Windows Analysis Report
https://www.amazon.com/gp/f.html?C=3EZOZG4B143JS&K=1E6K7EDNZJ01O&M=urn:rtn:msg:2024112123575784a68d3791734d57aa59c8099480p0na&R=1X9F7V8OBK7Z1&T=C&U=https%3A%2F%2Fbusiness.amazon.com%2Fabredir%2Fspr%2Freturns%2Fprep%3FcontractId%3D6a0575f9-ef14-43ae-afac-f5063d154a1e%26rmaId%3DDxDwhwGcRRMA%26orderId%

Overview

General Information

Sample URL: https://www.amazon.com/gp/f.html?C=3EZOZG4B143JS&K=1E6K7EDNZJ01O&M=urn:rtn:msg:2024112123575784a68d3791734d57aa59c8099480p0na&R=1X9F7V8OBK7Z1&T=C&U=https%3A%2F%2Fbusiness.amazon.com%2Fabredir%2Fspr%2F
Analysis ID: 1560598

Detection

Score: 1
Range: 0 - 100
Whitelisted: false
Confidence: 80%

Signatures

HTML page contains hidden javascript code
Stores files to the Windows start menu directory

Classification

Source: https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https://www.amazon.com/spr/returns/prep?contractId=6a0575f9-ef14-43ae-afac-f5063d154a1e&rmaId=DxDwhwGcRRMA&orderId=111-7310600-6665801&ingress=prep_email&ref_=pe_114046300_987354350_OD0201BT_E_PREPRefundConfirmation_PREP_St&openid.identity=http://specs.openid.net/auth/2.0/identifier_select&openid.assoc_handle=amzn_psr_desktop_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http://specs.openid.net/auth/2.0/identifier_select&openid.ns=http://specs.openid.net/auth/2.0 HTTP Parser: Base64 decoded: https://www.amazon.com/spr/returns/prep?contractId=6a0575f9-ef14-43ae-afac-f5063d154a1e
Source: https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https://www.amazon.com/spr/returns/prep?contractId=6a0575f9-ef14-43ae-afac-f5063d154a1e&rmaId=DxDwhwGcRRMA&orderId=111-7310600-6665801&ingress=prep_email&ref_=pe_114046300_987354350_OD0201BT_E_PREPRefundConfirmation_PREP_St&openid.identity=http://specs.openid.net/auth/2.0/identifier_select&openid.assoc_handle=amzn_psr_desktop_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http://specs.openid.net/auth/2.0/identifier_select&openid.ns=http://specs.openid.net/auth/2.0 HTTP Parser: <input type="password" .../> found
Source: https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fspr%2Freturns%2Fprep%3FcontractId%3D6a0575f9-ef14-43ae-afac-f5063d154a1e%26rmaId%3DDxDwhwGcRRMA%26orderId%3D111-7310600-6665801%26ingress%3Dprep_email%26ref_%3Dpe_114046300_987354350_OD0201BT_E_PREPRefundConfirmation_PREP_St&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_psr_desktop_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0 HTTP Parser: No favicon
Source: https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fspr%2Freturns%2Fprep%3FcontractId%3D6a0575f9-ef14-43ae-afac-f5063d154a1e%26rmaId%3DDxDwhwGcRRMA%26orderId%3D111-7310600-6665801%26ingress%3Dprep_email%26ref_%3Dpe_114046300_987354350_OD0201BT_E_PREPRefundConfirmation_PREP_St&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_psr_desktop_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0 HTTP Parser: No favicon
Source: https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https://www.amazon.com/spr/returns/prep?contractId=6a0575f9-ef14-43ae-afac-f5063d154a1e&rmaId=DxDwhwGcRRMA&orderId=111-7310600-6665801&ingress=prep_email&ref_=pe_114046300_987354350_OD0201BT_E_PREPRefundConfirmation_PREP_St&openid.identity=http://specs.openid.net/auth/2.0/identifier_select&openid.assoc_handle=amzn_psr_desktop_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http://specs.openid.net/auth/2.0/identifier_select&openid.ns=http://specs.openid.net/auth/2.0 HTTP Parser: No favicon
Source: https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https://www.amazon.com/spr/returns/prep?contractId=6a0575f9-ef14-43ae-afac-f5063d154a1e&rmaId=DxDwhwGcRRMA&orderId=111-7310600-6665801&ingress=prep_email&ref_=pe_114046300_987354350_OD0201BT_E_PREPRefundConfirmation_PREP_St&openid.identity=http://specs.openid.net/auth/2.0/identifier_select&openid.assoc_handle=amzn_psr_desktop_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http://specs.openid.net/auth/2.0/identifier_select&openid.ns=http://specs.openid.net/auth/2.0 HTTP Parser: No favicon
