Edit tour

Windows Analysis Report
http://girouardelectricien.ca

Overview

General Information

Sample URL:	http://girouardelectricien.ca
Analysis ID:	1642952
Infos:

Detection

Score:	52
Range:	0 - 100
Confidence:	100%

Signatures

Antivirus detection for URL or domain

AI detected suspicious Javascript

Connects to several IPs in different countries

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

Detected suspicious crossdomain redirect

HTML page contains hidden javascript code

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6292 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6776 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1904,i,769915759295952852,15154227713987146391,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2116 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Suricata Signatures

ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-03-19T12:49:37.804373+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.18	50148	104.18.26.193	443	TCP
2025-03-19T12:49:37.814818+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.18	50146	18.203.184.189	443	TCP
2025-03-19T12:49:37.973621+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.18	50173	34.254.88.199	443	TCP
2025-03-19T12:49:38.756048+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.18	50242	18.184.206.66	443	TCP

ETPRO EXPLOIT Possible dhcpcd IPv6 IA/NA Buffer Overflow [Advertise 0x02] Inbound (CVE-2019-11577)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-03-19T12:49:38.103725+0100	2849429	1	Attempted Administrator Privilege Gain	1.1.1.1	53	192.168.2.18	58163	UDP

HTTP traffic detected: POST /1/batch/1/OE/ HTTP/1.1Host: fls-na.amazon.comConnection: keep-aliveContent-Length: 22587sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: text/plain;charset=UTF-8sec-ch-ua-mobile: ?0Accept: */*Origin: https://www.amazon.comSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.amazon.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Length: 9Date: Wed, 19 Mar 2025 11:49:38 GMTVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: ServerDate: Wed, 19 Mar 2025 11:49:39 GMTContent-Length: 29Connection: closex-amz-rid: 81VNPYHRG5KKD68TZFWSx-amzn-RequestId: b97f445c-c90d-4e65-80f2-c9ab494d9f2cVary: Content-Type,Accept-Encoding,User-AgentStrict-Transport-Security: max-age=47474747; includeSubDomains; preload

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50268 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50291 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50293 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50258 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50281 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50236 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 50188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50302 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50216
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50218
Source: unknown	Network traffic detected: HTTP traffic on port 50254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50217
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50219
Source: unknown	Network traffic detected: HTTP traffic on port 50174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50210
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50212
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50211
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50213
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50227
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50226
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50229
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50228
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49696
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 50186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50221
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50220
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50223
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50222
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50225
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50224
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50238
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50237
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49687
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50239
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50230
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50232
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50231
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50234
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50233
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50236
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50235
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50288 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50198 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50249
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50248
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50241
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50240
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 50150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50243
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50242
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50245
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50244
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 50224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50247
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50246
Source: unknown	Network traffic detected: HTTP traffic on port 50266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50250
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 50117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 50278 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50304 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 50256 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50205
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50204
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50207
Source: unknown	Network traffic detected: HTTP traffic on port 50196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50206
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50209
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50208
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50316 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50200
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50202
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50174
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50176
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50179
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50180
Source: unknown	Network traffic detected: HTTP traffic on port 50263 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50182
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50181
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50183
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50251 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50186
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50185
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50188
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50187
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50189
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50216 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50191
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50190
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50193
Source: unknown	Network traffic detected: HTTP traffic on port 50159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50192
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50195
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50194
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50275 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50197
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50196
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50199
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50198
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 50241 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50139
Source: unknown	Network traffic detected: HTTP traffic on port 50170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50138
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 50149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50130
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50134
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50137
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50136
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50140
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 50253 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50149
Source: unknown	Network traffic detected: HTTP traffic on port 50299 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50263
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50141
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50262
Source: unknown	Network traffic detected: HTTP traffic on port 50318 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50143
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50145
Source: unknown	Network traffic detected: HTTP traffic on port 50226 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50148
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50269
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50147
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50270
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50151
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50272
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50150
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50271
Source: unknown	Network traffic detected: HTTP traffic on port 50103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50153
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50152
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50273
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50155
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50154
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50157
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50156
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50277

Source: unknown	HTTPS traffic detected: 216.58.212.164:443 -> 192.168.2.18:49841 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.164:443 -> 192.168.2.18:49979 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.164:443 -> 192.168.2.18:49980 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.164:443 -> 192.168.2.18:49981 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.164:443 -> 192.168.2.18:49982 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.164:443 -> 192.168.2.18:49983 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.164:443 -> 192.168.2.18:49984 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.161:443 -> 192.168.2.18:49989 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.33:443 -> 192.168.2.18:49987 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.33:443 -> 192.168.2.18:49988 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.164:443 -> 192.168.2.18:49997 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.164:443 -> 192.168.2.18:49998 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.164:443 -> 192.168.2.18:49999 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.164:443 -> 192.168.2.18:50001 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.164:443 -> 192.168.2.18:50002 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.164:443 -> 192.168.2.18:50003 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.164:443 -> 192.168.2.18:50004 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.164:443 -> 192.168.2.18:50006 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.164:443 -> 192.168.2.18:50009 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.51.204.198:443 -> 192.168.2.18:50016 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.18:50017 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.32.1:443 -> 192.168.2.18:50018 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.198.106.197:443 -> 192.168.2.18:50019 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.66.128.77:443 -> 192.168.2.18:50023 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.66.128.77:443 -> 192.168.2.18:50024 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.172.103.29:443 -> 192.168.2.18:50025 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.172.103.29:443 -> 192.168.2.18:50026 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.161.81.121:443 -> 192.168.2.18:50027 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.172.246.141:443 -> 192.168.2.18:50031 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.205.195.144:443 -> 192.168.2.18:50035 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.66.128.77:443 -> 192.168.2.18:50037 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.172.246.141:443 -> 192.168.2.18:50039 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.172.246.141:443 -> 192.168.2.18:50040 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.245.32.110:443 -> 192.168.2.18:50044 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.245.32.110:443 -> 192.168.2.18:50046 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.66.143.128:443 -> 192.168.2.18:50048 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.245.32.110:443 -> 192.168.2.18:50049 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.172.103.29:443 -> 192.168.2.18:50050 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.172.103.29:443 -> 192.168.2.18:50051 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.172.246.141:443 -> 192.168.2.18:50047 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.138.3.93:443 -> 192.168.2.18:50098 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.215.128.78:443 -> 192.168.2.18:50084 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.215.132.93:443 -> 192.168.2.18:50097 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 98.82.157.231:443 -> 192.168.2.18:50117 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.215.132.129:443 -> 192.168.2.18:50129 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.215.132.93:443 -> 192.168.2.18:50134 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.26.193:443 -> 192.168.2.18:50148 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.248.119.252:443 -> 192.168.2.18:50149 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.146.152:443 -> 192.168.2.18:50150 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.245.39.216:443 -> 192.168.2.18:50152 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.184.23.137:443 -> 192.168.2.18:50153 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 217.182.178.233:443 -> 192.168.2.18:50147 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.89.210.153:443 -> 192.168.2.18:50145 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 198.47.127.19:443 -> 192.168.2.18:50155 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.214.162.87:443 -> 192.168.2.18:50151 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.203.184.189:443 -> 192.168.2.18:50146 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.173.144.138:443 -> 192.168.2.18:50158 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.202.238.105:443 -> 192.168.2.18:50160 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.236.64:443 -> 192.168.2.18:50162 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.194.53.123:443 -> 192.168.2.18:50159 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.41.104:443 -> 192.168.2.18:50168 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 198.47.127.19:443 -> 192.168.2.18:50166 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.214.140.188:443 -> 192.168.2.18:50163 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 37.157.6.237:443 -> 192.168.2.18:50164 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.26.193:443 -> 192.168.2.18:50170 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.36.150.184:443 -> 192.168.2.18:50167 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.184.23.137:443 -> 192.168.2.18:50172 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.36.150.184:443 -> 192.168.2.18:50167 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.1.228.241:443 -> 192.168.2.18:50169 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.254.88.199:443 -> 192.168.2.18:50173 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.236.64:443 -> 192.168.2.18:50184 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.28.221.183:443 -> 192.168.2.18:50182 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 198.47.127.205:443 -> 192.168.2.18:50188 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.162:443 -> 192.168.2.18:50189 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.28.221.183:443 -> 192.168.2.18:50191 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.88.131.7:443 -> 192.168.2.18:50157 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 198.47.127.205:443 -> 192.168.2.18:50194 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.253.35:443 -> 192.168.2.18:50200 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.78.254.47:443 -> 192.168.2.18:50193 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.241.62.124:443 -> 192.168.2.18:50203 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.98.64.218:443 -> 192.168.2.18:50207 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.215.237.72:443 -> 192.168.2.18:50206 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 98.82.156.207:443 -> 192.168.2.18:50197 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 141.226.228.48:443 -> 192.168.2.18:50210 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 98.82.156.207:443 -> 192.168.2.18:50199 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 98.82.156.207:443 -> 192.168.2.18:50202 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 98.82.156.207:443 -> 192.168.2.18:50205 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.202.254.7:443 -> 192.168.2.18:50212 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.214.136.108:443 -> 192.168.2.18:50219 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.76.73.3:443 -> 192.168.2.18:50215 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.121.32:443 -> 192.168.2.18:50222 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 98.82.156.207:443 -> 192.168.2.18:50209 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.248.143.250:443 -> 192.168.2.18:50220 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.248.119.251:443 -> 192.168.2.18:50225 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 98.82.156.207:443 -> 192.168.2.18:50211 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.40.173:443 -> 192.168.2.18:50228 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.202.254.7:443 -> 192.168.2.18:50224 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.121.23:443 -> 192.168.2.18:50233 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.214.136.108:443 -> 192.168.2.18:50231 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.186.196.148:443 -> 192.168.2.18:50232 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.248.119.251:443 -> 192.168.2.18:50234 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 154.57.158.115:443 -> 192.168.2.18:50230 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 98.82.157.231:443 -> 192.168.2.18:50223 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.22.50.98:443 -> 192.168.2.18:50236 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.214.136.108:443 -> 192.168.2.18:50238 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.184.206.66:443 -> 192.168.2.18:50242 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.35.207.216:443 -> 192.168.2.18:50244 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.98.64.218:443 -> 192.168.2.18:50248 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.244.18.38:443 -> 192.168.2.18:50249 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 76.223.111.18:443 -> 192.168.2.18:50252 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.226:443 -> 192.168.2.18:50255 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.186.196.148:443 -> 192.168.2.18:50257 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 77.243.51.122:443 -> 192.168.2.18:50254 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 76.223.111.18:443 -> 192.168.2.18:50259 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.159.8:443 -> 192.168.2.18:50263 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.130.132:443 -> 192.168.2.18:50262 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.210.15.1:443 -> 192.168.2.18:50256 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.172.246.141:443 -> 192.168.2.18:50279 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.172.246.141:443 -> 192.168.2.18:50280 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.172.246.141:443 -> 192.168.2.18:50278 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.215.130.62:443 -> 192.168.2.18:50281 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.35.207.216:443 -> 192.168.2.18:50304 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.194.42.187:443 -> 192.168.2.18:50316 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir6292_14923645

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir6292_14923645

Source: classification engine

Classification label: mal52.win@22/89@228/697

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1904,i,769915759295952852,15154227713987146391,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2116 /prefetch:3
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1904,i,769915759295952852,15154227713987146391,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2116 /prefetch:3
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label	Link
http://girouardelectricien.ca	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=girouardelect&oit=1&cp=13&pgcl=2&gs_rn=42&psi=TSFZ5CKiVh6M0Fyx&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	0%	Avira URL Cloud	safe
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=girouarde&oit=1&cp=9&pgcl=2&gs_rn=42&psi=TSFZ5CKiVh6M0Fyx&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	0%	Avira URL Cloud	safe
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=girouard&oit=1&cp=8&pgcl=2&gs_rn=42&psi=TSFZ5CKiVh6M0Fyx&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	0%	Avira URL Cloud	safe
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=gir&oit=1&cp=3&pgcl=2&gs_rn=42&psi=TSFZ5CKiVh6M0Fyx&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	0%	Avira URL Cloud	safe
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=girouardelectri&oit=1&cp=15&pgcl=2&gs_rn=42&psi=TSFZ5CKiVh6M0Fyx&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	0%	Avira URL Cloud	safe
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=girouardelec&oit=1&cp=12&pgcl=2&gs_rn=42&psi=TSFZ5CKiVh6M0Fyx&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	0%	Avira URL Cloud	safe
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=girouardel&oit=1&cp=10&pgcl=2&gs_rn=42&psi=TSFZ5CKiVh6M0Fyx&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	0%	Avira URL Cloud	safe
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=girouardele&oit=1&cp=11&pgcl=2&gs_rn=42&psi=TSFZ5CKiVh6M0Fyx&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	0%	Avira URL Cloud	safe
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=g&oit=1&cp=1&pgcl=2&gs_rn=42&psi=TSFZ5CKiVh6M0Fyx&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	0%	Avira URL Cloud	safe
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=girouardelectr&oit=1&cp=14&pgcl=2&gs_rn=42&psi=TSFZ5CKiVh6M0Fyx&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	0%	Avira URL Cloud	safe
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=gi&oit=1&cp=2&pgcl=2&gs_rn=42&psi=TSFZ5CKiVh6M0Fyx&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	0%	Avira URL Cloud	safe
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=giroua&oit=1&cp=6&pgcl=2&gs_rn=42&psi=TSFZ5CKiVh6M0Fyx&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	0%	Avira URL Cloud	safe
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=giro&oit=1&cp=4&pgcl=2&gs_rn=42&psi=TSFZ5CKiVh6M0Fyx&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	0%	Avira URL Cloud	safe
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=girouar&oit=1&cp=7&pgcl=2&gs_rn=42&psi=TSFZ5CKiVh6M0Fyx&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	0%	Avira URL Cloud	safe
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=girou&oit=1&cp=5&pgcl=2&gs_rn=42&psi=TSFZ5CKiVh6M0Fyx&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	0%	Avira URL Cloud	safe
https://lh5.googleusercontent.com/p/AF1QipOaG2_DNszZcP6TAD7Ov3zv1JYH5IBi6MADzbb8=w92-h92-n-k-no	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/gps-cs-s/AB5caB_FjSDso5EqeiQ_756uSbu_3xQCAcE-UQzGLwZto8l9dIz_UzZUdvym9l_St_mSAuaPEnxM_FN_xlDxesrS1LROIfBEDUeJejavsAYWTYax1DggaxQMseCUu7kYenPx_WbhgE0obg=w92-h92-n-k-no	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/gps-cs-s/AB5caB85HA_uS5isOpc77MTPqgy5hgkrIzVtTjsOCRi9ATU91C2C3BWjQmIQcJhU3SlBR20gmdVd-SoXSvMCgjEsqXYDHrix05-cQZMX0TQiiBMGFuJPNH7eC9PS7vS6y3Q7u8RJEgiF=w92-h92-n-k-no	0%	Avira URL Cloud	safe
https://www.amazon.com/favicon.ico	0%	Avira URL Cloud	safe
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=girouardelectrici&oit=1&cp=17&pgcl=2&gs_rn=42&psi=TSFZ5CKiVh6M0Fyx&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	0%	Avira URL Cloud	safe
https://girouardelectricien.ca/	0%	Avira URL Cloud	safe
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=girouardelectricien.c&oit=1&cp=21&pgcl=2&gs_rn=42&psi=TSFZ5CKiVh6M0Fyx&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	0%	Avira URL Cloud	safe
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=girouardelectricie&oit=1&cp=18&pgcl=2&gs_rn=42&psi=TSFZ5CKiVh6M0Fyx&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	0%	Avira URL Cloud	safe
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=girouardelectricien&oit=1&cp=19&pgcl=2&gs_rn=42&psi=TSFZ5CKiVh6M0Fyx&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	0%	Avira URL Cloud	safe
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=girouardelectric&oit=1&cp=16&pgcl=2&gs_rn=42&psi=TSFZ5CKiVh6M0Fyx&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	0%	Avira URL Cloud	safe
https://urquhar.tapest.cfd/?utm_term=7483486446028849181&tid=57696e3332	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/captcha/fmvtfjch/Captcha_vbyxwejcxm.jpg	0%	Avira URL Cloud	safe
https://urquhar.tapest.cfd/proc.php?5ca2156095f2300d15b19cd7dc9e6d8e9d1107b5	0%	Avira URL Cloud	safe
https://infosystemsllc.com/?cvdauh53kl6c73fkflk0	100%	Avira URL Cloud	malware
http://girouardelectricien.ca/	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/csminstrumentation/ue-base-1c399ad9886cab69575e1e5ee15c61a1._V313498596_.js	0%	Avira URL Cloud	safe
https://fls-na.amazon.com/1/oc-csi/1/OP/requestId=V5RNPB8C0EDE2KSFNVVX&js=1	0%	Avira URL Cloud	safe
https://healthy-lifestyle.yoghue.icu/help/?32161731835980&extra_param_1=cvdauh53kl6c73fkflk0	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/csminstrumentation/csm-captcha-instrumentation.min.js	0%	Avira URL Cloud	safe
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=girouardelectricien.ca&oit=3&cp=22&pgcl=2&gs_rn=42&psi=TSFZ5CKiVh6M0Fyx&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	0%	Avira URL Cloud	safe
https://urquhar.tapest.cfd/?utm_medium=9eb2bcdc89976429bc64127056a4a9d5d3a2b57a&utm_campaign=cid:11005&cid=11005-14814-202503191449212154	0%	Avira URL Cloud	safe
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=girouardelectricien.&oit=1&cp=20&pgcl=2&gs_rn=42&psi=TSFZ5CKiVh6M0Fyx&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/csminstrumentation/rd-script-6d68177fa6061598e9509dc4b5bdd08d.js	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/AUIClients/AmazonUI-3c913031596ca78a3768f4e934b1cc02ce238101.secure.min._V1_.css	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/amazonui/sprites/aui_sprite_0007-1x._V383827579_.png	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/AUIClients/ClientSideMetricsAUIJavascript-51171fbdd28e1a7a61e922e8f0272af8bc74d37b.secure.variant-desktop-session-snapshot-keypress.min._V2_.js	0%	Avira URL Cloud	safe
https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:132-9841393-1029239:G0CPK3K7GV2RQVVSYW5M$uedata=s:%2Frd%2Fuedata%3Fstaticb%26id%3DG0CPK3K7GV2RQVVSYW5M:0	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/G/01/csm/showads.v2.js?bannerid=-ad-sidebar.	0%	Avira URL Cloud	safe
https://capi.connatix.com/us/pixel?pId=32&puId=BYd5dq-pSR2KRXDPaa16fg&callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DconnatixHMT%26id%3D%7BpuId%7D&gdpr_consent=	0%	Avira URL Cloud	safe
https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:132-9841393-1029239:G0CPK3K7GV2RQVVSYW5M$uedata=s:%2Frd%2Fuedata%3Fld%26v%3D0.308124.0%26id%3DG0CPK3K7GV2RQVVSYW5M%26ctb%3D1%26sc0%3Dp13n-rvi_desktop-rvi_0%26bb0%3D1583%26be0%3D1583%26pc0%3D1656%26ld0%3D1656%26t0%3D1742384976090%26pty%3DGateway%26spty%3Ddesktop%26pti%3Ddesktop%26tid%3DG0CPK3K7GV2RQVVSYW5M%26aftb%3D1%26lob%3D1:1655	0%	Avira URL Cloud	safe
https://s.amazon-adsystem.com/iu3?d=amazon.com&slot=navFooter&a2=0101aabb05e914b695dbdb88657aa3230c70392423ad4c6db47ffd0f7fbdb3d79af7&old_oo=0&ts=1742384975292&s=AaPWaWOutvlc4Fss129nga4stJfkgX2Oj9F1OyUJdj0H&gdpr_consent=&gdpr_consent_avl=&cb=1742384975292&dcc=t	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/I/01rGP6HIADL.js?AUIClients/GenericObservableJS	0%	Avira URL Cloud	safe
https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:132-9841393-1029239:G0CPK3K7GV2RQVVSYW5M$uedata=s:%2Frd%2Fuedata%3Fld%26v%3D0.308124.0%26id%3DG0CPK3K7GV2RQVVSYW5M%26sc0%3Daui%3Asw%3Appft%3Acallback_ricb%26bb0%3D163%26pc0%3D425%26ld0%3D425%26t0%3D1742384974859%26sc1%3Dportal-bb%26pc1%3D9%26ld1%3D9%26t1%3D1742384974618%26sc2%3DheroAf%26cf2%3D239%26pc2%3D239%26ld2%3D239%26t2%3D1742384974673%26sc3%3Dh1Af%26cf3%3D240%26pc3%3D240%26ld3%3D240%26t3%3D1742384974674%26sc4%3DnavCF%26cf4%3D270%26pc4%3D270%26ld4%3D270%26t4%3D1742384974704%26sc5%3DcsmCELLSframework%26bb5%3D389%26pc5%3D389%26ld5%3D389%26t5%3D1742384974823%26sc6%3DcsmCELLSpdm%26bb6%3D389%26pc6%3D390%26ld6%3D390%26t6%3D1742384974824%26sc7%3DcsmCELLSvpm%26bb7%3D390%26pc7%3D390%26ld7%3D390%26t7%3D1742384974824%26sc8%3DcsmCELLSfem%26bb8%3D390%26pc8%3D390%26ld8%3D390%26t8%3D1742384974824%26sc9%3Due_sushi_v1%26bb9%3D390%26pc9%3D391%26ld9%3D391%26t9%3D1742384974825%26sc10%3DjQueryReady%26cf10%3D397%26pc10%3D397%26ld10%3D397%26t10%3D1742384974831%26sc11%3Dgateway-asset-load%26cf11%3D399%26pc11%3D399%26ld11%3D399%26t11%3D1742384974833%26sc12%3DgwGridInit%26cf12%3D399%26pc12%3D399%26ld12%3D399%26t12%3D1742384974833%26sc13%3DgwBTFGridInit%26cf13%3D402%26pc13%3D402%26ld13%3D402%26t13%3D1742384974836%26sc14%3DjQueryDomReady%26cf14%3D418%26pc14%3D418%26ld14%3D418%26t14%3D1742384974852%26sc15%3Ddesktop-grid-2-visible%26cf15%3D420%26pc15%3D420%26ld15%3D420%26t15%3D1742384974854%26sc16%3Ddesktop-grid-1-visible%26cf16%3D420%26pc16%3D420%26ld16%3D420%26t16%3D1742384974854%26sc17%3Dgw-ftGr-desktop-hero-1-visible%26cf17%3D420%26pc17%3D420%26ld17%3D420%26t17%3D1742384974854%26sc18%3Ddesktop-grid-4-visible%26cf18%3D421%26pc18%3D421%26ld18%3D421%26t18%3D1742384974855%26sc19%3Ddesktop-grid-3-visible%26cf19%3D525%26pc19%3D525%26ld19%3D525%26t19%3D1742384974959%26sc20%3Ddesktop-btf-grid-1-visible%26cf20%3D568%26pc20%3D568%26ld20%3D568%26t20%3D1742384975002%26sc21%3Ddesktop-btf-grid-2-visible%26cf21%3D572%26pc21%3D572%26ld21%3D572%26t21%3D1742384975006%26sc22%3Ddesktop-btf-grid-3-visible%26cf22%3D576%26pc22%3D576%26ld22%3D576%26t22%3D1742384975010%26sc23%3Ddesktop-btf-grid-4-visible%26cf23%3D581%26pc23%3D581%26ld23%3D581%26t23%3D1742384975015%26ctb%3D1:812	0%	Avira URL Cloud	safe
https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:132-9841393-1029239:G0CPK3K7GV2RQVVSYW5M$uedata=s:%2Frd%2Fuedata%3Fat%26v%3D0.308124.0%26id%3DG0CPK3K7GV2RQVVSYW5M%26m%3D1%26sc%3Dcsa%3Alcp%26lcp%3D444%26pc%3D989%26at%3D989%26t%3D1742384975423%26pty%3DGateway%26spty%3Ddesktop%26pti%3Ddesktop%26tid%3DG0CPK3K7GV2RQVVSYW5M%26aftb%3D1%26lob%3D1:988	0%	Avira URL Cloud	safe
https://www.amazon.com/rd/uedata?ld&v=0.308124.0&id=G0CPK3K7GV2RQVVSYW5M&sw=1280&sh=1024&vw=1263&vh=897&m=1&sc=G0CPK3K7GV2RQVVSYW5M&ue=4&bb=174&ns=190&ne=237&be=387&fcp=244&fp=244&cf=420&pc=811&tc=-488&na_=-488&ul_=-16&_ul=-16&rd_=-483&_rd=-337&fe_=-337&lk_=-337&_lk=-337&co_=-337&_co=-337&sc_=-1742384974434&rq_=-336&rs_=-21&_rs=251&dl_=-15&di_=418&de_=418&_de=419&_dc=810&ld_=810&_ld=-1742384974434&ntd=0&ty=0&rc=1&hob=3&hoe=4&ld=811&t=1742384975245&ctb=1&rt=cf:14-3-3-8-2-0-0__ld:26-5-3-16-4-0-1&csmtags=aui\|aui:aui_build_date:3.25.1-2025-03-13\|navbar\|FWCIMEnabled\|fls-na-amazon-com\|cf_cdn_fr\|cf_cdn_mp\|gwCFImgNoCache\|aui:sw:page_proxy:no_ctrl\|adblk_no&viz=visible:3&pty=Gateway&spty=desktop&pti=desktop&tid=G0CPK3K7GV2RQVVSYW5M&aftb=1&lob=1	0%	Avira URL Cloud	safe
https://mwzeom.zeotap.com/mw?zpartnerid=1353&env=mWeb&env=mWeb&eventType=map&id_mid_4=a3aeb57d-dc3f-463a-47ec-257ccc1567ae&id_mid_61=a3aeb57d-dc3f-463a-47ec-257ccc1567ae&reqId=fa049177-cc6e-467f-7aa9-fac6c8111056&zdid=1353&zurl=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dzeotap%26id%3D%7BZCOOKIE%7D	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/AMAZON_FASHION/2020/journeys/NTE3Zjc1NTEt/NTE3Zjc1NTEt-YjliNzM1M2Mt-w186._SY116_CB428347147_.jpg	0%	Avira URL Cloud	safe
https://s.amazon-adsystem.com/ecm3?ex=mediarithmics&id=vec-124755496709&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://ib.adnxs.com/getuid?https://cookie-matching.mediarithmics.com/input?key=APX&apx_uid=$UID&opid=apx&ops=&utidl=tech:goo:CAESEJQUVIHsIo-yT9nISc1wZYA&gdpr_consent=&gdpr=0&action=GET_ID&etid=&domid=1109	0%	Avira URL Cloud	safe
https://dsum-sec.casalemedia.com/rrum?cb=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DindexHMT%26id%3D&cm_dsp_id=198&external_user_id=M0sLo5gRTg2YfVdB155S7w&gdpr_consent=&C=1	0%	Avira URL Cloud	safe
https://s.amazon-adsystem.com/ecm3?id=219133205191004553449&ex=neustar.biz	0%	Avira URL Cloud	safe
https://odr.mookie1.com/t/v2?tagid=V2_393725&AMAZON_REGION_SPECIFIC_ENDPOINT=s.amazon-adsystem.com&src.visitorID=3eG61GHuRSCP8DYmX3PnwA	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/I/11RhjigBo3L.js?AUIClients/WebFlowIngressJs	0%	Avira URL Cloud	safe
https://uipglob.semasio.net/amazon/1/get2?_url=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dsemasio%26id%3D%24%7BUIPID%28%29%7D	0%	Avira URL Cloud	safe
https://eb2.3lift.com/xuid?mid=8341&xuid=IpxDKLipQDqmNkZ_jtcr5g&dongle=az46&rdir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DtripleliftHMT%26id%3D%24UID&gdpr_consent=	0%	Avira URL Cloud	safe
https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:132-9841393-1029239:G0CPK3K7GV2RQVVSYW5M$uedata=s:%2Frd%2Fuedata%3Fld%26v%3D0.308124.0%26id%3DG0CPK3K7GV2RQVVSYW5M%26ctb%3D1%26sc0%3DgwAUIReady%26cf0%3D1084%26pc0%3D1084%26ld0%3D1084%26t0%3D1742384975518%26pty%3DGateway%26spty%3Ddesktop%26pti%3Ddesktop%26tid%3DG0CPK3K7GV2RQVVSYW5M%26aftb%3D1%26lob%3D1:1083	0%	Avira URL Cloud	safe
https://www.facebook.com/fr/r.php?p=558293300959460&e=iD1-0vWISdSrppgYFwh3tQ&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dfbca%26id%3DiD1-0vWISdSrppgYFwh3tQ&s=1742384977&h=eE5sWDVLUVd3eTBqQTNpcGvVD4POOXVlknSLZYuFqt0MXjns	0%	Avira URL Cloud	safe
https://sync-amazon.ads.yieldmo.com/sync?pn_id=amazon&id=mVOdH8NvTWiycfZ6KCawkA&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DyieldmoHMT%26id%3D%7B%7Buserid%7D%7D&gdpr_consent=	0%	Avira URL Cloud	safe
https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:132-9841393-1029239:G0CPK3K7GV2RQVVSYW5M$uedata=s:%2Frd%2Fuedata%3Fat%26v%3D0.308124.0%26id%3DG0CPK3K7GV2RQVVSYW5M%26m%3D1%26sc%3Dcsa%3Avl50%26vl50%3D368%26pc%3D4097%26at%3D4097%26t%3D1742384978531%26pty%3DGateway%26spty%3Ddesktop%26pti%3Ddesktop%26tid%3DG0CPK3K7GV2RQVVSYW5M%26aftb%3D1%26lob%3D1:4096	0%	Avira URL Cloud	safe
https://cm.g.doubleclick.net/pixel?google_nid=a9&google_hm=lPoOmnRmRZ2rss66Rk5PMQ&gdpr_consent=	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/I/61xJcNKKLXL.js?AUIClients/AmazonUIjQuery	0%	Avira URL Cloud	safe
https://rtb-csync.smartadserver.com/redir/?partnerid=144&partneruserid=Xuy37yFBRDKq_938C4MEpA&gdpr_consent=	0%	Avira URL Cloud	safe
https://s.amazon-adsystem.com/ecm3?ex=zeotap&id=a3aeb57d-dc3f-463a-47ec-257ccc1567ae	0%	Avira URL Cloud	safe
https://s.amazon-adsystem.com/ecm3?ex=bidswitch.com&id=19dadfca0d0a8719a8af3caa8cde6cf2	0%	Avira URL Cloud	safe
https://s.amazon-adsystem.com/iu3?d=amazon.com&slot=navFooter&a2=0101aabb05e914b695dbdb88657aa3230c70392423ad4c6db47ffd0f7fbdb3d79af7&old_oo=0&ts=1742384975292&s=AaPWaWOutvlc4Fss129nga4stJfkgX2Oj9F1OyUJdj0H&gdpr_consent=&gdpr_consent_avl=&cb=1742384975292	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/S/sash/ydDD9hnRfziI$y7.png	0%	Avira URL Cloud	safe
https://www.amazon.com/hz/rhf?currentPageType=Gateway&currentSubPageType=desktop&excludeAsin=&fieldKeywords=&k=&keywords=&search=&auditEnabled=&previewCampaigns=&forceWidgets=&searchAlias=&cardJSPresent=true	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/I/61IlupYtztL._SX1500_.jpg	0%	Avira URL Cloud	safe
https://pbs.yahoo.com/setuid?bidder=amazon&uid=Yl0j5oUQQFyQBIMNkfGasQ&gdpr_consent=	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/kindle/journeys/YjAwMjVmYjUt/YjAwMjVmYjUt-YmMzZGJjMzYt-w379._SY304_CB410321238_.jpg	0%	Avira URL Cloud	safe
https://cookie-matching.mediarithmics.com/input?key=GOO&key=GOO&gdpr_consent=&gdpr=0&action=GET_ID&opid=goo&etid=&domid=1109&ops=apx&google_gid=CAESEJQUVIHsIo-yT9nISc1wZYA&google_cver=1	0%	Avira URL Cloud	safe
https://csync.loopme.me/?partner_id=1392&uid=5nWuqcRYT9aCaZmGh91lUw&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DloopmeHMT&id=&gdpr_consent=	0%	Avira URL Cloud	safe
https://www.amazon.com/portal-migration/hz/glow/get-rendered-toaster?pageType=Gateway&aisTransitionState=null&rancorLocationSource=IP_GEOLOCATION&_=1742384975532	0%	Avira URL Cloud	safe
https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:132-9841393-1029239:G0CPK3K7GV2RQVVSYW5M$uedata=s:%2Frd%2Fuedata%3Fld%26v%3D0.308124.0%26id%3DG0CPK3K7GV2RQVVSYW5M%26ctb%3D1%26sc0%3DgwLayoutReady%26cf0%3D1082%26pc0%3D1082%26ld0%3D1082%26t0%3D1742384975516%26pty%3DGateway%26spty%3Ddesktop%26pti%3Ddesktop%26tid%3DG0CPK3K7GV2RQVVSYW5M%26aftb%3D1%26lob%3D1:1081	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/I/41oqEIFYdwL._RC%7C71JKPait+KL.css,51uyq4Mg2YL.css,21UgUChNR0L.css,01FcI3FsaiL.css,21Hc1s0-E4L.css,31YZpDCYJPL.css,21DwGGPS1eL.css,413J7RjVHpL.css,11HvNwu+WGL.css,31K0jc2KvHL.css,01H8CHB5aiL.css,21KQnzhmfTL.css,415g7iDx4VL.css,41FQVcfy5lL.css_.css?AUIClients/NavDesktopUberAsset	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/I/11zuylp74DL._RC%7C11Y+5x+kkTL.js,51F3LXOLEtL.js,11yKORv-GTL.js,11GgN1+C7hL.js,01+z+uIeJ-L.js,01VRMV3FBdL.js,21u+kGQyRqL.js,012FVc3131L.js,11aD5q6kNBL.js,11rRjDLdAVL.js,51zH7YD-TsL.js,11nAhXzgUmL.js,11dIAzUNpxL.js,1110g-SvlBL.js,116PwN2VXHL.js,21+WA5wfjfL.js,0190vxtlzcL.js,51xvEQZx5oL.js,01JYHc2oIlL.js,31nfKXylf6L.js,01ktRCtOqKL.js,01ASnt2lbqL.js,11bEz2VIYrL.js,31o2NGTXThL.js,01rpauTep4L.js,31N+6dLod0L.js,01tvglXfQOL.js,11+FwJUUPNL.js,014gnDeJDsL.js,11vb6P5C5AL.js,015+pUPweLL.js_.js?AUIClients/AmazonUI	0%	Avira URL Cloud	safe
https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:132-9841393-1029239:G0CPK3K7GV2RQVVSYW5M$uedata=s:%2Frd%2Fuedata%3Fld%26v%3D0.308124.0%26id%3DG0CPK3K7GV2RQVVSYW5M%26ctb%3D1%26sc0%3Daui%3Asw%3Actrl_changed%26bb0%3D163%26pc0%3D1675%26ld0%3D1675%26t0%3D1742384976109%26csmtags%3Daui%3Asw%3Actrl_changed%26pty%3DGateway%26spty%3Ddesktop%26pti%3Ddesktop%26tid%3DG0CPK3K7GV2RQVVSYW5M%26aftb%3D1%26lob%3D1:1674	0%	Avira URL Cloud	safe
https://jadserve.postrelease.com/suid/102012?vk=4fGConkpQ0iPxbD1l8epfA&ntv_r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DnativoHMT&id=&gdpr_consent=	0%	Avira URL Cloud	safe
https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:132-9841393-1029239:G0CPK3K7GV2RQVVSYW5M$uedata=s:%2Frd%2Fuedata%3Fat%26v%3D0.308124.0%26id%3DG0CPK3K7GV2RQVVSYW5M%26m%3D1%26sc%3Dcsa%3Avl100%26vl100%3D1112%26pc%3D4097%26at%3D4097%26t%3D1742384978531%26pty%3DGateway%26spty%3Ddesktop%26pti%3Ddesktop%26tid%3DG0CPK3K7GV2RQVVSYW5M%26aftb%3D1%26lob%3D1:4096	0%	Avira URL Cloud	safe
https://www.amazon.com/puff/content?data=%7B%22pageType%22%3A%22Gateway%22%2C%22subPageType%22%3A%22desktop%22%2C%22referrer%22%3A%22https%3A%2F%2Fwww.amazon.com%2F%3F_encoding%3DUTF8%26tag%3Dmntzr-20%26linkCode%3Dur2%26linkId%3Dfbdfb9b1ea167046640ea9a6800add6e%26camp%3D1789%26creative%3D9325%26subId%3DM7483486446028849181%22%2C%22hostName%22%3A%22www.amazon.com%22%2C%22path%22%3A%22%2F%22%2C%22queryString%22%3A%22%3F_encoding%3DUTF8%26tag%3Dmntzr-20%26linkCode%3Dur2%26linkId%3Dfbdfb9b1ea167046640ea9a6800add6e%26camp%3D1789%26creative%3D9325%26subId%3DM7483486446028849181%22%7D	0%	Avira URL Cloud	safe
https://x.bidswitch.net/sync_a9/val=Uw3h_5rIT5Gf1-XO5vnXGQ&redirect=https://s.amazon-adsystem.com/ecm3?ex=bidswitch.com&id=${UUID}&gdpr_consent=	0%	Avira URL Cloud	safe
https://crb.kargo.com/api/v1/dsync/amazon?exid=Hfwrj-KYS_W6IM700oRdXw&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DKargoHMT&id=&gdpr_consent=	0%	Avira URL Cloud	safe
https://s.amazon-adsystem.com/ecm3?ex=fbca&id=iD1-0vWISdSrppgYFwh3tQ	0%	Avira URL Cloud	safe
https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:132-9841393-1029239:G0CPK3K7GV2RQVVSYW5M$uedata=s:%2Frd%2Fuedata%3Fld%26v%3D0.308124.0%26id%3DG0CPK3K7GV2RQVVSYW5M%26sw%3D1280%26sh%3D1024%26vw%3D1263%26vh%3D897%26m%3D1%26sc%3DG0CPK3K7GV2RQVVSYW5M%26ue%3D4%26bb%3D174%26ns%3D190%26ne%3D237%26be%3D387%26fcp%3D244%26fp%3D244%26cf%3D420%26pc%3D811%26tc%3D-488%26na_%3D-488%26ul_%3D-16%26_ul%3D-16%26rd_%3D-483%26_rd%3D-337%26fe_%3D-337%26lk_%3D-337%26_lk%3D-337%26co_%3D-337%26_co%3D-337%26sc_%3D-1742384974434%26rq_%3D-336%26rs_%3D-21%26_rs%3D251%26dl_%3D-15%26di_%3D418%26de_%3D418%26_de%3D419%26_dc%3D810%26ld_%3D810%26_ld%3D-1742384974434%26ntd%3D0%26ty%3D0%26rc%3D1%26hob%3D3%26hoe%3D4%26ld%3D811%26t%3D1742384975245%26ctb%3D1%26rt%3Dcf%3A14-3-3-8-2-0-0__ld%3A26-5-3-16-4-0-1%26csmtags%3Daui%7Caui%3Aaui_build_date%3A3.25.1-2025-03-13%7Cnavbar%7CFWCIMEnabled%7Cfls-na-amazon-com%7Ccf_cdn_fr%7Ccf_cdn_mp%7CgwCFImgNoCache%7Caui%3Asw%3Apage_proxy%3Ano_ctrl%7Cadblk_no%26viz%3Dvisible%3A3%26pty%3DGateway%26spty%3Ddesktop%26pti%3Ddesktop%26tid%3DG0CPK3K7GV2RQVVSYW5M%26aftb%3D1%26lob%3D1:812	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/I/216YVwoRFDL.js	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/AMAZON_FASHION/2020/journeys/NTE3Zjc1NTEt/NTE3Zjc1NTEt-N2IwYmQwNGIt-w186._SY116_CB428347147_.jpg	0%	Avira URL Cloud	safe
https://ads.stickyadstv.com/user-matching?id=2545&gdpr_consent=	0%	Avira URL Cloud	safe
https://unagi.amazon.com/1/events/com.amazon.eel.SearchAutocompleteUIServiceMetrics.nexus	0%	Avira URL Cloud	safe
https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:132-9841393-1029239:G0CPK3K7GV2RQVVSYW5M$uedata=s:%2Frd%2Fuedata%3Fat%26v%3D0.308124.0%26id%3DG0CPK3K7GV2RQVVSYW5M%26m%3D1%26sc%3Dcsa%3Avl90%26vl90%3D574%26pc%3D4097%26at%3D4097%26t%3D1742384978531%26pty%3DGateway%26spty%3Ddesktop%26pti%3Ddesktop%26tid%3DG0CPK3K7GV2RQVVSYW5M%26aftb%3D1%26lob%3D1:4096	0%	Avira URL Cloud	safe
https://unagi.amazon.com/1/events/com.amazon.csm.csa.prod	0%	Avira URL Cloud	safe
https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:132-9841393-1029239:G0CPK3K7GV2RQVVSYW5M$uedata=s:%2Frd%2Fuedata%3Fat%26v%3D0.308124.0%26id%3DG0CPK3K7GV2RQVVSYW5M%26ctb%3D1%26m%3D1%26sc%3DG0CPK3K7GV2RQVVSYW5M%26pc%3D4745%26at%3D4745%26t%3D1742384979179%26csmtags%3Dcsm-feature-touch-enabled%3Afalse%26pty%3DGateway%26spty%3Ddesktop%26pti%3Ddesktop%26tid%3DG0CPK3K7GV2RQVVSYW5M%26aftb%3D1%26lob%3D1:4744	0%	Avira URL Cloud	safe
https://www.amazon.com/rd/uedata?at&v=0.308124.0&id=G0CPK3K7GV2RQVVSYW5M&ctb=1&m=1&sc=G0CPK3K7GV2RQVVSYW5M&pc=4745&at=4745&t=1742384979179&csmtags=csm-feature-touch-enabled:false&pty=Gateway&spty=desktop&pti=desktop&tid=G0CPK3K7GV2RQVVSYW5M&aftb=1&lob=1	0%	Avira URL Cloud	safe
https://www.amazon.com/rd/uedata?at&v=0.308124.0&id=G0CPK3K7GV2RQVVSYW5M&ctb=1&m=1&sc=G0CPK3K7GV2RQVVSYW5M&pc=4761&at=4761&t=1742384979195&pty=Gateway&spty=desktop&pti=desktop&tid=G0CPK3K7GV2RQVVSYW5M&aftb=1&ui=2&lob=1	0%	Avira URL Cloud	safe
https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:132-9841393-1029239:G0CPK3K7GV2RQVVSYW5M$uedata=s:%2Frd%2Fuedata%3Fat%26v%3D0.308124.0%26id%3DG0CPK3K7GV2RQVVSYW5M%26m%3D1%26sc%3Drx%26pc%3D4941%26at%3D4941%26t%3D1742384979375%26csmtags%3Dhas-strong-interaction%26pty%3DGateway%26spty%3Ddesktop%26pti%3Ddesktop%26tid%3DG0CPK3K7GV2RQVVSYW5M%26aftb%3D1%26lob%3D1:4940	0%	Avira URL Cloud	safe
https://public-prod-dspcookiematching.dmxleo.com/dspreply?dspId=1868&dspUserId=F0_L5_xcS1qBRDGtfZQojA&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DdailymotionHMT2&id=&gdpr_consent=	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
j.sni.global.fastly.net	151.101.130.132	true	false	high
spl.zeotap.com	172.67.40.173	true	false	unknown
eu-eb2.3lift.com	76.223.111.18	true	false	high
beacons6.gvt2.com	142.250.184.195	true	false	high
healthy-lifestyle.yoghue.icu	104.21.32.1	true	false	unknown
crb.kargo.com	52.28.221.183	true	false	high
mwzeom.zeotap.com	104.22.50.98	true	false	high
cm.g.doubleclick.net	142.250.185.162	true	false	high
www.google.com	216.58.212.164	true	false	high
dcs-ups.g03.yahoodns.net	87.248.119.251	true	false	high
urquhar.tapest.cfd	99.198.106.197	true	true	unknown
star-mini.c10r.facebook.com	157.240.253.35	true	false	high
us-u.openx.net	34.98.64.218	true	false	high
uip.semasio.net	77.243.51.122	true	false	high
beacons2.gvt2.com	142.251.143.163	true	false	high
sync.rfp.fout.jp	35.186.196.148	true	false	high
d2bytcopxu066p.cloudfront.net	18.245.39.216	true	false	unknown
euw-ice.360yield.com	18.203.184.189	true	false	high
sync-yieldmo-com-tf-1869548451.eu-west-1.elb.amazonaws.com	52.215.237.72	true	false	high
d1ykf07e75w7ss.cloudfront.net	108.138.3.93	true	false	high
lciapi.ninthdecimal.com	35.241.62.124	true	false	high
ssum-sec.casalemedia.com	104.18.26.193	true	false	high
ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com	54.76.73.3	true	false	high
unagi-na.amazon.com	44.215.132.93	true	false	unknown
sb.scorecardresearch.com	18.244.18.38	true	false	high
d3ag4hukkh62yn.cloudfront.net	18.66.128.77	true	false	unknown
usersync.samplicio.us	18.184.23.137	true	false	high
googlehosted.l.googleusercontent.com	142.250.186.33	true	false	high
ms-cookie-sync.prod.cloud.ogury.io	63.35.207.216	true	false	high
pixel.rubiconproject.net.akadns.net	69.173.144.138	true	false	high
tagr-pixel-nginx-odr-euw4.mookie1.com	34.160.236.64	true	false	unknown
beacons-handoff.gcp.gvt2.com	142.251.143.67	true	false	high
pugm-amsfpairbc.pubmnet.com	198.47.127.19	true	false	unknown
public-prod-dspcookiematching.dmxleo.com	13.32.121.32	true	false	high
user-data-eu.bidswitch.net	35.214.136.108	true	false	high
usersync.gumgum.com	52.210.15.1	true	false	high
infosystemsllc.com	188.114.97.3	true	false	high
track.adformnet.akadns.net	37.157.6.237	true	false	high
jadserve.postrelease.com.akadns.net	18.202.254.7	true	false	high
c.media-amazon.com	18.172.103.29	true	false	unknown
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	54.194.53.123	true	false	high
am-vip001.taboola.com	141.226.228.48	true	false	high
rtb-csync-euw2.smartadserver.com	217.182.178.233	true	false	high
girouardelectricien.ca	69.51.204.198	true	false	unknown
s.amazon-adsystem.com	98.82.157.231	true	false	high
capi.connatix.com.cdn.cloudflare.net	172.64.146.152	true	false	high
beacons.gvt2.com	142.251.143.35	true	false	high
geo.ads.audio.thisisdax.com	35.214.162.87	true	false	high
eu-west-dual.ads.stickyadstv.com.akadns.net	154.57.158.115	true	false	high
completion.amazon.com	44.215.128.78	true	false	unknown
dsum-sec.casalemedia.com	104.18.26.193	true	false	high
pixelapi-east.cs.mysamba.tv	54.88.131.7	true	false	unknown
pug-ams-bc.pubmnet.com	198.47.127.205	true	false	high
lb.mediarithmics.com	54.36.150.184	true	false	unknown
ib.anycast.adnxs.com	185.89.210.153	true	false	high
envoy-hl.envoy-csync.core-002-ew4.ov1o.com	34.1.228.241	true	false	high
load-euw1.exelator.com	54.78.254.47	true	false	high
edge.gycpi.b.yahoodns.net	87.248.119.252	true	false	high
endpoint.prod.us-east-1.forester.a2z.com	35.172.246.141	true	false	unknown
match-eu-central-1-ecs.sharethrough.com	18.184.206.66	true	false	high
images-na.ssl-images-amazon.com	unknown	unknown	false	high
ads.stickyadstv.com	unknown	unknown	false	high
pi.ispot.tv	unknown	unknown	false	high
unagi.amazon.com	unknown	unknown	false	high
jadserve.postrelease.com	unknown	unknown	false	high
csync.loopme.me	unknown	unknown	false	high
odr.mookie1.com	unknown	unknown	false	high
cookie-matching.mediarithmics.com	unknown	unknown	false	unknown
pixel.rubiconproject.com	unknown	unknown	false	high
c1.adform.net	unknown	unknown	false	high
sync-amazon.ads.yieldmo.com	unknown	unknown	false	high
usermatch.krxd.net	unknown	unknown	false	high
uipglob.semasio.net	unknown	unknown	false	high
cms.analytics.yahoo.com	unknown	unknown	false	high
m.media-amazon.com	unknown	unknown	false	high
image6.pubmatic.com	unknown	unknown	false	high
beacons.gcp.gvt2.com	unknown	unknown	false	high
ups.analytics.yahoo.com	unknown	unknown	false	high
match.sharethrough.com	unknown	unknown	false	high
lh3.googleusercontent.com	unknown	unknown	false	high
loadus.exelator.com	unknown	unknown	false	high
lh5.googleusercontent.com	unknown	unknown	false	high
rtb-csync.smartadserver.com	unknown	unknown	false	high
image2.pubmatic.com	unknown	unknown	false	high
capi.connatix.com	unknown	unknown	false	high
ms-cookie-sync.presage.io	unknown	unknown	false	high
fls-na.amazon.com	unknown	unknown	false	high
dpm.demdex.net	unknown	unknown	false	high
aa.agkn.com	unknown	unknown	false	high
sync.taboola.com	unknown	unknown	false	high
x.bidswitch.net	unknown	unknown	false	high
www.facebook.com	unknown	unknown	false	high
c.amazon-adsystem.com	unknown	unknown	false	high
beacon.krxd.net	unknown	unknown	false	unknown
www.amazon.com	unknown	unknown	false	high
tags.bluekai.com	unknown	unknown	false	unknown
ads.samba.tv	unknown	unknown	false	unknown
pbs.yahoo.com	unknown	unknown	false	high
bs.serving-sys.com	unknown	unknown	false	high
ib.adnxs.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:132-9841393-1029239:G0CPK3K7GV2RQVVSYW5M$uedata=s:%2Frd%2Fuedata%3Fstaticb%26id%3DG0CPK3K7GV2RQVVSYW5M:0	false	Avira URL Cloud: safe	unknown
https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:132-9841393-1029239:G0CPK3K7GV2RQVVSYW5M$uedata=s:%2Frd%2Fuedata%3Fat%26v%3D0.308124.0%26id%3DG0CPK3K7GV2RQVVSYW5M%26ctb%3D1%26m%3D1%26sc%3DG0CPK3K7GV2RQVVSYW5M%26pc%3D4745%26at%3D4745%26t%3D1742384979179%26csmtags%3Dcsm-feature-touch-enabled%3Afalse%26pty%3DGateway%26spty%3Ddesktop%26pti%3Ddesktop%26tid%3DG0CPK3K7GV2RQVVSYW5M%26aftb%3D1%26lob%3D1:4744	false	Avira URL Cloud: safe	unknown
https://www.amazon.com/rd/uedata?ld&v=0.308124.0&id=G0CPK3K7GV2RQVVSYW5M&sw=1280&sh=1024&vw=1263&vh=897&m=1&sc=G0CPK3K7GV2RQVVSYW5M&ue=4&bb=174&ns=190&ne=237&be=387&fcp=244&fp=244&cf=420&pc=811&tc=-488&na_=-488&ul_=-16&_ul=-16&rd_=-483&_rd=-337&fe_=-337&lk_=-337&_lk=-337&co_=-337&_co=-337&sc_=-1742384974434&rq_=-336&rs_=-21&_rs=251&dl_=-15&di_=418&de_=418&_de=419&_dc=810&ld_=810&_ld=-1742384974434&ntd=0&ty=0&rc=1&hob=3&hoe=4&ld=811&t=1742384975245&ctb=1&rt=cf:14-3-3-8-2-0-0__ld:26-5-3-16-4-0-1&csmtags=aui\|aui:aui_build_date:3.25.1-2025-03-13\|navbar\|FWCIMEnabled\|fls-na-amazon-com\|cf_cdn_fr\|cf_cdn_mp\|gwCFImgNoCache\|aui:sw:page_proxy:no_ctrl\|adblk_no&viz=visible:3&pty=Gateway&spty=desktop&pti=desktop&tid=G0CPK3K7GV2RQVVSYW5M&aftb=1&lob=1	false	Avira URL Cloud: safe	unknown
https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:132-9841393-1029239:G0CPK3K7GV2RQVVSYW5M$uedata=s:%2Frd%2Fuedata%3Fld%26v%3D0.308124.0%26id%3DG0CPK3K7GV2RQVVSYW5M%26sc0%3Daui%3Asw%3Appft%3Acallback_ricb%26bb0%3D163%26pc0%3D425%26ld0%3D425%26t0%3D1742384974859%26sc1%3Dportal-bb%26pc1%3D9%26ld1%3D9%26t1%3D1742384974618%26sc2%3DheroAf%26cf2%3D239%26pc2%3D239%26ld2%3D239%26t2%3D1742384974673%26sc3%3Dh1Af%26cf3%3D240%26pc3%3D240%26ld3%3D240%26t3%3D1742384974674%26sc4%3DnavCF%26cf4%3D270%26pc4%3D270%26ld4%3D270%26t4%3D1742384974704%26sc5%3DcsmCELLSframework%26bb5%3D389%26pc5%3D389%26ld5%3D389%26t5%3D1742384974823%26sc6%3DcsmCELLSpdm%26bb6%3D389%26pc6%3D390%26ld6%3D390%26t6%3D1742384974824%26sc7%3DcsmCELLSvpm%26bb7%3D390%26pc7%3D390%26ld7%3D390%26t7%3D1742384974824%26sc8%3DcsmCELLSfem%26bb8%3D390%26pc8%3D390%26ld8%3D390%26t8%3D1742384974824%26sc9%3Due_sushi_v1%26bb9%3D390%26pc9%3D391%26ld9%3D391%26t9%3D1742384974825%26sc10%3DjQueryReady%26cf10%3D397%26pc10%3D397%26ld10%3D397%26t10%3D1742384974831%26sc11%3Dgateway-asset-load%26cf11%3D399%26pc11%3D399%26ld11%3D399%26t11%3D1742384974833%26sc12%3DgwGridInit%26cf12%3D399%26pc12%3D399%26ld12%3D399%26t12%3D1742384974833%26sc13%3DgwBTFGridInit%26cf13%3D402%26pc13%3D402%26ld13%3D402%26t13%3D1742384974836%26sc14%3DjQueryDomReady%26cf14%3D418%26pc14%3D418%26ld14%3D418%26t14%3D1742384974852%26sc15%3Ddesktop-grid-2-visible%26cf15%3D420%26pc15%3D420%26ld15%3D420%26t15%3D1742384974854%26sc16%3Ddesktop-grid-1-visible%26cf16%3D420%26pc16%3D420%26ld16%3D420%26t16%3D1742384974854%26sc17%3Dgw-ftGr-desktop-hero-1-visible%26cf17%3D420%26pc17%3D420%26ld17%3D420%26t17%3D1742384974854%26sc18%3Ddesktop-grid-4-visible%26cf18%3D421%26pc18%3D421%26ld18%3D421%26t18%3D1742384974855%26sc19%3Ddesktop-grid-3-visible%26cf19%3D525%26pc19%3D525%26ld19%3D525%26t19%3D1742384974959%26sc20%3Ddesktop-btf-grid-1-visible%26cf20%3D568%26pc20%3D568%26ld20%3D568%26t20%3D1742384975002%26sc21%3Ddesktop-btf-grid-2-visible%26cf21%3D572%26pc21%3D572%26ld21%3D572%26t21%3D1742384975006%26sc22%3Ddesktop-btf-grid-3-visible%26cf22%3D576%26pc22%3D576%26ld22%3D576%26t22%3D1742384975010%26sc23%3Ddesktop-btf-grid-4-visible%26cf23%3D581%26pc23%3D581%26ld23%3D581%26t23%3D1742384975015%26ctb%3D1:812	false	Avira URL Cloud: safe	unknown
https://www.amazon.com/rd/uedata?at&v=0.308124.0&id=G0CPK3K7GV2RQVVSYW5M&ctb=1&m=1&sc=G0CPK3K7GV2RQVVSYW5M&pc=4745&at=4745&t=1742384979179&csmtags=csm-feature-touch-enabled:false&pty=Gateway&spty=desktop&pti=desktop&tid=G0CPK3K7GV2RQVVSYW5M&aftb=1&lob=1	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/G/01/csm/showads.v2.js?bannerid=-ad-sidebar.	false	Avira URL Cloud: safe	unknown
https://lh5.googleusercontent.com/p/AF1QipOaG2_DNszZcP6TAD7Ov3zv1JYH5IBi6MADzbb8=w92-h92-n-k-no	false	Avira URL Cloud: safe	unknown
https://capi.connatix.com/us/pixel?pId=32&puId=BYd5dq-pSR2KRXDPaa16fg&callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DconnatixHMT%26id%3D%7BpuId%7D&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://s.amazon-adsystem.com/iu3?d=amazon.com&slot=navFooter&a2=0101aabb05e914b695dbdb88657aa3230c70392423ad4c6db47ffd0f7fbdb3d79af7&old_oo=0&ts=1742384975292&s=AaPWaWOutvlc4Fss129nga4stJfkgX2Oj9F1OyUJdj0H&gdpr_consent=&gdpr_consent_avl=&cb=1742384975292&dcc=t	false	Avira URL Cloud: safe	unknown
https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:132-9841393-1029239:G0CPK3K7GV2RQVVSYW5M$uedata=s:%2Frd%2Fuedata%3Fat%26v%3D0.308124.0%26id%3DG0CPK3K7GV2RQVVSYW5M%26m%3D1%26sc%3Dcsa%3Alcp%26lcp%3D444%26pc%3D989%26at%3D989%26t%3D1742384975423%26pty%3DGateway%26spty%3Ddesktop%26pti%3Ddesktop%26tid%3DG0CPK3K7GV2RQVVSYW5M%26aftb%3D1%26lob%3D1:988	false	Avira URL Cloud: safe	unknown
https://images-na.ssl-images-amazon.com/images/G/01/AMAZON_FASHION/2020/journeys/NTE3Zjc1NTEt/NTE3Zjc1NTEt-YjliNzM1M2Mt-w186._SY116_CB428347147_.jpg	false	Avira URL Cloud: safe	unknown
https://ib.adnxs.com/getuid?https://cookie-matching.mediarithmics.com/input?key=APX&apx_uid=$UID&opid=apx&ops=&utidl=tech:goo:CAESEJQUVIHsIo-yT9nISc1wZYA&gdpr_consent=&gdpr=0&action=GET_ID&etid=&domid=1109	false	Avira URL Cloud: safe	unknown
https://s.amazon-adsystem.com/ecm3?id=219133205191004553449&ex=neustar.biz	false	Avira URL Cloud: safe	unknown
https://dsum-sec.casalemedia.com/rrum?cb=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DindexHMT%26id%3D&cm_dsp_id=198&external_user_id=M0sLo5gRTg2YfVdB155S7w&gdpr_consent=&C=1	false	Avira URL Cloud: safe	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=girouardele&oit=1&cp=11&pgcl=2&gs_rn=42&psi=TSFZ5CKiVh6M0Fyx&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	false	Avira URL Cloud: safe	unknown
https://s.amazon-adsystem.com/ecm3?ex=mediarithmics&id=vec-124755496709&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://odr.mookie1.com/t/v2?tagid=V2_393725&AMAZON_REGION_SPECIFIC_ENDPOINT=s.amazon-adsystem.com&src.visitorID=3eG61GHuRSCP8DYmX3PnwA	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/S/sash/3FFjjnZ6FBQZUp2.png	false		high
https://images-na.ssl-images-amazon.com/images/G/01/AUIClients/AmazonUI-3c913031596ca78a3768f4e934b1cc02ce238101.secure.min._V1_.css	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/S/sash/VjTR4RqBzY0mUYx.woff2	false		high
https://ib.adnxs.com/getuid?https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fid=%24UID&ex=appnexus.com&gdpr_consent=	false		high
https://loadus.exelator.com/load/?p=204&g=8888&j=0	false		high
https://cm.g.doubleclick.net/pixel?google_nid=a9&google_hm=lPoOmnRmRZ2rss66Rk5PMQ&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://image6.pubmatic.com/AdServer/UCookieSetPug?rd=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dpubmatic.com%26id%3D%23PM_USER_ID&gdpr_consent=	false		high
https://images-na.ssl-images-amazon.com/images/G/01/csminstrumentation/csm-captcha-instrumentation.min.js	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/fr/r.php?p=558293300959460&e=iD1-0vWISdSrppgYFwh3tQ&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dfbca%26id%3DiD1-0vWISdSrppgYFwh3tQ&s=1742384977&h=eE5sWDVLUVd3eTBqQTNpcGvVD4POOXVlknSLZYuFqt0MXjns	false	Avira URL Cloud: safe	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=girouardelec&oit=1&cp=12&pgcl=2&gs_rn=42&psi=TSFZ5CKiVh6M0Fyx&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	false	Avira URL Cloud: safe	unknown
https://us-u.openx.net/w/1.0/cm?id=e818ca1e-0c23-caa8-0dd3-096b0ada08b7&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dopenx.com%26id%3D%7BOPENX_ID%7D&gdpr_consent=	false		high
https://s.amazon-adsystem.com/ecm3?ex=gumgumHMT	false		high
https://lh3.googleusercontent.com/gps-cs-s/AB5caB_FjSDso5EqeiQ_756uSbu_3xQCAcE-UQzGLwZto8l9dIz_UzZUdvym9l_St_mSAuaPEnxM_FN_xlDxesrS1LROIfBEDUeJejavsAYWTYax1DggaxQMseCUu7kYenPx_WbhgE0obg=w92-h92-n-k-no	false	Avira URL Cloud: safe	unknown
https://images-na.ssl-images-amazon.com/images/G/01/AUIClients/ClientSideMetricsAUIJavascript-51171fbdd28e1a7a61e922e8f0272af8bc74d37b.secure.variant-desktop-session-snapshot-keypress.min._V2_.js	false	Avira URL Cloud: safe	unknown
https://s.amazon-adsystem.com/iu3?d=amazon.com&slot=navFooter&a2=0101aabb05e914b695dbdb88657aa3230c70392423ad4c6db47ffd0f7fbdb3d79af7&old_oo=0&ts=1742384975292&s=AaPWaWOutvlc4Fss129nga4stJfkgX2Oj9F1OyUJdj0H&gdpr_consent=&gdpr_consent_avl=&cb=1742384975292	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/71EOqyQDjOL.js?AUIClients/FWCIMAssets	false		high
https://s.amazon-adsystem.com/ecm3?ex=zeotap&id=a3aeb57d-dc3f-463a-47ec-257ccc1567ae	false	Avira URL Cloud: safe	unknown
https://s.amazon-adsystem.com/ecm3?ex=bidswitch.com&id=19dadfca0d0a8719a8af3caa8cde6cf2	false	Avira URL Cloud: safe	unknown
https://images-na.ssl-images-amazon.com/images/G/01/csminstrumentation/ue-base-1c399ad9886cab69575e1e5ee15c61a1._V313498596_.js	false	Avira URL Cloud: safe	unknown
https://cookie-matching.mediarithmics.com/v1/get_or_create?gdpr=0&gdpr_consent=&domid=1109	false		high
https://cm.g.doubleclick.net/pixel?google_nid=medr&google_cm&key=GOO&gdpr_consent=&gdpr=0&action=GET_ID&opid=goo&etid=&domid=1109&ops=apx	false		high
https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:132-9841393-1029239:G0CPK3K7GV2RQVVSYW5M$uedata=s:%2Frd%2Fuedata%3Fld%26v%3D0.308124.0%26id%3DG0CPK3K7GV2RQVVSYW5M%26ctb%3D1%26sc0%3DgwLayoutReady%26cf0%3D1082%26pc0%3D1082%26ld0%3D1082%26t0%3D1742384975516%26pty%3DGateway%26spty%3Ddesktop%26pti%3Ddesktop%26tid%3DG0CPK3K7GV2RQVVSYW5M%26aftb%3D1%26lob%3D1:1081	false	Avira URL Cloud: safe	unknown
https://x.bidswitch.net/sync_a9/https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dbidswitch.com%26id%3D%24%7BUUID%7D?gdpr_consent=	false		high
https://www.amazon.com/rd/uedata?at&v=0.308124.0&id=G0CPK3K7GV2RQVVSYW5M&ctb=1&m=1&sc=G0CPK3K7GV2RQVVSYW5M&pc=4761&at=4761&t=1742384979195&pty=Gateway&spty=desktop&pti=desktop&tid=G0CPK3K7GV2RQVVSYW5M&aftb=1&ui=2&lob=1	false	Avira URL Cloud: safe	unknown
https://sb.scorecardresearch.com/p?c1=9&c2=27552257&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dcomscore.com%26id%3D%25AX_UUID%25	false		high
http://girouardelectricien.ca/	false	Avira URL Cloud: safe	unknown
https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:132-9841393-1029239:G0CPK3K7GV2RQVVSYW5M$uedata=s:%2Frd%2Fuedata%3Fld%26v%3D0.308124.0%26id%3DG0CPK3K7GV2RQVVSYW5M%26ctb%3D1%26sc0%3Daui%3Asw%3Actrl_changed%26bb0%3D163%26pc0%3D1675%26ld0%3D1675%26t0%3D1742384976109%26csmtags%3Daui%3Asw%3Actrl_changed%26pty%3DGateway%26spty%3Ddesktop%26pti%3Ddesktop%26tid%3DG0CPK3K7GV2RQVVSYW5M%26aftb%3D1%26lob%3D1:1674	false	Avira URL Cloud: safe	unknown
https://fls-na.amazon.com/1/oc-csi/1/OP/requestId=V5RNPB8C0EDE2KSFNVVX&js=1	false	Avira URL Cloud: safe	unknown
https://cookie-matching.mediarithmics.com/v1/get_user_agent_id?dom_token=amazon-na-23&gdpr=0&gdpr_consent=	false		high
https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:132-9841393-1029239:G0CPK3K7GV2RQVVSYW5M$uedata=s:%2Frd%2Fuedata%3Fat%26v%3D0.308124.0%26id%3DG0CPK3K7GV2RQVVSYW5M%26m%3D1%26sc%3Dcsa%3Avl100%26vl100%3D1112%26pc%3D4097%26at%3D4097%26t%3D1742384978531%26pty%3DGateway%26spty%3Ddesktop%26pti%3Ddesktop%26tid%3DG0CPK3K7GV2RQVVSYW5M%26aftb%3D1%26lob%3D1:4096	false	Avira URL Cloud: safe	unknown
https://www.amazon.com/puff/content?data=%7B%22pageType%22%3A%22Gateway%22%2C%22subPageType%22%3A%22desktop%22%2C%22referrer%22%3A%22https%3A%2F%2Fwww.amazon.com%2F%3F_encoding%3DUTF8%26tag%3Dmntzr-20%26linkCode%3Dur2%26linkId%3Dfbdfb9b1ea167046640ea9a6800add6e%26camp%3D1789%26creative%3D9325%26subId%3DM7483486446028849181%22%2C%22hostName%22%3A%22www.amazon.com%22%2C%22path%22%3A%22%2F%22%2C%22queryString%22%3A%22%3F_encoding%3DUTF8%26tag%3Dmntzr-20%26linkCode%3Dur2%26linkId%3Dfbdfb9b1ea167046640ea9a6800add6e%26camp%3D1789%26creative%3D9325%26subId%3DM7483486446028849181%22%7D	false	Avira URL Cloud: safe	unknown
https://sync.taboola.com/sg/amazon-a9-network/1/rtb	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=girouardel&oit=1&cp=10&pgcl=2&gs_rn=42&psi=TSFZ5CKiVh6M0Fyx&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	false	Avira URL Cloud: safe	unknown
https://images-na.ssl-images-amazon.com/images/I/216YVwoRFDL.js	false	Avira URL Cloud: safe	unknown
https://crb.kargo.com/api/v1/dsync/amazon?exid=Hfwrj-KYS_W6IM700oRdXw&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DKargoHMT&id=&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:132-9841393-1029239:G0CPK3K7GV2RQVVSYW5M$uedata=s:%2Frd%2Fuedata%3Fld%26v%3D0.308124.0%26id%3DG0CPK3K7GV2RQVVSYW5M%26sw%3D1280%26sh%3D1024%26vw%3D1263%26vh%3D897%26m%3D1%26sc%3DG0CPK3K7GV2RQVVSYW5M%26ue%3D4%26bb%3D174%26ns%3D190%26ne%3D237%26be%3D387%26fcp%3D244%26fp%3D244%26cf%3D420%26pc%3D811%26tc%3D-488%26na_%3D-488%26ul_%3D-16%26_ul%3D-16%26rd_%3D-483%26_rd%3D-337%26fe_%3D-337%26lk_%3D-337%26_lk%3D-337%26co_%3D-337%26_co%3D-337%26sc_%3D-1742384974434%26rq_%3D-336%26rs_%3D-21%26_rs%3D251%26dl_%3D-15%26di_%3D418%26de_%3D418%26_de%3D419%26_dc%3D810%26ld_%3D810%26_ld%3D-1742384974434%26ntd%3D0%26ty%3D0%26rc%3D1%26hob%3D3%26hoe%3D4%26ld%3D811%26t%3D1742384975245%26ctb%3D1%26rt%3Dcf%3A14-3-3-8-2-0-0__ld%3A26-5-3-16-4-0-1%26csmtags%3Daui%7Caui%3Aaui_build_date%3A3.25.1-2025-03-13%7Cnavbar%7CFWCIMEnabled%7Cfls-na-amazon-com%7Ccf_cdn_fr%7Ccf_cdn_mp%7CgwCFImgNoCache%7Caui%3Asw%3Apage_proxy%3Ano_ctrl%7Cadblk_no%26viz%3Dvisible%3A3%26pty%3DGateway%26spty%3Ddesktop%26pti%3Ddesktop%26tid%3DG0CPK3K7GV2RQVVSYW5M%26aftb%3D1%26lob%3D1:812	false	Avira URL Cloud: safe	unknown
https://s.amazon-adsystem.com/ecm3?ex=fbca&id=iD1-0vWISdSrppgYFwh3tQ	false	Avira URL Cloud: safe	unknown
https://ads.stickyadstv.com/user-matching?id=2545&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://unagi.amazon.com/1/events/com.amazon.eel.SearchAutocompleteUIServiceMetrics.nexus	false	Avira URL Cloud: safe	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=giro&oit=1&cp=4&pgcl=2&gs_rn=42&psi=TSFZ5CKiVh6M0Fyx&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	false	Avira URL Cloud: safe	unknown
https://unagi.amazon.com/1/events/com.amazon.csm.csa.prod	false	Avira URL Cloud: safe	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=girou&oit=1&cp=5&pgcl=2&gs_rn=42&psi=TSFZ5CKiVh6M0Fyx&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/31mqNgZQVBL.js?AUIClients/PuffAuiAssets	false	Avira URL Cloud: safe	unknown
https://infosystemsllc.com/?cvdauh53kl6c73fkflk0	true	Avira URL Cloud: malware	unknown
https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:132-9841393-1029239:G0CPK3K7GV2RQVVSYW5M$uedata=s:%2Frd%2Fuedata%3Fat%26v%3D0.308124.0%26id%3DG0CPK3K7GV2RQVVSYW5M%26m%3D1%26sc%3Drx%26pc%3D4941%26at%3D4941%26t%3D1742384979375%26csmtags%3Dhas-strong-interaction%26pty%3DGateway%26spty%3Ddesktop%26pti%3Ddesktop%26tid%3DG0CPK3K7GV2RQVVSYW5M%26aftb%3D1%26lob%3D1:4940	false	Avira URL Cloud: safe	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=g&oit=1&cp=1&pgcl=2&gs_rn=42&psi=TSFZ5CKiVh6M0Fyx&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	false	Avira URL Cloud: safe	unknown
https://s.amazon-adsystem.com/ecm3?&ex=ninthdecimal.com&id=11449A0A52AFDA6719002D3602EF9267	false	Avira URL Cloud: safe	unknown
https://public-prod-dspcookiematching.dmxleo.com/dspreply?dspId=1868&dspUserId=F0_L5_xcS1qBRDGtfZQojA&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DdailymotionHMT2&id=&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/G/01/gno/sprites/nav-sprite-global-1x-reorg-privacy._CB541706272_.png	false	Avira URL Cloud: safe	unknown
https://images-na.ssl-images-amazon.com/images/G/01/GiftCards/2024/Q4/VX-2621/VX-2621_GW_CC_Desktop_379x304._SY304_CB553496036_.jpg	false	Avira URL Cloud: safe	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=girouardelectricie&oit=1&cp=18&pgcl=2&gs_rn=42&psi=TSFZ5CKiVh6M0Fyx&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=a9&google_cm&ex=doubleclick.net&gdpr_consent=	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=giroua&oit=1&cp=6&pgcl=2&gs_rn=42&psi=TSFZ5CKiVh6M0Fyx&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	false	Avira URL Cloud: safe	unknown
https://images-na.ssl-images-amazon.com/images/I/31To440CwiL.js?xcp	false	Avira URL Cloud: safe	unknown
https://healthy-lifestyle.yoghue.icu/help/?32161731835980&extra_param_1=cvdauh53kl6c73fkflk0	false	Avira URL Cloud: safe	unknown
https://ads.stickyadstv.com/user-registering?dataProviderId=961&userId=iFNAjB6UTCavgUVrddM0iw&redirectId=2545&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/G/01/personalization/ybh/loading-4x-gray._CB485916920_.gif	false		high
https://images-na.ssl-images-amazon.com/images/G/01/img18/home/journeys/MjJkZGVlZDYt/MjJkZGVlZDYt-OGRmN2JmYWEt-w379._SY304_CB410698465_.jpg	false	Avira URL Cloud: safe	unknown
https://x.bidswitch.net/ul_cb/sync_a9/https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dbidswitch.com%26id%3D%24%7BUUID%7D?gdpr_consent=	false		high
https://images-na.ssl-images-amazon.com/captcha/fmvtfjch/Captcha_vbyxwejcxm.jpg	false	Avira URL Cloud: safe	unknown
https://images-na.ssl-images-amazon.com/images/G/01/img18/home/journeys/OWFhYjJmNGIt/OWFhYjJmNGIt-NzIwODU5ZmIt-w379._SY304_CB405958196_.jpg	false	Avira URL Cloud: safe	unknown
https://ib.adnxs.com/bounce?%2Fsetuid%2Fa9%3Fentity%3D188%26code%3DISGsI9MoTAWShvoP_sH2_w%26redir%3Dhttps%253A%252F%252Fs.amazon-adsystem.com%252Fecm3%253Fex%253DxandrHMT%2526id%253D%2524UID%26gdpr_consent%3D	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/S/sash/WOnTLzkiaEccV7F.woff2	false		high
https://sb.scorecardresearch.com/p2?c1=9&c2=27552257&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dcomscore.com%26id%3D%25AX_UUID%25	false		high
https://m.media-amazon.com/images/S/sash/pDxWAF1pBB0dzGB.woff2	false		high
https://match.360yield.com/match?publisher_dsp_id=416&external_user_id=em16bC13SAuLtnBRCVfqwA&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DimprovedigitalHMT%26id%3D%7BPUB_USER_ID%7D&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://s.amazon-adsystem.com/ecm3?ex=samba.tv&id=1498c8d53169a15d4	false	Avira URL Cloud: safe	unknown
https://c1.adform.net/serving/cookie/match?party=1153&redirect_url=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dadform.net%26id%3D%24%7BUUID%7D	false		high
https://m.media-amazon.com/images/S/sash/LGWV0WcW4sqhlTH.png	false	Avira URL Cloud: safe	unknown
https://ib.adnxs.com/setuid/a9?entity=188&code=ISGsI9MoTAWShvoP_sH2_w&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DxandrHMT%26id%3D%24UID&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://lciapi.ninthdecimal.com/v1/lci/sync/adv-amzn/c-23445/?rdr=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3F%26ex%3Dninthdecimal.com%26id%3D%24%7BND_UID%7D	false		high
https://m.media-amazon.com/images/S/sash/Dv1WQ5DdeMS5qP7.woff2	false		high
https://dsum-sec.casalemedia.com/rrum?cm_dsp_id=198&external_user_id=M0sLo5gRTg2YfVdB155S7w&cb=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DindexHMT%26id%3D&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=medr&google_cm=&key=GOO&gdpr_consent=&gdpr=0&action=GET_ID&opid=goo&etid=&domid=1109&ops=apx&google_tc=	false		high
https://www.amazon.com/service-worker.js	false	Avira URL Cloud: safe	unknown
https://images-na.ssl-images-amazon.com/images/I/31PvjKh9oXL.js?AUIClients/AmazonGatewayHerotatorJS	false	Avira URL Cloud: safe	unknown
https://s.amazon-adsystem.com/ecm3?ex=comscore.com&id=77cbef5423d03e56d5e0389360969a38	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/G/01/javascripts/lib/popover/images/snake._CB485935611_.gif	false	Avira URL Cloud: safe	unknown
https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:132-9841393-1029239:G0CPK3K7GV2RQVVSYW5M$uedata=s:%2Frd%2Fuedata%3Fld%26v%3D0.308124.0%26id%3DG0CPK3K7GV2RQVVSYW5M%26ctb%3D1%26sc0%3Dglow-toaster-api-timer-DESKTOP%26bb0%3D1098%26pc0%3D1299%26ld0%3D1299%26t0%3D1742384975733%26csmtags%3DfourColumn%7CthreeColumnRevised%7CflexLayout%7CcssGridLayout%7Caui%3Asw%3Abrowser%3Aregister%3Asupported%7Caui%3Acss%3Anetwork%7Caui%3Ajs%3Anetwork%7Caui%7Caui%3Aajax%26pty%3DGateway%26spty%3Ddesktop%26pti%3Ddesktop%26tid%3DG0CPK3K7GV2RQVVSYW5M%26aftb%3D1%26lob%3D1:1298	false	Avira URL Cloud: safe	unknown
https://fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:132-9841393-1029239:G0CPK3K7GV2RQVVSYW5M$uedata=s:%2Frd%2Fuedata%3Fld%26v%3D0.308124.0%26id%3DG0CPK3K7GV2RQVVSYW5M%26ctb%3D1%26sc0%3Dp13n-rvi_desktop-rvi_0%26bb0%3D1583%26be0%3D1583%26pc0%3D1656%26ld0%3D1656%26t0%3D1742384976090%26pty%3DGateway%26spty%3Ddesktop%26pti%3Ddesktop%26tid%3DG0CPK3K7GV2RQVVSYW5M%26aftb%3D1%26lob%3D1:1655	false	Avira URL Cloud: safe	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=girouardelectrici&oit=1&cp=17&pgcl=2&gs_rn=42&psi=TSFZ5CKiVh6M0Fyx&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	false	Avira URL Cloud: safe	unknown
https://ads.samba.tv/cookie_sync?https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dsamba.tv%26id%3D	false		high
https://images-na.ssl-images-amazon.com/images/I/01rGP6HIADL.js?AUIClients/GenericObservableJS	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
35.241.62.124	lciapi.ninthdecimal.com	United States	15169	GOOGLEUS	false
44.215.132.93	unagi-na.amazon.com	United States	14618	AMAZON-AESUS	false
52.210.15.1	usersync.gumgum.com	United States	16509	AMAZON-02US	false
151.101.130.132	j.sni.global.fastly.net	United States	54113	FASTLYUS	false
185.89.210.153	ib.anycast.adnxs.com	Germany	29990	ASN-APPNEXUS	false
98.82.156.207	unknown	United States	11351	TWC-11351-NORTHEASTUS	false
34.194.42.187	unknown	United States	14618	AMAZON-AESUS	false
44.215.128.78	completion.amazon.com	United States	14618	AMAZON-AESUS	false
34.160.236.64	tagr-pixel-nginx-odr-euw4.mookie1.com	United States	2686	ATGS-MMD-ASUS	false
142.251.168.84	unknown	United States	15169	GOOGLEUS	false
3.161.81.121	unknown	United States	16509	AMAZON-02US	false
35.214.162.87	geo.ads.audio.thisisdax.com	United States	19527	GOOGLE-2US	false
18.184.23.137	usersync.samplicio.us	United States	16509	AMAZON-02US	false
77.243.51.122	uip.semasio.net	Denmark	42697	NETIC-ASDK	false
35.214.140.188	unknown	United States	19527	GOOGLE-2US	false
142.250.185.142	unknown	United States	15169	GOOGLEUS	false
18.245.39.216	d2bytcopxu066p.cloudfront.net	United States	16509	AMAZON-02US	false
142.250.184.226	unknown	United States	15169	GOOGLEUS	false
44.215.130.62	unknown	United States	14618	AMAZON-AESUS	false
198.47.127.205	pug-ams-bc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
142.250.186.33	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
18.66.128.77	d3ag4hukkh62yn.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
54.88.131.7	pixelapi-east.cs.mysamba.tv	United States	14618	AMAZON-AESUS	false
34.1.228.241	envoy-hl.envoy-csync.core-002-ew4.ov1o.com	United States	2686	ATGS-MMD-ASUS	false
104.21.32.1	healthy-lifestyle.yoghue.icu	United States	13335	CLOUDFLARENETUS	false
34.254.88.199	unknown	United States	16509	AMAZON-02US	false
142.250.185.238	unknown	United States	15169	GOOGLEUS	false
18.244.18.38	sb.scorecardresearch.com	United States	16509	AMAZON-02US	false
18.66.143.128	unknown	United States	3	MIT-GATEWAYSUS	false
52.215.237.72	sync-yieldmo-com-tf-1869548451.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
13.32.121.32	public-prod-dspcookiematching.dmxleo.com	United States	16509	AMAZON-02US	false
188.114.97.3	infosystemsllc.com	European Union	13335	CLOUDFLARENETUS	false
198.47.127.19	pugm-amsfpairbc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
104.18.41.104	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.185.195	unknown	United States	15169	GOOGLEUS	false
216.58.212.161	unknown	United States	15169	GOOGLEUS	false
54.194.53.123	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
18.202.254.7	jadserve.postrelease.com.akadns.net	United States	16509	AMAZON-02US	false
63.35.207.216	ms-cookie-sync.prod.cloud.ogury.io	United States	16509	AMAZON-02US	false
157.240.253.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
172.217.16.196	unknown	United States	15169	GOOGLEUS	false
172.217.16.195	unknown	United States	15169	GOOGLEUS	false
54.36.150.184	lb.mediarithmics.com	France	16276	OVHFR	false
154.57.158.115	eu-west-dual.ads.stickyadstv.com.akadns.net	United States	26558	FREEWHEELUS	false
142.250.185.78	unknown	United States	15169	GOOGLEUS	false
35.214.136.108	user-data-eu.bidswitch.net	United States	19527	GOOGLE-2US	false
142.250.186.170	unknown	United States	15169	GOOGLEUS	false
216.58.212.164	www.google.com	United States	15169	GOOGLEUS	false
18.184.206.66	match-eu-central-1-ecs.sharethrough.com	United States	16509	AMAZON-02US	false
172.67.40.173	spl.zeotap.com	United States	13335	CLOUDFLARENETUS	false
108.138.3.93	d1ykf07e75w7ss.cloudfront.net	United States	16509	AMAZON-02US	false
54.78.254.47	load-euw1.exelator.com	United States	16509	AMAZON-02US	false
44.215.132.129	unknown	United States	14618	AMAZON-AESUS	false
69.173.144.138	pixel.rubiconproject.net.akadns.net	United States	26667	RUBICONPROJECTUS	false
37.157.6.237	track.adformnet.akadns.net	Denmark	198622	ADFORMDK	false
44.215.132.248	unknown	United States	14618	AMAZON-AESUS	false
69.51.204.198	girouardelectricien.ca	Canada	4540	ASN01-SOGECA	false
54.76.73.3	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
35.244.159.8	unknown	United States	15169	GOOGLEUS	false
87.248.119.251	dcs-ups.g03.yahoodns.net	United Kingdom	203220	YAHOO-DEBDE	false
87.248.119.252	edge.gycpi.b.yahoodns.net	United Kingdom	203220	YAHOO-DEBDE	false
35.186.196.148	sync.rfp.fout.jp	United States	15169	GOOGLEUS	false
13.32.121.23	unknown	United States	16509	AMAZON-02US	false
34.205.195.144	unknown	United States	14618	AMAZON-AESUS	false
98.82.157.231	s.amazon-adsystem.com	United States	11351	TWC-11351-NORTHEASTUS	false
18.203.184.189	euw-ice.360yield.com	United States	16509	AMAZON-02US	false
142.250.185.162	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
35.172.246.141	endpoint.prod.us-east-1.forester.a2z.com	United States	14618	AMAZON-AESUS	false
141.226.228.48	am-vip001.taboola.com	Israel	200478	TABOOLA-ASIL	false
172.64.146.152	capi.connatix.com.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false
76.223.111.18	eu-eb2.3lift.com	United States	16509	AMAZON-02US	false
18.245.32.110	unknown	United States	16509	AMAZON-02US	false
34.248.143.250	unknown	United States	16509	AMAZON-02US	false
142.250.186.163	unknown	United States	15169	GOOGLEUS	false
104.18.26.193	ssum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
18.172.103.29	c.media-amazon.com	United States	3	MIT-GATEWAYSUS	false
34.98.64.218	us-u.openx.net	United States	15169	GOOGLEUS	false
104.22.50.98	mwzeom.zeotap.com	United States	13335	CLOUDFLARENETUS	false
52.28.221.183	crb.kargo.com	United States	16509	AMAZON-02US	false
217.182.178.233	rtb-csync-euw2.smartadserver.com	France	16276	OVHFR	false
149.202.238.105	unknown	France	16276	OVHFR	false
99.198.106.197	urquhar.tapest.cfd	United States	32475	SINGLEHOP-LLCUS	true

