Edit tour

Windows Analysis Report
https://www.pspad.com/en/

Overview

General Information

Sample URL:	https://www.pspad.com/en/
Analysis ID:	1501287
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Connects to several IPs in different countries

HTML page contains hidden javascript code

HTML page contains string obfuscation

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5376 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3944 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2324 --field-trial-handle=2268,i,7343474625383344028,1084434577641272083,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7088 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.pspad.com/en/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /el/AGSKWxWWLtHg_vwaO4rfdKWgA-eulxs-pGQblMOtJf_S8v5jpQ29GrTdoQmu9rvydeXE6sHR5gXQm8nmeapVcMDdoFiLcV8hzJ0HSPB2xM5VhN-vD490T2dYTgs9br8parDfeX-iyzhY3Q== HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-aliveContent-Length: 247sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: */*Origin: https://forum.pspad.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://forum.pspad.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://googleads.g.doubleclick.net/pagead/html/r20240827/r20110914/zrt_lookup_fy2021.html	HTTP Parser: Found new string: script (function() {var u = 'https://googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-AroHIpW8_eFnExlQb8CyUa1_wOBQyAivunGzGpqN3CTXp-F49S2lQs0tIbSsXdKem0RuwKduMLyun4rrA0L1BB7zJZ1SxQy_3VqgrFLrj0bCWpOhwIDWb5T59iVcLULgdngW-gtAZjre5wRRUxiZcQPDecQCqleR6QMvdZnoYfIEARextAwS6yo3LEBqP6sB8abPbmLw4MXt0-SgTGdK0aIv-CWhtVw9-awng2SQLv2NhiDlA&cry=1&dbm_d=AKAmf-AIWL2uFkCgg5fg4a04BLQbV_ITjAo_SR8QtONy7j5267zaOe5ImuecPI-8ayBarENfJF9o9UspE8MCgayQeqn6a3T7iFQNYOCVUdNdUgXLXeJ6Ax-duvUKxtELquMJfNkX-PG7D5EpNzKDvF9RPOC5M8a50jb_Wyvsiws44S-f9RurbVSbwZ5TDKgtEKh_1s69avLtlAtk_SQQMPOggVTUc8MgZSEF9S-jYCH06QxFlAS9Q84yrdlTQ-F9NA-2wNJ8Ql8d674Fqv5N8PahO9RWTUroTjWfbIPIJ-XnVmT95sVN0hYiGt7tKONdwIH80OkQuRXMUbHLITsMIVjEDRoriOItdCQSI1XndYKw-oJcH5wDvp6CuvRmw9_ld-le9C807qio2F2ICzN5EYeIwx5s3uHR-TwYi-JACa-YQdNAkyyxnF0S-p3xQL5ZK4mMAuGNu11OP_qV2UZxx-EH8o5nN8HIbsPvH2Q1eeI875VxMgrdWy88LoglAEwRzy9xvvn8yO9vYfyLq7tiOmeI5OC6DBnOq9qVrXXqK_N-SGO9WgVNcDzjZVPt8qher8W1M4_zxSj4Snxh9EcsDuBngObq5MEc0npa-0GKcCrOF7tEDtzhpr9PsN29H4cpO0UA00LGbW1zn2jqIPviOST0iNSEopIV_UB49dLZ36VUnYIui78WG...
Source: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2024136896076245&output=html&h=90&slotname=6831181953&adk=299408617&adf=1239913589&pi=t.ma~as.6831181953&w=728&abgtt=3&lmt=1724943949&format=728x90&url=https%3A%2F%2Fforum.pspad.com%2Fread.php%3F6%2C78835&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1724943946911&bpp=6&bdt=1438&idt=2711&shv=r20240827&mjsv=m202408270101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&correlator=583282072109&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=366&ady=681&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31086545%2C44798934%2C95332928%2C95331833%2C95338229%2C95340753%2C95341533%2C31086568&oid=2&pvsid=555663540525854&tmod=1228248810&uas=0&nvt=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rs...	HTTP Parser: Found new string: script (function() {var u = 'https://googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-DVg2Q9QaJHeM7BWgtK_Uz9G6T0q4uvzgQtKTtMADE4-WKjLnbLg1wiX6TemAzmKV5eHTz2ezy9MsAZtzkJC9aL0Ic-6wdrnVmH7Sy_RXGJeB5tplo_466Lc7zPEPcm0dTfW2PslPJ1xb2BtxU1yIdpUXmsZmVnXANsCPFcQe4NuEFlo3JFxQU8ke5siYpIi_lF1l1j4lHXT5j-HwqF14NtEqbpJaOIx3sRjJnyrp0A5Fg_dIs&cry=1&dbm_d=AKAmf-A5KFUWfip_XUDIxrXAMCs4EIpef-tJxgg4y8UQ0Yl3Wg7PvRg6nDWEoTbDBdtigPaDJ5Eb80ZyvXSgg9rg-zfaFmNUeDXDPASOLgK61sEb-5zxw0BV9jklrLpy5NZ9Y3LtnJlmwVvnDR1E7J9stgtHSU_RW19IqnFjl8iIdc5tQwfDjjz-EDEP5t1WbbO7DN7dtGsf8vni8j2fTzDSHYnkk0bqSxuZfzfP7BEonKxGCHSUDLGX5me_FDHEpZFdzPNmBfdFLAT1GZZ-Ae3kfnATH2rewJAU1U4YmBjP0lthAmMSow6px0p37hjtNyJrpqZ1jm8KlCjDtTqQuCvU3rtlyLPjnJVB9tJ_XIA61ncQy3ZRZ-O4k6Ahq87XKJcMdsizE0yitFlZScq_NWUUdzAGye_nZDPrw3rWE6f6S07SVRraDy9cM4ir6Y_0jQLwXYO0q4p2cZt2po5bmHSMZYKmGYfuUCnWpD5a9XUmNFC82WeQAwHw1lXPNEAWUzh4nxmHnirWxHlFVy8jomegOLp-QN-mfVghP3B2bjKcrAGSSTlaOs2itjRvQrETCcZ-RtT14vK022KegkYqUEGpZ18gEzB7W2_WtqyuG9nYohw2yhyakeonvOErbjPhO-4vZbvtqzKuov8qNXW2CWhQnW42OybodIfOPq-GM0d9n_XkNfCNh...

Source: https://www.pspad.com/en/	HTTP Parser: No favicon
Source: https://www.pspad.com/en/	HTTP Parser: No favicon
Source: https://forum.pspad.com/read.php?6,78835	HTTP Parser: No favicon
Source: https://forum.pspad.com/read.php?6,78835	HTTP Parser: No favicon
Source: https://forum.pspad.com/read.php?6,78835	HTTP Parser: No favicon
Source: https://forum.pspad.com/read.php?6,78835#google_vignette	HTTP Parser: No favicon
Source: https://forum.pspad.com/read.php?6,78835#google_vignette	HTTP Parser: No favicon
Source: https://forum.pspad.com/read.php?6,78835#google_vignette	HTTP Parser: No favicon
Source: https://forum.pspad.com/read.php?6,78835#google_vignette	HTTP Parser: No favicon
Source: https://forum.pspad.com/read.php?6,78835#google_vignette	HTTP Parser: No favicon
Source: https://www.jared.com/engagement-rings?cid=DIS-Jared-DV360-Agnostic-Retargeting-Corp-TRF-FY25_0804_J_BridalGeneralBridal_Native_NoPromotion_DIS_GM_2000x1047_MF-Evergreen-ContentPg-32425113-0-0	HTTP Parser: No favicon
Source: https://www.pspad.com/en/whatsnew.htm	HTTP Parser: No favicon
Source: https://www.pspad.com/en/whatsnew.htm	HTTP Parser: No favicon
Source: https://www.pspad.com/en/whatsnew.htm	HTTP Parser: No favicon
Source: https://www.pspad.com/en/whatsnew.htm	HTTP Parser: No favicon
Source: https://www.pspad.com/en/whatsnew.htm	HTTP Parser: No favicon
Source: https://www.pspad.com/en/whatsnew.htm	HTTP Parser: No favicon
Source: https://forum.pspad.com/	HTTP Parser: No favicon
Source: https://forum.pspad.com/	HTTP Parser: No favicon
Source: https://forum.pspad.com/	HTTP Parser: No favicon
Source: https://forum.pspad.com/	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.5:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.5:50369 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50

Source: chromecache_292.2.dr, chromecache_376.2.dr	String found in binary or memory: Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Vj:function(){e=Bb()},md:function(){d()}}};var hc=ja(["data-gtm-yt-inspected-"]),tC=["www.youtube.com","www.youtube-nocookie.com"],uC,vC=!1; equals www.youtube.com (Youtube)
Source: chromecache_603.2.dr, chromecache_515.2.dr, chromecache_348.2.dr	String found in binary or memory: e">WebDesign PAY & SOFT</a>, code <a href="https://www.linkedin.com/in/pdvorak/" title="Petr Dvo equals www.linkedin.com (Linkedin)
Source: chromecache_292.2.dr, chromecache_376.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={Yg:e,Wg:f,Xg:g,Ih:k,Jh:m,Ee:n,Cb:b},q=E.YT;if(q)return q.ready&&q.ready(d),b;var r=E.onYouTubeIframeAPIReady;E.onYouTubeIframeAPIReady=function(){r&&r();d()};G(function(){for(var t=F.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(EC(w,"iframe_api")\|\|EC(w,"player_api"))return b}for(var x=F.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!vC&&CC(x[A],p.Ee))return xc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.pspad.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ep1.adtrafficquality.google
Source: global traffic	DNS traffic detected: DNS query: ep2.adtrafficquality.google
Source: global traffic	DNS traffic detected: DNS query: forum.pspad.com
Source: global traffic	DNS traffic detected: DNS query: toplist.cz
Source: global traffic	DNS traffic detected: DNS query: fw.adsafeprotected.com
Source: global traffic	DNS traffic detected: DNS query: um.simpli.fi
Source: global traffic	DNS traffic detected: DNS query: match.prod.bidr.io
Source: global traffic	DNS traffic detected: DNS query: b1sync.zemanta.com
Source: global traffic	DNS traffic detected: DNS query: sync.srv.stackadapt.com
Source: global traffic	DNS traffic detected: DNS query: rtb2-useast.e-volution.ai
Source: global traffic	DNS traffic detected: DNS query: sync-dmp.aura-dsp.com
Source: global traffic	DNS traffic detected: DNS query: analytics.pangle-ads.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: fundingchoicesmessages.google.com
Source: global traffic	DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: dt.adsafeprotected.com
Source: global traffic	DNS traffic detected: DNS query: static.adsafeprotected.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: dsp-cookie.adfarm1.adition.com
Source: global traffic	DNS traffic detected: DNS query: pr-bh.ybp.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: a.rfihub.com
Source: global traffic	DNS traffic detected: DNS query: www.temu.com
Source: global traffic	DNS traffic detected: DNS query: syndicatedsearch.goog
Source: global traffic	DNS traffic detected: DNS query: bid.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: s0.2mdn.net
Source: global traffic	DNS traffic detected: DNS query: pm.w55c.net
Source: global traffic	DNS traffic detected: DNS query: sync.ipredictive.com
Source: global traffic	DNS traffic detected: DNS query: creativecdn.com
Source: global traffic	DNS traffic detected: DNS query: t.adx.opera.com
Source: global traffic	DNS traffic detected: DNS query: sync.teads.tv
Source: global traffic	DNS traffic detected: DNS query: gtrace.mediago.io
Source: global traffic	DNS traffic detected: DNS query: a.c.appier.net
Source: global traffic	DNS traffic detected: DNS query: ums.acuityplatform.com
Source: global traffic	DNS traffic detected: DNS query: dis.criteo.com
Source: global traffic	DNS traffic detected: DNS query: dsp.adkernel.com
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ad.turn.com
Source: global traffic	DNS traffic detected: DNS query: tr.blismedia.com
Source: global traffic	DNS traffic detected: DNS query: ads.travelaudience.com
Source: global traffic	DNS traffic detected: DNS query: match.adsby.bidtheatre.com
Source: global traffic	DNS traffic detected: DNS query: widget.us.criteo.com
Source: global traffic	DNS traffic detected: DNS query: r.turn.com
Source: global traffic	DNS traffic detected: DNS query: www.jared.com
Source: global traffic	DNS traffic detected: DNS query: tpt.dotomi.com
Source: global traffic	DNS traffic detected: DNS query: tpt.mediaplex.com
Source: global traffic	DNS traffic detected: DNS query: cms.quantserve.com
Source: global traffic	DNS traffic detected: DNS query: dclk-match.dotomi.com
Source: global traffic	DNS traffic detected: DNS query: a.tribalfusion.com
Source: global traffic	DNS traffic detected: DNS query: x.bidswitch.net
Source: global traffic	DNS traffic detected: DNS query: c1.adform.net
Source: global traffic	DNS traffic detected: DNS query: us-u.openx.net
Source: global traffic	DNS traffic detected: DNS query: s.tribalfusion.com
Source: global traffic	DNS traffic detected: DNS query: cdn.clinch.co
Source: global traffic	DNS traffic detected: DNS query: sync.search.spotxchange.com
Source: global traffic	DNS traffic detected: DNS query: realtime.clinch.co
Source: global traffic	DNS traffic detected: DNS query: partners.tremorhub.com
Source: global traffic	DNS traffic detected: DNS query: img-cdn.clinch.co
Source: global traffic	DNS traffic detected: DNS query: trk.clinch.co
Source: global traffic	DNS traffic detected: DNS query: impssl.constantcontact.com
Source: global traffic	DNS traffic detected: DNS query: onetag-sys.com
Source: global traffic	DNS traffic detected: DNS query: ups.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: ads.stickyadstv.com
Source: global traffic	DNS traffic detected: DNS query: 1f2e7.v.fwmrm.net
Source: global traffic	DNS traffic detected: DNS query: eb2.3lift.com
Source: global traffic	DNS traffic detected: DNS query: image8.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: image2.pubmatic.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originVary: Accept-EncodingDate: Thu, 29 Aug 2024 15:06:23 GMTExpires: Fri, 01 Jan 1990 00:00:00 GMTCache-Control: no-cache, must-revalidatePragma: no-cacheContent-Type: text/html; charset=UTF-8X-Content-Type-Options: nosniffServer: cafeContent-Length: 0X-XSS-Protection: 0Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originVary: Accept-EncodingDate: Thu, 29 Aug 2024 15:06:24 GMTExpires: Fri, 01 Jan 1990 00:00:00 GMTCache-Control: no-cache, must-revalidatePragma: no-cacheContent-Type: text/html; charset=UTF-8X-Content-Type-Options: nosniffServer: cafeContent-Length: 0X-XSS-Protection: 0Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2324 --field-trial-handle=2268,i,7343474625383344028,1084434577641272083,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.pspad.com/en/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2324 --field-trial-handle=2268,i,7343474625383344028,1084434577641272083,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Install

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://fundingchoicesmessages.google.com/i/%	0%	URL Reputation	safe
https://cdn.ampproject.org/amp4ads-host-v0.js	0%	URL Reputation	safe
http://mathiasbynens.be/	0%	URL Reputation	safe
https://greensock.com/standard-license	0%	URL Reputation	safe
https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_cm&google_dbm	0%	Avira URL Cloud	safe
https://dis.criteo.com/dis/usersync.aspx?r=4&p=14&cp=google&cu=1&url=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcjp%26google_hm%3D%40%40CRITEO_USERID%40%40%26google_push%3DAXcoOmSgjBh7f6xx0ZLpwWdWTo2cmMsUwVT2eppOiwH3pkfNytPSby_UAjBpVGKJ3mCXSEzDa-z-soTmiLhyH__AAsm1nKjIxNjlzpF6&google_gid=CAESEBmA4jSKrD8IX7IQijDL084&google_cver=1	0%	Avira URL Cloud	safe
https://forum.pspad.com/img/menu-bottom.gif	0%	Avira URL Cloud	safe
https://www.pspad.com/css/img/flags/it.gif	0%	Avira URL Cloud	safe
https://forum.pspad.com/read.php?6,78835,page=2	0%	Avira URL Cloud	safe
https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dappnexus%26google_hm%3D%24%7BBASE64_UID_ENC%7D	0%	Avira URL Cloud	safe
https://forum.pspad.com/follow.php?6	0%	Avira URL Cloud	safe
https://cm.g.doubleclick.net/pixel/attr?d=AHNF13KP_OJI84wpVasyZ2VqhR-lW7ZBfVyrR1ZbBJhrJhN_IpGU4ExswZat5htbjv4NBw	0%	Avira URL Cloud	safe
https://match.adsrvr.org/track/cmf/generic?ttd_pid=stickyads&ttd_tpi=1&gdpr=null&gdpr_consent=	0%	Avira URL Cloud	safe
https://fundingchoicesmessages.google.com/f/AGSKWxVmgEKlofaZOK8fh1BHsBciJ9TGSXEsd4hANutg1QfPQKTbF28jK9xWMfkEwr699l6rmmezZoR9WXq7oh94MlB-ioU-AXxDW2-QVLhP3_9es2D_9EcnjiC3SXlL8yoHLPncVKjZDw==?fccs=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	0%	Avira URL Cloud	safe
https://cm.g.doubleclick.net/pixel?google_nid=oath_dbm&google_hm=eS03LjVqbzBCRTJ1SFFZU0hIOURnM2ZObHVDU0ZyTEhGd35B	0%	Avira URL Cloud	safe
https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=NTAwOTVmMGQtZmU0My0yZGY1LWUzZmQtM2YxODg0OTc3ODIy	0%	Avira URL Cloud	safe
https://s0.2mdn.net/sadbundle/6621218986707064327/Programatic_Banners-SoV-Summer_Sale_120x600_version_2/cta.png	0%	Avira URL Cloud	safe
https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESEG60wP8ajN4W32ocoS4xy28&google_cver=1	0%	Avira URL Cloud	safe
https://cm.g.doubleclick.net/pixel?google_nid=teadstv_ab&google_hm=NTgwNzBjZjAtYjc0OS00NmI0LWFjMTQtNmNmMzQ2NzFhZTU0&google_push=AXcoOmQxJY_9tkCcl2GSOqzSZDxMjCqewzONrgFeaHQbPiW60bHdKN8vSJz4ICn9y-OrSHaI1KLUfzwtSenJLoL2_3rTvrw3yGPfz48	0%	Avira URL Cloud	safe
http://www.webdesign.paysoft.cz/	0%	Avira URL Cloud	safe
https://cm.g.doubleclick.net/pixel?google_nid=whaleco_services_llc&google_push=AXcoOmSpFGX0Jh-llNS7DqRgNK9tuAWGUM-yo-C3ovgfaaBhnKoKSAeQ2W9nTHva_53WKzY6u2Tbcs1CW-tT2nn8cODBpZDtS_MHV2Hx	0%	Avira URL Cloud	safe
https://fundingchoicesmessages.google.com/f/AGSKWxVY7jt9fCZTTsjsbDN155hetlqkeezW9p6-3duoVmL6Bb3xq-_zLkL7zs1-lNlwN80orZUc18Ys8F2FP9hdT0bt-_Kyav6KQ3JtB6ODP63b72dD2K3L2HxdRhU3Q0xdSMs6e546qw==?fccs=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	0%	Avira URL Cloud	safe
https://dt.adsafeprotected.com/dt?advEntityId=2158931&asId=3f91a2ef-b041-1416-2cfe-306d8623b0e8&tv=%7Bc:mLDcTM,pingTime:-2,time:75,type:a,im:%7Bsf:0,pom:1,prf:%7BbeA:4691,beZ:4692,mfA:4698,cmA:4700,inA:4700,inZ:4706,prA:4707,prZ:4714,si:4721,poA:4722,poZ:4746,cmZ:4746,mfZ:4746,loA:4756,loZ:4762,ltA:4765,ltZ:4765%7D%7D,sca:%7Bdfp:%7Bdf:0%7D%7D,env:%7Bgca:false,cca:false,gca2:false%7D,clog:%5B%7Bpiv:0,vs:o,r:r,w:728,h:90,t:30%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:0,b11:0,cnod:1,gm:0,slTimes:%7Bi:0,o:75,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:30,wc:0.0.1280.984,ac:NaN.NaN.728.90,am:i,cc:NaN.NaN.728.90,piv:0,obst:0,th:0,reas:r,bkn:%7Bpiv:%5B63~0%5D,as:%5B63~728.90%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:umQV2HR+11%7C12.2158931-81411105%7C121%7C131%7C132%7C133%7C14%7C15,idMap:12,pd:CV8L.internal-pdf-viewer,rmeas:1,rend:0,renddet:IMG.us,siq:31,sinceFw:43,readyFired:false%7D&br=c	0%	Avira URL Cloud	safe
https://support.google.com/adsense/answer/9190028.	0%	Avira URL Cloud	safe
https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2024136896076245&output=html&h=90&slotname=4131719558&adk=1919790967&adf=258090505&pi=t.ma~as.4131719558&w=728&abgtt=3&lmt=1724943933&format=728x90&url=https%3A%2F%2Fwww.pspad.com%2Fen%2F&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1724943934311&bpp=65&bdt=1590&idt=1487&shv=r20240827&mjsv=m202408270101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0&nras=1&correlator=573355935516&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=375&ady=573&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31086449%2C44798934%2C95338229%2C31086568%2C31086140%2C95341514&oid=2&pvsid=4011218549943282&tmod=1228248810&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=o%7C%7CoeE%7C&abl=CS&pfx=0&fu=0&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&fsb=1&dtd=1494	0%	Avira URL Cloud	safe
https://cm.g.doubleclick.net/pixel?google_ula=5153224&google_hm=wlVwDuNj_LkYoYySzk5LlDudLD-Mh7Sg1K-R-ISkeAw&pi=adx&tdc=ams&pi=adxab&google_nid=rtb_house_tr&google_gid=CAESEITo4174ix7navv_72TmGD4&google_cver=1&google_push=AXcoOmRR0P9pvtjEuYn1q1FT9XUtX7b-v1WHaheNVMVMpsR8cGir7c4GzljDyRtNJOjujW-_eu79RDQ8IDsH39Q7bBYmQoIz7RJZ54A&tc=1	0%	Avira URL Cloud	safe
https://widget.us.criteo.com/dis/usersync.aspx?r=4&p=14&cp=google&cu=1&url=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcjp%26google_hm%3D%40%40CRITEO_USERID%40%40%26google_push%3DAXcoOmSgjBh7f6xx0ZLpwWdWTo2cmMsUwVT2eppOiwH3pkfNytPSby_UAjBpVGKJ3mCXSEzDa-z-soTmiLhyH__AAsm1nKjIxNjlzpF6&google_gid=CAESEBmA4jSKrD8IX7IQijDL084&google_cver=1	0%	Avira URL Cloud	safe
http://www.tojeono.cz/?dn=115	0%	Avira URL Cloud	safe
https://googleads.g.doubleclick.net/xbbe/pixel?d=CKuzwtYCENfj7dYCGPyKuJYCMAE&v=APEucNXVCsbHwJlwfqzQI2lpT-0yTIgNQyaCJZBtDz1UuzVXvlEI4gqE4-yfg85FGCXE50updzLZug1fNJnBJV38R3CxKBK22g	0%	Avira URL Cloud	safe
http://ad.doubleclick.net/viewad/817-grey.gif	0%	Avira URL Cloud	safe
https://cdn.clinch.co/a_styles/13139/js/120ax600_v15_u349582167_es_movie.js	0%	Avira URL Cloud	safe
https://www.temu.com/api/adx/cm/pixel?google_gid=CAESELRVqlSLogjw9ges-3Rh44Q&google_cver=1&google_push=AXcoOmSssYDXE2Jos-LBH3VuicAQgPK1APjmoV8iVA7ltYv3UbkKxDEwZbUyjNpY2M4wQnfhA51j8O-kyQ7pjUUSk9K90QmCPer_5g	0%	Avira URL Cloud	safe
https://fundingchoicesmessages.google.com/f/AGSKWxWl_1VLkSENFch0MBusZO7CTirl1MwTGDy2FoMsCmX3ve99yXU-0NF5p54tDLJwIx9vBf5CPlnEgCAB-T786AJIp8Wp9qeonwqb9GQjeZn_8OYF3iffc6UMteV5LHWITekjzVNa6A==?fccs=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	0%	Avira URL Cloud	safe
http://www.sitepoint.com/article/1041/3	0%	Avira URL Cloud	safe
https://fundingchoicesmessages.google.com/f/AGSKWxVUJthqtb7vMBsvFm6_ll1zeYS024P3mJ81tGhJkuB2Vol9mJ3abuBfYXIemo4nTYp_1jyujLoBkAOHB7p0Xf6WM28j-0mYJ6l8HW4I1O9NmQrbbRB1hWfKPbbbphCULSnhZ6x7biJomjod6wK24q7G6C-cGwaTulfoHqgdLmNDRcle-7b0SvRO5C6R/_/get/ad?_adsbgd./ecom/magnet./468_60./advolatility.	0%	Avira URL Cloud	safe
https://forum.pspad.com/editor.js	0%	Avira URL Cloud	safe
https://pm.w55c.net/ping_match.gif?scc=1&ei=GOOGLE&rurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3D9675309%26google_hm%3D_wfivefivec64esc_&google_gid=CAESEHpiWFOzZfLDI7tCGD7uHfY&google_cver=1&google_push=AXcoOmQDaSMwAC12_0_sEetHNGP2-4slLOdI8vL3hH5YVHTh9jpxZkrAY2m4pAEyqYD3tZJA5vVLvaAW8dLg0s5iFQN4LFnZRAeVMg	0%	Avira URL Cloud	safe
https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2024136896076245&output=html&adk=1812271804&adf=3025194257&abgtt=3&lmt=1724943949&plat=9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&plas=135x816_l%7C154x816_r&format=0x0&url=https%3A%2F%2Fforum.pspad.com%2Fread.php%3F6%2C78835&pra=7&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aicel=33&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aiict=1&aiapm=0.46927&aiapmi=0.48129&aiombap=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1724943946919&bpp=1&bdt=1445&idt=2912&shv=r20240827&mjsv=m202408270101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=728x90%2C120x240_as&nras=1&correlator=583282072109&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31086545%2C44798934%2C95332928%2C95331833%2C95338229%2C95340753%2C95341533%2C31086568&oid=2&pvsid=555663540525854&tmod=1228248810&uas=0&nvt=1&fsapi=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=2936	0%	Avira URL Cloud	safe
https://dis.criteo.com/dis/usersync.aspx?r=4&p=14&cp=google&cu=1&url=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcjp%26google_hm%3D%40%40CRITEO_USERID%40%40%26google_push%3DAXcoOmRkJk_mfbnldPPh09wDBIrve2DiBhHiQCL4BbwAtPcIhlqMotI0KuVyzqmzgVCRqw65VX0j8wuwi9_rdPVB4Q5wr6e3M933&google_gid=CAESEBmA4jSKrD8IX7IQijDL084&google_cver=1	0%	Avira URL Cloud	safe

Name	Malicious	Antivirus Detection	Reputation
https://dis.criteo.com/dis/usersync.aspx?r=4&p=14&cp=google&cu=1&url=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcjp%26google_hm%3D%40%40CRITEO_USERID%40%40%26google_push%3DAXcoOmSgjBh7f6xx0ZLpwWdWTo2cmMsUwVT2eppOiwH3pkfNytPSby_UAjBpVGKJ3mCXSEzDa-z-soTmiLhyH__AAsm1nKjIxNjlzpF6&google_gid=CAESEBmA4jSKrD8IX7IQijDL084&google_cver=1	false	Avira URL Cloud: safe	unknown
https://fundingchoicesmessages.google.com/f/AGSKWxVmgEKlofaZOK8fh1BHsBciJ9TGSXEsd4hANutg1QfPQKTbF28jK9xWMfkEwr699l6rmmezZoR9WXq7oh94MlB-ioU-AXxDW2-QVLhP3_9es2D_9EcnjiC3SXlL8yoHLPncVKjZDw==?fccs=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	false	Avira URL Cloud: safe	unknown
https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dappnexus%26google_hm%3D%24%7BBASE64_UID_ENC%7D	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_cm&google_dbm	false	Avira URL Cloud: safe	unknown
https://forum.pspad.com/img/menu-bottom.gif	false	Avira URL Cloud: safe	unknown
https://forum.pspad.com/read.php?6,78835,page=2	false	Avira URL Cloud: safe	unknown
https://www.pspad.com/css/img/flags/it.gif	false	Avira URL Cloud: safe	unknown
https://match.adsrvr.org/track/cmf/generic?ttd_pid=stickyads&ttd_tpi=1&gdpr=null&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel/attr?d=AHNF13KP_OJI84wpVasyZ2VqhR-lW7ZBfVyrR1ZbBJhrJhN_IpGU4ExswZat5htbjv4NBw	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=NTAwOTVmMGQtZmU0My0yZGY1LWUzZmQtM2YxODg0OTc3ODIy	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=oath_dbm&google_hm=eS03LjVqbzBCRTJ1SFFZU0hIOURnM2ZObHVDU0ZyTEhGd35B	false	Avira URL Cloud: safe	unknown
https://s0.2mdn.net/sadbundle/6621218986707064327/Programatic_Banners-SoV-Summer_Sale_120x600_version_2/cta.png	false	Avira URL Cloud: safe	unknown
https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESEG60wP8ajN4W32ocoS4xy28&google_cver=1	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=teadstv_ab&google_hm=NTgwNzBjZjAtYjc0OS00NmI0LWFjMTQtNmNmMzQ2NzFhZTU0&google_push=AXcoOmQxJY_9tkCcl2GSOqzSZDxMjCqewzONrgFeaHQbPiW60bHdKN8vSJz4ICn9y-OrSHaI1KLUfzwtSenJLoL2_3rTvrw3yGPfz48	false	Avira URL Cloud: safe	unknown
https://dt.adsafeprotected.com/dt?advEntityId=2158931&asId=3f91a2ef-b041-1416-2cfe-306d8623b0e8&tv=%7Bc:mLDcTM,pingTime:-2,time:75,type:a,im:%7Bsf:0,pom:1,prf:%7BbeA:4691,beZ:4692,mfA:4698,cmA:4700,inA:4700,inZ:4706,prA:4707,prZ:4714,si:4721,poA:4722,poZ:4746,cmZ:4746,mfZ:4746,loA:4756,loZ:4762,ltA:4765,ltZ:4765%7D%7D,sca:%7Bdfp:%7Bdf:0%7D%7D,env:%7Bgca:false,cca:false,gca2:false%7D,clog:%5B%7Bpiv:0,vs:o,r:r,w:728,h:90,t:30%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:0,b11:0,cnod:1,gm:0,slTimes:%7Bi:0,o:75,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:30,wc:0.0.1280.984,ac:NaN.NaN.728.90,am:i,cc:NaN.NaN.728.90,piv:0,obst:0,th:0,reas:r,bkn:%7Bpiv:%5B63~0%5D,as:%5B63~728.90%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:umQV2HR+11%7C12.2158931-81411105%7C121%7C131%7C132%7C133%7C14%7C15,idMap:12,pd:CV8L.internal-pdf-viewer,rmeas:1,rend:0,renddet:IMG.us,siq:31,sinceFw:43,readyFired:false%7D&br=c	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=whaleco_services_llc&google_push=AXcoOmSpFGX0Jh-llNS7DqRgNK9tuAWGUM-yo-C3ovgfaaBhnKoKSAeQ2W9nTHva_53WKzY6u2Tbcs1CW-tT2nn8cODBpZDtS_MHV2Hx	false	Avira URL Cloud: safe	unknown
https://fundingchoicesmessages.google.com/f/AGSKWxVY7jt9fCZTTsjsbDN155hetlqkeezW9p6-3duoVmL6Bb3xq-_zLkL7zs1-lNlwN80orZUc18Ys8F2FP9hdT0bt-_Kyav6KQ3JtB6ODP63b72dD2K3L2HxdRhU3Q0xdSMs6e546qw==?fccs=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	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2024136896076245&output=html&h=90&slotname=4131719558&adk=1919790967&adf=258090505&pi=t.ma~as.4131719558&w=728&abgtt=3&lmt=1724943933&format=728x90&url=https%3A%2F%2Fwww.pspad.com%2Fen%2F&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1724943934311&bpp=65&bdt=1590&idt=1487&shv=r20240827&mjsv=m202408270101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0&nras=1&correlator=573355935516&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=375&ady=573&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31086449%2C44798934%2C95338229%2C31086568%2C31086140%2C95341514&oid=2&pvsid=4011218549943282&tmod=1228248810&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=o%7C%7CoeE%7C&abl=CS&pfx=0&fu=0&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&fsb=1&dtd=1494	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_ula=5153224&google_hm=wlVwDuNj_LkYoYySzk5LlDudLD-Mh7Sg1K-R-ISkeAw&pi=adx&tdc=ams&pi=adxab&google_nid=rtb_house_tr&google_gid=CAESEITo4174ix7navv_72TmGD4&google_cver=1&google_push=AXcoOmRR0P9pvtjEuYn1q1FT9XUtX7b-v1WHaheNVMVMpsR8cGir7c4GzljDyRtNJOjujW-_eu79RDQ8IDsH39Q7bBYmQoIz7RJZ54A&tc=1	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/xbbe/pixel?d=CKuzwtYCENfj7dYCGPyKuJYCMAE&v=APEucNXVCsbHwJlwfqzQI2lpT-0yTIgNQyaCJZBtDz1UuzVXvlEI4gqE4-yfg85FGCXE50updzLZug1fNJnBJV38R3CxKBK22g	false	Avira URL Cloud: safe	unknown
https://widget.us.criteo.com/dis/usersync.aspx?r=4&p=14&cp=google&cu=1&url=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcjp%26google_hm%3D%40%40CRITEO_USERID%40%40%26google_push%3DAXcoOmSgjBh7f6xx0ZLpwWdWTo2cmMsUwVT2eppOiwH3pkfNytPSby_UAjBpVGKJ3mCXSEzDa-z-soTmiLhyH__AAsm1nKjIxNjlzpF6&google_gid=CAESEBmA4jSKrD8IX7IQijDL084&google_cver=1	false	Avira URL Cloud: safe	unknown
https://cdn.clinch.co/a_styles/13139/js/120ax600_v15_u349582167_es_movie.js	false	Avira URL Cloud: safe	unknown
https://fundingchoicesmessages.google.com/f/AGSKWxWl_1VLkSENFch0MBusZO7CTirl1MwTGDy2FoMsCmX3ve99yXU-0NF5p54tDLJwIx9vBf5CPlnEgCAB-T786AJIp8Wp9qeonwqb9GQjeZn_8OYF3iffc6UMteV5LHWITekjzVNa6A==?fccs=W1siQUtzUm9sLXQtdURVTDI4aWh0NTZOenJWOFh5M0RaUHl3Z3JuNEVWVHhGVlFhZG5fdENuTHRHR2dERW5nT3R5VmhSY1N4RWtuOHpIbjVKVjJzTHVRUnBsakVjTVdWVHppd2FlamZ5eUJHMnpGbHB1S3hQd2I0a00yX2NHTF9UaEd5TzE0ZGU2X3g5eE1rR3JHQmhCY2tVdzVkUTdYeFZzQ1ZBPT0iXSxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsWzE3MjQ5NDQwMDgsNjExMDAwMDAwXSxudWxsLG51bGwsbnVsbCxbbnVsbCxbNyw2LDEwXSxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCwxXSwiaHR0cHM6Ly9mb3J1bS5wc3BhZC5jb20vIixudWxsLFtbOCwibW5ma2dnUnE3NDQiXSxbOSwiZW4tVVMiXSxbMTgsIltbWzBdXV0iXSxbMjAsIltudWxsLG51bGwsWzMxMDg2MTMxXSwxMywxN10iXSxbMTksIjIiXV1d	false	Avira URL Cloud: safe	unknown
https://www.temu.com/api/adx/cm/pixel?google_gid=CAESELRVqlSLogjw9ges-3Rh44Q&google_cver=1&google_push=AXcoOmSssYDXE2Jos-LBH3VuicAQgPK1APjmoV8iVA7ltYv3UbkKxDEwZbUyjNpY2M4wQnfhA51j8O-kyQ7pjUUSk9K90QmCPer_5g	false	Avira URL Cloud: safe	unknown
https://fundingchoicesmessages.google.com/f/AGSKWxVUJthqtb7vMBsvFm6_ll1zeYS024P3mJ81tGhJkuB2Vol9mJ3abuBfYXIemo4nTYp_1jyujLoBkAOHB7p0Xf6WM28j-0mYJ6l8HW4I1O9NmQrbbRB1hWfKPbbbphCULSnhZ6x7biJomjod6wK24q7G6C-cGwaTulfoHqgdLmNDRcle-7b0SvRO5C6R/_/get/ad?_adsbgd./ecom/magnet./468_60./advolatility.	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2024136896076245&output=html&adk=1812271804&adf=3025194257&abgtt=3&lmt=1724943949&plat=9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&plas=135x816_l%7C154x816_r&format=0x0&url=https%3A%2F%2Fforum.pspad.com%2Fread.php%3F6%2C78835&pra=7&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aicel=33&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aiict=1&aiapm=0.46927&aiapmi=0.48129&aiombap=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1724943946919&bpp=1&bdt=1445&idt=2912&shv=r20240827&mjsv=m202408270101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=728x90%2C120x240_as&nras=1&correlator=583282072109&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31086545%2C44798934%2C95332928%2C95331833%2C95338229%2C95340753%2C95341533%2C31086568&oid=2&pvsid=555663540525854&tmod=1228248810&uas=0&nvt=1&fsapi=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=2936	false	Avira URL Cloud: safe	unknown
https://pm.w55c.net/ping_match.gif?scc=1&ei=GOOGLE&rurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3D9675309%26google_hm%3D_wfivefivec64esc_&google_gid=CAESEHpiWFOzZfLDI7tCGD7uHfY&google_cver=1&google_push=AXcoOmQDaSMwAC12_0_sEetHNGP2-4slLOdI8vL3hH5YVHTh9jpxZkrAY2m4pAEyqYD3tZJA5vVLvaAW8dLg0s5iFQN4LFnZRAeVMg	false	Avira URL Cloud: safe	unknown
https://dis.criteo.com/dis/usersync.aspx?r=4&p=14&cp=google&cu=1&url=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcjp%26google_hm%3D%40%40CRITEO_USERID%40%40%26google_push%3DAXcoOmRkJk_mfbnldPPh09wDBIrve2DiBhHiQCL4BbwAtPcIhlqMotI0KuVyzqmzgVCRqw65VX0j8wuwi9_rdPVB4Q5wr6e3M933&google_gid=CAESEBmA4jSKrD8IX7IQijDL084&google_cver=1	false	Avira URL Cloud: safe	unknown
https://forum.pspad.com/editor.js	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/pagead/interaction/?ai=CQwH-T47QZoSDLsn0mLAP7aD0oAKq98ylebnhsvfIEmQQASD464kCYMkGoAGb1tPdKcgBCagDAaoE8QFP0Kn6jAgfnnyAD30egUBy5-WU6MtDSxXImRQB3sKnfyRo2eTyNT5rY-_ulX8HKni7fRA2oi-3PHoFpEqPRrdATrzd2Lg2rYNeQK13HmZ5Wom_PoPNKw2ksBKVcOzndGAC940xN0tAW2-Gj8MSd9fmd2Q6QDn-saLMQht4g8guyLtRvw8FpNypYo1G5QVnsCQblHJYi2G6ehLORrnVnkSsmfCxmZTGzdFeN4iDKqVQnN5ZyG9IuPLLMOqFn60CoSzGEZY-NQiTB4vT-OdSDOQ9v4IVdPhPBbdxBahnhpbke5wr4_wPTDr_h0oylXBX91xjwATzlrOe8wTgBAOIBZadyZJQkAYBoAYugAebjqS9BKgH1ckbqAfZtrECqAemvhuoB47OG6gHk9gbqAfulrECqAf-nrECqAevvrECqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB-C9sQKoB_-esQKoB9-fsQKoB_jCsQKoB_vCsQLYBwDSCCQIgGEQARgfMgKKAjoJgECAwICAgKAoSL39wTpYxZWB_LyaiAOACgGYCwHICwGADAGqDQJVU7ATzsr_GLgT5APYEw2IFAPYFAHQFQH4FgGAFwGyFwIYArIYCRICu08YLiIBAA&sigh=ZEnY0zT2-4A&cid=CAQSPADpaXnfY4ncYk3mDIA2VR5kG7xoDuTSaXtZOupRzTcG1QQXTC68HPRF7z9_JENui_GcxvCfpdQgQGezSA&label=window_focus&gqid=T47QZoPtLO_P9u8PyPjcoQY&qqid=CMTmgfy8mogDFUk6BgAdbRAdJA&return=0	false	Avira URL Cloud: safe	unknown
https://www.pspad.com/pic/rss3.gif	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=yahoo&google_push=AXcoOmSIU_LgBQo9NNCSNwQXdx3j9i9Kr8M5KBxqrNzijhy8lZPsQSUMSSZiswSEwD-61i6wMKlEUrHsHib0E5J19RmCUyzCqWW3&google_hm=eS1VbU9aZnlCRTJwRWhHQ2tpRW1YejJkLkVQTlBfOW1BOH5B	false	Avira URL Cloud: safe	unknown
https://fundingchoicesmessages.google.com/f/AGSKWxUixJROvv9KVmAuFfLjWUoCeWZF15Yl_ec_UitqK12hkWXwIoPcBSaOEjF02aihBYMLTmq1A4Wl6iy3_hEMNXSbQJPJsnV8v3E41QlStMLgQt8n98Tw6q2INN9w73aYq5lqEysxmg==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzI0OTQzOTY1LDIxMTAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsNiwxMCw5XSxudWxsLDIsbnVsbCwiZW4iLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCwxXSwiaHR0cHM6Ly9mb3J1bS5wc3BhZC5jb20vcmVhZC5waHAiLG51bGwsW1s4LCJtbmZrZ2dScTc0NCJdLFs5LCJlbi1VUyJdLFsxOCwiW1tbMF1dXSJdLFsyMCwiW251bGwsbnVsbCxbMzEwODQyNjhdLDEzLDldIl0sWzE5LCIyIl1dXQ	false	Avira URL Cloud: safe	unknown
https://www.google.com/ads/measurement/l?ebcid=ALh7CaR6v3olAwe0FsrNa6pSCDkPqPWvD5aCWxMaA43oXSdC-RnNlw1poHhMP9hC8dDdVh-_MNFH64nZ7d7brPk1H4DRAc0gag	false	Avira URL Cloud: safe	unknown
https://fundingchoicesmessages.google.com/el/AGSKWxVkyZIDOVSEgRhk5NByf7FXzpQw86IdRzz8soPYgL9-s9GHgOuHjR0-ILXOXHLjcnx1epu1HzQe-NM2F8SIqbcgPnCLNNN9MCHIk9j3LMdh0dBeNnqA6wQ9Fm6Ryd-1w8C2kdgCcQ==	false	Avira URL Cloud: safe	unknown
https://s0.2mdn.net/sadbundle/6621218986707064327/Programatic_Banners-SoV-Summer_Sale_120x600_version_2/text.png	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2024136896076245&output=html&adk=1812271804&adf=3025194257&abgtt=3&lmt=1724943933&plaf=1%3A2&plat=1%3A128%2C2%3A128%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&plas=154x714_l%7C154x714_r&format=0x0&url=https%3A%2F%2Fwww.pspad.com%2Fen%2F&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aiapm=0.46927&aiapmi=0.48129&aiombap=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1724943934290&bpp=21&bdt=1569&idt=1479&shv=r20240827&mjsv=m202408270101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=573355935516&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31086449%2C44798934%2C95338229%2C31086568%2C31086140%2C95341514&oid=2&pvsid=4011218549943282&tmod=1228248810&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=1503	false	Avira URL Cloud: safe	unknown
https://dt.adsafeprotected.com/dt?advEntityId=2158931&asId=3f91a2ef-b041-1416-2cfe-306d8623b0e8&tv=%7Bc:mLDfdw,pingTime:1,time:8987,type:p,clog:%5B%7Bpiv:0,vs:o,r:r,w:728,h:90,t:30%7D,%7Bpiv:100,vs:i,r:,t:7861%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:0,b11:0,cnod:1,gm:0,slTimes:%7Bi:1126,o:7861,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:30,wc:0.0.1280.984,ac:NaN.NaN.728.90,am:i,cc:NaN.NaN.728.90,piv:0,obst:0,th:0,reas:r,bkn:%7Bpiv:%5B7849~0,1~100%5D,as:%5B7850~728.90%5D%7D%7D,%7Bsl:i,t:7861,wc:0.0.1280.984,ac:NaN.NaN.728.90,am:i,cc:NaN.NaN.728.90,piv:100,obst:0,th:0,reas:,bkn:%7Bpiv:%5B1125~100%5D,as:%5B1125~728.90%5D%7D%7D%5D,slEventCount:2,em:true,fr:false,e:,tt:rjss,dtt:2601,fm:umQV2HR+11%7C12.2158931-81411105%7C121%7C131%7C132%7C133%7C14%7C15,idMap:12,rmeas:1,rend:1,renddet:IMG.qs,siq:31,sis:3382%7D&br=c	false	Avira URL Cloud: safe	unknown
https://fundingchoicesmessages.google.com/el/AGSKWxWsHCRSbSxCUpJYqYDiFHRMDS-dV9iYYakMiD8MUjgUX0PzbiZTxuZLxKf98dCXOTDJa6wCSlw-Sz00rxnOVL76AAPpm5IcqFD6wpFPsRxDAj-6GVGhrgYvKODh_BzumiY0F0wy9g==	false	Avira URL Cloud: safe	unknown
https://s0.2mdn.net/sadbundle/6621218986707064327/Programatic_Banners-SoV-Summer_Sale_120x600_version_2/index.html?ev=01_252	false	Avira URL Cloud: safe	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_292.2.dr, chromecache_376.2.dr	false	URL Reputation: safe	unknown
https://forum.pspad.com/follow.php?6	chromecache_603.2.dr, chromecache_348.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/adsense/answer/9190028.	chromecache_551.2.dr, chromecache_440.2.dr	false	Avira URL Cloud: safe	unknown
https://fundingchoicesmessages.google.com/i/%	chromecache_435.2.dr, chromecache_242.2.dr	false	URL Reputation: safe	unknown
http://www.webdesign.paysoft.cz/	chromecache_603.2.dr, chromecache_515.2.dr, chromecache_348.2.dr	false	Avira URL Cloud: safe	unknown
http://ad.doubleclick.net/viewad/817-grey.gif	chromecache_436.2.dr, chromecache_211.2.dr	false	Avira URL Cloud: safe	unknown
http://www.tojeono.cz/?dn=115	chromecache_603.2.dr, chromecache_515.2.dr, chromecache_348.2.dr	false	Avira URL Cloud: safe	unknown
http://www.sitepoint.com/article/1041/3	chromecache_432.2.dr, chromecache_467.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.ampproject.org/amp4ads-host-v0.js	chromecache_435.2.dr, chromecache_242.2.dr	false	URL Reputation: safe	unknown
https://s0.2mdn.net/ads/richmedia/studio_canary/mu/templates/hifi/hifi_canary.js	chromecache_436.2.dr, chromecache_211.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5	chromecache_263.2.dr	false	Avira URL Cloud: safe	unknown
https://sync.teads.tv/um?eid=3&uid=&fb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dtea	chromecache_296.2.dr	false	Avira URL Cloud: safe	unknown
http://mathiasbynens.be/	chromecache_435.2.dr, chromecache_242.2.dr	false	URL Reputation: safe	unknown
https://greensock.com/standard-license	chromecache_532.2.dr, chromecache_451.2.dr	false	URL Reputation: safe	unknown
https://dsum-sec.casalemedia.com/rrum?ixi=0&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpix	chromecache_388.2.dr, chromecache_365.2.dr, chromecache_418.2.dr	false	Avira URL Cloud: safe	unknown
http://googleads.g.doubleclick.net	chromecache_435.2.dr, chromecache_588.2.dr, chromecache_242.2.dr, chromecache_379.2.dr	false	Avira URL Cloud: safe	unknown
https://ep2.adtrafficquality.google/sodar/$	chromecache_435.2.dr, chromecache_242.2.dr	false	Avira URL Cloud: safe	unknown
https://sync.search.spotxchange.com/partner?adv_id=7025&redir=https%3A%2F%2Fcm.g.doubleclick.net%2Fp	chromecache_395.2.dr, chromecache_579.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/blueimp/JavaScript-MD5	chromecache_368.2.dr, chromecache_596.2.dr	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/	chromecache_503.2.dr, chromecache_618.2.dr	false	Avira URL Cloud: safe	unknown

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Name	IP	Active	Malicious	Reputation
um.simpli.fi	35.204.158.49	true	false	unknown
tr.blismedia.com	34.96.105.8	true	false	unknown
global.px.quantserve.com	91.228.74.200	true	false	unknown
bid.g.doubleclick.net	142.251.173.156	true	false	unknown
d2wz9xr38d3zfr.cloudfront.net	108.156.60.2	true	false	unknown
eu-eb2.3lift.com	13.248.245.213	true	false	unknown
cdn.w55c.net	3.67.27.62	true	false	unknown
ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud	3.71.149.231	true	false	unknown
forum.pspad.com	77.78.105.77	true	false	unknown
cm.g.doubleclick.net	216.58.212.130	true	false	unknown
ds-pr-bh.ybp.gysm.yahoodns.net	54.154.1.224	true	false	unknown
www.google.com	216.58.206.68	true	false	unknown
imagsync-lhrpairbc.pubmatic.com	185.64.191.214	true	false	unknown
toplist.cz	88.86.101.2	true	false	unknown
match.adsrvr.org	52.223.40.198	true	false	unknown
dsp-cookie.adfarm1.adition.com	80.82.210.217	true	false	unknown
match.prod.bidr.io	34.248.137.99	true	false	unknown
chidc2.outbrain.org	50.31.142.159	true	false	unknown
creativecdn.com	185.184.8.90	true	false	unknown
us-u.openx.net	34.98.64.218	true	false	unknown
syndicatedsearch.goog	216.58.206.78	true	false	unknown
dyiby0l2m23er.cloudfront.net	18.239.94.6	true	false	unknown
ep2.adtrafficquality.google	142.250.184.225	true	false	unknown
pug-lhr-bc.pubmnet.com	185.64.191.210	true	false	unknown
firewall-external-2134955858.eu-west-1.elb.amazonaws.com	34.246.226.110	true	false	unknown
d162h6x3rxav67.cloudfront.net	18.66.112.19	true	false	unknown
gtrace.mediago.io	35.214.168.80	true	false	unknown
googleads.g.doubleclick.net	142.250.186.66	true	false	unknown
www3.l.google.com	142.250.185.238	true	false	unknown
ads.travelaudience.com	35.190.0.66	true	false	unknown
presentation-ams1.turn.com	46.228.164.11	true	false	unknown
a.tribalfusion.com	172.64.150.63	true	false	unknown
partners-alb-1113315349.us-east-1.elb.amazonaws.com	44.195.182.155	true	false	unknown
s0.2mdn.net	142.250.185.230	true	false	unknown
widget.us5.vip.prod.criteo.com	74.119.117.16	true	false	unknown
www.pspad.com	77.78.105.77	true	false	unknown
s.tribalfusion.com	104.18.37.193	true	false	unknown
d1i3i6gzu7b1xi.cloudfront.net	18.245.199.85	true	false	unknown
user-data-eu.bidswitch.net	35.214.136.108	true	false	unknown
dsp.adkernel.com	174.137.133.49	true	false	unknown
widget.nl3.vip.prod.criteo.com	178.250.1.9	true	false	unknown
sync.srv.stackadapt.com	54.157.210.214	true	false	unknown
e-volution.rtb-as-useast.ak-is2.net	174.137.133.49	true	false	unknown
sync.ipredictive.com	54.157.18.170	true	false	unknown
ep1.adtrafficquality.google	142.250.185.66	true	false	unknown
gw-c-eu-isp.temu.com	20.157.217.118	true	false	unknown
ums.acuityplatform.com	154.59.122.79	true	false	unknown
ad.doubleclick.net	142.250.186.166	true	false	unknown
dsum-sec.casalemedia.com	104.18.36.155	true	false	unknown
dt-external-217593033.us-east-1.elb.amazonaws.com	52.20.75.248	true	false	unknown
outspot2-ams.adx.opera.com	82.145.213.8	true	false	unknown
onetag-sys.com	51.75.86.98	true	false	unknown
match.adsby.bidtheatre.com	188.166.17.21	true	false	unknown
trk.clinch.co	18.211.185.188	true	false	unknown
ib.anycast.adnxs.com	37.252.171.52	true	false	unknown
pm.w55c.net	unknown	unknown	false	unknown
a.rfihub.com	unknown	unknown	false	unknown
ads.stickyadstv.com	unknown	unknown	false	unknown
rtb2-useast.e-volution.ai	unknown	unknown	false	unknown
dis.criteo.com	unknown	unknown	false	unknown
widget.us.criteo.com	unknown	unknown	false	unknown
realtime.clinch.co	unknown	unknown	false	unknown
c1.adform.net	unknown	unknown	false	unknown
px.ads.linkedin.com	unknown	unknown	false	unknown
1f2e7.v.fwmrm.net	unknown	unknown	false	unknown
tpt.mediaplex.com	unknown	unknown	false	unknown
img-cdn.clinch.co	unknown	unknown	false	unknown
partners.tremorhub.com	unknown	unknown	false	unknown
dclk-match.dotomi.com	unknown	unknown	false	unknown
sync.teads.tv	unknown	unknown	false	unknown
impssl.constantcontact.com	unknown	unknown	false	unknown
t.adx.opera.com	unknown	unknown	false	unknown
cdn.clinch.co	unknown	unknown	false	unknown
sync-dmp.aura-dsp.com	unknown	unknown	false	unknown
image8.pubmatic.com	unknown	unknown	false	unknown
ups.analytics.yahoo.com	unknown	unknown	false	unknown
fundingchoicesmessages.google.com	unknown	unknown	false	unknown
fw.adsafeprotected.com	unknown	unknown	false	unknown
a.c.appier.net	unknown	unknown	false	unknown
image2.pubmatic.com	unknown	unknown	false	unknown
www.temu.com	unknown	unknown	false	unknown
tpt.dotomi.com	unknown	unknown	false	unknown
dt.adsafeprotected.com	unknown	unknown	false	unknown
pr-bh.ybp.yahoo.com	unknown	unknown	false	unknown
x.bidswitch.net	unknown	unknown	false	unknown
r.turn.com	unknown	unknown	false	unknown
ad.turn.com	unknown	unknown	false	unknown
www.jared.com	unknown	unknown	false	unknown
analytics.pangle-ads.com	unknown	unknown	false	unknown
cms.quantserve.com	unknown	unknown	false	unknown
ib.adnxs.com	unknown	unknown	false	unknown
sync.search.spotxchange.com	unknown	unknown	false	unknown
static.adsafeprotected.com	unknown	unknown	false	unknown
eb2.3lift.com	unknown	unknown	false	unknown
b1sync.zemanta.com	unknown	unknown	false	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
91.228.74.200	global.px.quantserve.com	United Kingdom	27281	QUANTCASTUS	false
142.250.185.102	unknown	United States	15169	GOOGLEUS	false
88.86.101.2	toplist.cz	Czech Republic	39392	SUPERNETWORK_CZ	false
34.248.137.99	match.prod.bidr.io	United States	16509	AMAZON-02US	false
37.252.171.52	ib.anycast.adnxs.com	European Union	29990	ASN-APPNEXUS	false
18.245.199.85	d1i3i6gzu7b1xi.cloudfront.net	United States	16509	AMAZON-02US	false
13.248.245.213	eu-eb2.3lift.com	United States	16509	AMAZON-02US	false
172.217.18.6	unknown	United States	15169	GOOGLEUS	false
142.250.185.198	unknown	United States	15169	GOOGLEUS	false
142.250.185.238	www3.l.google.com	United States	15169	GOOGLEUS	false
13.32.121.84	unknown	United States	16509	AMAZON-02US	false
44.216.224.90	unknown	United States	14618	AMAZON-AESUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.230	s0.2mdn.net	United States	15169	GOOGLEUS	false
3.120.45.0	unknown	United States	16509	AMAZON-02US	false
142.250.186.46	unknown	United States	15169	GOOGLEUS	false
54.73.208.111	unknown	United States	16509	AMAZON-02US	false
216.58.212.166	unknown	United States	15169	GOOGLEUS	false
216.58.206.33	unknown	United States	15169	GOOGLEUS	false
216.58.206.38	unknown	United States	15169	GOOGLEUS	false
46.228.164.11	presentation-ams1.turn.com	United Kingdom	56396	TURNGB	false
20.157.217.118	gw-c-eu-isp.temu.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
188.166.17.21	match.adsby.bidtheatre.com	Netherlands	14061	DIGITALOCEAN-ASNUS	false
185.89.210.46	unknown	Germany	29990	ASN-APPNEXUS	false
178.250.1.9	widget.nl3.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
50.31.142.159	chidc2.outbrain.org	United States	22075	AS-OUTBRAINUS	false
18.239.50.40	unknown	United States	16509	AMAZON-02US	false
52.16.87.206	unknown	United States	16509	AMAZON-02US	false
35.214.168.80	gtrace.mediago.io	United States	19527	GOOGLE-2US	false
44.195.182.155	partners-alb-1113315349.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
54.154.1.224	ds-pr-bh.ybp.gysm.yahoodns.net	United States	16509	AMAZON-02US	false
51.75.86.98	onetag-sys.com	France	16276	OVHFR	false
18.211.185.188	trk.clinch.co	United States	14618	AMAZON-AESUS	false
35.190.0.66	ads.travelaudience.com	United States	15169	GOOGLEUS	false
18.66.112.19	d162h6x3rxav67.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
35.204.158.49	um.simpli.fi	United States	15169	GOOGLEUS	false
104.18.37.193	s.tribalfusion.com	United States	13335	CLOUDFLARENETUS	false
142.250.184.225	ep2.adtrafficquality.google	United States	15169	GOOGLEUS	false
142.250.184.226	unknown	United States	15169	GOOGLEUS	false
142.251.173.156	bid.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.185.66	ep1.adtrafficquality.google	United States	15169	GOOGLEUS	false
174.137.133.49	dsp.adkernel.com	United States	27257	WEBAIR-INTERNETUS	false
142.250.184.230	unknown	United States	15169	GOOGLEUS	false
172.64.150.63	a.tribalfusion.com	United States	13335	CLOUDFLARENETUS	false
104.18.36.155	dsum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
52.20.75.248	dt-external-217593033.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
185.184.8.90	creativecdn.com	Poland	204995	RTB-HOUSE-AMSNL	false
185.64.191.214	imagsync-lhrpairbc.pubmatic.com	United Kingdom	62713	AS-PUBMATICUS	false
34.253.170.200	unknown	United States	16509	AMAZON-02US	false
80.82.210.217	dsp-cookie.adfarm1.adition.com	Germany	24961	MYLOC-ASIPBackboneofmyLocmanagedITAGDE	false
172.217.18.102	unknown	United States	15169	GOOGLEUS	false
172.217.16.194	unknown	United States	15169	GOOGLEUS	false
52.223.40.198	match.adsrvr.org	United States	8987	AMAZONEXPANSIONGB	false
52.205.245.26	unknown	United States	14618	AMAZON-AESUS	false
82.145.213.8	outspot2-ams.adx.opera.com	United Kingdom	39832	NO-OPERANO	false
172.217.16.198	unknown	United States	15169	GOOGLEUS	false
216.58.206.70	unknown	United States	15169	GOOGLEUS	false
35.214.136.108	user-data-eu.bidswitch.net	United States	19527	GOOGLE-2US	false
18.239.94.6	dyiby0l2m23er.cloudfront.net	United States	16509	AMAZON-02US	false
3.71.149.231	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud	United States	16509	AMAZON-02US	false
216.58.206.78	syndicatedsearch.goog	United States	15169	GOOGLEUS	false
185.64.191.210	pug-lhr-bc.pubmnet.com	United Kingdom	62713	AS-PUBMATICUS	false
172.64.151.101	unknown	United States	13335	CLOUDFLARENETUS	false
3.67.27.62	cdn.w55c.net	United States	16509	AMAZON-02US	false
154.59.122.79	ums.acuityplatform.com	United States	174	COGENT-174US	false
15.197.193.217	unknown	United States	7430	TANDEMUS	false
74.125.206.154	unknown	United States	15169	GOOGLEUS	false
77.78.105.77	forum.pspad.com	Czech Republic	15685	CASABLANCA-ASInternetCollocationProviderCZ	false
216.58.212.130	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
34.246.226.110	firewall-external-2134955858.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
34.96.105.8	tr.blismedia.com	United States	15169	GOOGLEUS	false
54.157.18.170	sync.ipredictive.com	United States	14618	AMAZON-AESUS	false
74.119.117.16	widget.us5.vip.prod.criteo.com	United States	19750	AS-CRITEOUS	false
108.156.60.2	d2wz9xr38d3zfr.cloudfront.net	United States	16509	AMAZON-02US	false
142.250.185.134	unknown	United States	15169	GOOGLEUS	false
54.157.210.214	sync.srv.stackadapt.com	United States	14618	AMAZON-AESUS	false
142.250.185.132	unknown	United States	15169	GOOGLEUS	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false
52.21.5.220	unknown	United States	14618	AMAZON-AESUS	false
34.98.64.218	us-u.openx.net	United States	15169	GOOGLEUS	false
142.250.186.166	ad.doubleclick.net	United States	15169	GOOGLEUS	false

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1501287
Start date and time:	2024-08-29 17:04:33 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 4s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.pspad.com/en/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@29/669@262/83
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://forum.pspad.com/read.php?6,78835 Browse: https://www.pspad.com/en/whatsnew.htm Browse: https://forum.pspad.com/

Input	Output
URL: https://www.pspad.com/en/ Model: jbxai	{ "brand":["PSPad"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://forum.pspad.com/read.php?6,78835 Model: jbxai	{ "brand":["PSPad"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://forum.pspad.com/read.php?6,78835 Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.pspad.com/en/ Model: jbxai	{ "brand":["pspad"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://forum.pspad.com/ Model: jbxai	{ "brand":["PSPad"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["forum", "search", "log in"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://forum.pspad.com/ Model: jbxai	{ "brand":["PSPad"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["forum", "search", "log in"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.pspad.com/en/whatsnew.htm Model: jbxai	{ "brand":["PSPad"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.pspad.com/en/whatsnew.htm Model: jbxai	{ "brand":["PSPad"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Aug 29 14:05:31 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9789427515965583
Encrypted:	false
SSDEEP:	48:8cCdjTL/bH1idAKZdA19ehwiZUklqehHy+3:8DHLoy
MD5:	4154F16E2A6F6CABE91729C2AB702BA6
SHA1:	CE299F0BFA58AA6EB2C59F4CBBBD456F767DA4AE
SHA-256:	76B15835ACC06FAF3AF2CD8A538E959721105F19E68881CB22BBB92A0F78BB27
SHA-512:	A024EBEE8958794EFE6267046D26C74A4C561BB27045EEFB8246F5C8D4F0ED7091B5235552B8401496760BFDA81DD5EC4EC9F56DEC0867BC77CD03B2DF5ECF78
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....../.$...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y.x....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.x....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.x....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.x..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.x...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........E.Ex.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Bytes transferred	Direction	Data
2024-08-29 15:05:33 UTC	659	OUT	GET /en/ HTTP/1.1 Host: www.pspad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 15:05:33 UTC	425	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 15:05:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/7.3.31 Expires: Thu, 29 Aug 2024 15:05:33 GMT Cache-Control: no-store, no-cache, must-revalidate Cache-Control: private, pre-check=0, post-check=0, max-age=0 Pragma: no-cache Last-Modified: Thu, 29 Aug 2024 15:05:33 GMT Vary: Accept-Encoding
2024-08-29 15:05:33 UTC	11940	IN	Data Raw: 32 65 39 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0d 0a 3c 21 2d 2d 20 47 6c 6f 62 61 6c 20 73 69 74 65 20 74 61 67 20 28 67 74 61 67 2e 6a 73 29 20 2d 20 47 6f 6f 67 6c 65 20 41 6e 61 6c 79 74 69 63 73 20 2d 2d 3e 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 61 67 2f 6a 73 3f Data Ascii: 2e97<!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en"><head><meta charset="utf-8" />... Global site tag (gtag.js) - Google Analytics --><script type="text/javascript" async src="https://www.googletagmanager.com/gtag/js?

Timestamp	Bytes transferred	Direction	Data
2024-08-29 15:05:33 UTC	541	OUT	GET /css/pspad.css HTTP/1.1 Host: www.pspad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.pspad.com/en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 15:05:34 UTC	256	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 15:05:33 GMT Content-Type: text/css Content-Length: 13498 Connection: close Last-Modified: Fri, 31 Jul 2020 10:32:09 GMT ETag: "34ba-5abba4d1bde4c" Accept-Ranges: bytes Vary: Accept-Encoding
2024-08-29 15:05:34 UTC	13498	IN	Data Raw: 62 6f 64 79 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 36 70 78 3b 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 30 70 78 3b 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 20 70 61 64 64 69 6e 67 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 66 6f 6e 74 3a 20 38 30 25 2f 31 2e 32 35 20 73 61 6e 73 2d 73 65 72 69 66 2c 20 61 72 69 61 6c 2c 20 76 65 72 64 61 6e 61 3b 63 6f 6c 6f 72 3a 23 34 46 35 33 35 37 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 37 46 33 46 37 7d 0d 0a 61 7b 63 6f 6c 6f 72 3a 20 23 30 30 37 36 38 42 3b 7d 0d 0a 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 33 35 41 31 43 33 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e Data Ascii: body{margin-top: 0; margin-left: 16px; margin-right: 0px; margin-bottom: 0; padding:0;text-align:center; font: 80%/1.25 sans-serif, arial, verdana;color:#4F5357;background:#F7F3F7}a{color: #00768B;}a:hover{color:#fff;background:#35A1C3;text-decoration

Timestamp	Bytes transferred	Direction	Data
2024-08-29 15:05:34 UTC	529	OUT	GET /jss/external.js HTTP/1.1 Host: www.pspad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.pspad.com/en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 15:05:34 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 15:05:34 GMT Content-Type: application/javascript Content-Length: 453 Connection: close Last-Modified: Wed, 20 Sep 2017 17:18:04 GMT ETag: "1c5-559a228954b00" Accept-Ranges: bytes Vary: Accept-Encoding
2024-08-29 15:05:34 UTC	453	IN	Data Raw: 2f 2f 20 4e 65 77 2d 57 69 6e 64 6f 77 20 4c 69 6e 6b 73 20 69 6e 20 61 20 53 74 61 6e 64 61 72 64 73 2d 43 6f 6d 70 6c 69 61 6e 74 20 57 6f 72 6c 64 0d 0a 2f 2f 20 68 74 74 70 3a 2f 2f 77 77 77 2e 73 69 74 65 70 6f 69 6e 74 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 31 30 34 31 2f 33 20 0d 0a 66 75 6e 63 74 69 6f 6e 20 65 78 74 65 72 6e 61 6c 4c 69 6e 6b 73 28 29 20 7b 0d 0a 20 69 66 20 28 21 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 29 20 72 65 74 75 72 6e 3b 0d 0a 20 76 61 72 20 61 6e 63 68 6f 72 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 61 27 29 3b 0d 0a 20 66 6f 72 20 28 76 61 72 20 69 3d 30 3b 20 69 3c 61 6e 63 68 6f 72 73 2e 6c 65 6e 67 74 68 3b Data Ascii: // New-Window Links in a Standards-Compliant World// http://www.sitepoint.com/article/1041/3 function externalLinks() { if (!document.getElementsByTagName) return; var anchors = document.getElementsByTagName('a'); for (var i=0; i<anchors.length;

Timestamp	Bytes transferred	Direction	Data
2024-08-29 15:05:34 UTC	594	OUT	GET /img/Torry_120x90.png HTTP/1.1 Host: www.pspad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.pspad.com/en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 15:05:35 UTC	233	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 15:05:34 GMT Content-Type: image/png Content-Length: 5331 Connection: close Last-Modified: Wed, 20 Sep 2017 17:15:39 GMT ETag: "14d3-559a21ff0c4c0" Accept-Ranges: bytes
2024-08-29 15:05:35 UTC	5331	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 5a 08 02 00 00 00 fc 62 05 b8 00 00 14 9a 49 44 41 54 78 da ed 9c 69 50 5b 57 96 80 33 53 33 3f 66 a6 32 29 27 dd 49 aa d3 99 54 92 49 26 71 ba d3 49 bb 93 b8 6d c7 4b 8c f7 05 4c c0 60 1b bc 62 0c 60 b0 cd 8e d9 c1 6c 42 42 60 10 42 42 20 21 24 24 84 10 12 48 48 20 b4 82 90 00 81 10 88 7d df 6c e3 05 e3 0d 27 5e e7 38 4a dd 76 a1 84 c1 2a e2 38 83 4e bd a2 9e 9e ee bb ef ea 7b e7 9d 7b ee 39 e7 f1 52 b8 8c 6c db 9e c3 66 03 6d 03 6d 03 6d db 6c a0 6d a0 97 fc 66 03 6d 03 6d 03 6d db ac 01 fd d8 26 cf 45 6c a0 6d a0 97 0e e8 47 8f 1e 3d 78 f0 e0 da f4 f4 cd 5b b7 ef df bf 7f ef de 3d f8 68 3e 7e f3 d6 ad a9 cb 57 46 c6 c6 07 86 86 07 86 46 26 26 2f 5e 9f 99 b9 fd 44 ee 4c 5f bf 0e 5f cd Data Ascii: PNGIHDRxZbIDATxiP[W3S3?f2)'ITI&qImKL`b`lBB`BB !$$HH }l'^8Jv*8N{{9Rlfmmmlmfmmm&ElmG=x[=h>~WFF&&/^DL__

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.pspad.com/en/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Chrome Cache Entry: 207

Chrome Cache Entry: 208

Chrome Cache Entry: 209

Chrome Cache Entry: 210

Chrome Cache Entry: 211

Chrome Cache Entry: 212

Chrome Cache Entry: 213

Chrome Cache Entry: 214

Chrome Cache Entry: 215

Chrome Cache Entry: 216

Chrome Cache Entry: 217

Chrome Cache Entry: 218

Chrome Cache Entry: 219

Chrome Cache Entry: 220

Chrome Cache Entry: 221

Chrome Cache Entry: 222

Chrome Cache Entry: 223

Chrome Cache Entry: 224

Chrome Cache Entry: 225

Windows Analysis Report
https://www.pspad.com/en/

Timestamp	Bytes transferred	Direction	Data
2024-08-29 15:05:35 UTC	650	OUT	GET /coop/cse/brand?form=cse-search-box&lang=en HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.pspad.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 15:05:35 UTC	415	IN	HTTP/1.1 301 Moved Permanently Location: https://www.gstatic.com/prose/brandjs.js X-Content-Type-Options: nosniff Server: sffe Content-Length: 237 X-XSS-Protection: 0 Date: Thu, 29 Aug 2024 14:59:33 GMT Expires: Thu, 29 Aug 2024 15:29:33 GMT Cache-Control: public, max-age=1800 Content-Type: text/html; charset=UTF-8 Age: 362 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-29 15:05:35 UTC	237	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 70 72 6f 73 65 2f 62 72 61 6e 64 6a 73 2e 6a 73 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://www.gstatic.com/prose/brandjs.js">here</A>.</BODY></HTML>

Timestamp	Bytes transferred	Direction	Data
2024-08-29 15:05:36 UTC	586	OUT	GET /pic/rss3.gif HTTP/1.1 Host: www.pspad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.pspad.com/en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 15:05:36 UTC	231	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 15:05:36 GMT Content-Type: image/gif Content-Length: 982 Connection: close Last-Modified: Wed, 20 Sep 2017 17:18:23 GMT ETag: "3d6-559a229b735c0" Accept-Ranges: bytes
2024-08-29 15:05:36 UTC	982	IN	Data Raw: 47 49 46 38 39 61 5f 00 14 00 d5 27 00 04 04 04 8b 90 97 87 37 03 c6 c9 d0 ea 88 4a c6 52 06 46 48 4c f9 ee e7 a9 ae b7 eb c9 b4 72 75 7b 8e 66 4e c8 b6 aa ce 75 3a 7e 4f 31 5e 26 02 b9 8b 6b b5 4b 05 d7 d9 de e6 da d2 fe b2 81 fc 72 16 65 65 66 28 29 2b dc c9 bf d8 a2 7e e8 5d 02 bb be c6 9b 75 5b ba a1 90 9a a2 ae ad 46 03 cc cc cd fe a3 66 6c 34 11 53 55 59 16 18 19 aa 5a 26 aa 6a 42 fe fe fe fc de ca af 90 7c ac 7e 60 fe 91 47 fe 66 02 7d 82 8b d8 72 2e fd cc ad d2 bc ac da 57 02 fe 7f 28 97 3d 05 97 9a a3 33 33 34 b3 b6 b9 5b 5d 60 7b 32 05 83 56 3a b9 96 81 fe bb 8f d2 b2 9e b2 b2 b2 e2 76 2e ec da ce 2c 00 00 00 00 5f 00 14 00 00 06 ff c0 93 70 48 2c 1a 8f c8 a4 72 c9 6c 0e 2d 27 90 74 4a ad 5a af d8 ac 76 cb ed 82 7a 50 10 6b 4c 2e 9b cf e8 b4 ba Data Ascii: GIF89a_'7JRFHLru{fNu:~O1^&kKreef()+~]u[Ffl4SUYZ&jB\|~`Gf}r.W(=334[]`{2V:v.,_pH,rl-'tJZvzPkL.

Timestamp	Bytes transferred	Direction	Data
2024-08-29 15:05:36 UTC	606	OUT	GET /css/img/pravyokraj.png HTTP/1.1 Host: www.pspad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.pspad.com/css/pspad.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 15:05:36 UTC	231	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 15:05:36 GMT Content-Type: image/png Content-Length: 373 Connection: close Last-Modified: Wed, 20 Sep 2017 17:15:05 GMT ETag: "175-559a21de9f840" Accept-Ranges: bytes
2024-08-29 15:05:36 UTC	373	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 cc 00 00 00 04 08 03 00 00 00 6c a5 46 18 00 00 00 60 50 4c 54 45 f5 f5 f5 e2 e2 e2 f1 f1 f1 f0 f0 f0 dc dc dc ef ef ef d3 d3 d3 ec ec ec e5 e5 e5 df df df af af af c0 c0 c0 94 94 94 f7 f3 f7 93 93 93 a3 a3 a3 cd cd cd e6 e6 e6 ce ce ce f6 f6 f6 f3 f3 f3 f4 f4 f4 d2 d2 d2 ed ed ed eb eb eb ba ba ba bf bf bf 94 92 94 c4 c4 c4 cf cf cf d6 d6 d6 e1 e1 e1 f0 c6 af 21 00 00 00 20 74 52 4e 53 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 92 9a ad 76 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 00 8f 49 44 41 54 78 9c ed d5 4b 0e 82 40 14 44 d1 57 dd 0a f2 53 88 71 64 dc ff da 48 8c 8d 44 7e 22 5d 1a c3 02 98 11 92 77 56 70 27 95 82 Data Ascii: PNGIHDRlF`PLTE! tRNSvpHYs~IDATxK@DWSqdHD~"]wVp'

Timestamp	Bytes transferred	Direction	Data
2024-08-29 15:05:36 UTC	605	OUT	GET /css/img/body-line.gif HTTP/1.1 Host: www.pspad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.pspad.com/css/pspad.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 15:05:36 UTC	231	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 15:05:36 GMT Content-Type: image/gif Content-Length: 762 Connection: close Last-Modified: Wed, 20 Sep 2017 17:14:52 GMT ETag: "2fa-559a21d239b00" Accept-Ranges: bytes
2024-08-29 15:05:36 UTC	762	IN	Data Raw: 47 49 46 38 39 61 01 00 67 02 e6 00 00 d1 d5 da d2 d6 db db de e2 f4 f5 f6 f5 f6 f7 da dd e1 d9 dc e0 f6 f7 f8 f3 f4 f5 dc df e3 d4 d8 dc df e2 e5 e6 e8 eb f0 f1 f3 e5 e7 ea d5 d9 dd e9 eb ed ea ec ee f9 f9 fa ef f0 f2 e0 e3 e6 d3 d7 dc e3 e5 e8 e4 e6 e9 f7 f8 f9 e8 ea ec d6 da de d8 db df eb ed ef ec ee f0 d6 d9 de f9 fa fa de e1 e4 f1 f2 f4 d5 d8 dd e7 e9 ec dd e0 e4 e1 e4 e7 d3 d7 db f2 f3 f4 ee ef f1 dd e0 e3 f8 f8 f9 e2 e5 e8 ed ef f1 f2 f3 f5 ed ee f0 d7 db df d4 d7 dc e2 e4 e7 ef f1 f2 d2 d6 da d3 d6 db e3 e6 e9 ec ed ef e0 e2 e6 f8 f9 f9 d7 da de d7 da df f8 f9 fa f1 f2 f3 d2 d5 da d8 dc e0 f7 f7 f8 de e1 e5 e7 e9 eb e8 ea ed e1 e3 e7 f6 f6 f7 f0 f2 f3 ee f0 f1 d9 dd e1 d8 db e0 dc df e2 e5 e8 ea ea eb ee ee f0 f2 d4 d8 dd e1 e3 e6 f3 f4 f6 df e1 Data Ascii: GIF89ag

Timestamp	Bytes transferred	Direction	Data
2024-08-29 15:05:36 UTC	603	OUT	GET /css/img/header2.gif HTTP/1.1 Host: www.pspad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.pspad.com/css/pspad.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 15:05:36 UTC	231	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 15:05:36 GMT Content-Type: image/gif Content-Length: 703 Connection: close Last-Modified: Wed, 20 Sep 2017 17:14:59 GMT ETag: "2bf-559a21d8e6ac0" Accept-Ranges: bytes
2024-08-29 15:05:36 UTC	703	IN	Data Raw: 47 49 46 38 39 61 04 00 64 00 e6 38 00 bc bc bc bd bd bd be be be c0 bf c0 c1 c0 c1 c2 c2 c2 c3 c3 c3 c4 c4 c4 c6 c5 c6 c7 c6 c7 c8 c7 c8 c9 c8 c9 ca c9 ca cc cb cc cd cc cd ce cd ce cf ce cf d0 cf d0 d2 d0 d2 d3 d1 d3 d4 d2 d4 d5 d4 d5 d6 d5 d6 d8 d6 d8 d9 d7 d9 da d8 da db d9 db dc da dc dd db dd df dd df e0 de e0 e1 df e1 e2 e0 e2 e3 e1 e3 e5 e2 e5 e6 e3 e6 e7 e4 e7 e8 e6 e8 e9 e7 e9 eb e8 eb ec e9 ec ed ea ed ee eb ee ef ec ef f1 ed f1 f2 ef f2 f3 f0 f3 f4 f1 f4 f5 f2 f5 f7 f3 f7 f8 f4 f8 f9 f5 f9 fa f6 fa fb f8 fb fd f9 fd fe fa fe ff fb ff f5 f1 f5 f0 ec f0 ea e8 ea e5 e3 e5 d6 d4 d6 d1 cf d1 77 af c7 66 aa c7 54 a5 c7 43 9f c6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: GIF89ad8wfTC

Timestamp	Bytes transferred	Direction	Data
2024-08-29 15:05:36 UTC	604	OUT	GET /css/img/headlogo.jpg HTTP/1.1 Host: www.pspad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.pspad.com/css/pspad.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 15:05:36 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 15:05:36 GMT Content-Type: image/jpeg Content-Length: 8748 Connection: close Last-Modified: Wed, 20 Sep 2017 17:15:01 GMT ETag: "222c-559a21dacef40" Accept-Ranges: bytes
2024-08-29 15:05:36 UTC	8748	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff e1 00 e6 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 05 00 12 01 03 00 01 00 00 00 01 00 00 00 31 01 02 00 1c 00 00 00 4a 00 00 00 32 01 02 00 14 00 00 00 66 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 7a 00 00 00 00 00 00 00 41 43 44 20 53 79 73 74 65 6d 73 20 44 69 67 69 74 61 6c 20 49 6d 61 67 69 6e 67 00 32 30 30 37 3a 31 30 3a 31 36 20 32 33 3a 31 37 3a 31 36 00 05 00 00 90 07 00 04 00 00 00 30 32 32 30 90 92 02 00 04 00 00 00 39 37 35 00 02 a0 04 00 01 00 00 00 1b 01 00 00 03 a0 04 00 01 00 00 00 64 00 00 00 05 a0 04 00 01 00 00 00 bc 00 00 00 00 00 00 00 02 00 01 00 02 00 04 00 00 00 52 39 38 00 02 00 07 00 04 00 00 00 30 31 30 30 00 00 00 00 20 20 20 20 ff c0 00 Data Ascii: JFIFExifII*1J2fizACD Systems Digital Imaging2007:10:16 23:17:160220975dR980100

Timestamp	Bytes transferred	Direction	Data
2024-08-29 15:05:36 UTC	541	OUT	GET /css/print.css HTTP/1.1 Host: www.pspad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.pspad.com/en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 15:05:36 UTC	253	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 15:05:36 GMT Content-Type: text/css Content-Length: 286 Connection: close Last-Modified: Wed, 20 Sep 2017 17:14:51 GMT ETag: "11e-559a21d1458c0" Accept-Ranges: bytes Vary: Accept-Encoding
2024-08-29 15:05:36 UTC	286	IN	Data Raw: 62 6f 64 79 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 74 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 74 69 6d 65 73 20 6e 65 77 20 72 6f 6d 61 6e 22 2c 20 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 30 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 7d 0d 0a 23 68 65 61 64 2c 20 23 6d 65 6e 75 2c 20 23 72 65 6b 6c 61 6d 61 2c 20 23 6c 61 6e 67 2c 20 23 66 6f 6f 74 65 72 2c 20 68 72 20 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 0d 0a 23 6f 62 73 61 68 20 7b 70 6f 73 69 74 69 6f 6e 3a 73 74 61 74 69 63 3b 6d 61 72 67 69 6e 3a 30 70 78 3b 62 6f 72 64 65 72 3a 30 70 78 3b 77 69 64 74 68 3a 61 75 74 6f 3b 7d 0d 0a 61 2c 20 68 31 2c 20 68 32 2c 20 68 33 2c 20 68 34 20 7b 63 6f 6c 6f 72 3a 23 30 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: body {font-size:13pt;font-family: "times new roman", serif;color:#000;background-color:#fff;}#head, #menu, #reklama, #lang, #footer, hr {display:none;}#obsah {position:static;margin:0px;border:0px;width:auto;}a, h1, h2, h3, h4 {color:#000;background

Timestamp	Bytes transferred	Direction	Data
2024-08-29 15:05:36 UTC	607	OUT	GET /css/img/menu-bottom.gif HTTP/1.1 Host: www.pspad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.pspad.com/css/pspad.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 15:05:37 UTC	229	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 15:05:37 GMT Content-Type: image/gif Content-Length: 91 Connection: close Last-Modified: Wed, 20 Sep 2017 17:15:02 GMT ETag: "5b-559a21dbc3180" Accept-Ranges: bytes
2024-08-29 15:05:37 UTC	91	IN	Data Raw: 47 49 46 38 39 61 ba 00 06 00 80 01 00 31 a2 c6 ff ff ff 21 f9 04 01 e8 03 01 00 2c 00 00 00 00 ba 00 06 00 00 02 32 44 8e a9 cb ed 0f a3 9c b4 da 2b 81 c1 bc fb 0f 86 22 a2 8d e6 89 a6 2a 53 ae ee 0b c7 4d 2b d7 f6 0d 6a fa ce f7 fe 0f 0c 0a 87 c4 a2 f1 88 4c 22 0b 00 3b Data Ascii: GIF89a1!,2D+"*SM+jL";

Timestamp	Bytes transferred	Direction	Data
2024-08-29 15:05:36 UTC	605	OUT	GET /css/img/menu-line.gif HTTP/1.1 Host: www.pspad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.pspad.com/css/pspad.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 15:05:37 UTC	229	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 15:05:37 GMT Content-Type: image/gif Content-Length: 54 Connection: close Last-Modified: Wed, 20 Sep 2017 17:15:03 GMT ETag: "36-559a21dcb73c0" Accept-Ranges: bytes
2024-08-29 15:05:37 UTC	54	IN	Data Raw: 47 49 46 38 39 61 ba 00 01 00 80 01 00 31 a2 c6 ff ff ff 21 f9 04 01 e8 03 01 00 2c 00 00 00 00 ba 00 01 00 00 02 0d 44 8e a9 cb ed 0f a3 9c b4 da 2b 41 01 00 3b Data Ascii: GIF89a1!,D+A;

Timestamp	Bytes transferred	Direction	Data
2024-08-29 15:05:36 UTC	600	OUT	GET /css/img/pruh.gif HTTP/1.1 Host: www.pspad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.pspad.com/css/pspad.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 15:05:37 UTC	229	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 15:05:37 GMT Content-Type: image/gif Content-Length: 58 Connection: close Last-Modified: Wed, 20 Sep 2017 17:15:05 GMT ETag: "3a-559a21de9f840" Accept-Ranges: bytes
2024-08-29 15:05:37 UTC	58	IN	Data Raw: 47 49 46 38 39 61 c6 00 01 00 80 01 00 35 a1 c3 ff ff ff 21 f9 04 01 e8 03 01 00 2c 00 00 00 00 c6 00 01 00 00 02 11 8c 8f a9 06 ed 0f a3 9c b4 da 8b b3 de 7c f9 55 00 00 3b Data Ascii: GIF89a5!,\|U;