Source: https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https://www.amazon.com/spr/returns/prep?contractId=6a0575f9-ef14-43ae-afac-f5063d154a1e&rmaId=DxDwhwGcRRMA&orderId=111-7310600-6665801&ingress=prep_email&ref_=pe_114046300_987354350_OD0201BT_E_PREPRefundConfirmation_PREP_St&openid.identity=http://specs.openid.net/auth/2.0/identifier_select&openid.assoc_handle=amzn_psr_desktop_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http://specs.openid.net/auth/2.0/identifier_select&openid.ns=http://specs.openid.net/auth/2.0 HTTP Parser: No favicon
Source: https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https://www.amazon.com/spr/returns/prep?contractId=6a0575f9-ef14-43ae-afac-f5063d154a1e&rmaId=DxDwhwGcRRMA&orderId=111-7310600-6665801&ingress=prep_email&ref_=pe_114046300_987354350_OD0201BT_E_PREPRefundConfirmation_PREP_St&openid.identity=http://specs.openid.net/auth/2.0/identifier_select&openid.assoc_handle=amzn_psr_desktop_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http://specs.openid.net/auth/2.0/identifier_select&openid.ns=http://specs.openid.net/auth/2.0 HTTP Parser: No favicon
Source: https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https://www.amazon.com/spr/returns/prep?contractId=6a0575f9-ef14-43ae-afac-f5063d154a1e&rmaId=DxDwhwGcRRMA&orderId=111-7310600-6665801&ingress=prep_email&ref_=pe_114046300_987354350_OD0201BT_E_PREPRefundConfirmation_PREP_St&openid.identity=http://specs.openid.net/auth/2.0/identifier_select&openid.assoc_handle=amzn_psr_desktop_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http://specs.openid.net/auth/2.0/identifier_select&openid.ns=http://specs.openid.net/auth/2.0 HTTP Parser: No favicon
Source: https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https://www.amazon.com/spr/returns/prep?contractId=6a0575f9-ef14-43ae-afac-f5063d154a1e&rmaId=DxDwhwGcRRMA&orderId=111-7310600-6665801&ingress=prep_email&ref_=pe_114046300_987354350_OD0201BT_E_PREPRefundConfirmation_PREP_St&openid.identity=http://specs.openid.net/auth/2.0/identifier_select&openid.assoc_handle=amzn_psr_desktop_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http://specs.openid.net/auth/2.0/identifier_select&openid.ns=http://specs.openid.net/auth/2.0 HTTP Parser: No favicon
Source: https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https://www.amazon.com/spr/returns/prep?contractId=6a0575f9-ef14-43ae-afac-f5063d154a1e&rmaId=DxDwhwGcRRMA&orderId=111-7310600-6665801&ingress=prep_email&ref_=pe_114046300_987354350_OD0201BT_E_PREPRefundConfirmation_PREP_St&openid.identity=http://specs.openid.net/auth/2.0/identifier_select&openid.assoc_handle=amzn_psr_desktop_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http://specs.openid.net/auth/2.0/identifier_select&openid.ns=http://specs.openid.net/auth/2.0 HTTP Parser: No <meta name="author".. found
Source: https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https://www.amazon.com/spr/returns/prep?contractId=6a0575f9-ef14-43ae-afac-f5063d154a1e&rmaId=DxDwhwGcRRMA&orderId=111-7310600-6665801&ingress=prep_email&ref_=pe_114046300_987354350_OD0201BT_E_PREPRefundConfirmation_PREP_St&openid.identity=http://specs.openid.net/auth/2.0/identifier_select&openid.assoc_handle=amzn_psr_desktop_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http://specs.openid.net/auth/2.0/identifier_select&openid.ns=http://specs.openid.net/auth/2.0 HTTP Parser: No <meta name="author".. found
Source: https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https://www.amazon.com/spr/returns/prep?contractId=6a0575f9-ef14-43ae-afac-f5063d154a1e&rmaId=DxDwhwGcRRMA&orderId=111-7310600-6665801&ingress=prep_email&ref_=pe_114046300_987354350_OD0201BT_E_PREPRefundConfirmation_PREP_St&openid.identity=http://specs.openid.net/auth/2.0/identifier_select&openid.assoc_handle=amzn_psr_desktop_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http://specs.openid.net/auth/2.0/identifier_select&openid.ns=http://specs.openid.net/auth/2.0 HTTP Parser: No <meta name="author".. found