Private

IP
192.168.2.9
192.168.2.16
192.168.2.18
192.168.2.11
192.168.2.10

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1642952
Start date and time:	2025-03-19 12:46:59 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	http://girouardelectricien.ca
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled
Analysis Mode:	stream
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.win@22/89@228/697

Warnings

Exclude process from analysis (whitelisted): SgrmBroker.exe
Excluded IPs from analysis (whitelisted): 20.109.210.53
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, fe3cr.delivery.mp.microsoft.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://girouardelectricien.ca

Source: 1.1..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://urquhar.tapest.cfd/proc.php?5ca2156095f230... This script exhibits several high-risk behaviors, including dynamic code execution (via the obfuscated URL) and potential data exfiltration (redirecting to an Amazon URL with encoded parameters). The combination of these factors suggests a high likelihood of malicious intent, potentially for phishing or other malicious purposes.
Source: 0.0..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://urquhar.tapest.cfd/?utm_medium=9eb2bcdc899... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated URLs. The script uses setInterval to repeatedly manipulate the DOM, and it redirects the user to a suspicious, obfuscated URL that appears to be collecting user data. These behaviors are highly indicative of malicious intent, and the script should be considered a high-risk threat.

Source: https://www.amazon.com/?_encoding=UTF8&tag=mntzr-20&linkCode=ur2&linkId=fbdfb9b1ea167046640ea9a6800add6e&camp=1789&creative=9325&subId=M7483486446028849181	HTTP Parser: No favicon
Source: https://www.amazon.com/?_encoding=UTF8&tag=mntzr-20&linkCode=ur2&linkId=fbdfb9b1ea167046640ea9a6800add6e&camp=1789&creative=9325&subId=M7483486446028849181	HTTP Parser: No favicon
Source: https://www.amazon.com/?_encoding=UTF8&tag=mntzr-20&linkCode=ur2&linkId=fbdfb9b1ea167046640ea9a6800add6e&camp=1789&creative=9325&subId=M7483486446028849181	HTTP Parser: No favicon

Source: global traffic	TCP traffic: 192.168.2.18:50214 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.18:50214 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.18:50214 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.18:50214 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.18:50214 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.18:50214 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.18:50214 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.18:50214 -> 1.1.1.1:53

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: infosystemsllc.com to https://healthy-lifestyle.yoghue.icu/help/?32161731835980&extra_param_1=cvdauh53kl6c73fkflk0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: healthy-lifestyle.yoghue.icu to https://urquhar.tapest.cfd/?utm_medium=9eb2bcdc89976429bc64127056a4a9d5d3a2b57a&utm_campaign=cid:11005&cid=11005-14814-202503191449212154

Source: Network traffic	Suricata IDS: 2849429 - Severity 1 - ETPRO EXPLOIT Possible dhcpcd IPv6 IA/NA Buffer Overflow [Advertise 0x02] Inbound (CVE-2019-11577) : 1.1.1.1:53 -> 192.168.2.18:58163
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.18:50146 -> 18.203.184.189:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.18:50148 -> 104.18.26.193:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.18:50173 -> 34.254.88.199:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.18:50242 -> 18.184.206.66:443

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: lh3.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: lh5.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: girouardelectricien.ca
Source: global traffic	DNS traffic detected: DNS query: infosystemsllc.com
Source: global traffic	DNS traffic detected: DNS query: healthy-lifestyle.yoghue.icu
Source: global traffic	DNS traffic detected: DNS query: urquhar.tapest.cfd
Source: global traffic	DNS traffic detected: DNS query: www.amazon.com
Source: global traffic	DNS traffic detected: DNS query: images-na.ssl-images-amazon.com
Source: global traffic	DNS traffic detected: DNS query: fls-na.amazon.com
Source: global traffic	DNS traffic detected: DNS query: m.media-amazon.com
Source: global traffic	DNS traffic detected: DNS query: completion.amazon.com
Source: global traffic	DNS traffic detected: DNS query: unagi.amazon.com
Source: global traffic	DNS traffic detected: DNS query: c.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: s.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: unagi-na.amazon.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: match.360yield.com
Source: global traffic	DNS traffic detected: DNS query: rtb-csync.smartadserver.com
Source: global traffic	DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: pbs.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: capi.connatix.com
Source: global traffic	DNS traffic detected: DNS query: amazon.partners.tremorhub.com
Source: global traffic	DNS traffic detected: DNS query: geo.ads.audio.thisisdax.com
Source: global traffic	DNS traffic detected: DNS query: www.imdb.com
Source: global traffic	DNS traffic detected: DNS query: usersync.samplicio.us
Source: global traffic	DNS traffic detected: DNS query: image6.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: ads.samba.tv
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: odr.mookie1.com
Source: global traffic	DNS traffic detected: DNS query: c1.adform.net
Source: global traffic	DNS traffic detected: DNS query: bs.serving-sys.com
Source: global traffic	DNS traffic detected: DNS query: cookie-matching.mediarithmics.com
Source: global traffic	DNS traffic detected: DNS query: csync.loopme.me
Source: global traffic	DNS traffic detected: DNS query: ssum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: crb.kargo.com
Source: global traffic	DNS traffic detected: DNS query: image2.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: loadus.exelator.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: lciapi.ninthdecimal.com
Source: global traffic	DNS traffic detected: DNS query: sync-amazon.ads.yieldmo.com
Source: global traffic	DNS traffic detected: DNS query: us-u.openx.net
Source: global traffic	DNS traffic detected: DNS query: sync.taboola.com
Source: global traffic	DNS traffic detected: DNS query: jadserve.postrelease.com
Source: global traffic	DNS traffic detected: DNS query: aa.agkn.com
Source: global traffic	DNS traffic detected: DNS query: x.bidswitch.net
Source: global traffic	DNS traffic detected: DNS query: tags.bluekai.com
Source: global traffic	DNS traffic detected: DNS query: public-prod-dspcookiematching.dmxleo.com
Source: global traffic	DNS traffic detected: DNS query: cms.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: spl.zeotap.com
Source: global traffic	DNS traffic detected: DNS query: ads.stickyadstv.com
Source: global traffic	DNS traffic detected: DNS query: sync.rfp.fout.jp
Source: global traffic	DNS traffic detected: DNS query: ups.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: mwzeom.zeotap.com
Source: global traffic	DNS traffic detected: DNS query: beacon.krxd.net
Source: global traffic	DNS traffic detected: DNS query: match.sharethrough.com
Source: global traffic	DNS traffic detected: DNS query: ms-cookie-sync.presage.io
Source: global traffic	DNS traffic detected: DNS query: usermatch.krxd.net
Source: global traffic	DNS traffic detected: DNS query: sb.scorecardresearch.com
Source: global traffic	DNS traffic detected: DNS query: eb2.3lift.com
Source: global traffic	DNS traffic detected: DNS query: uipglob.semasio.net
Source: global traffic	DNS traffic detected: DNS query: usersync.gumgum.com
Source: global traffic	DNS traffic detected: DNS query: pi.ispot.tv
Source: global traffic	DNS traffic detected: DNS query: beacons.gcp.gvt2.com
Source: global traffic	DNS traffic detected: DNS query: beacons.gvt2.com
Source: global traffic	DNS traffic detected: DNS query: beacons2.gvt2.com

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1], baseline, precision 8, 379x304, components 3
Category:	downloaded
Size (bytes):	17303
Entropy (8bit):	7.907500977117947
Encrypted:	false
SSDEEP:
MD5:	4C27A447AC14027A2A0159A2E06DB48B
SHA1:	24F0E8B323F503D7AB7EB4CFBDB3454BFB1A4D1D
SHA-256:	C5459F4ADCFA29FD848D3C6033A03070E8A07016534C53E88327848C24452BBA
SHA-512:	72B56CA247D0AD64410B0C1A8AC606BF99696EB53AB86FFE68BAFEBC580E2D0163AC781D498F7D0B254F9C99AB0DAFC495F6FE8AE2951BA249CFCEE1E5793132
Malicious:	false
Reputation:	unknown
URL:	https://images-na.ssl-images-amazon.com/images/G/01/softlines/shopbop/ingress/2020/CategoryCards/mp_20200604_fashion_desktopsinglecategory_desktop_379x304._SY304_CB430707313_.jpg
Preview:	.....8Exif..II.......i...........................U.............JFIF.............C............................................!!$$!!0///06666666666...C............................."......". ... .%%""%%//,//6666666666......0.{.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..2x....K.>....zg.4..\....."...aO...?..N.nx..j@!............H...J...s..=z.C.h........?.O+..........4.a.8._Zo.S........).....<.T.on......TT.Q.......N2.>.)P..G\};SI..?.T..........9..>..8.=.+...:.}('.z.S..Fy......9......9...'.s..h...I=..j.X.....h.#*"...p..$.x.W../.."5..<._.p.../L.....~H..(..\........7{=4..

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://girouardelectricien.ca

Overview

General Information

Detection

Signatures

Classification

Process Tree

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 103

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 113

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 136

Chrome Cache Entry: 140

Chrome Cache Entry: 142

Chrome Cache Entry: 145

Chrome Cache Entry: 147

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 156

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 163

Chrome Cache Entry: 172

Windows Analysis Report
http://girouardelectricien.ca