Windows Analysis Report
https://www.aia.com.au/en/financial-wellbeing/get-in-touch/initial-chat?id=afgstaff

Overview

General Information

Sample URL:	https://www.aia.com.au/en/financial-wellbeing/get-in-touch/initial-chat?id=afgstaff
Analysis ID:	1545039

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	60%

Signatures

Stores files to the Windows start menu directory

Classification

Signatures

Source: https://www.aia.com.au/en/financial-wellbeing/get-in-touch/initial-chat?id=afgstaff	HTTP Parser: No favicon
Source: https://www.aia.com.au/en/financial-wellbeing/get-in-touch/initial-chat?id=afgstaff	HTTP Parser: No favicon
Source: https://www.aia.com.au/en/financial-wellbeing/get-in-touch/initial-chat?id=afgstaff	HTTP Parser: No favicon
Source: https://www.aia.com.au/en/financial-wellbeing/get-in-touch/initial-chat?id=afgstaff	HTTP Parser: No favicon
Source: https://www.aia.com.au/en/financial-wellbeing/get-in-touch/initial-chat?id=afgstaff	HTTP Parser: No favicon
Source: https://www.aia.com.au/en/financial-wellbeing/get-in-touch/initial-chat?id=afgstaff	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49903 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108

Source: global traffic	DNS traffic detected: DNS query: www.aia.com.au
Source: global traffic	DNS traffic detected: DNS query: assets.adobedtm.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: s7ap1.scene7.com
Source: global traffic	DNS traffic detected: DNS query: au-ax.lemnisk.co
Source: global traffic	DNS traffic detected: DNS query: aiagroup.demdex.net
Source: global traffic	DNS traffic detected: DNS query: d.turn.com
Source: global traffic	DNS traffic detected: DNS query: americaninternationa.tt.omtrdc.net
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: sync.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: cdn25.lemnisk.co
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: aia-fw.convincely.io
Source: global traffic	DNS traffic detected: DNS query: www.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: analytics.tiktok.com
Source: global traffic	DNS traffic detected: DNS query: adobedc.demdex.net
Source: global traffic	DNS traffic detected: DNS query: cdn12.lemnisk.co
Source: global traffic	DNS traffic detected: DNS query: s.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: au-pl.lemnisk.co
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: cdn8.lemnisk.co
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: c.clarity.ms

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49903 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@19/73@104/541

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2216 --field-trial-handle=1924,i,3256230810512495210,3740655543335334204,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.aia.com.au/en/financial-wellbeing/get-in-touch/initial-chat?id=afgstaff"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2216 --field-trial-handle=1924,i,3256230810512495210,3740655543335334204,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Source: Window Recorder

