232

Chrome Cache Entry: 233

Chrome Cache Entry: 234

Chrome Cache Entry: 235

Chrome Cache Entry: 236

Chrome Cache Entry: 237

Windows Analysis Report
https://dgpopup.app.link/hVidoedgAT

Target ID:	4
Start time:	00:28:15
Start date:	18/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://dgpopup.app.link/hVidoedgAT
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre