Windows
Analysis Report
https://yasirfaizan.github.io/Netflix-Clone
Overview
General Information
Detection
Score: | 48 |
Range: | 0 - 100 |
Confidence: | 100% |
Signatures
Classification
- System is w10x64
chrome.exe (PID: 7120 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --s tart-maxim ized "abou t:blank" MD5: E81F54E6C1129887AEA47E7D092680BF) chrome.exe (PID: 6748 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --ty pe=utility --utility -sub-type= network.mo jom.Networ kService - -lang=en-U S --servic e-sandbox- type=none --no-pre-r ead-main-d ll --field -trial-han dle=1992,i ,955673676 7995102117 ,460926342 3375967007 ,262144 -- disable-fe atures=Opt imizationG uideModelD ownloading ,Optimizat ionHints,O ptimizatio nHintsFetc hing,Optim izationTar getPredict ion --vari ations-see d-version= 20250306-1 83004.4290 00 --mojo- platform-c hannel-han dle=1956 / prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF) chrome.exe (PID: 7532 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --ty pe=utility --utility -sub-type= printing.m ojom.Unsan dboxedPrin tBackendHo st --lang= en-US --se rvice-sand box-type=n one --no-p re-read-ma in-dll --f ield-trial -handle=19 92,i,95567 3676799510 2117,46092 6342337596 7007,26214 4 --disabl e-features =Optimizat ionGuideMo delDownloa ding,Optim izationHin ts,Optimiz ationHints Fetching,O ptimizatio nTargetPre diction -- variations -seed-vers ion=202503 06-183004. 429000 --m ojo-platfo rm-channel -handle=49 20 /prefet ch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)
chrome.exe (PID: 7736 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" "htt ps://yasir faizan.git hub.io/Net flix-Clone " MD5: E81F54E6C1129887AEA47E7D092680BF)
- cleanup
- • AV Detection
- • Networking
- • System Summary
Click to jump to signature section
AV Detection |
---|
Source: | Avira URL Cloud: |
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: |
Source: | DNS traffic detected: | ||
Source: | DNS traffic detected: |
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: |
Source: | Classification label: |
Source: | Process created: | |||
Source: | Process created: | |||
Source: | Process created: | |||
Source: | Process created: | |||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior |
Source: | Window detected: |
Reconnaissance | Resource Development | Initial Access | Execution | Persistence | Privilege Escalation | Defense Evasion | Credential Access | Discovery | Lateral Movement | Collection | Command and Control | Exfiltration | Impact |
---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Gather Victim Identity Information | Acquire Infrastructure | Valid Accounts | Windows Management Instrumentation | Path Interception | 1 Process Injection | 1 Process Injection | OS Credential Dumping | System Service Discovery | Remote Services | Data from Local System | 2 Encrypted Channel | Exfiltration Over Other Network Medium | Abuse Accessibility Features |
Credentials | Domains | Default Accounts | Scheduled Task/Job | Boot or Logon Initialization Scripts | Boot or Logon Initialization Scripts | Rootkit | LSASS Memory | Application Window Discovery | Remote Desktop Protocol | Data from Removable Media | 1 Non-Application Layer Protocol | Exfiltration Over Bluetooth | Network Denial of Service |
Email Addresses | DNS Server | Domain Accounts | At | Logon Script (Windows) | Logon Script (Windows) | Obfuscated Files or Information | Security Account Manager | Query Registry | SMB/Windows Admin Shares | Data from Network Shared Drive | 2 Application Layer Protocol | Automated Exfiltration | Data Encrypted for Impact |
This section contains all screenshots as thumbnails, including those not shown in the slideshow.
Source | Detection | Scanner | Label | Link |
---|---|---|---|---|
100% | Avira URL Cloud | phishing |
Name | IP | Active | Malicious | Antivirus Detection | Reputation |
---|---|---|---|---|---|
yasirfaizan.github.io | 185.199.108.153 | true | false | unknown | |
www.google.com | 142.250.185.196 | true | false | high |
- No. of IPs < 25%
- 25% < No. of IPs < 50%
- 50% < No. of IPs < 75%
- 75% < No. of IPs
IP | Domain | Country | Flag | ASN | ASN Name | Malicious |
---|---|---|---|---|---|---|
142.250.185.196 | www.google.com | United States | 15169 | GOOGLEUS | false | |
185.199.108.153 | yasirfaizan.github.io | Netherlands | 54113 | FASTLYUS | false |
IP |
---|
192.168.2.5 |
Joe Sandbox version: | 42.0.0 Malachite |
Analysis ID: | 1637960 |
Start date and time: | 2025-03-14 01:35:56 +01:00 |
Joe Sandbox product: | CloudBasic |
Overall analysis duration: | 0h 1m 54s |
Hypervisor based Inspection enabled: | false |
Report type: | full |
Cookbook file name: | browseurl.jbs |
Sample URL: | https://yasirfaizan.github.io/Netflix-Clone |
Analysis system description: | Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01 |
Number of analysed new started processes analysed: | 15 |
Number of new started drivers analysed: | 0 |
Number of existing processes analysed: | 0 |
Number of existing drivers analysed: | 0 |
Number of injected processes analysed: | 0 |
Technologies: |
|
Analysis Mode: | default |
Analysis stop reason: | Timeout |
Detection: | MAL |
Classification: | mal48.win@23/0@4/3 |
EGA Information: | Failed |
HCA Information: |
|
Cookbook Comments: |
|
- URL not reachable
- Exclude process from analysis
(whitelisted): BackgroundTrans ferHost.exe, SIHClient.exe, Sg rmBroker.exe, backgroundTaskHo st.exe, svchost.exe - Excluded IPs from analysis (wh
itelisted): 184.86.251.27, 184 .86.251.22, 142.250.184.238, 1 42.250.186.131, 142.250.185.14 2, 66.102.1.84 - Excluded domains from analysis
(whitelisted): www.bing.com, fs.microsoft.com, e86303.dscx. akamaiedge.net, clients2.googl e.com, www.bing.com.edgekey.ne t, accounts.google.com, slscr. update.microsoft.com, clientse rvices.googleapis.com, clients .l.google.com, www-www.bing.co m.trafficmanager.net, fe3cr.de livery.mp.microsoft.com - Not all processes where analyz
ed, report is missing behavior information - Report size getting too big, t
oo many NtOpenFile calls found . - VT rate limit hit for: https:
//yasirfaizan.github.io/Netfli x-Clone
Download Network PCAP: filtered – full
- Total Packets: 122
Timestamp | Source Port | Dest Port | Source IP | Dest IP |
---|---|---|---|---|
Mar 14, 2025 01:36:39.445925951 CET | 443 | 49698 | 20.74.19.45 | 192.168.2.5 |
Mar 14, 2025 01:36:39.446001053 CET | 49698 | 443 | 192.168.2.5 | 20.74.19.45 |
Mar 14, 2025 01:36:39.446047068 CET | 49698 | 443 | 192.168.2.5 | 20.74.19.45 |
Mar 14, 2025 01:36:39.446449041 CET | 443 | 49701 | 20.74.19.45 | 192.168.2.5 |
Mar 14, 2025 01:36:39.451116085 CET | 443 | 49698 | 20.74.19.45 | 192.168.2.5 |
Mar 14, 2025 01:36:39.459172010 CET | 49704 | 80 | 192.168.2.5 | 199.232.214.172 |
Mar 14, 2025 01:36:39.471795082 CET | 443 | 49698 | 20.74.19.45 | 192.168.2.5 |
Mar 14, 2025 01:36:39.471810102 CET | 443 | 49698 | 20.74.19.45 | 192.168.2.5 |
Mar 14, 2025 01:36:39.471822023 CET | 443 | 49698 | 20.74.19.45 | 192.168.2.5 |
Mar 14, 2025 01:36:39.471859932 CET | 443 | 49698 | 20.74.19.45 | 192.168.2.5 |
Mar 14, 2025 01:36:39.471893072 CET | 49698 | 443 | 192.168.2.5 | 20.74.19.45 |
Mar 14, 2025 01:36:39.471940041 CET | 49698 | 443 | 192.168.2.5 | 20.74.19.45 |
Mar 14, 2025 01:36:39.488313913 CET | 443 | 49698 | 20.74.19.45 | 192.168.2.5 |
Mar 14, 2025 01:36:39.488329887 CET | 443 | 49698 | 20.74.19.45 | 192.168.2.5 |
Mar 14, 2025 01:36:39.488342047 CET | 443 | 49698 | 20.74.19.45 | 192.168.2.5 |
Mar 14, 2025 01:36:39.488354921 CET | 443 | 49698 | 20.74.19.45 | 192.168.2.5 |
Mar 14, 2025 01:36:39.488409042 CET | 49698 | 443 | 192.168.2.5 | 20.74.19.45 |
Mar 14, 2025 01:36:39.488440037 CET | 49698 | 443 | 192.168.2.5 | 20.74.19.45 |
Mar 14, 2025 01:36:39.527755022 CET | 443 | 49701 | 20.74.19.45 | 192.168.2.5 |
Mar 14, 2025 01:36:39.527851105 CET | 49701 | 443 | 192.168.2.5 | 20.74.19.45 |
Mar 14, 2025 01:36:39.959172964 CET | 49672 | 443 | 192.168.2.5 | 204.79.197.203 |
Mar 14, 2025 01:36:39.962380886 CET | 49698 | 443 | 192.168.2.5 | 20.74.19.45 |
Mar 14, 2025 01:36:39.962426901 CET | 49699 | 443 | 192.168.2.5 | 20.74.19.45 |
Mar 14, 2025 01:36:39.962449074 CET | 49701 | 443 | 192.168.2.5 | 20.74.19.45 |
Mar 14, 2025 01:36:39.962598085 CET | 49702 | 80 | 192.168.2.5 | 199.232.214.172 |
Mar 14, 2025 01:36:39.962682962 CET | 49703 | 80 | 192.168.2.5 | 2.23.77.188 |
Mar 14, 2025 01:36:42.365411997 CET | 49672 | 443 | 192.168.2.5 | 204.79.197.203 |
Mar 14, 2025 01:36:43.933100939 CET | 49722 | 443 | 192.168.2.5 | 23.60.203.209 |
Mar 14, 2025 01:36:43.933125973 CET | 443 | 49722 | 23.60.203.209 | 192.168.2.5 |
Mar 14, 2025 01:36:43.933429003 CET | 49722 | 443 | 192.168.2.5 | 23.60.203.209 |
Mar 14, 2025 01:36:43.944967031 CET | 49722 | 443 | 192.168.2.5 | 23.60.203.209 |
Mar 14, 2025 01:36:43.944983006 CET | 443 | 49722 | 23.60.203.209 | 192.168.2.5 |
Mar 14, 2025 01:36:43.945681095 CET | 443 | 49722 | 23.60.203.209 | 192.168.2.5 |
Mar 14, 2025 01:36:43.946615934 CET | 49723 | 443 | 192.168.2.5 | 23.60.203.209 |
Mar 14, 2025 01:36:43.946685076 CET | 443 | 49723 | 23.60.203.209 | 192.168.2.5 |
Mar 14, 2025 01:36:43.946878910 CET | 49723 | 443 | 192.168.2.5 | 23.60.203.209 |
Mar 14, 2025 01:36:43.947307110 CET | 49723 | 443 | 192.168.2.5 | 23.60.203.209 |
Mar 14, 2025 01:36:43.947323084 CET | 443 | 49723 | 23.60.203.209 | 192.168.2.5 |
Mar 14, 2025 01:36:43.947732925 CET | 443 | 49723 | 23.60.203.209 | 192.168.2.5 |
Mar 14, 2025 01:36:43.948225021 CET | 49724 | 443 | 192.168.2.5 | 23.60.203.209 |
Mar 14, 2025 01:36:43.948276043 CET | 443 | 49724 | 23.60.203.209 | 192.168.2.5 |
Mar 14, 2025 01:36:43.948344946 CET | 49724 | 443 | 192.168.2.5 | 23.60.203.209 |
Mar 14, 2025 01:36:43.949206114 CET | 49724 | 443 | 192.168.2.5 | 23.60.203.209 |
Mar 14, 2025 01:36:43.949243069 CET | 443 | 49724 | 23.60.203.209 | 192.168.2.5 |
Mar 14, 2025 01:36:43.950088024 CET | 49724 | 443 | 192.168.2.5 | 23.60.203.209 |
Mar 14, 2025 01:36:46.214325905 CET | 49676 | 443 | 192.168.2.5 | 20.189.173.14 |
Mar 14, 2025 01:36:46.521676064 CET | 49676 | 443 | 192.168.2.5 | 20.189.173.14 |
Mar 14, 2025 01:36:47.131050110 CET | 49676 | 443 | 192.168.2.5 | 20.189.173.14 |
Mar 14, 2025 01:36:47.177911043 CET | 49672 | 443 | 192.168.2.5 | 204.79.197.203 |
Mar 14, 2025 01:36:48.396672010 CET | 49676 | 443 | 192.168.2.5 | 20.189.173.14 |
Mar 14, 2025 01:36:50.897250891 CET | 49676 | 443 | 192.168.2.5 | 20.189.173.14 |
Mar 14, 2025 01:36:53.454372883 CET | 49744 | 443 | 192.168.2.5 | 142.250.185.196 |
Mar 14, 2025 01:36:53.454417944 CET | 443 | 49744 | 142.250.185.196 | 192.168.2.5 |
Mar 14, 2025 01:36:53.454531908 CET | 49744 | 443 | 192.168.2.5 | 142.250.185.196 |
Mar 14, 2025 01:36:53.454879045 CET | 49744 | 443 | 192.168.2.5 | 142.250.185.196 |
Mar 14, 2025 01:36:53.454896927 CET | 443 | 49744 | 142.250.185.196 | 192.168.2.5 |
Mar 14, 2025 01:36:53.653197050 CET | 443 | 49744 | 142.250.185.196 | 192.168.2.5 |
Mar 14, 2025 01:36:53.654697895 CET | 49745 | 443 | 192.168.2.5 | 142.250.185.196 |
Mar 14, 2025 01:36:53.654757977 CET | 443 | 49745 | 142.250.185.196 | 192.168.2.5 |
Mar 14, 2025 01:36:53.655222893 CET | 49745 | 443 | 192.168.2.5 | 142.250.185.196 |
Mar 14, 2025 01:36:53.655512094 CET | 49745 | 443 | 192.168.2.5 | 142.250.185.196 |
Mar 14, 2025 01:36:53.655530930 CET | 443 | 49745 | 142.250.185.196 | 192.168.2.5 |
Mar 14, 2025 01:36:53.853735924 CET | 443 | 49745 | 142.250.185.196 | 192.168.2.5 |
Mar 14, 2025 01:36:55.253978014 CET | 49748 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:36:55.254018068 CET | 443 | 49748 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:36:55.254129887 CET | 49748 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:36:55.254132032 CET | 49749 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:36:55.254153013 CET | 443 | 49749 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:36:55.254264116 CET | 49749 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:36:55.254786968 CET | 49749 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:36:55.254786968 CET | 49748 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:36:55.254800081 CET | 443 | 49749 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:36:55.254805088 CET | 443 | 49748 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:36:55.453083038 CET | 443 | 49749 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:36:55.453423977 CET | 443 | 49748 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:36:55.453599930 CET | 49750 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:36:55.453629971 CET | 443 | 49750 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:36:55.453843117 CET | 49751 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:36:55.453885078 CET | 443 | 49751 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:36:55.453916073 CET | 49750 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:36:55.454184055 CET | 49750 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:36:55.454196930 CET | 443 | 49750 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:36:55.454224110 CET | 49751 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:36:55.454674959 CET | 49751 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:36:55.454691887 CET | 443 | 49751 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:36:55.653197050 CET | 443 | 49751 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:36:55.653510094 CET | 443 | 49750 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:36:55.710417032 CET | 49676 | 443 | 192.168.2.5 | 20.189.173.14 |
Mar 14, 2025 01:36:56.736057043 CET | 49755 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:36:56.736103058 CET | 443 | 49755 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:36:56.736186981 CET | 49755 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:36:56.736560106 CET | 49756 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:36:56.736598969 CET | 443 | 49756 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:36:56.736804008 CET | 49756 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:36:56.737445116 CET | 49755 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:36:56.737457037 CET | 443 | 49755 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:36:56.737863064 CET | 49756 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:36:56.737876892 CET | 443 | 49756 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:36:56.783544064 CET | 49672 | 443 | 192.168.2.5 | 204.79.197.203 |
Mar 14, 2025 01:36:56.937237978 CET | 443 | 49756 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:36:56.937819004 CET | 443 | 49755 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:36:56.937941074 CET | 49757 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:36:56.937982082 CET | 443 | 49757 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:36:56.938040972 CET | 49757 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:36:56.938357115 CET | 49758 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:36:56.938452005 CET | 443 | 49758 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:36:56.938546896 CET | 49758 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:36:56.938679934 CET | 49757 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:36:56.938697100 CET | 443 | 49757 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:36:56.938951015 CET | 49758 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:36:56.938996077 CET | 443 | 49758 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:36:57.137049913 CET | 443 | 49757 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:36:57.137156963 CET | 443 | 49758 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:36:58.809361935 CET | 49759 | 443 | 192.168.2.5 | 142.250.185.196 |
Mar 14, 2025 01:36:58.809408903 CET | 443 | 49759 | 142.250.185.196 | 192.168.2.5 |
Mar 14, 2025 01:36:58.809487104 CET | 49759 | 443 | 192.168.2.5 | 142.250.185.196 |
Mar 14, 2025 01:36:58.810311079 CET | 49759 | 443 | 192.168.2.5 | 142.250.185.196 |
Mar 14, 2025 01:36:58.810328960 CET | 443 | 49759 | 142.250.185.196 | 192.168.2.5 |
Mar 14, 2025 01:36:59.009772062 CET | 443 | 49759 | 142.250.185.196 | 192.168.2.5 |
Mar 14, 2025 01:36:59.010833979 CET | 49760 | 443 | 192.168.2.5 | 142.250.185.196 |
Mar 14, 2025 01:36:59.010884047 CET | 443 | 49760 | 142.250.185.196 | 192.168.2.5 |
Mar 14, 2025 01:36:59.010963917 CET | 49760 | 443 | 192.168.2.5 | 142.250.185.196 |
Mar 14, 2025 01:36:59.011255026 CET | 49760 | 443 | 192.168.2.5 | 142.250.185.196 |
Mar 14, 2025 01:36:59.011276007 CET | 443 | 49760 | 142.250.185.196 | 192.168.2.5 |
Mar 14, 2025 01:36:59.209559917 CET | 443 | 49760 | 142.250.185.196 | 192.168.2.5 |
Mar 14, 2025 01:37:02.159883022 CET | 49767 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:37:02.159929991 CET | 443 | 49767 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:37:02.159995079 CET | 49767 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:37:02.160393000 CET | 49768 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:37:02.160432100 CET | 443 | 49768 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:37:02.160625935 CET | 49768 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:37:02.161104918 CET | 49767 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:37:02.161119938 CET | 443 | 49767 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:37:02.161443949 CET | 49768 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:37:02.161457062 CET | 443 | 49768 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:37:02.353203058 CET | 49769 | 443 | 192.168.2.5 | 172.202.163.200 |
Mar 14, 2025 01:37:02.353250980 CET | 443 | 49769 | 172.202.163.200 | 192.168.2.5 |
Mar 14, 2025 01:37:02.353486061 CET | 49769 | 443 | 192.168.2.5 | 172.202.163.200 |
Mar 14, 2025 01:37:02.361628056 CET | 443 | 49767 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:37:02.361825943 CET | 443 | 49768 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:37:02.362195969 CET | 49770 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:37:02.362214088 CET | 443 | 49770 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:37:02.362298965 CET | 49770 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:37:02.362591028 CET | 49769 | 443 | 192.168.2.5 | 172.202.163.200 |
Mar 14, 2025 01:37:02.362593889 CET | 49771 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:37:02.362605095 CET | 443 | 49769 | 172.202.163.200 | 192.168.2.5 |
Mar 14, 2025 01:37:02.362632036 CET | 443 | 49771 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:37:02.362833977 CET | 49771 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:37:02.362895012 CET | 49770 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:37:02.362905979 CET | 443 | 49770 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:37:02.363111019 CET | 443 | 49769 | 172.202.163.200 | 192.168.2.5 |
Mar 14, 2025 01:37:02.363236904 CET | 49771 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:37:02.363255024 CET | 443 | 49771 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:37:02.368484974 CET | 49772 | 443 | 192.168.2.5 | 172.202.163.200 |
Mar 14, 2025 01:37:02.368521929 CET | 443 | 49772 | 172.202.163.200 | 192.168.2.5 |
Mar 14, 2025 01:37:02.368592024 CET | 49772 | 443 | 192.168.2.5 | 172.202.163.200 |
Mar 14, 2025 01:37:02.368906021 CET | 49772 | 443 | 192.168.2.5 | 172.202.163.200 |
Mar 14, 2025 01:37:02.368920088 CET | 443 | 49772 | 172.202.163.200 | 192.168.2.5 |
Mar 14, 2025 01:37:02.369337082 CET | 443 | 49772 | 172.202.163.200 | 192.168.2.5 |
Mar 14, 2025 01:37:02.416152000 CET | 49773 | 443 | 192.168.2.5 | 172.202.163.200 |
Mar 14, 2025 01:37:02.416184902 CET | 443 | 49773 | 172.202.163.200 | 192.168.2.5 |
Mar 14, 2025 01:37:02.416251898 CET | 49773 | 443 | 192.168.2.5 | 172.202.163.200 |
Mar 14, 2025 01:37:02.416671991 CET | 49773 | 443 | 192.168.2.5 | 172.202.163.200 |
Mar 14, 2025 01:37:02.416685104 CET | 443 | 49773 | 172.202.163.200 | 192.168.2.5 |
Mar 14, 2025 01:37:02.417218924 CET | 443 | 49773 | 172.202.163.200 | 192.168.2.5 |
Mar 14, 2025 01:37:02.436744928 CET | 49774 | 443 | 192.168.2.5 | 172.202.163.200 |
Mar 14, 2025 01:37:02.436789036 CET | 443 | 49774 | 172.202.163.200 | 192.168.2.5 |
Mar 14, 2025 01:37:02.436914921 CET | 49774 | 443 | 192.168.2.5 | 172.202.163.200 |
Mar 14, 2025 01:37:02.437334061 CET | 49774 | 443 | 192.168.2.5 | 172.202.163.200 |
Mar 14, 2025 01:37:02.437347889 CET | 443 | 49774 | 172.202.163.200 | 192.168.2.5 |
Mar 14, 2025 01:37:02.437773943 CET | 443 | 49774 | 172.202.163.200 | 192.168.2.5 |
Mar 14, 2025 01:37:02.485562086 CET | 49775 | 443 | 192.168.2.5 | 172.202.163.200 |
Mar 14, 2025 01:37:02.485658884 CET | 443 | 49775 | 172.202.163.200 | 192.168.2.5 |
Mar 14, 2025 01:37:02.485745907 CET | 49775 | 443 | 192.168.2.5 | 172.202.163.200 |
Mar 14, 2025 01:37:02.486460924 CET | 49775 | 443 | 192.168.2.5 | 172.202.163.200 |
Mar 14, 2025 01:37:02.486500025 CET | 443 | 49775 | 172.202.163.200 | 192.168.2.5 |
Mar 14, 2025 01:37:02.487036943 CET | 443 | 49775 | 172.202.163.200 | 192.168.2.5 |
Mar 14, 2025 01:37:02.509475946 CET | 49776 | 443 | 192.168.2.5 | 172.202.163.200 |
Mar 14, 2025 01:37:02.509533882 CET | 443 | 49776 | 172.202.163.200 | 192.168.2.5 |
Mar 14, 2025 01:37:02.509620905 CET | 49776 | 443 | 192.168.2.5 | 172.202.163.200 |
Mar 14, 2025 01:37:02.510014057 CET | 49776 | 443 | 192.168.2.5 | 172.202.163.200 |
Mar 14, 2025 01:37:02.510031939 CET | 443 | 49776 | 172.202.163.200 | 192.168.2.5 |
Mar 14, 2025 01:37:02.510481119 CET | 443 | 49776 | 172.202.163.200 | 192.168.2.5 |
Mar 14, 2025 01:37:02.548212051 CET | 49777 | 443 | 192.168.2.5 | 172.202.163.200 |
Mar 14, 2025 01:37:02.548242092 CET | 443 | 49777 | 172.202.163.200 | 192.168.2.5 |
Mar 14, 2025 01:37:02.548316002 CET | 49777 | 443 | 192.168.2.5 | 172.202.163.200 |
Mar 14, 2025 01:37:02.548614979 CET | 49777 | 443 | 192.168.2.5 | 172.202.163.200 |
Mar 14, 2025 01:37:02.548628092 CET | 443 | 49777 | 172.202.163.200 | 192.168.2.5 |
Mar 14, 2025 01:37:02.549092054 CET | 443 | 49777 | 172.202.163.200 | 192.168.2.5 |
Mar 14, 2025 01:37:02.561532974 CET | 443 | 49771 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:37:02.561594963 CET | 443 | 49770 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:37:02.577866077 CET | 49778 | 443 | 192.168.2.5 | 172.202.163.200 |
Mar 14, 2025 01:37:02.577903032 CET | 443 | 49778 | 172.202.163.200 | 192.168.2.5 |
Mar 14, 2025 01:37:02.578130960 CET | 49778 | 443 | 192.168.2.5 | 172.202.163.200 |
Mar 14, 2025 01:37:02.578475952 CET | 49778 | 443 | 192.168.2.5 | 172.202.163.200 |
Mar 14, 2025 01:37:02.578490019 CET | 443 | 49778 | 172.202.163.200 | 192.168.2.5 |
Mar 14, 2025 01:37:02.578958035 CET | 443 | 49778 | 172.202.163.200 | 192.168.2.5 |
Mar 14, 2025 01:37:05.318948984 CET | 49676 | 443 | 192.168.2.5 | 20.189.173.14 |
Mar 14, 2025 01:37:10.699284077 CET | 49783 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:37:10.699290037 CET | 49784 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:37:10.699326038 CET | 443 | 49783 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:37:10.699331999 CET | 443 | 49784 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:37:10.699409962 CET | 49783 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:37:10.699413061 CET | 49784 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:37:10.701138973 CET | 49784 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:37:10.701153994 CET | 443 | 49784 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:37:10.702507973 CET | 49783 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:37:10.702527046 CET | 443 | 49783 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:37:10.901205063 CET | 443 | 49784 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:37:10.901745081 CET | 49785 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:37:10.901777029 CET | 443 | 49785 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:37:10.901803017 CET | 443 | 49783 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:37:10.901884079 CET | 49785 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:37:10.902154922 CET | 49786 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:37:10.902189970 CET | 443 | 49786 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:37:10.902406931 CET | 49786 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:37:10.902529001 CET | 49785 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:37:10.902543068 CET | 443 | 49785 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:37:10.902751923 CET | 49786 | 443 | 192.168.2.5 | 185.199.108.153 |
Mar 14, 2025 01:37:10.902769089 CET | 443 | 49786 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:37:11.101608992 CET | 443 | 49785 | 185.199.108.153 | 192.168.2.5 |
Mar 14, 2025 01:37:11.101825953 CET | 443 | 49786 | 185.199.108.153 | 192.168.2.5 |
Timestamp | Source Port | Dest Port | Source IP | Dest IP |
---|---|---|---|---|
Mar 14, 2025 01:36:49.374475002 CET | 53 | 56488 | 1.1.1.1 | 192.168.2.5 |
Mar 14, 2025 01:36:49.507914066 CET | 53 | 55896 | 1.1.1.1 | 192.168.2.5 |
Mar 14, 2025 01:36:53.446407080 CET | 56788 | 53 | 192.168.2.5 | 1.1.1.1 |
Mar 14, 2025 01:36:53.446576118 CET | 61496 | 53 | 192.168.2.5 | 1.1.1.1 |
Mar 14, 2025 01:36:53.453174114 CET | 53 | 56788 | 1.1.1.1 | 192.168.2.5 |
Mar 14, 2025 01:36:53.453373909 CET | 53 | 61496 | 1.1.1.1 | 192.168.2.5 |
Mar 14, 2025 01:36:55.244497061 CET | 58895 | 53 | 192.168.2.5 | 1.1.1.1 |
Mar 14, 2025 01:36:55.244497061 CET | 52714 | 53 | 192.168.2.5 | 1.1.1.1 |
Mar 14, 2025 01:36:55.252785921 CET | 53 | 58895 | 1.1.1.1 | 192.168.2.5 |
Mar 14, 2025 01:36:55.252994061 CET | 53 | 52714 | 1.1.1.1 | 192.168.2.5 |
Timestamp | Source IP | Dest IP | Trans ID | OP Code | Name | Type | Class | DNS over HTTPS |
---|---|---|---|---|---|---|---|---|
Mar 14, 2025 01:36:53.446407080 CET | 192.168.2.5 | 1.1.1.1 | 0xf3fc | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Mar 14, 2025 01:36:53.446576118 CET | 192.168.2.5 | 1.1.1.1 | 0x5d49 | Standard query (0) | 65 | IN (0x0001) | false | |
Mar 14, 2025 01:36:55.244497061 CET | 192.168.2.5 | 1.1.1.1 | 0xb072 | Standard query (0) | 65 | IN (0x0001) | false | |
Mar 14, 2025 01:36:55.244497061 CET | 192.168.2.5 | 1.1.1.1 | 0xf812 | Standard query (0) | A (IP address) | IN (0x0001) | false |
Timestamp | Source IP | Dest IP | Trans ID | Reply Code | Name | CName | Address | Type | Class | DNS over HTTPS |
---|---|---|---|---|---|---|---|---|---|---|
Mar 14, 2025 01:36:53.453174114 CET | 1.1.1.1 | 192.168.2.5 | 0xf3fc | No error (0) | 142.250.185.196 | A (IP address) | IN (0x0001) | false | ||
Mar 14, 2025 01:36:53.453373909 CET | 1.1.1.1 | 192.168.2.5 | 0x5d49 | No error (0) | 65 | IN (0x0001) | false | |||
Mar 14, 2025 01:36:55.252994061 CET | 1.1.1.1 | 192.168.2.5 | 0xf812 | No error (0) | 185.199.108.153 | A (IP address) | IN (0x0001) | false | ||
Mar 14, 2025 01:36:55.252994061 CET | 1.1.1.1 | 192.168.2.5 | 0xf812 | No error (0) | 185.199.109.153 | A (IP address) | IN (0x0001) | false | ||
Mar 14, 2025 01:36:55.252994061 CET | 1.1.1.1 | 192.168.2.5 | 0xf812 | No error (0) | 185.199.110.153 | A (IP address) | IN (0x0001) | false | ||
Mar 14, 2025 01:36:55.252994061 CET | 1.1.1.1 | 192.168.2.5 | 0xf812 | No error (0) | 185.199.111.153 | A (IP address) | IN (0x0001) | false |
Click to jump to process
Click to jump to process
Click to jump to process
Target ID: | 0 |
Start time: | 20:36:44 |
Start date: | 13/03/2025 |
Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
Wow64 process (32bit): | false |
Commandline: | |
Imagebase: | 0x7ff761830000 |
File size: | 3'388'000 bytes |
MD5 hash: | E81F54E6C1129887AEA47E7D092680BF |
Has elevated privileges: | true |
Has administrator privileges: | true |
Programmed in: | C, C++ or other language |
Reputation: | low |
Has exited: | false |
Target ID: | 3 |
Start time: | 20:36:47 |
Start date: | 13/03/2025 |
Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
Wow64 process (32bit): | false |
Commandline: | |
Imagebase: | 0x7ff761830000 |
File size: | 3'388'000 bytes |
MD5 hash: | E81F54E6C1129887AEA47E7D092680BF |
Has elevated privileges: | true |
Has administrator privileges: | true |
Programmed in: | C, C++ or other language |
Reputation: | low |
Has exited: | false |
Target ID: | 7 |
Start time: | 20:36:50 |
Start date: | 13/03/2025 |
Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
Wow64 process (32bit): | false |
Commandline: | |
Imagebase: | 0x7ff761830000 |
File size: | 3'388'000 bytes |
MD5 hash: | E81F54E6C1129887AEA47E7D092680BF |
Has elevated privileges: | true |
Has administrator privileges: | true |
Programmed in: | C, C++ or other language |
Reputation: | low |
Has exited: | false |
Target ID: | 10 |
Start time: | 20:36:54 |
Start date: | 13/03/2025 |
Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
Wow64 process (32bit): | false |
Commandline: | |
Imagebase: | 0x7ff761830000 |
File size: | 3'388'000 bytes |
MD5 hash: | E81F54E6C1129887AEA47E7D092680BF |
Has elevated privileges: | true |
Has administrator privileges: | true |
Programmed in: | C, C++ or other language |
Reputation: | low |
Has exited: | true |