Window detected: More than 3 window changes detected

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Screenshots

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
2.18.64.26	unknown	European Union	6057	AdministracionNacionaldeTelecomunicacionesUY	false
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
66.235.152.225	adobetarget.data.adobedc.net	United States	15224	OMNITUREUS	false
63.140.62.222	unknown	United States	15224	OMNITUREUS	false
142.250.185.142	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
76.76.21.61	aia-fw.convincely.io	United States	16509	AMAZON-02US	false
204.79.197.237	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.184.195	unknown	United States	15169	GOOGLEUS	false
1.1.1.1	unknown	Australia	13335	CLOUDFLARENETUS	false
2.18.64.15	unknown	European Union	6057	AdministracionNacionaldeTelecomunicacionesUY	false
172.217.18.4	www.google.com	United States	15169	GOOGLEUS	false
74.125.71.84	unknown	United States	15169	GOOGLEUS	false
172.217.18.3	unknown	United States	15169	GOOGLEUS	false
104.102.61.242	unknown	United States	16625	AKAMAI-ASUS	false
63.140.62.17	demdex.net.ssl.sc.omtrdc.net	United States	15224	OMNITUREUS	false
79.125.104.96	sync.crwdcntrl.net	Ireland	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
66.235.152.156	unknown	United States	15224	OMNITUREUS	false
142.250.185.195	unknown	United States	15169	GOOGLEUS	false
172.217.16.196	unknown	United States	15169	GOOGLEUS	false
172.217.16.195	unknown	United States	15169	GOOGLEUS	false
142.250.186.46	unknown	United States	15169	GOOGLEUS	false
172.217.18.14	unknown	United States	15169	GOOGLEUS	false
184.28.89.29	unknown	United States	16625	AKAMAI-ASUS	false
34.241.251.121	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
13.107.246.60	s-part-0032.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
216.58.206.36	unknown	United States	15169	GOOGLEUS	false
157.240.0.6	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
216.58.206.35	unknown	United States	15169	GOOGLEUS	false
46.228.164.13	d-ams1.turn.com	United Kingdom	56396	TURNGB	false
142.250.185.164	unknown	United States	15169	GOOGLEUS	false
150.171.28.10	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.74.129.1	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
34.249.23.253	unknown	United States	16509	AMAZON-02US	false
142.250.184.206	unknown	United States	15169	GOOGLEUS	false
104.102.61.94	unknown	United States	16625	AKAMAI-ASUS	false
142.250.74.195	unknown	United States	15169	GOOGLEUS	false
142.250.186.98	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.186.138	unknown	United States	15169	GOOGLEUS	false
172.217.16.202	unknown	United States	15169	GOOGLEUS	false
23.96.124.68	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
76.76.21.123	unknown	United States	16509	AMAZON-02US	false
52.49.181.118	unknown	United States	16509	AMAZON-02US	false
150.171.27.10	ax-0001.ax-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
54.216.198.28	unknown	United States	16509	AMAZON-02US	false
2.16.241.14	unknown	European Union	20940	AKAMAI-ASN1EU	false
2.16.168.7	unknown	European Union	20940	AKAMAI-ASN1EU	false
157.240.251.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false

Private

IP
192.168.2.16

Contacted Domains

Name	IP	Active
star-mini.c10r.facebook.com	157.240.251.35	true
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true
d-ams1.turn.com	46.228.164.13	true
ax-0001.ax-msedge.net	150.171.27.10	true
adobetarget.data.adobedc.net	66.235.152.225	true
scontent.xx.fbcdn.net	157.240.0.6	true
youtube-ui.l.google.com	142.250.185.142	true
sync.crwdcntrl.net	79.125.104.96	true
cm.g.doubleclick.net	142.250.186.98	true
www.google.com	172.217.18.4	true
demdex.net.ssl.sc.omtrdc.net	63.140.62.17	true
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	34.241.251.121	true
aia-fw.convincely.io	76.76.21.61	true
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true
s7ap1.scene7.com	unknown	unknown
www.facebook.com	unknown	unknown
assets.adobedtm.com	unknown	unknown
www.clarity.ms	unknown	unknown
www.aia.com.au	unknown	unknown
aiagroup.demdex.net	unknown	unknown
cdn25.lemnisk.co	unknown	unknown
connect.facebook.net	unknown	unknown
americaninternationa.tt.omtrdc.net	unknown	unknown
au-pl.lemnisk.co	unknown	unknown
cdn8.lemnisk.co	unknown	unknown
d.turn.com	unknown	unknown
s.clarity.ms	unknown	unknown
cdn12.lemnisk.co	unknown	unknown
au-ax.lemnisk.co	unknown	unknown
analytics.tiktok.com	unknown	unknown
adobedc.demdex.net	unknown	unknown
www.youtube.com	unknown	unknown
c.clarity.ms	unknown	unknown
dpm.demdex.net	unknown	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.aia.com.au/en/financial-wellbeing/get-in-touch/initial-chat?id=afgstaff	false		unknown

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 30 00:15:02 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	0124BF6521F9218870B2D4E11D83F0FA	A5DD3B29E49ECFC48EC8A533A7F809498D9292AC	A82CA40BD2BF7D258DEDD8DBBEDD5D1A5915E52C7CE33EF9E549156F13CB791D
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 30 00:15:02 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	627BEA76A9181FFB99DCC7332F01E708	EA436AA66AD5D6B1AB403E7C5E99889AC055C57F	5D53EEE404C8DB884089B693F38688B3EB55923A7CB31FD539E73BB40BCD9810
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	FB6F4C8580C55F3A846B2302576100DD	01562F349B6123C4B99BE9CB5931BF40C6D83250	24D573E7CDD3C474A70A4EB251E0F9601E57ED46D077E64A3F49DF4E539C9F63
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 30 00:15:02 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	533B1DC7DD8658EDE5A85B25CF0EA3D9	74BCAC9919B54DA26E165AF2EFD8A39E27475B91	ED77F5566B6BA0A83F1F17CC5A0130A2B67D6929E6ACB6AF54D894D5D2A4E87D
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 30 00:15:02 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	91DA6DB3D3E7B2086445124F266B013A	FCD34044FBA9327781067E5FB56034354A9BEC17	A4D0FC766B72C297B0BADA639446F21C00325B53544AF284ACD11B7DB5A5C304
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 30 00:15:02 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	774AB0C18AA4F54A9A062336A99C7C45	AADB45EDBFF0CC451E448B277734008EB102406E	DA6266C787AE1B42A9817540D56F8EE4499DB9256925696923EE1A894B328F3E
Chrome Cache Entry: 127	ASCII text	E1E6718E1E924178F1054DE336855A6E	F29602239607E8D909E7743D01AA33FEBD30E387	0D53C3433DDAAA2626DDC12799BEA41F080DAE3932E21F774F709EE68100AEA9
Chrome Cache Entry: 128	ASCII text, with very long lines (351), with CRLF line terminators	6F4AC2FB70EFC8B9CB4C03649D61678A	5CE1EC1CC78E4274A8B6CC5A002ADDE9C5FACCDB	9248B0EBE36E26ACD0D9C0B2CB5532F6A63DC17B44B1962D0D67158DE818AFA9
Chrome Cache Entry: 129	PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced	8B40579EF3565FA25DA727C7152AA22A	503203168055EFC80C32E3213E976743E1FD1D85	915ECC25B8DB6F3735BBD1E6199E5C01AE5454E1C1BD33A447E1A5E621565FE0
Chrome Cache Entry: 131	ASCII text, with very long lines (561)	E733D2CAC0566337507A0508043E9406	5F3952DC9DCE1342BF44CF510A85B43356E2E5BB	635B2814DBECB78302D05C529BF175EF815EF51E7C344769247896504843B731
Chrome Cache Entry: 132	RIFF (little-endian) data, Web/P image	ADBFAE39EC7966EFD7B50C2CAD080BD9	5564CCCF87F407FD915D6F4A6814139218CC9B21	E3E5EB4E3661A75FB3D5C78C37D0AA8F6595B59ADF11B78FF30E41EBD6FC8E8B
Chrome Cache Entry: 133	ASCII text, with very long lines (18298)	87F3F1784464A56B80F04D1C64FAC841	66ED80D249257F5352375A3F12103538963D7CFD	A7EED1CAFB8953D9B44109950C9C7C48BF6DE295975693894A9D36F7AC9D266A
Chrome Cache Entry: 140	ASCII text, with very long lines (5552)	9FAFD004EADAD5607461F02FC68FB044	655417B9D0FED6FEC5DB77F362EC1CCFD02B4CED	F6CD92C9DC28252298EF65008568C2208778EBC226668E6110FB1542F1EC3E36
Chrome Cache Entry: 142	TrueType Font data, 17 tables, 1st "GDEF", 15 names, Microsoft, language 0x409, Digitized data copyright \251 2011, Google Corporation.Open Sans SemiBoldRegular1.10;1ASC;OpenSa	BA5CDE21EEEA0D57AB7EFEFC99596CCE	E256F8391718EF61F253DFB4E95BBEB3C5857AFC	5E8D9E1A89083CD1B0849993FE2F3ACC9AA33B7F439F7E8616872F6897F30684
Chrome Cache Entry: 143	ASCII text, with CRLF line terminators	4EA7D81248E47C552F7CC53E86B8A032	E3606065B78C082F971166E3A778DD66ECF385C4	242B0C71EEE0F826751364A39A9B1564C6F5422F115B840E40BF080AECBAAD22
Chrome Cache Entry: 144	ASCII text	A389CBEF2F21BF21F9776B4609D67DE2	D6DB8311D0B5D48BE6BC2CAFCFD7ED0212B5D5BB	7F22D41C2D3D4E8FD460F36AD04643830931B2F9FF85AEC34BCCB9BD15653853
Chrome Cache Entry: 145	ASCII text, with very long lines (1572)	BA940DD03FE3D55E627DFCA5A3956F81	B8CFD09A2B1160836B8B8BC589C2C342BADA9D99	2713772BDE2D14F97852ECFF46ADDB9AACDD7F30583134FF44B12CB64B5BA301
Chrome Cache Entry: 146	ASCII text	D528345335119C2B79A25A268BA84AFB	E68AF6C67F355CE33216C3235254270132CE6BC0	8E6F84BB6D8F45ADAF1E9A17E0FE2FB0C81A0914333262BB0CB77F85F2785878
Chrome Cache Entry: 147	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel	B426692B62D3BF29C24EF7B09B7CA342	72832B181C77BF1F6D52A8389C2D1C2A242CF904	09F97B254BDE132EB62F4EA499EDC24DEC2B69EB2D424089AEBBDDE40DE6B56C
Chrome Cache Entry: 148	SVG Scalable Vector Graphics image	1790911BAB8DE7FFA6F38B270DC94DD6	521A82C1D0088BFC6B27F88BACAAA8FFB7BC4DD0	086185D729EC473AF1343EC38955D9EE8C9AC1043FAF86E24F98A13525B1CA0D
Chrome Cache Entry: 149	ASCII text	7C005E1D0F54D2AC6234871F88847EC7	C04E3DC02EED67E605C205F8D2E95B95B224C86D	E3A28CE590CE3FCDA3CB4521143DD91EFFD0AD22A3A18350B87B2FEAAFECBA68
Chrome Cache Entry: 151	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 322x544, components 3	89359BB7C0E381B9E9E9E4A5D441BA3D	5544E2273BA86E58D4C5D2A12B0DB721B028F1BE	67428C96C08CBF40B6E80997B57F5DC612FC19AE15F5E3A7F514693DC0D0BC6C
Chrome Cache Entry: 152	Unicode text, UTF-8 text, with very long lines (65533), with no line terminators	2220F5D23D142493C6AB8AFD0FB66385	FC9513471B2E79DE3C753A28606824BFCB78F82B	53D14E1BC85FBCE5710473ADD96F2DA397E579119D53E3D2E911D52BD3DDFB30
Chrome Cache Entry: 155	SVG Scalable Vector Graphics image	F7408982B734C1C12F830461214BAFD8	BFBD463ABBC220B09288685EB3609CEA057AA697	29CC63A646F8100729B4EC360C7B0C7C500B98502CA4BB6326CC27B0A8EA7C1A
Chrome Cache Entry: 157	SVG Scalable Vector Graphics image	139010C559470F9BD2E89A8923807C03	3E590418ECF7CDB42B4863F7D8FCD68B9CD19913	DD886420CC94BC3C3BC148CFE7A31BA602F6E9B1C1612F7B32C2D6DBBCAD0FF9
Chrome Cache Entry: 160	SVG Scalable Vector Graphics image	55C2ED3FC0E3BBE89D3AC730966513A9	A069B20ABA202356E15E2AA1E51E8C28C7E2262F	553E653B3687FAEB034F91890C084251F54137600C3EA5C2CCBA31CE9BD7B5D4
Chrome Cache Entry: 161	ASCII text, with very long lines (65536), with no line terminators	5693E74A87CDFE0DD8CF9E97ABC2EC67	0912A92CEBFC4248B4D561F57B32D18135F9AD59	79951B5BD4D729A2B2F4D380819F2C14BBCF26F21DB56A520189633467766CF4
Chrome Cache Entry: 163	Unicode text, UTF-8 text, with very long lines (65441), with CRLF line terminators	E4B2C9B152E972CACB77265A161CD311	EDD9F41FFFB57C51B7C2B50D4732A61039FF308E	09FA04E84D7038CC32F19BEDCBA454B9E637A35F4DE496E8EC9148C47550F0FC
Chrome Cache Entry: 164	SVG Scalable Vector Graphics image	B73CE2E986BAA7D51D14AD9042F95F39	DE126D4B7CCBE00A3BC517CD814FDF90587E5E1D	17EC5FC239F51E4D21A817A320793EC68DFE6B571E7758E3C66850FA2A5977BF
Chrome Cache Entry: 165	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0	5D4AEB4E5F5EF754E307D7FFAEF688BD	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
Chrome Cache Entry: 166	HTML document, Unicode text, UTF-8 text, with very long lines (6899), with CRLF, LF line terminators	7CE76390E1299C236E21749E5E9DFBD3	BBFBB6A18E6BC17606004D62DB9A40213B9DD03C	2A38F35972394A3DA97D0F7F3FAC7CD5676F1C28075E2ED8AA81875E8EEAAB97
Chrome Cache Entry: 168	Unicode text, UTF-8 text, with very long lines (64006)	4B4005C8EA0293AD18EC674F5E18C648	38D5F6C274A6A4E25E08581A362C530DE01FB6F4	38A0C7A5E00763C64CA44BA37B3E2F24B97F7937C4583F2C9206BDE7A58E4467
Chrome Cache Entry: 169	ASCII text, with very long lines (1468), with no line terminators	159FB4D695985263B7661F511294C6C3	1990C15F6C36DC50D167E943AC2DFF4017A04F80	BED6310AA2E5127F8D3EF6B98B3D2D47509439091C2CE34ED804A5744B45D3A6
Chrome Cache Entry: 170	ASCII text, with very long lines (32731)	277643CC4D3B4A2EB5B3754986215E33	92DD485CF64539E276A2FB573586C16C79D47EB3	23E6F03774758502A4CE7B5A6DA419C6D5A5E58FD808C63900DACF0BFC38BB1E
Chrome Cache Entry: 173	ASCII text, with CRLF line terminators	9B8D5C13B909560429F40EA797398718	AC59205C2988FABCBD66BD728474B1DFC87A36E2	F5F7BF1EE320BF6398F33B1FC835822D47934DD829B8A4AB0D9DBFD107CC930C
Chrome Cache Entry: 175	ASCII text, with very long lines (11524), with no line terminators	B0894736B83C993E314B056D909D7D2D	AA0A71D013D3259B8C020CE159AEA242559143A2	469A7D1DC25EE8FB2548EC2CCBAB5A04EA591B4C6F2EF5D21173A957BDF37933
Chrome Cache Entry: 176	ASCII text	FDA3953E87F68AF282A3769734F32336	1C649050CEDF4CE633C6605B5D4E313753B4F764	2940FA4EF89C6B9B09E76A618F73E7CE7697F970F99499D7461733C09455C164
Chrome Cache Entry: 177	ASCII text, with very long lines (7134)	8D65A8078245F9FCCEDF80B45D07CC29	1D3E621A9BDA97021D8EA6D1437E77FC68007B12	44F1F3580BC0FC2CF6452856139E7E53B01F968135ADECFB7236400B55A1C953
Chrome Cache Entry: 178	ASCII text, with very long lines (347)	4B07E0A5112C27D81D496AE830C5A0A3	9F8C561A597D9F66EDB74B9BFE1A8DBACD60A752	856830166997D402B24E618C68E1F52C02DB3F2A4F2811EFA5286536310F136D
Chrome Cache Entry: 179	ASCII text, with no line terminators	941FC471BB86F44884D46F0E062C2380	9CEB475ED43256D054304C1FCA418FBDF09708CC	A98DC59BF3976CB9B47F0EE459390252B472C28AF8C67CACC7492014D8229BFC
Chrome Cache Entry: 180	PNG image data, 68 x 68, 8-bit/color RGBA, non-interlaced	736919B7CF30E18F9139D3AFA41BF8F9	12CE7EFFBC790F581FEBCF96582E2DA9619ED746	5F2C07943F27993EE43DAB17D4E0E369862CB24761D265008400E15BFB424534
Chrome Cache Entry: 181	ASCII text	701D0A1486F03255B35067AE73EB9986	ED957F0662A30575622BFEC8CB4817AF1C7F0646	2C2B22EC39798D1C703734453BEF9237A1124C37A5D731E8206C1AF0C2FC03DF
Chrome Cache Entry: 183	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced	EF9941290C50CD3866E2BA6B793F010D	4736508C795667DCEA21F8D864233031223B7832	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
Chrome Cache Entry: 184	ASCII text, with no line terminators	9AFB0D35BB088B3036561313BF7CE1F4	C7F3FDE34C537242969FBBD736B5B129611F1694	6E4501CE6F65A1B8671A9D31A8F5AB56DFA4E30AA7A4A971DAA1544AB2EB53C1
Chrome Cache Entry: 185	ASCII text, with very long lines (31685), with no line terminators	2D15113DB3E97FBC03ACAF4615D0CEF8	D77E319FB6E532250BF3DD44F8F282511F9C6D18	D1268E25D95401080F999200A77A8BDFDA99333AEA85BF0F07C6C2F4BE9BCBFF
Chrome Cache Entry: 186	ASCII text, with very long lines (14372), with no line terminators	E31E4ACB22FEE236E968D8B9112B5C67	472BDFD534531A00689C6DCEFA488477AF0A98C8	3D7CD74308488330DED0CD6658826CCF9EDF8DEB74811A09277C7BB7224661C2
Chrome Cache Entry: 187	SVG Scalable Vector Graphics image	2024F24CBC6B763014A176A4C239B60F	0D5F3751B7A6BC8609E8345E92D20F93302A74A7	A3FAEC0B36DF58C99CC1A3B432FA8638059710A5DE5728CDC40E170F2ED86ADA
Chrome Cache Entry: 190	SVG Scalable Vector Graphics image	E2CB71346C4A8D4B2778E0696D48A730	71707D4F5DE8A49EE8FB1ACF21103E6491B49F80	AC46334064A1B04BF82707DA1F5A887B1369452276742632DD35FF234925D88B
Chrome Cache Entry: 192	ASCII text, with no line terminators	EB23A25E6E6B7DE20BE4333877D434F3	1FA957AC6C408DAECE4156E390F92D7DF9931B55	D9F8C6D46E4EBA2E3ED595F803C271902DB0B07679F73BE198C70FB44166B6FD
Chrome Cache Entry: 193	SVG Scalable Vector Graphics image	1935F04C339DA070CC1B86362DD195D0	0B596C423703BC3C44E7D10202BDC2EC2CCE1714	49AB194A4B0D6E98AC0ED1F0BA0684858C8AB91E79A9976A1332A186D63A4D9E
Chrome Cache Entry: 194	ASCII text, with very long lines (52360)	9E849DC9566F5E58E5725108FA04C8A1	F0B8C295D42DD19442D29F1A4BA564B37D38025B	8838B00C4D65FB353A4FC115FB3D5EC4AC665DDDD47131DBCB41799E5CE6B25A
Chrome Cache Entry: 197	SVG Scalable Vector Graphics image	FD785140E222C588445DD6E6A7B7A277	6C442AC3E9BF4724A9B693DD3E37BA639D5D5F08	6C098FBE7744917920E271DDA750616276225B5F03730662E1A9446B993CB8E5
Chrome Cache Entry: 198	ASCII text, with very long lines (649)	7071653D2C5CEBA6B7AE6E807017A614	5CF87FF315E817D6AAE3F487D10166E38ABBDF47	CF50F6724180E3D443CDFA9100A7DD1796DF172964E3A402E87032901136F452
Chrome Cache Entry: 199	TrueType Font data, 17 tables, 1st "GDEF", 13 names, Microsoft, language 0x409, Digitized data copyright \251 2010-2011, Google Corporation.Open SansBold1.10;1ASC;OpenSans-Bold	1025A6E0FB0FA86F17F57CC82A6B9756	1E3704EE48B5FF7E582488EAD87B05249F14DC1C	F7916A37377E38527D4306303CFE89B653B49B0A6B0B05C6B7593F7AB0248DA8
Chrome Cache Entry: 200	TrueType Font data, 17 tables, 1st "GDEF", 13 names, Microsoft, language 0x409, Digitized data copyright \251 2010-2011, Google Corporation.Open SansRegular1.10;1ASC;OpenSans-R	3ED9575DCC488C3E3A5BD66620BDF5A4	BABE8DCE93A3E48B6C3C79720A0C048E88DD1FE7	037236ED4BF58A85F67074C165D308260FD6BE01C86D7DF4E79EA16EB273F8C5
Chrome Cache Entry: 204	Unicode text, UTF-8 text, with very long lines (51384), with no line terminators	6626C1362840EBFC8F48294E8F023E18	4EC0DFB37C3E536C1B5EC04B68C9846FDBAF9EEF	AABC88A6DB8B22022F96CA88E4F0A7BE426ABEF2B35169A71515A2D55246402A
Chrome Cache Entry: 207	ASCII text	2E98AEA6224E52B8C61F213D9BAA8F6B	37D11C58983BC11C1D9D1D85C2E8F33ECF390BCD	E553B6F7806D2439FE1AEDD34434CF3B4C024D7359F8BBBF164732D99A57C711
Chrome Cache Entry: 209	ASCII text, with very long lines (665)	A8B770A5C26F00E747CD6C9182EA26C3	ABE00BBBF79B47C084C72DF25A5BEE655C26014A	FA19BE87F8C5ECD1E0B063C169A7EDAA27A737E881F8021993C8FA72B8E8193A
Chrome Cache Entry: 211	ASCII text, with very long lines (501)	CD5337E3EE99DA05D2473E26631A9809	23A25A1D002E035725FA0CF061520E8B69B3827D	62537C22A68AFD8F5A3C2CC01C47F17AA579F4E8C89236870450209A7B316AD9
Chrome Cache Entry: 216	Unicode text, UTF-8 text, with very long lines (65278)	D0ECAEA99F12C840ADA39DEDC1212EC9	74E131C7D0BB8DB0A8AFE91504133F4D40FA6E45	96E34C2A3F9CEDEBF5D776007C183F5FEF071FE12023154F88C604C0D60BECB8
Chrome Cache Entry: 219	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0	285467176F7FE6BB6A9C6873B3DAD2CC	EA04E4FF5142DDD69307C183DEF721A160E0A64E	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
Chrome Cache Entry: 222	ASCII text, with very long lines (701)	88A5FED5C87B1D3704AB225CFBE7A130	D64243C18FBAA356E4ABAE8414CCC4772D64060B	F8E5F5CE9FF44073CFF24BCD3D2B8AA4E67B67891B14FF929FE4743880FDF82E
Chrome Cache Entry: 226	SVG Scalable Vector Graphics image	A78AFF59A249FB08271DD47F8B06261F	7599C107075DD2CCABA178700697D93A7EB0C55D	82321001518D1E6615619A4D80B5D3972999A16360D6675CB00B76649B6C4E7E
Chrome Cache Entry: 227	HTML document, ASCII text, with CRLF line terminators	AD0BB21E78F0646E33656B67EB01A594	6A55BEE7CD7A149619346237453C827403E2AB24	00F1E56B5A452C5F90C507AAC36E073D700A03E0B2F811FE1BF610AFAC45E47F
Chrome Cache Entry: 228	Web Open Font Format (Version 2), TrueType, length 29288, version 1.0	E5EE5B541A3F3472E918B091C4F56BD2	D683E90395A9BB8894740DDE7B754670D5FC023B	BE89B643D65473F9A33D32ECE3DA2527F83D34C28430978FF0345ACE94E764CE
Chrome Cache Entry: 229	ASCII text, with very long lines (9217)	C04BB3EDB0F1A33B985B3285055FE1FA	0AE234EBC67E016B8A3B5603885A67160493227C	668C6828672FA8600B7A0632CB328EE63A31361BE6734987B04985FCD9D08D4F
Chrome Cache Entry: 230	ASCII text, with very long lines (26205)	75DE79AB28AF502B3E697F98AE9F5BE7	14E39F4ED470073CCB16E4BBE4D8F246605A5B27	D21F3DB9D870A92916CCBF2B499B55CF4DFABB4D28F2EEA9D1DEE0D1B4496CA0
Chrome Cache Entry: 231	SVG Scalable Vector Graphics image	B12774C369E0BA2E27F9F0C17E64E919	37C7FE22B0D321CA61CD05E9B2BE94890DC8E47B	AB2EBAE7ED24BCFE72C22E5D3FBCB87145B18524C49059FFD9E1FDAD5E3AD21A
Chrome Cache Entry: 234	ASCII text, with very long lines (12276), with no line terminators	6C81CF36198C3CE1E0701CAB5B290B9D	BD6A109201EDD0637B97EF4931CD61219A8CE805	48101CFB984D721165B56E4B44C6832C435EAD01F14B8D5A15769B21F320EFBF
Chrome Cache Entry: 235	SVG Scalable Vector Graphics image	D2BCDFC73A5F39852D624ABDAE229694	3F9F82DA82CB2615028B7EE5BE526183D3D7BD54	517FB06052E948C5A298BD5A9AB563F686B850584D239C1CEECCE090653C9EDB
Chrome Cache Entry: 236	ASCII text, with very long lines (65536), with no line terminators	47BEA70318B724B1A99A1D571FF58807	B66FFE704AD2FE84DA8211D6351727568FD68B78	11A188A204934185AB5649A1F838FE771C3D84C928BC8286EF999FB5B8DEDA69
Chrome Cache Entry: 237	SVG Scalable Vector Graphics image	386390C7C46F7120238C11C2175BA73A	5685DE8B62E844A8FCE8766C15EB66C4F1A9B326	64FA901D2F6F0B4D3570AE7187030AFE2722F0D68EBC87A248AC4BBE3A668929
Chrome Cache Entry: 238	ASCII text, with very long lines (26244), with no line terminators	1F05C5630A0F690A8C5402C4F0FA3EA7	DBF4A7576172263C90CC86A3E97E71F4B8D8A723	0EDEF5CD59D6FA2AD931E12286C8A10FCC2DFED5C41C2DEE24DD550A3C276A2A

Source: https://www.aia.com.au/en/financial-wellbeing/get-in-touch/initial-chat?id=afgstaff	HTTP Parser: No favicon
Source: https://www.aia.com.au/en/financial-wellbeing/get-in-touch/initial-chat?id=afgstaff	HTTP Parser: No favicon
Source: https://www.aia.com.au/en/financial-wellbeing/get-in-touch/initial-chat?id=afgstaff	HTTP Parser: No favicon
Source: https://www.aia.com.au/en/financial-wellbeing/get-in-touch/initial-chat?id=afgstaff	HTTP Parser: No favicon
Source: https://www.aia.com.au/en/financial-wellbeing/get-in-touch/initial-chat?id=afgstaff	HTTP Parser: No favicon
Source: https://www.aia.com.au/en/financial-wellbeing/get-in-touch/initial-chat?id=afgstaff	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49903 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108

Source: global traffic	DNS traffic detected: DNS query: www.aia.com.au
Source: global traffic	DNS traffic detected: DNS query: assets.adobedtm.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: s7ap1.scene7.com
Source: global traffic	DNS traffic detected: DNS query: au-ax.lemnisk.co
Source: global traffic	DNS traffic detected: DNS query: aiagroup.demdex.net
Source: global traffic	DNS traffic detected: DNS query: d.turn.com
Source: global traffic	DNS traffic detected: DNS query: americaninternationa.tt.omtrdc.net
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: sync.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: cdn25.lemnisk.co
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: aia-fw.convincely.io
Source: global traffic	DNS traffic detected: DNS query: www.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: analytics.tiktok.com
Source: global traffic	DNS traffic detected: DNS query: adobedc.demdex.net
Source: global traffic	DNS traffic detected: DNS query: cdn12.lemnisk.co
Source: global traffic	DNS traffic detected: DNS query: s.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: au-pl.lemnisk.co
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: cdn8.lemnisk.co
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: c.clarity.ms

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49903 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@19/73@104/541

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2216 --field-trial-handle=1924,i,3256230810512495210,3740655543335334204,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.aia.com.au/en/financial-wellbeing/get-in-touch/initial-chat?id=afgstaff"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2216 --field-trial-handle=1924,i,3256230810512495210,3740655543335334204,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Source: Window Recorder

Window detected: More than 3 window changes detected

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

ID:	1545039
Product:	CloudBasic
Start time:	02:14:30
Start date:	30.10.2024
Cookbook:	defaultwindowsinteractivecookbook.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Windows Analysis Report
https://www.aia.com.au/en/financial-wellbeing/get-in-touch/initial-chat?id=afgstaff

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://www.aia.com.au/en/financial-wellbeing/get-in-touch/initial-chat?id=afgstaff

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://www.aia.com.au/en/financial-wellbeing/get-in-touch/initial-chat?id=afgstaff