Source: https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https://www.amazon.com/spr/returns/prep?contractId=6a0575f9-ef14-43ae-afac-f5063d154a1e&rmaId=DxDwhwGcRRMA&orderId=111-7310600-6665801&ingress=prep_email&ref_=pe_114046300_987354350_OD0201BT_E_PREPRefundConfirmation_PREP_St&openid.identity=http://specs.openid.net/auth/2.0/identifier_select&openid.assoc_handle=amzn_psr_desktop_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http://specs.openid.net/auth/2.0/identifier_select&openid.ns=http://specs.openid.net/auth/2.0 HTTP Parser: No <meta name="author".. found
Source: https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https://www.amazon.com/spr/returns/prep?contractId=6a0575f9-ef14-43ae-afac-f5063d154a1e&rmaId=DxDwhwGcRRMA&orderId=111-7310600-6665801&ingress=prep_email&ref_=pe_114046300_987354350_OD0201BT_E_PREPRefundConfirmation_PREP_St&openid.identity=http://specs.openid.net/auth/2.0/identifier_select&openid.assoc_handle=amzn_psr_desktop_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http://specs.openid.net/auth/2.0/identifier_select&openid.ns=http://specs.openid.net/auth/2.0 HTTP Parser: No <meta name="author".. found
Source: https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https://www.amazon.com/spr/returns/prep?contractId=6a0575f9-ef14-43ae-afac-f5063d154a1e&rmaId=DxDwhwGcRRMA&orderId=111-7310600-6665801&ingress=prep_email&ref_=pe_114046300_987354350_OD0201BT_E_PREPRefundConfirmation_PREP_St&openid.identity=http://specs.openid.net/auth/2.0/identifier_select&openid.assoc_handle=amzn_psr_desktop_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http://specs.openid.net/auth/2.0/identifier_select&openid.ns=http://specs.openid.net/auth/2.0 HTTP Parser: No <meta name="author".. found
Source: https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https://www.amazon.com/spr/returns/prep?contractId=6a0575f9-ef14-43ae-afac-f5063d154a1e&rmaId=DxDwhwGcRRMA&orderId=111-7310600-6665801&ingress=prep_email&ref_=pe_114046300_987354350_OD0201BT_E_PREPRefundConfirmation_PREP_St&openid.identity=http://specs.openid.net/auth/2.0/identifier_select&openid.assoc_handle=amzn_psr_desktop_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http://specs.openid.net/auth/2.0/identifier_select&openid.ns=http://specs.openid.net/auth/2.0 HTTP Parser: No <meta name="copyright".. found
Source: https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https://www.amazon.com/spr/returns/prep?contractId=6a0575f9-ef14-43ae-afac-f5063d154a1e&rmaId=DxDwhwGcRRMA&orderId=111-7310600-6665801&ingress=prep_email&ref_=pe_114046300_987354350_OD0201BT_E_PREPRefundConfirmation_PREP_St&openid.identity=http://specs.openid.net/auth/2.0/identifier_select&openid.assoc_handle=amzn_psr_desktop_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http://specs.openid.net/auth/2.0/identifier_select&openid.ns=http://specs.openid.net/auth/2.0 HTTP Parser: No <meta name="copyright".. found
Source: https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https://www.amazon.com/spr/returns/prep?contractId=6a0575f9-ef14-43ae-afac-f5063d154a1e&rmaId=DxDwhwGcRRMA&orderId=111-7310600-6665801&ingress=prep_email&ref_=pe_114046300_987354350_OD0201BT_E_PREPRefundConfirmation_PREP_St&openid.identity=http://specs.openid.net/auth/2.0/identifier_select&openid.assoc_handle=amzn_psr_desktop_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http://specs.openid.net/auth/2.0/identifier_select&openid.ns=http://specs.openid.net/auth/2.0 HTTP Parser: No <meta name="copyright".. found
Source: https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https://www.amazon.com/spr/returns/prep?contractId=6a0575f9-ef14-43ae-afac-f5063d154a1e&rmaId=DxDwhwGcRRMA&orderId=111-7310600-6665801&ingress=prep_email&ref_=pe_114046300_987354350_OD0201BT_E_PREPRefundConfirmation_PREP_St&openid.identity=http://specs.openid.net/auth/2.0/identifier_select&openid.assoc_handle=amzn_psr_desktop_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http://specs.openid.net/auth/2.0/identifier_select&openid.ns=http://specs.openid.net/auth/2.0 HTTP Parser: No <meta name="copyright".. found
Source: https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https://www.amazon.com/spr/returns/prep?contractId=6a0575f9-ef14-43ae-afac-f5063d154a1e&rmaId=DxDwhwGcRRMA&orderId=111-7310600-6665801&ingress=prep_email&ref_=pe_114046300_987354350_OD0201BT_E_PREPRefundConfirmation_PREP_St&openid.identity=http://specs.openid.net/auth/2.0/identifier_select&openid.assoc_handle=amzn_psr_desktop_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http://specs.openid.net/auth/2.0/identifier_select&openid.ns=http://specs.openid.net/auth/2.0 HTTP Parser: No <meta name="copyright".. found
Source: https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https://www.amazon.com/spr/returns/prep?contractId=6a0575f9-ef14-43ae-afac-f5063d154a1e&rmaId=DxDwhwGcRRMA&orderId=111-7310600-6665801&ingress=prep_email&ref_=pe_114046300_987354350_OD0201BT_E_PREPRefundConfirmation_PREP_St&openid.identity=http://specs.openid.net/auth/2.0/identifier_select&openid.assoc_handle=amzn_psr_desktop_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http://specs.openid.net/auth/2.0/identifier_select&openid.ns=http://specs.openid.net/auth/2.0 HTTP Parser: No <meta name="copyright".. found
Source: unknown HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49713 version: TLS 1.2
Source: unknown HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49715 version: TLS 1.2
Source: unknown HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.16:49714 version: TLS 1.2
Source: unknown HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.16:49808 version: TLS 1.2
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: global traffic DNS traffic detected: DNS query: www.amazon.com
Source: global traffic DNS traffic detected: DNS query: business.amazon.com
Source: global traffic DNS traffic detected: DNS query: www.google.com
Source: global traffic DNS traffic detected: DNS query: images-na.ssl-images-amazon.com
Source: global traffic DNS traffic detected: DNS query: fls-na.amazon.com
Source: global traffic DNS traffic detected: DNS query: static.siege-amazon.com
Source: global traffic DNS traffic detected: DNS query: m.media-amazon.com
Source: global traffic DNS traffic detected: DNS query: unagi-na.amazon.com
Source: global traffic DNS traffic detected: DNS query: unagi.amazon.com
Source: unknown Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49713 version: TLS 1.2
Source: unknown HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49715 version: TLS 1.2
Source: unknown HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.16:49714 version: TLS 1.2
Source: unknown HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.16:49808 version: TLS 1.2
Source: classification engine Classification label: clean1.win@17/6@30/208
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 --field-trial-handle=1884,i,7088009258412178927,15525006651746148157,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.amazon.com/gp/f.html?C=3EZOZG4B143JS&K=1E6K7EDNZJ01O&M=urn:rtn:msg:2024112123575784a68d3791734d57aa59c8099480p0na&R=1X9F7V8OBK7Z1&T=C&U=https%3A%2F%2Fbusiness.amazon.com%2Fabredir%2Fspr%2Freturns%2Fprep%3FcontractId%3D6a0575f9-ef14-43ae-afac-f5063d154a1e%26rmaId%3DDxDwhwGcRRMA%26orderId%3D111-7310600-6665801%26ingress%3Dprep_email%26ref_%3Dpe_114046300_987354350_OD0201BT_E_PREPRefundConfirmation_PREP_St&H=IA4LZ8TXHBNT2KXXSODLQKAB5OKA&ref_=pe_114046300_987354350_OD0201BT_E_PREPRefundConfirmation_PREP_St"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 --field-trial-handle=1884,i,7088009258412178927,15525006651746148157,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: Window Recorder Window detected: More than 3 window changes detected
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs