Edit tour
Windows
Analysis Report
http://scriΡt.google.com/macros/s/AKfycbweun5TXe4d3YmHI-ZcN5edVSn8Mfamkp6VIW5006p3_Vy_UP-A9VElFiBkt9cg5ME3/exec
Overview
General Information
| Sample URL: | http://scriΡt.google.com/macros/s/AKfycbweun5TXe4d3YmHI-ZcN5edVSn8Mfamkp6VIW5006p3_Vy_UP-A9VElFiBkt9cg5ME3/exec |
| Analysis ID: | 1671064 |
| Infos: | |
 | |
Detection
| Score: | 0 |
| Range: | 0 - 100 |
| Confidence: | 80% |
Signatures
HTML body contains password input but no form action
Classification
- System is w10x64_ra
chrome.exe (PID: 6280 cmdline: "C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --s tart-maxim ized "abou t:blank" MD5: E81F54E6C1129887AEA47E7D092680BF) - chrome.exe (PID: 6468 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --ty pe=utility --utility -sub-type= network.mo jom.Networ kService - -lang=en-U S --servic e-sandbox- type=none --no-pre-r ead-main-d ll --field -trial-han dle=2032,i ,131030137 6649122587 ,158655209 8088105547 0,262144 - -disable-f eatures=Op timization GuideModel Downloadin g,Optimiza tionHints, Optimizati onHintsFet ching,Opti mizationTa rgetPredic tion --var iations-se ed-version --mojo-pl atform-cha nnel-handl e=2076 /pr efetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF) - chrome.exe (PID: 364 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --ty pe=utility --utility -sub-type= audio.mojo m.AudioSer vice --lan g=en-US -- service-sa ndbox-type =audio --n o-pre-read -main-dll --field-tr ial-handle =2032,i,13 1030137664 9122587,15 8655209808 81055470,2 62144 --di sable-feat ures=Optim izationGui deModelDow nloading,O ptimizatio nHints,Opt imizationH intsFetchi ng,Optimiz ationTarge tPredictio n --variat ions-seed- version -- mojo-platf orm-channe l-handle=5 980 /prefe tch:8 MD5: E81F54E6C1129887AEA47E7D092680BF) - chrome.exe (PID: 6220 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --ty pe=utility --utility -sub-type= video_capt ure.mojom. VideoCaptu reService --lang=en- US --servi ce-sandbox -type=none --no-pre- read-main- dll --fiel d-trial-ha ndle=2032, i,13103013 7664912258 7,15865520 9808810554 70,262144 --disable- features=O ptimizatio nGuideMode lDownloadi ng,Optimiz ationHints ,Optimizat ionHintsFe tching,Opt imizationT argetPredi ction --va riations-s eed-versio n --mojo-p latform-ch annel-hand le=5884 /p refetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)
- chrome.exe (PID: 7104 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" "htt p://script .google.co m/macros/s /AKfycbweu n5TXe4d3Ym HI-ZcN5edV Sn8Mfamkp6 VIW5006p3_ Vy_UP-A9VE lFiBkt9cg5 ME3/exec" MD5: E81F54E6C1129887AEA47E7D092680BF)
- cleanup
⊘No configs have been found
⊘No yara matches
⊘No Sigma rule has matched
⊘No Suricata rule has matched
- • Phishing
- • Compliance
- • Networking
- • System Summary
Click to jump to signature section
Show All Signature Results
There are no malicious signatures, click here to show all signatures.
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | Classification label: | ||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Window detected: | ||
| Reconnaissance | Resource Development | Initial Access | Execution | Persistence | Privilege Escalation | Defense Evasion | Credential Access | Discovery | Lateral Movement | Collection | Command and Control | Exfiltration | Impact |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Gather Victim Identity Information | Acquire Infrastructure | Valid Accounts | Windows Management Instrumentation | Path Interception | 1 Process Injection | 1 Process Injection | OS Credential Dumping | System Service Discovery | Remote Services | Data from Local System | 1 Encrypted Channel | Exfiltration Over Other Network Medium | Abuse Accessibility Features |
| Credentials | Domains | Default Accounts | Scheduled Task/Job | Boot or Logon Initialization Scripts | Boot or Logon Initialization Scripts | Rootkit | LSASS Memory | Application Window Discovery | Remote Desktop Protocol | Data from Removable Media | 3 Non-Application Layer Protocol | Exfiltration Over Bluetooth | Network Denial of Service |
| Email Addresses | DNS Server | Domain Accounts | At | Logon Script (Windows) | Logon Script (Windows) | Obfuscated Files or Information | Security Account Manager | Query Registry | SMB/Windows Admin Shares | Data from Network Shared Drive | 4 Application Layer Protocol | Automated Exfiltration | Data Encrypted for Impact |
| Employee Names | Virtual Private Server | Local Accounts | Cron | Login Hook | Login Hook | Binary Padding | NTDS | System Network Configuration Discovery | Distributed Component Object Model | Input Capture | 3 Ingress Tool Transfer | Traffic Duplication | Data Destruction |
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
InternetThis section contains all screenshots as thumbnails, including those not shown in the slideshow.
| Source | Detection | Scanner | Label | Link |
|---|---|---|---|---|
| 0% | Avira URL Cloud | safe |
⊘No Antivirus matches
⊘No Antivirus matches
⊘No Antivirus matches
⊘No Antivirus matches
| Name | IP | Active | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|---|---|
| docs.google.com | 142.250.68.238 | true | false | high | |
| google.com | 142.250.68.238 | true | false | high | |
| script.google.com | 192.178.49.206 | true | false | high | |
| www3.l.google.com | 192.178.49.206 | true | false | high | |
| play.google.com | 142.250.69.14 | true | false | high | |
| beacons-handoff.gcp.gvt2.com | 74.125.138.94 | true | false | high | |
| www.google.com | 142.250.69.4 | true | false | high | |
| beacons.gvt2.com | 142.250.113.94 | true | false | high | |
| accounts.youtube.com | unknown | unknown | false | high | |
| beacons.gcp.gvt2.com | unknown | unknown | false | high |
| Name | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|
| false | high | ||
| false | high | ||
| false | high |
| Name | Source | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|---|
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high |
- No. of IPs < 25%
- 25% < No. of IPs < 50%
- 50% < No. of IPs < 75%
- 75% < No. of IPs
| IP | Domain | Country | Flag | ASN | ASN Name | Malicious |
|---|---|---|---|---|---|---|
| 142.250.69.4 | www.google.com | United States | 15169 | GOOGLEUS | false | |
| 192.178.49.206 | script.google.com | United States | 15169 | GOOGLEUS | false |
| IP |
|---|
| 192.168.2.16 |
| 192.168.2.4 |
| Joe Sandbox version: | 42.0.0 Malachite |
| Analysis ID: | 1671064 |
| Start date and time: | 2025-04-22 15:17:37 +02:00 |
| Joe Sandbox product: | CloudBasic |
| Overall analysis duration: | 0h 3m 21s |
| Hypervisor based Inspection enabled: | false |
| Report type: | full |
| Cookbook file name: | defaultwindowsinteractivecookbook.jbs |
| Sample URL: | http://scriΡt.google.com/macros/s/AKfycbweun5TXe4d3YmHI-ZcN5edVSn8Mfamkp6VIW5006p3_Vy_UP-A9VElFiBkt9cg5ME3/exec |
| Analysis system description: | Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01 |
| Number of analysed new started processes analysed: | 16 |
| Number of new started drivers analysed: | 0 |
| Number of existing processes analysed: | 0 |
| Number of existing drivers analysed: | 0 |
| Number of injected processes analysed: | 0 |
| Technologies: |
|
| Analysis Mode: | default |
| Analysis stop reason: | Timeout |
| Detection: | CLEAN |
| Classification: | clean0.win@30/36@32/4 |
- Exclude process from analysis
(whitelisted): MpCmdRun.exe, S IHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe - Excluded IPs from analysis (wh
itelisted): 142.250.69.14, 142 .250.69.3, 142.250.141.84, 142 .250.68.234, 142.250.68.227, 1 92.178.49.163, 142.250.69.10, 192.178.49.170, 192.178.49.202 , 142.251.2.84, 192.178.49.195 , 142.250.68.238, 172.202.163. 200, 184.29.183.29, 20.109.210 .53 - Excluded domains from analysis
(whitelisted): clients1.googl e.com, fonts.googleapis.com, s sl.gstatic.com, fs.microsoft.c om, accounts.google.com, conte nt-autofill.googleapis.com, sl scr.update.microsoft.com, font s.gstatic.com, clientservices. googleapis.com, fe3cr.delivery .mp.microsoft.com, clients2.go ogle.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.go ogleapis.com, clients.l.google .com, www.gstatic.com - Not all processes where analyz
ed, report is missing behavior information - Report size getting too big, t
oo many NtOpenFile calls found . - Some HTTPS proxied raw data pa
ckets have been limited to 10 per session. Please view the P CAPs for the complete data. - VT rate limit hit for: http:/
/script.google.com/macros/s/AK fycbweun5TXe4d3YmHI-ZcN5edVSn8 Mfamkp6VIW5006p3_Vy_UP-A9VElFi Bkt9cg5ME3/exec
⊘No simulations
⊘No context
⊘No context
⊘No context
⊘No context
⊘No context
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 55256 |
| Entropy (8bit): | 7.9958351357124835 |
| Encrypted: | true |
| SSDEEP: | 768:aE9HsQuRLPPTiTRi06pYSINz9AdaTV7n5qAsVUdRwRuIDzjYTXqq2emOr8d/cNPk:aE9HsHPPR06bIhedCaAb+u2veJ8KNad |
| MD5: | 1E2D4737305EEA41EE9198E3FD3F59C2 |
| SHA1: | ABFF05D701173AB7EAE355BE60AD30CF7F63536B |
| SHA-256: | 351BA345250BAF98CE325B4017AC9B96C9498F6644937EF558DC5993AF676F2A |
| SHA-512: | 469723131222DEC7EA745B528FE62586DA62D02505B6904A4B97157259DD37C26BF0D7012538EC6AB999C4A82D44F97AD7A1BC526CEA9E8EE1CD30FF218FBCE8 |
| Malicious: | false |
| Reputation: | low |
| URL: | https://fonts.gstatic.com/s/googlesans/v62/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCI.woff2 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 747208 |
| Entropy (8bit): | 5.58864174538016 |
| Encrypted: | false |
| SSDEEP: | 6144:T3DNUK7SHnnNIqu9Zw3AGCqWiYJ7mrO+BhGSv9kmCH+IgrqCdDXTO+kYQpQtxo1A:T5UK7SK9evCdcrLBhxlkmCeh1Lb |
| MD5: | F11846CA5B2FAF46E861169FC95A6407 |
| SHA1: | 32B0CCE4FA15FEA7A3DD2E7A1638B768835587BD |
| SHA-256: | A811C145B99DC890A592C04257D8B32912D0C7283D96323D7398E31E3D690584 |
| SHA-512: | 1850452E11E7ACDEC2EDB0488F568C406D03E612D88EE3DFCD809F265FA6681C68511BEE68EAEA9354BC7FAD909CF00E1A29E8B0ECD589F9727BD0E4A01E9B9E |
| Malicious: | false |
| Reputation: | low |
| URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.HoV617kzoiE.es5.O/ck=boq-identity.AccountsSignInUi.lz2TDKOQsCw.L.B1.O/am=iQEYKpmsEQjEEcUsSGeBkYCQAQAAAAAAAAAQmwAAwBwD/d=1/exm=LEikZe,_b,_tp,byfTOb,lsjVmc/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlG1VQqiLGuRkwTYPJw4pWAUaxABsQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=n73qwf,SCuOPb,IZT63,vfuNJf,UUJqVe,ws9Tlc,siKnQd,NTMZac,mzzZzc,rCcCxc,cciGGe,m9oV,vjKJJ,y5vRwf,K1ZKnb,ziZ8Mc,b3kMqb,mvkUhe,CMcBD,Fndnac,t2srLd,EN3i8d,z0u0L,xiZRqc,L9OGUe,PrPYRd,MpJwZc,cYShmd,hc6Ubd,Rkm0ef,KUM7Z,oLggrd,WpP9Yc,gJzDyc,lwddkf,SpsfSb,aC1iue,tUnxGc,EFQ78c,xQtZb,zbML3c,zr1jrb,vHEMJe,YTxL4,YHI3We,Uas9Hd,zy0vNb,K0PMbc,MY7mZe,qmdT9,GwYlN,NLiXbe,LDQI" |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 1477 |
| Entropy (8bit): | 5.437792107168178 |
| Encrypted: | false |
| SSDEEP: | 24:G9vCD7OYs/dPrWq/bF/RRD7OYs/dPrPfuO4D7OYs/dPrcQtJc+u/rD7OYs/dPrru:GUOL1jWqjFZVOL1jx+OL1jBJc+u7OL1W |
| MD5: | 3941CD60FA643ED248F99441154F151E |
| SHA1: | 9300D366354B80085699A5CAF72F625EB706A19E |
| SHA-256: | 0A5A52ACCFFFAFFBACC3FC4F4515ED7B73049FC088786B9B74CCAC76F490DD5B |
| SHA-512: | 53040F13547713C2049A4CBE7248F0956A5CBF6773821A1A4ECEFAF40D1696A5FDD1EC4E6DE7638E84E99AFE8091AC376542901B3B8C29FAB6F5347C522E8F85 |
| Malicious: | false |
| Reputation: | low |
| URL: | https://fonts.googleapis.com/css?family=Product+Sans |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 1283 |
| Entropy (8bit): | 5.217524833059454 |
| Encrypted: | false |
| SSDEEP: | 24:kMYD7lpGDV7Nlw2blYa0NdfWMd4/qKQlkJ7K8LcYM2lvi4GblbGbclSekONEHGgQ:o7lpybwglP0/OWlOu3Y/vGblbGb8Se53 |
| MD5: | D1EEF38AA76F222B71BEA38A3B1F430A |
| SHA1: | EF5A022A35C50DAEEAA5C3669197B3A6D9F96DAE |
| SHA-256: | 4F6F41E7603B4DB620834B69B444A78FF468AA6B5FF1B246457BF10692410DFC |
| SHA-512: | 84668DBC30DC584934560E9DFB66EA1B61D508D002F3B605825D94C5A8FE2BC166E06828CEB1F9ECDE82BC2B9AE13F9DA26D00789F41DC5069B7DF68074A7843 |
| Malicious: | false |
| Reputation: | low |
| URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.HoV617kzoiE.es5.O/ck=boq-identity.AccountsSignInUi.lz2TDKOQsCw.L.B1.O/am=iQEYKpmsEQjEEcUsSGeBkYCQAQAAAAAAAAAQmwAAwBwD/d=1/exm=A7fCU,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,GwYlN,IZT63,K0PMbc,K1ZKnb,KUM7Z,L9OGUe,LDQI,LEikZe,LvGhrf,MY7mZe,MpJwZc,NLiXbe,NTMZac,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YgOFye,ZDZcre,ZwDk9d,_b,_tp,aC1iue,b3kMqb,bTi8wc,byfTOb,cYShmd,cciGGe,f8Gu1e,gJzDyc,hc6Ubd,iAskyc,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,oLggrd,oqkvIf,p3hmRc,pxq3x,qPYxq,qmdT9,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,ws9Tlc,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlG1VQqiLGuRkwTYPJw4pWAUaxABsQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=P6sQOc" |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 3138 |
| Entropy (8bit): | 5.386890165355086 |
| Encrypted: | false |
| SSDEEP: | 96:o48Jtp5jOEp8EaDdlXUYvmwZbKT0hKEOw:nub5l3aDdZ7mcKghKEb |
| MD5: | FF288F9D70FA75F87AE504131CD2799B |
| SHA1: | 569730383FD5330C40675709FA22DA67EB554956 |
| SHA-256: | 52EA379BB7037448367BE5D15E57C9F0E04BDA3EEBF03CA625A6E4C5F6EB49C2 |
| SHA-512: | 9C3E2067F31235862DFD74AE85C750629429B05128F36DA1DBD5BECBFBB95C26DEE8AB9A28962C000B84F7734F6401D213ECA44395473E8E1CAF3B03CD0AEF3F |
| Malicious: | false |
| Reputation: | low |
| URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.HoV617kzoiE.es5.O/ck=boq-identity.AccountsSignInUi.lz2TDKOQsCw.L.B1.O/am=iQEYKpmsEQjEEcUsSGeBkYCQAQAAAAAAAAAQmwAAwBwD/d=1/exm=CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,GwYlN,IZT63,K0PMbc,K1ZKnb,KUM7Z,L9OGUe,LDQI,LEikZe,LvGhrf,MY7mZe,MpJwZc,NLiXbe,NTMZac,PHUIyb,PrPYRd,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YgOFye,_b,_tp,aC1iue,b3kMqb,bTi8wc,byfTOb,cYShmd,cciGGe,f8Gu1e,gJzDyc,hc6Ubd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,oLggrd,oqkvIf,p3hmRc,pxq3x,qPYxq,qmdT9,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlG1VQqiLGuRkwTYPJw4pWAUaxABsQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ZwDk9d,RMhBfe" |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2408 |
| Entropy (8bit): | 7.8989590488026415 |
| Encrypted: | false |
| SSDEEP: | 48:adcls8jg/0B2EeZDjqtstuXgBsC4Z/zOCN4cfuptv0M+kXggLyr:hlsEVeZiW8XE4Z/zO3cf47+Igxr |
| MD5: | A62A4E4A142FBC4A6583B50C154AA1BD |
| SHA1: | 105DAF8E2CCDD2AD5C18D507CDAE5926FBA0E764 |
| SHA-256: | A9CEF4D58336842DC12848055C5E8D17A02B2FEF3EEC87E5AD171DC699D49D23 |
| SHA-512: | A3B84323F28035829E5F16AA84D1314BE328037D97BCB91AF2DCF17EA65F580CD17C0135DDDD627320C8D04F0A3F12E5C952C4FA8A6AD7F1876F1803A7996B4F |
| Malicious: | false |
| Reputation: | low |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 21586 |
| Entropy (8bit): | 5.4128473958353505 |
| Encrypted: | false |
| SSDEEP: | 384:D8VXBT6iEROUJyhIN1u2bI3TzaG8GC3meqzBlpqc6WNw/K5+4ZL7KjYfsDEyM7:D8VXBT6iEROUEWN1uIG8GC2jxqTowo+0 |
| MD5: | D27ABD8E5A6AD43312411FED4103AF78 |
| SHA1: | DD7BB7141A9445751078E193DCC1490D7156593D |
| SHA-256: | A830FEB90AD2E5DFE002FBD2BB886431698173BF7B69D84E5261C9D77EB04730 |
| SHA-512: | 6A1B6C94B0A68ECB021B7F57436B28538DCD65502B555A21A5F9F69FC6681B537B3A2A2DD5526975FB73AF713B0A2A46E134F1C39C6B77BB495AF89DB1107497 |
| Malicious: | false |
| Reputation: | low |
| URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.HoV617kzoiE.es5.O/ck=boq-identity.AccountsSignInUi.lz2TDKOQsCw.L.B1.O/am=iQEYKpmsEQjEEcUsSGeBkYCQAQAAAAAAAAAQmwAAwBwD/d=1/exm=CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,GwYlN,IZT63,K0PMbc,K1ZKnb,KUM7Z,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NLiXbe,NTMZac,PHUIyb,PrPYRd,Rkm0ef,SCuOPb,SD8Jgb,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YgOFye,_b,_tp,aC1iue,b3kMqb,bTi8wc,byfTOb,cYShmd,cciGGe,f8Gu1e,gJzDyc,hc6Ubd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,oLggrd,oqkvIf,pxq3x,qPYxq,qmdT9,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlG1VQqiLGuRkwTYPJw4pWAUaxABsQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=p3hmRc,LvGhrf,RqjULd" |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 1564 |
| Entropy (8bit): | 5.2965623992864765 |
| Encrypted: | false |
| SSDEEP: | 48:o7D5U/E0HOlb8UhyBDAQo/MxIRWd7D9vb1rw:oPC80HOlb3STowtb1w |
| MD5: | 0B870F139FB515E89EC56A53CD093703 |
| SHA1: | 403294008CF590B29CBA26247BE64B4707A51242 |
| SHA-256: | 7ACDC8F977A49302BC7F51DE01EBA4F6916FAA4A5A05ED33F8F897B2ED44BA1B |
| SHA-512: | 9A2850F00931F4828F0299787DB020E79079B6EB60C0F511C385B4E8778E854486B0F6B73E60A08295B790316349A70F4D8BD86D7E5E09A18C92245532EED793 |
| Malicious: | false |
| Reputation: | low |
| URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.HoV617kzoiE.es5.O/ck=boq-identity.AccountsSignInUi.lz2TDKOQsCw.L.B1.O/am=iQEYKpmsEQjEEcUsSGeBkYCQAQAAAAAAAAAQmwAAwBwD/d=1/exm=CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,GwYlN,IZT63,K0PMbc,K1ZKnb,KUM7Z,L9OGUe,LDQI,LEikZe,LvGhrf,MY7mZe,MpJwZc,NLiXbe,NTMZac,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YgOFye,ZwDk9d,_b,_tp,aC1iue,b3kMqb,bTi8wc,byfTOb,cYShmd,cciGGe,f8Gu1e,gJzDyc,hc6Ubd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,oLggrd,oqkvIf,p3hmRc,pxq3x,qPYxq,qmdT9,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlG1VQqiLGuRkwTYPJw4pWAUaxABsQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ZDZcre,w9hDv,A7fCU" |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 1996 |
| Entropy (8bit): | 5.289198952249505 |
| Encrypted: | false |
| SSDEEP: | 48:o7fMbk+L3AdFXmg+o9wPU/hikt+7A6OcL0fg3T/r85UNb0+JIrw:oIFLeF2hMwb4cLGkgGNUw |
| MD5: | 5777B517E4C0A4F8401690259F38CE02 |
| SHA1: | 84121775D9A0B9949D15C3C4E00E12A184CBDFAB |
| SHA-256: | 1F5710085D01908BE6A934228EF7AFB538BB03D1635FC5BA7B45370A9EAC8946 |
| SHA-512: | 0E98A3D75096B61B452D97D4687F7C4F1ABB48BF86EE35C10D0F24C0D510E270A4177DE7F659508038A7ABC32435B46E1C34B785FB14F81EEAF8C1D6A37283B0 |
| Malicious: | false |
| Reputation: | low |
| URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.HoV617kzoiE.es5.O/ck=boq-identity.AccountsSignInUi.lz2TDKOQsCw.L.B1.O/am=iQEYKpmsEQjEEcUsSGeBkYCQAQAAAAAAAAAQmwAAwBwD/d=1/exm=A7fCU,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,GwYlN,IZT63,K0PMbc,K1ZKnb,KUM7Z,L9OGUe,LDQI,LEikZe,LvGhrf,MY7mZe,MpJwZc,NLiXbe,NTMZac,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YgOFye,ZDZcre,ZwDk9d,_b,_tp,aC1iue,b3kMqb,bTi8wc,byfTOb,cYShmd,cciGGe,f8Gu1e,gJzDyc,hc6Ubd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,oLggrd,oqkvIf,p3hmRc,pxq3x,qPYxq,qmdT9,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,ws9Tlc,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlG1VQqiLGuRkwTYPJw4pWAUaxABsQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=iAskyc,ziXSP" |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 88 |
| Entropy (8bit): | 5.05829269879471 |
| Encrypted: | false |
| SSDEEP: | 3:fnSVyJuVUhVTScsROh8KlX3yKAhP:P7JuKhVTIOh8KlnZAhP |
| MD5: | 8BA5CD89BBF3ACD655780F8F637265E8 |
| SHA1: | DDDA14858D49BF5741C85D5EAD0B48F3FF7C6032 |
| SHA-256: | 0C0F8CA7F1960A60255E1FAFE1B9C36BCBA49E187EED22C4CEA1C6754FB00D70 |
| SHA-512: | 790196BFF2D13447FF6BD7688EABF09D8F4B20430B37BAD9A0A6534170919E77E418E91B6C820A195BB1A215DE4F1C73227C9363C06E5022CE9A71B3A7031E22 |
| Malicious: | false |
| Reputation: | low |
| URL: | https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTM0LjAuNjk5OC4zNhInCYDpAL11Z6_PEgUNGQET-hIFDeghfoYSBQ3TmKgHIcoV_YKlyNpn?alt=proto |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 33707 |
| Entropy (8bit): | 5.38480302561323 |
| Encrypted: | false |
| SSDEEP: | 768:oDJ9v7E5YglXSXghq2Nz4HTdiVK5FJwHHbG0UGZzhdqAMp55cWnv7GSZGnV0:gGFhqgUTi7eGZzKWm1kV0 |
| MD5: | 18728F4236DABA16CB19330AE1050C16 |
| SHA1: | FDCA3702F5525A18BF1A01ACF6BEB0F1DB846F92 |
| SHA-256: | 3E9F5F3E860CDC0A6333E0DDDE6D6B3D333DB1415563CD7AA0F7022DC1F69FDE |
| SHA-512: | AF1AD8C09F8A4FE45057DE0EB320989AA0F5651D8915696A8A2A911513955ACBD5E359B8EA13748F3230E05276FB5CA386BB8FF1502414B127C3898C40F23973 |
| Malicious: | false |
| Reputation: | low |
| URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.HoV617kzoiE.es5.O/ck=boq-identity.AccountsSignInUi.lz2TDKOQsCw.L.B1.O/am=iQEYKpmsEQjEEcUsSGeBkYCQAQAAAAAAAAAQmwAAwBwD/d=1/exm=_b,_tp/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlG1VQqiLGuRkwTYPJw4pWAUaxABsQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=byfTOb,lsjVmc,LEikZe" |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 831 |
| Entropy (8bit): | 7.690596689293278 |
| Encrypted: | false |
| SSDEEP: | 24:ars5HGJLO4eG5bQxWGUpbIW779bHBoLU489YmBZo:arssA4L6hvaZ7wv8mmI |
| MD5: | 916C9BCCCF19525AD9D3CD1514008746 |
| SHA1: | 9CCCE6978D2417927B5150FFAAC22F907FF27B6E |
| SHA-256: | 358E814139D3ED8469B36935A071BE6696CCAD7DD9BDBFDB80C052B068AE2A50 |
| SHA-512: | B73C1A81997ABE12DBA4AE1FA38F070079448C3798E7161C9262CCBA6EE6A91E8A243F0E4888C8AEF33CE1CF83818FC44C85AE454A522A079D08121CD8628D00 |
| Malicious: | false |
| Reputation: | low |
| URL: | https://ssl.gstatic.com/images/branding/product/1x/drive_2020q4_32dp.png |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 831 |
| Entropy (8bit): | 7.690596689293278 |
| Encrypted: | false |
| SSDEEP: | 24:ars5HGJLO4eG5bQxWGUpbIW779bHBoLU489YmBZo:arssA4L6hvaZ7wv8mmI |
| MD5: | 916C9BCCCF19525AD9D3CD1514008746 |
| SHA1: | 9CCCE6978D2417927B5150FFAAC22F907FF27B6E |
| SHA-256: | 358E814139D3ED8469B36935A071BE6696CCAD7DD9BDBFDB80C052B068AE2A50 |
| SHA-512: | B73C1A81997ABE12DBA4AE1FA38F070079448C3798E7161C9262CCBA6EE6A91E8A243F0E4888C8AEF33CE1CF83818FC44C85AE454A522A079D08121CD8628D00 |
| Malicious: | false |
| Reputation: | low |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 781245 |
| Entropy (8bit): | 5.788162494191612 |
| Encrypted: | false |
| SSDEEP: | 6144:cvPuk5t4h/iRgyW6N/7fsJPMyer6O16i5ibFPIX4R:cvPDLRxOPM7EFPIX4R |
| MD5: | 417D1FFA4D965B43F375CEBC52DA02CC |
| SHA1: | BE73E2FEC346733368261A6A80FB653D74994041 |
| SHA-256: | 26E7E48F7CF65CA52EE33C911A57A2711350540DE1B777AF0FEF4EA104199CBC |
| SHA-512: | B54CB9A4B39E55CF9371D23FA30390A3D75B3BCB2F3CDC6BB5164E8C58DA1E94A5692FA0D3F16F1227E8BD3282BA709B1D63F879B1E9867DE42601F00FECD15B |
| Malicious: | false |
| Reputation: | low |
| URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.HoV617kzoiE.es5.O/am=iQEYKpmsEQjEEcUsSGeBkYCQAQAAAAAAAAAQmwAAwBwD/d=1/excm=_b,_tp,identifierview/ed=1/dg=0/wt=2/ujg=1/rs=AOaEmlFvp5P5pBwwU35tOThwwWh-N4YBug/m=_b,_tp" |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 2408 |
| Entropy (8bit): | 7.8989590488026415 |
| Encrypted: | false |
| SSDEEP: | 48:adcls8jg/0B2EeZDjqtstuXgBsC4Z/zOCN4cfuptv0M+kXggLyr:hlsEVeZiW8XE4Z/zO3cf47+Igxr |
| MD5: | A62A4E4A142FBC4A6583B50C154AA1BD |
| SHA1: | 105DAF8E2CCDD2AD5C18D507CDAE5926FBA0E764 |
| SHA-256: | A9CEF4D58336842DC12848055C5E8D17A02B2FEF3EEC87E5AD171DC699D49D23 |
| SHA-512: | A3B84323F28035829E5F16AA84D1314BE328037D97BCB91AF2DCF17EA65F580CD17C0135DDDD627320C8D04F0A3F12E5C952C4FA8A6AD7F1876F1803A7996B4F |
| Malicious: | false |
| Reputation: | low |
| URL: | https://ssl.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_116x41dp.png |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 5245 |
| Entropy (8bit): | 5.303160338357559 |
| Encrypted: | false |
| SSDEEP: | 96:oaZKOShepzb2l4GB3gM8WtzLmhuZ4Ph1UUldiTRZf2rSw:UOTzbmH8AKuZlsqfg |
| MD5: | D7C0549C69CF2805980AD2F82C1BE76F |
| SHA1: | C62AF43A6FF0FE5E8BDBA0DF7130B848A3E13E4F |
| SHA-256: | CA30E2FF2991A7E9BD11DA6D31DB293218EB035F16427A06A6F21D19406E13BC |
| SHA-512: | C4C72ED4C01C0757EF15AA53C83ED25A41222B57D47BE758D962C533B3D9BB5BFCD92AC2799FF897758F09E31EA1C59E8143508668F3302650EC72464FAD5DAD |
| Malicious: | false |
| Reputation: | low |
| URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.HoV617kzoiE.es5.O/ck=boq-identity.AccountsSignInUi.lz2TDKOQsCw.L.B1.O/am=iQEYKpmsEQjEEcUsSGeBkYCQAQAAAAAAAAAQmwAAwBwD/d=1/exm=A7fCU,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,GwYlN,IZT63,K0PMbc,K1ZKnb,KUM7Z,L9OGUe,LDQI,LEikZe,LvGhrf,MY7mZe,MpJwZc,NLiXbe,NTMZac,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YgOFye,ZDZcre,ZwDk9d,_b,_tp,aC1iue,b3kMqb,bTi8wc,byfTOb,cYShmd,cciGGe,f8Gu1e,gJzDyc,hc6Ubd,iAskyc,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,oLggrd,oqkvIf,p3hmRc,pxq3x,qPYxq,qmdT9,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,ws9Tlc,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlG1VQqiLGuRkwTYPJw4pWAUaxABsQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=wg1P6b" |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 9150 |
| Entropy (8bit): | 5.3994112554280065 |
| Encrypted: | false |
| SSDEEP: | 192:LSrKwuplmgX27WrZUZYtHasIPWQAS2ZbANixs8C4m:LEupcgX27Imq6s9Q52Zrs8C4m |
| MD5: | F77837A098DC3B122F6C5EBA1C4DF786 |
| SHA1: | 04AD28A7D8D1D832C4B35C60E1BBB5FD514CA7AA |
| SHA-256: | F50505D34B8F3E806C0457E1228E68D914D3B8C9276DEBB97D5ECADC1975F469 |
| SHA-512: | 0715EBBD3E8DB11E7429DADFB05306C88D2FEBE69F199625E6B403484A51FA94834697BA49D5C80032CC8208BB38E2E9D0BE298F75EF4AB0F65FFD99FBE5B4E7 |
| Malicious: | false |
| Reputation: | low |
| URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.HoV617kzoiE.es5.O/ck=boq-identity.AccountsSignInUi.lz2TDKOQsCw.L.B1.O/am=iQEYKpmsEQjEEcUsSGeBkYCQAQAAAAAAAAAQmwAAwBwD/d=1/exm=CMcBD,EFQ78c,EN3i8d,Fndnac,GwYlN,IZT63,K0PMbc,K1ZKnb,KUM7Z,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NLiXbe,NTMZac,PrPYRd,Rkm0ef,SCuOPb,SpsfSb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,_b,_tp,aC1iue,b3kMqb,byfTOb,cYShmd,cciGGe,gJzDyc,hc6Ubd,lsjVmc,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,oLggrd,qmdT9,rCcCxc,siKnQd,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xQtZb,xiZRqc,y5vRwf,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlG1VQqiLGuRkwTYPJw4pWAUaxABsQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ltDFwf,SD8Jgb,rmumx,E87wgc,qPYxq,Tbb4sb,pxq3x,f8Gu1e,soHxf,YgOFye,oqkvIf,yRXbo,bTi8wc,ywOR5c,PHUIyb" |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 6354 |
| Entropy (8bit): | 5.808847116040867 |
| Encrypted: | false |
| SSDEEP: | 192:FbFd66666rn4fMkC4jmEP1EoBjmbe9pEFd666667YOQtKlMl4MUlq:FP666666Ma1E+SiDC66666MOSwLMUlq |
| MD5: | 9E2B997F1645E13072987BEDD4900FCD |
| SHA1: | 0CE96206CC668453D48A876886FFEAB16AC28491 |
| SHA-256: | 522BD39E22EBB4E853EAB74134C7D43F9303E89944B159A3B8707AC0C28D8898 |
| SHA-512: | FA18B5CF077F693101005DA7D060579ECB938D61F9AF032CE6AE95858BD65BA53194F462D88FCCB3B453EBBB9F630F1220F6E58B0A7DC97E7B4852F55A0702E2 |
| Malicious: | false |
| Reputation: | low |
| URL: | https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 35060 |
| Entropy (8bit): | 7.9934247518702914 |
| Encrypted: | true |
| SSDEEP: | 768:VWgzOJq8VMlI+d620JaSUhkJN1tLmkLqnEsKeeBClx7styedpa12:dSJBVMlfd6VJaSUCv1RmkavKetUXnZ |
| MD5: | 0360DBC6E8C09DCE9183A1FD78F3BE2E |
| SHA1: | 6CD4B65A94707AE941D78B12F082C968CB05EC92 |
| SHA-256: | 2DB6BC36808D43FA89029C652636E206FA3E889B35ECF71814AB85F8BA944AF3 |
| SHA-512: | 93C9F1856142DA0709F807CA3E5836065E61BC8160F9281FEC9244F31ED8AE8DF500CD5C64048AC59B4DBC36EBD18BA8E7FBCEEF58134DD76441079FAE147AB9 |
| Malicious: | false |
| Reputation: | low |
| URL: | https://fonts.gstatic.com/s/productsans/v19/pxiDypQkot1TnFhsFMOfGShVF9eO.woff2 |
| Preview: |
⊘No static file info
Key Decision
Richest Path
Thread / callback creation
Lower opacity -> Library NodeDownload Network PCAP: filtered – full
- Total Packets: 76
| Timestamp | Source Port | Dest Port | Source IP | Dest IP |
|---|---|---|---|---|
| Apr 22, 2025 15:18:08.565004110 CEST | 49704 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:08.565036058 CEST | 443 | 49704 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:08.565107107 CEST | 49704 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:08.565223932 CEST | 49704 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:08.565234900 CEST | 443 | 49704 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:08.698822975 CEST | 49705 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:08.698848963 CEST | 443 | 49705 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:08.698920012 CEST | 49705 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:08.698960066 CEST | 49706 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:08.698980093 CEST | 443 | 49706 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:08.699104071 CEST | 49705 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:08.699115038 CEST | 443 | 49705 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:08.699136972 CEST | 49706 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:08.699223042 CEST | 49706 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:08.699234009 CEST | 443 | 49706 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:08.879631996 CEST | 443 | 49704 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:08.879745960 CEST | 49704 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:08.880397081 CEST | 443 | 49704 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:08.880455017 CEST | 49704 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:08.881871939 CEST | 49704 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:08.881877899 CEST | 443 | 49704 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:08.882105112 CEST | 443 | 49704 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:08.882396936 CEST | 49704 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:08.924273014 CEST | 443 | 49704 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:09.012325048 CEST | 443 | 49706 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:09.012409925 CEST | 49706 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:09.013104916 CEST | 443 | 49706 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:09.013184071 CEST | 49706 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:09.013550997 CEST | 49706 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:09.013560057 CEST | 443 | 49706 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:09.013777971 CEST | 443 | 49706 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:09.014772892 CEST | 443 | 49705 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:09.014838934 CEST | 49705 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:09.015541077 CEST | 443 | 49705 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:09.015593052 CEST | 49705 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:09.015877962 CEST | 49705 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:09.015886068 CEST | 443 | 49705 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:09.016108990 CEST | 443 | 49705 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:09.054035902 CEST | 49706 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:09.070034981 CEST | 49705 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:09.125603914 CEST | 49706 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:09.125638962 CEST | 49705 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:09.125700951 CEST | 443 | 49706 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:09.125873089 CEST | 443 | 49706 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:09.125946999 CEST | 443 | 49705 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:09.126055956 CEST | 443 | 49705 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:09.126087904 CEST | 49706 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:09.126105070 CEST | 49706 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:09.126111984 CEST | 49705 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:09.126151085 CEST | 49705 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:09.226039886 CEST | 443 | 49704 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:09.226088047 CEST | 443 | 49704 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:09.226113081 CEST | 443 | 49704 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:09.226166010 CEST | 49704 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:09.226183891 CEST | 443 | 49704 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:09.226238012 CEST | 49704 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:09.232851028 CEST | 443 | 49704 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:09.232907057 CEST | 443 | 49704 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:09.232959032 CEST | 49704 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:09.235601902 CEST | 49704 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:09.235618114 CEST | 443 | 49704 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:12.590404987 CEST | 49719 | 443 | 192.168.2.16 | 142.250.69.4 |
| Apr 22, 2025 15:18:12.590460062 CEST | 443 | 49719 | 142.250.69.4 | 192.168.2.16 |
| Apr 22, 2025 15:18:12.590588093 CEST | 49719 | 443 | 192.168.2.16 | 142.250.69.4 |
| Apr 22, 2025 15:18:12.590712070 CEST | 49719 | 443 | 192.168.2.16 | 142.250.69.4 |
| Apr 22, 2025 15:18:12.590725899 CEST | 443 | 49719 | 142.250.69.4 | 192.168.2.16 |
| Apr 22, 2025 15:18:12.909590960 CEST | 443 | 49719 | 142.250.69.4 | 192.168.2.16 |
| Apr 22, 2025 15:18:12.909698963 CEST | 49719 | 443 | 192.168.2.16 | 142.250.69.4 |
| Apr 22, 2025 15:18:12.910795927 CEST | 49719 | 443 | 192.168.2.16 | 142.250.69.4 |
| Apr 22, 2025 15:18:12.910805941 CEST | 443 | 49719 | 142.250.69.4 | 192.168.2.16 |
| Apr 22, 2025 15:18:12.911076069 CEST | 443 | 49719 | 142.250.69.4 | 192.168.2.16 |
| Apr 22, 2025 15:18:12.959076881 CEST | 49719 | 443 | 192.168.2.16 | 142.250.69.4 |
| Apr 22, 2025 15:18:22.984047890 CEST | 443 | 49719 | 142.250.69.4 | 192.168.2.16 |
| Apr 22, 2025 15:18:22.984110117 CEST | 443 | 49719 | 142.250.69.4 | 192.168.2.16 |
| Apr 22, 2025 15:18:22.984222889 CEST | 49719 | 443 | 192.168.2.16 | 142.250.69.4 |
| Apr 22, 2025 15:18:23.053494930 CEST | 49671 | 443 | 192.168.2.16 | 204.79.197.203 |
| Apr 22, 2025 15:18:23.357126951 CEST | 49671 | 443 | 192.168.2.16 | 204.79.197.203 |
| Apr 22, 2025 15:18:23.886071920 CEST | 49719 | 443 | 192.168.2.16 | 142.250.69.4 |
| Apr 22, 2025 15:18:23.886109114 CEST | 443 | 49719 | 142.250.69.4 | 192.168.2.16 |
| Apr 22, 2025 15:18:23.964140892 CEST | 49671 | 443 | 192.168.2.16 | 204.79.197.203 |
| Apr 22, 2025 15:18:25.177135944 CEST | 49671 | 443 | 192.168.2.16 | 204.79.197.203 |
| Apr 22, 2025 15:18:27.579171896 CEST | 49671 | 443 | 192.168.2.16 | 204.79.197.203 |
| Apr 22, 2025 15:18:31.480541945 CEST | 49679 | 443 | 192.168.2.16 | 52.182.143.211 |
| Apr 22, 2025 15:18:31.795110941 CEST | 49679 | 443 | 192.168.2.16 | 52.182.143.211 |
| Apr 22, 2025 15:18:32.385185003 CEST | 49671 | 443 | 192.168.2.16 | 204.79.197.203 |
| Apr 22, 2025 15:18:32.401210070 CEST | 49679 | 443 | 192.168.2.16 | 52.182.143.211 |
| Apr 22, 2025 15:18:33.609239101 CEST | 49679 | 443 | 192.168.2.16 | 52.182.143.211 |
| Apr 22, 2025 15:18:36.021179914 CEST | 49679 | 443 | 192.168.2.16 | 52.182.143.211 |
| Apr 22, 2025 15:18:40.828198910 CEST | 49679 | 443 | 192.168.2.16 | 52.182.143.211 |
| Apr 22, 2025 15:18:41.560192108 CEST | 49726 | 443 | 192.168.2.16 | 142.250.69.4 |
| Apr 22, 2025 15:18:41.560220003 CEST | 443 | 49726 | 142.250.69.4 | 192.168.2.16 |
| Apr 22, 2025 15:18:41.560291052 CEST | 49726 | 443 | 192.168.2.16 | 142.250.69.4 |
| Apr 22, 2025 15:18:41.560554028 CEST | 49726 | 443 | 192.168.2.16 | 142.250.69.4 |
| Apr 22, 2025 15:18:41.560566902 CEST | 443 | 49726 | 142.250.69.4 | 192.168.2.16 |
| Apr 22, 2025 15:18:41.875740051 CEST | 443 | 49726 | 142.250.69.4 | 192.168.2.16 |
| Apr 22, 2025 15:18:41.876153946 CEST | 49726 | 443 | 192.168.2.16 | 142.250.69.4 |
| Apr 22, 2025 15:18:41.876171112 CEST | 443 | 49726 | 142.250.69.4 | 192.168.2.16 |
| Apr 22, 2025 15:18:41.876548052 CEST | 49726 | 443 | 192.168.2.16 | 142.250.69.4 |
| Apr 22, 2025 15:18:41.876554012 CEST | 443 | 49726 | 142.250.69.4 | 192.168.2.16 |
| Apr 22, 2025 15:18:41.988217115 CEST | 49671 | 443 | 192.168.2.16 | 204.79.197.203 |
| Apr 22, 2025 15:18:42.224085093 CEST | 443 | 49726 | 142.250.69.4 | 192.168.2.16 |
| Apr 22, 2025 15:18:42.224131107 CEST | 443 | 49726 | 142.250.69.4 | 192.168.2.16 |
| Apr 22, 2025 15:18:42.224159002 CEST | 443 | 49726 | 142.250.69.4 | 192.168.2.16 |
| Apr 22, 2025 15:18:42.224185944 CEST | 443 | 49726 | 142.250.69.4 | 192.168.2.16 |
| Apr 22, 2025 15:18:42.224225044 CEST | 49726 | 443 | 192.168.2.16 | 142.250.69.4 |
| Apr 22, 2025 15:18:42.224237919 CEST | 443 | 49726 | 142.250.69.4 | 192.168.2.16 |
| Apr 22, 2025 15:18:42.224272966 CEST | 49726 | 443 | 192.168.2.16 | 142.250.69.4 |
| Apr 22, 2025 15:18:42.224422932 CEST | 443 | 49726 | 142.250.69.4 | 192.168.2.16 |
| Apr 22, 2025 15:18:42.224478960 CEST | 49726 | 443 | 192.168.2.16 | 142.250.69.4 |
| Apr 22, 2025 15:18:42.224488020 CEST | 443 | 49726 | 142.250.69.4 | 192.168.2.16 |
| Apr 22, 2025 15:18:42.230504990 CEST | 443 | 49726 | 142.250.69.4 | 192.168.2.16 |
| Apr 22, 2025 15:18:42.230588913 CEST | 49726 | 443 | 192.168.2.16 | 142.250.69.4 |
| Apr 22, 2025 15:18:42.230804920 CEST | 49726 | 443 | 192.168.2.16 | 142.250.69.4 |
| Apr 22, 2025 15:18:42.230814934 CEST | 443 | 49726 | 142.250.69.4 | 192.168.2.16 |
| Apr 22, 2025 15:18:43.563482046 CEST | 49727 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:43.563543081 CEST | 443 | 49727 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:43.563638926 CEST | 49727 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:43.564069986 CEST | 49727 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:43.564086914 CEST | 443 | 49727 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:43.568330050 CEST | 49728 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:43.568363905 CEST | 443 | 49728 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:43.568445921 CEST | 49728 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:43.568658113 CEST | 49728 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:43.568674088 CEST | 443 | 49728 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:43.878925085 CEST | 443 | 49727 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:43.881470919 CEST | 443 | 49728 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:43.883449078 CEST | 49727 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:43.883480072 CEST | 443 | 49727 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:43.883549929 CEST | 49728 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:43.883567095 CEST | 443 | 49728 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:43.883760929 CEST | 49727 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:43.883769035 CEST | 443 | 49727 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:44.372606993 CEST | 443 | 49727 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:44.372735023 CEST | 443 | 49727 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:44.372818947 CEST | 49727 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:44.373136997 CEST | 49727 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:44.373163939 CEST | 443 | 49727 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:50.428359985 CEST | 49679 | 443 | 192.168.2.16 | 52.182.143.211 |
| Apr 22, 2025 15:18:51.180246115 CEST | 49746 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:51.180283070 CEST | 443 | 49746 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:51.180355072 CEST | 49746 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:51.180571079 CEST | 49746 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:51.180583000 CEST | 443 | 49746 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:51.492079020 CEST | 443 | 49746 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:51.492305994 CEST | 49746 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:51.492784023 CEST | 443 | 49746 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:51.492846966 CEST | 49746 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:51.494503021 CEST | 49746 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:51.494512081 CEST | 443 | 49746 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:51.494729996 CEST | 443 | 49746 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:51.495031118 CEST | 49746 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:51.540267944 CEST | 443 | 49746 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:51.696518898 CEST | 443 | 49746 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:51.696738005 CEST | 443 | 49746 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:51.696785927 CEST | 443 | 49746 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:51.696808100 CEST | 49746 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:51.696830034 CEST | 443 | 49746 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:51.696976900 CEST | 49746 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:51.706322908 CEST | 443 | 49746 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:51.706396103 CEST | 49746 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:51.706403017 CEST | 443 | 49746 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:51.717086077 CEST | 443 | 49746 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:51.717168093 CEST | 49746 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:51.717174053 CEST | 443 | 49746 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:51.727807045 CEST | 443 | 49746 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:51.727847099 CEST | 443 | 49746 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:51.727880955 CEST | 49746 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:51.727888107 CEST | 443 | 49746 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:51.727933884 CEST | 49746 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:51.843751907 CEST | 443 | 49746 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:51.843847990 CEST | 49746 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:51.849092960 CEST | 443 | 49746 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:51.849124908 CEST | 443 | 49746 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:51.849287033 CEST | 49746 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:51.849293947 CEST | 443 | 49746 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:51.849344015 CEST | 49746 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:51.859838009 CEST | 443 | 49746 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:51.859935045 CEST | 49746 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:51.870506048 CEST | 443 | 49746 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:51.870696068 CEST | 49746 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:51.881335974 CEST | 443 | 49746 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:51.881370068 CEST | 443 | 49746 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:51.881419897 CEST | 49746 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:51.881428003 CEST | 443 | 49746 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:51.881584883 CEST | 49746 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:51.892111063 CEST | 443 | 49746 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:51.902759075 CEST | 443 | 49746 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:51.902787924 CEST | 443 | 49746 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:51.902833939 CEST | 49746 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:51.902842045 CEST | 443 | 49746 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:51.903006077 CEST | 49746 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:51.912838936 CEST | 443 | 49746 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:51.912892103 CEST | 443 | 49746 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:51.912947893 CEST | 49746 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:51.912952900 CEST | 443 | 49746 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:51.913012981 CEST | 443 | 49746 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:51.913064003 CEST | 49746 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:51.913167000 CEST | 49746 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:51.913177013 CEST | 443 | 49746 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:51.944598913 CEST | 49748 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:51.944631100 CEST | 443 | 49748 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:51.944709063 CEST | 49748 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:51.944885969 CEST | 49748 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:51.944900990 CEST | 443 | 49748 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:51.967145920 CEST | 49728 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:51.967175961 CEST | 443 | 49728 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:52.163938046 CEST | 443 | 49728 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:52.164002895 CEST | 443 | 49728 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:52.164036036 CEST | 443 | 49728 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:52.164062023 CEST | 49728 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:52.164073944 CEST | 443 | 49728 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:52.164124012 CEST | 49728 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:52.167628050 CEST | 443 | 49728 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:52.167707920 CEST | 443 | 49728 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:52.167769909 CEST | 49728 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:52.169625044 CEST | 49728 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:52.169631004 CEST | 443 | 49728 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:52.260189056 CEST | 443 | 49748 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:52.260973930 CEST | 49748 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:18:52.260989904 CEST | 443 | 49748 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:18:55.041551113 CEST | 49693 | 80 | 192.168.2.16 | 199.232.210.172 |
| Apr 22, 2025 15:18:55.189083099 CEST | 80 | 49693 | 199.232.210.172 | 192.168.2.16 |
| Apr 22, 2025 15:18:55.189093113 CEST | 80 | 49693 | 199.232.210.172 | 192.168.2.16 |
| Apr 22, 2025 15:18:55.189177990 CEST | 49693 | 80 | 192.168.2.16 | 199.232.210.172 |
| Apr 22, 2025 15:19:12.512037039 CEST | 49761 | 443 | 192.168.2.16 | 142.250.69.4 |
| Apr 22, 2025 15:19:12.512063980 CEST | 443 | 49761 | 142.250.69.4 | 192.168.2.16 |
| Apr 22, 2025 15:19:12.512149096 CEST | 49761 | 443 | 192.168.2.16 | 142.250.69.4 |
| Apr 22, 2025 15:19:12.512381077 CEST | 49761 | 443 | 192.168.2.16 | 142.250.69.4 |
| Apr 22, 2025 15:19:12.512406111 CEST | 443 | 49761 | 142.250.69.4 | 192.168.2.16 |
| Apr 22, 2025 15:19:12.826972008 CEST | 443 | 49761 | 142.250.69.4 | 192.168.2.16 |
| Apr 22, 2025 15:19:12.827404976 CEST | 49761 | 443 | 192.168.2.16 | 142.250.69.4 |
| Apr 22, 2025 15:19:12.827430964 CEST | 443 | 49761 | 142.250.69.4 | 192.168.2.16 |
| Apr 22, 2025 15:19:22.836184978 CEST | 443 | 49761 | 142.250.69.4 | 192.168.2.16 |
| Apr 22, 2025 15:19:22.836246967 CEST | 443 | 49761 | 142.250.69.4 | 192.168.2.16 |
| Apr 22, 2025 15:19:22.836375952 CEST | 49761 | 443 | 192.168.2.16 | 142.250.69.4 |
| Apr 22, 2025 15:19:22.875391960 CEST | 49761 | 443 | 192.168.2.16 | 142.250.69.4 |
| Apr 22, 2025 15:19:22.875416994 CEST | 443 | 49761 | 142.250.69.4 | 192.168.2.16 |
| Apr 22, 2025 15:19:37.262465000 CEST | 49748 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:19:37.262482882 CEST | 443 | 49748 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:19:52.879997015 CEST | 49748 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:19:52.880103111 CEST | 443 | 49748 | 192.178.49.206 | 192.168.2.16 |
| Apr 22, 2025 15:19:52.880162954 CEST | 49748 | 443 | 192.168.2.16 | 192.178.49.206 |
| Apr 22, 2025 15:20:12.572945118 CEST | 49769 | 443 | 192.168.2.16 | 142.250.69.4 |
| Apr 22, 2025 15:20:12.572998047 CEST | 443 | 49769 | 142.250.69.4 | 192.168.2.16 |
| Apr 22, 2025 15:20:12.573091030 CEST | 49769 | 443 | 192.168.2.16 | 142.250.69.4 |
| Apr 22, 2025 15:20:12.573302984 CEST | 49769 | 443 | 192.168.2.16 | 142.250.69.4 |
| Apr 22, 2025 15:20:12.573317051 CEST | 443 | 49769 | 142.250.69.4 | 192.168.2.16 |
| Apr 22, 2025 15:20:12.887706995 CEST | 443 | 49769 | 142.250.69.4 | 192.168.2.16 |
| Apr 22, 2025 15:20:12.888125896 CEST | 49769 | 443 | 192.168.2.16 | 142.250.69.4 |
| Apr 22, 2025 15:20:12.888158083 CEST | 443 | 49769 | 142.250.69.4 | 192.168.2.16 |
| Timestamp | Source Port | Dest Port | Source IP | Dest IP |
|---|---|---|---|---|
| Apr 22, 2025 15:18:07.842830896 CEST | 53 | 55895 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:18:07.917326927 CEST | 53 | 60283 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:18:08.408384085 CEST | 54874 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 22, 2025 15:18:08.408611059 CEST | 63362 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 22, 2025 15:18:08.413286924 CEST | 61242 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 22, 2025 15:18:08.413434982 CEST | 58718 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 22, 2025 15:18:08.548784971 CEST | 53 | 54874 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:18:08.549402952 CEST | 53 | 63362 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:18:08.550153971 CEST | 53825 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 22, 2025 15:18:08.550724983 CEST | 52169 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 22, 2025 15:18:08.554301023 CEST | 53 | 58718 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:18:08.564579964 CEST | 53 | 61242 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:18:08.690649033 CEST | 53 | 53825 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:18:08.698400974 CEST | 53 | 52169 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:18:08.989561081 CEST | 53 | 61693 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:18:09.286681890 CEST | 53 | 63731 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:18:09.433079958 CEST | 53 | 54421 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:18:10.114970922 CEST | 49190 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 22, 2025 15:18:10.115236044 CEST | 57582 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 22, 2025 15:18:10.228662968 CEST | 53 | 54764 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:18:10.255825043 CEST | 53 | 49190 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:18:10.268795013 CEST | 53 | 57582 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:18:10.988754988 CEST | 53 | 58062 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:18:12.448856115 CEST | 52471 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 22, 2025 15:18:12.449034929 CEST | 53798 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 22, 2025 15:18:12.589061975 CEST | 53 | 52471 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:18:12.589330912 CEST | 53 | 53798 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:18:26.275444031 CEST | 53 | 53018 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:18:44.980146885 CEST | 53 | 62776 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:18:46.603086948 CEST | 53 | 58092 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:18:48.774631023 CEST | 53 | 51998 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:18:51.038836956 CEST | 57994 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 22, 2025 15:18:51.039308071 CEST | 50751 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 22, 2025 15:18:51.179352999 CEST | 53 | 50751 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:18:51.179368019 CEST | 53 | 57994 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:18:52.056478024 CEST | 57198 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 22, 2025 15:18:52.056665897 CEST | 55499 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 22, 2025 15:18:52.198631048 CEST | 53 | 55499 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:18:52.198646069 CEST | 53 | 57198 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:18:52.738270044 CEST | 53 | 60975 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:19:07.487374067 CEST | 53 | 50844 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:19:07.753614902 CEST | 53 | 60595 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:19:09.881191015 CEST | 58231 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 22, 2025 15:19:09.881395102 CEST | 49564 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 22, 2025 15:19:10.021209002 CEST | 53 | 58231 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:19:10.021394014 CEST | 53 | 49564 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:19:11.166755915 CEST | 53 | 50929 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:19:29.092041969 CEST | 138 | 138 | 192.168.2.16 | 192.168.2.255 |
| Apr 22, 2025 15:19:37.483514071 CEST | 53 | 53288 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:19:50.887089968 CEST | 51755 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 22, 2025 15:19:50.887233973 CEST | 49430 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 22, 2025 15:19:51.027343988 CEST | 53 | 51755 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:19:51.027457952 CEST | 53 | 49430 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:19:51.903831005 CEST | 62760 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 22, 2025 15:19:51.904026031 CEST | 58385 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 22, 2025 15:19:52.045702934 CEST | 53 | 62760 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:19:52.045845985 CEST | 53 | 58385 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:19:53.932420015 CEST | 50063 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 22, 2025 15:19:54.028033018 CEST | 53 | 55263 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:19:54.072556019 CEST | 53 | 50063 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:19:54.935605049 CEST | 50063 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 22, 2025 15:19:55.076601982 CEST | 53 | 50063 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:19:55.942624092 CEST | 50063 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 22, 2025 15:19:56.082895994 CEST | 53 | 50063 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:19:57.955650091 CEST | 50063 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 22, 2025 15:19:58.095958948 CEST | 53 | 50063 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:20:01.967696905 CEST | 50063 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 22, 2025 15:20:02.107815981 CEST | 53 | 50063 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:20:06.878146887 CEST | 60581 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 22, 2025 15:20:06.878288031 CEST | 61789 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 22, 2025 15:20:07.018419027 CEST | 53 | 60581 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:20:07.018543959 CEST | 53 | 61789 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:20:07.893927097 CEST | 56014 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 22, 2025 15:20:08.034452915 CEST | 53 | 56014 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:20:09.926368952 CEST | 54196 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 22, 2025 15:20:10.066688061 CEST | 53 | 54196 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:20:10.932694912 CEST | 54196 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 22, 2025 15:20:11.072782993 CEST | 53 | 54196 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:20:11.934719086 CEST | 54196 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 22, 2025 15:20:12.075325012 CEST | 53 | 54196 | 1.1.1.1 | 192.168.2.16 |
| Apr 22, 2025 15:20:13.943696976 CEST | 54196 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 22, 2025 15:20:14.083842993 CEST | 53 | 54196 | 1.1.1.1 | 192.168.2.16 |
| Timestamp | Source IP | Dest IP | Trans ID | OP Code | Name | Type | Class | DNS over HTTPS |
|---|---|---|---|---|---|---|---|---|
| Apr 22, 2025 15:18:08.408384085 CEST | 192.168.2.16 | 1.1.1.1 | 0x21c7 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 22, 2025 15:18:08.408611059 CEST | 192.168.2.16 | 1.1.1.1 | 0x66b1 | Standard query (0) | 65 | IN (0x0001) | false | |
| Apr 22, 2025 15:18:08.413286924 CEST | 192.168.2.16 | 1.1.1.1 | 0xcdf7 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 22, 2025 15:18:08.413434982 CEST | 192.168.2.16 | 1.1.1.1 | 0xe317 | Standard query (0) | 65 | IN (0x0001) | false | |
| Apr 22, 2025 15:18:08.550153971 CEST | 192.168.2.16 | 1.1.1.1 | 0x84db | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 22, 2025 15:18:08.550724983 CEST | 192.168.2.16 | 1.1.1.1 | 0x44d7 | Standard query (0) | 65 | IN (0x0001) | false | |
| Apr 22, 2025 15:18:10.114970922 CEST | 192.168.2.16 | 1.1.1.1 | 0x3e4f | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 22, 2025 15:18:10.115236044 CEST | 192.168.2.16 | 1.1.1.1 | 0xa03a | Standard query (0) | 65 | IN (0x0001) | false | |
| Apr 22, 2025 15:18:12.448856115 CEST | 192.168.2.16 | 1.1.1.1 | 0xb39a | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 22, 2025 15:18:12.449034929 CEST | 192.168.2.16 | 1.1.1.1 | 0xa65e | Standard query (0) | 65 | IN (0x0001) | false | |
| Apr 22, 2025 15:18:51.038836956 CEST | 192.168.2.16 | 1.1.1.1 | 0x2725 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 22, 2025 15:18:51.039308071 CEST | 192.168.2.16 | 1.1.1.1 | 0xc11e | Standard query (0) | 65 | IN (0x0001) | false | |
| Apr 22, 2025 15:18:52.056478024 CEST | 192.168.2.16 | 1.1.1.1 | 0xebbf | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 22, 2025 15:18:52.056665897 CEST | 192.168.2.16 | 1.1.1.1 | 0xf323 | Standard query (0) | 65 | IN (0x0001) | false | |
| Apr 22, 2025 15:19:09.881191015 CEST | 192.168.2.16 | 1.1.1.1 | 0x9067 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 22, 2025 15:19:09.881395102 CEST | 192.168.2.16 | 1.1.1.1 | 0xdbd2 | Standard query (0) | 65 | IN (0x0001) | false | |
| Apr 22, 2025 15:19:50.887089968 CEST | 192.168.2.16 | 1.1.1.1 | 0x4634 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 22, 2025 15:19:50.887233973 CEST | 192.168.2.16 | 1.1.1.1 | 0x294e | Standard query (0) | 65 | IN (0x0001) | false | |
| Apr 22, 2025 15:19:51.903831005 CEST | 192.168.2.16 | 1.1.1.1 | 0x1588 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 22, 2025 15:19:51.904026031 CEST | 192.168.2.16 | 1.1.1.1 | 0xa843 | Standard query (0) | 65 | IN (0x0001) | false | |
| Apr 22, 2025 15:19:53.932420015 CEST | 192.168.2.16 | 1.1.1.1 | 0xeeb4 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 22, 2025 15:19:54.935605049 CEST | 192.168.2.16 | 1.1.1.1 | 0xeeb4 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 22, 2025 15:19:55.942624092 CEST | 192.168.2.16 | 1.1.1.1 | 0xeeb4 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 22, 2025 15:19:57.955650091 CEST | 192.168.2.16 | 1.1.1.1 | 0xeeb4 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 22, 2025 15:20:01.967696905 CEST | 192.168.2.16 | 1.1.1.1 | 0xeeb4 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 22, 2025 15:20:06.878146887 CEST | 192.168.2.16 | 1.1.1.1 | 0xd0a | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 22, 2025 15:20:06.878288031 CEST | 192.168.2.16 | 1.1.1.1 | 0x157e | Standard query (0) | 65 | IN (0x0001) | false | |
| Apr 22, 2025 15:20:07.893927097 CEST | 192.168.2.16 | 1.1.1.1 | 0xf4ad | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 22, 2025 15:20:09.926368952 CEST | 192.168.2.16 | 1.1.1.1 | 0xffb2 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 22, 2025 15:20:10.932694912 CEST | 192.168.2.16 | 1.1.1.1 | 0xffb2 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 22, 2025 15:20:11.934719086 CEST | 192.168.2.16 | 1.1.1.1 | 0xffb2 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 22, 2025 15:20:13.943696976 CEST | 192.168.2.16 | 1.1.1.1 | 0xffb2 | Standard query (0) | A (IP address) | IN (0x0001) | false |
| Timestamp | Source IP | Dest IP | Trans ID | Reply Code | Name | CName | Address | Type | Class | DNS over HTTPS |
|---|---|---|---|---|---|---|---|---|---|---|
| Apr 22, 2025 15:18:08.548784971 CEST | 1.1.1.1 | 192.168.2.16 | 0x21c7 | No error (0) | 192.178.49.206 | A (IP address) | IN (0x0001) | false | ||
| Apr 22, 2025 15:18:08.564579964 CEST | 1.1.1.1 | 192.168.2.16 | 0xcdf7 | No error (0) | 192.178.49.206 | A (IP address) | IN (0x0001) | false | ||
| Apr 22, 2025 15:18:08.690649033 CEST | 1.1.1.1 | 192.168.2.16 | 0x84db | No error (0) | 192.178.49.206 | A (IP address) | IN (0x0001) | false | ||
| Apr 22, 2025 15:18:10.255825043 CEST | 1.1.1.1 | 192.168.2.16 | 0x3e4f | No error (0) | 142.250.68.238 | A (IP address) | IN (0x0001) | false | ||
| Apr 22, 2025 15:18:12.589061975 CEST | 1.1.1.1 | 192.168.2.16 | 0xb39a | No error (0) | 142.250.69.4 | A (IP address) | IN (0x0001) | false | ||
| Apr 22, 2025 15:18:12.589330912 CEST | 1.1.1.1 | 192.168.2.16 | 0xa65e | No error (0) | 65 | IN (0x0001) | false | |||
| Apr 22, 2025 15:18:51.179352999 CEST | 1.1.1.1 | 192.168.2.16 | 0xc11e | No error (0) | www3.l.google.com | CNAME (Canonical name) | IN (0x0001) | false | ||
| Apr 22, 2025 15:18:51.179368019 CEST | 1.1.1.1 | 192.168.2.16 | 0x2725 | No error (0) | www3.l.google.com | CNAME (Canonical name) | IN (0x0001) | false | ||
| Apr 22, 2025 15:18:51.179368019 CEST | 1.1.1.1 | 192.168.2.16 | 0x2725 | No error (0) | 192.178.49.206 | A (IP address) | IN (0x0001) | false | ||
| Apr 22, 2025 15:18:52.198646069 CEST | 1.1.1.1 | 192.168.2.16 | 0xebbf | No error (0) | 142.250.69.14 | A (IP address) | IN (0x0001) | false | ||
| Apr 22, 2025 15:19:10.021209002 CEST | 1.1.1.1 | 192.168.2.16 | 0x9067 | No error (0) | 142.250.68.238 | A (IP address) | IN (0x0001) | false | ||
| Apr 22, 2025 15:19:10.021394014 CEST | 1.1.1.1 | 192.168.2.16 | 0xdbd2 | No error (0) | 65 | IN (0x0001) | false | |||
| Apr 22, 2025 15:19:51.027343988 CEST | 1.1.1.1 | 192.168.2.16 | 0x4634 | No error (0) | beacons-handoff.gcp.gvt2.com | CNAME (Canonical name) | IN (0x0001) | false | ||
| Apr 22, 2025 15:19:51.027343988 CEST | 1.1.1.1 | 192.168.2.16 | 0x4634 | No error (0) | 74.125.138.94 | A (IP address) | IN (0x0001) | false | ||
| Apr 22, 2025 15:19:51.027457952 CEST | 1.1.1.1 | 192.168.2.16 | 0x294e | No error (0) | beacons-handoff.gcp.gvt2.com | CNAME (Canonical name) | IN (0x0001) | false | ||
| Apr 22, 2025 15:19:52.045702934 CEST | 1.1.1.1 | 192.168.2.16 | 0x1588 | No error (0) | beacons-handoff.gcp.gvt2.com | CNAME (Canonical name) | IN (0x0001) | false | ||
| Apr 22, 2025 15:19:52.045702934 CEST | 1.1.1.1 | 192.168.2.16 | 0x1588 | No error (0) | 74.125.138.94 | A (IP address) | IN (0x0001) | false | ||
| Apr 22, 2025 15:19:52.045845985 CEST | 1.1.1.1 | 192.168.2.16 | 0xa843 | No error (0) | beacons-handoff.gcp.gvt2.com | CNAME (Canonical name) | IN (0x0001) | false | ||
| Apr 22, 2025 15:19:54.072556019 CEST | 1.1.1.1 | 192.168.2.16 | 0xeeb4 | No error (0) | beacons-handoff.gcp.gvt2.com | CNAME (Canonical name) | IN (0x0001) | false | ||
| Apr 22, 2025 15:19:54.072556019 CEST | 1.1.1.1 | 192.168.2.16 | 0xeeb4 | No error (0) | 74.125.138.94 | A (IP address) | IN (0x0001) | false | ||
| Apr 22, 2025 15:19:55.076601982 CEST | 1.1.1.1 | 192.168.2.16 | 0xeeb4 | No error (0) | beacons-handoff.gcp.gvt2.com | CNAME (Canonical name) | IN (0x0001) | false | ||
| Apr 22, 2025 15:19:55.076601982 CEST | 1.1.1.1 | 192.168.2.16 | 0xeeb4 | No error (0) | 74.125.138.94 | A (IP address) | IN (0x0001) | false | ||
| Apr 22, 2025 15:19:56.082895994 CEST | 1.1.1.1 | 192.168.2.16 | 0xeeb4 | No error (0) | beacons-handoff.gcp.gvt2.com | CNAME (Canonical name) | IN (0x0001) | false | ||
| Apr 22, 2025 15:19:56.082895994 CEST | 1.1.1.1 | 192.168.2.16 | 0xeeb4 | No error (0) | 74.125.138.94 | A (IP address) | IN (0x0001) | false | ||
| Apr 22, 2025 15:19:58.095958948 CEST | 1.1.1.1 | 192.168.2.16 | 0xeeb4 | No error (0) | beacons-handoff.gcp.gvt2.com | CNAME (Canonical name) | IN (0x0001) | false | ||
| Apr 22, 2025 15:19:58.095958948 CEST | 1.1.1.1 | 192.168.2.16 | 0xeeb4 | No error (0) | 74.125.138.94 | A (IP address) | IN (0x0001) | false | ||
| Apr 22, 2025 15:20:02.107815981 CEST | 1.1.1.1 | 192.168.2.16 | 0xeeb4 | No error (0) | beacons-handoff.gcp.gvt2.com | CNAME (Canonical name) | IN (0x0001) | false | ||
| Apr 22, 2025 15:20:02.107815981 CEST | 1.1.1.1 | 192.168.2.16 | 0xeeb4 | No error (0) | 74.125.138.94 | A (IP address) | IN (0x0001) | false | ||
| Apr 22, 2025 15:20:07.018419027 CEST | 1.1.1.1 | 192.168.2.16 | 0xd0a | No error (0) | 142.250.113.94 | A (IP address) | IN (0x0001) | false | ||
| Apr 22, 2025 15:20:08.034452915 CEST | 1.1.1.1 | 192.168.2.16 | 0xf4ad | No error (0) | 142.250.113.94 | A (IP address) | IN (0x0001) | false | ||
| Apr 22, 2025 15:20:10.066688061 CEST | 1.1.1.1 | 192.168.2.16 | 0xffb2 | No error (0) | 108.177.122.94 | A (IP address) | IN (0x0001) | false | ||
| Apr 22, 2025 15:20:11.072782993 CEST | 1.1.1.1 | 192.168.2.16 | 0xffb2 | No error (0) | 108.177.122.94 | A (IP address) | IN (0x0001) | false | ||
| Apr 22, 2025 15:20:12.075325012 CEST | 1.1.1.1 | 192.168.2.16 | 0xffb2 | No error (0) | 108.177.122.94 | A (IP address) | IN (0x0001) | false | ||
| Apr 22, 2025 15:20:14.083842993 CEST | 1.1.1.1 | 192.168.2.16 | 0xffb2 | No error (0) | 108.177.122.94 | A (IP address) | IN (0x0001) | false |
|
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 0 | 192.168.2.16 | 49704 | 192.178.49.206 | 443 | 6468 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-04-22 13:18:08 UTC | 924 | OUT | |
| 2025-04-22 13:18:09 UTC | 651 | IN | |
| 2025-04-22 13:18:09 UTC | 673 | IN | |
| 2025-04-22 13:18:09 UTC | 1324 | IN | |
| 2025-04-22 13:18:09 UTC | 1070 | IN | |
| 2025-04-22 13:18:09 UTC | 5 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 1 | 192.168.2.16 | 49726 | 142.250.69.4 | 443 | 6468 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-04-22 13:18:41 UTC | 487 | OUT | |
| 2025-04-22 13:18:42 UTC | 1303 | IN | |
| 2025-04-22 13:18:42 UTC | 21 | IN | |
| 2025-04-22 13:18:42 UTC | 1324 | IN | |
| 2025-04-22 13:18:42 UTC | 1324 | IN | |
| 2025-04-22 13:18:42 UTC | 1324 | IN | |
| 2025-04-22 13:18:42 UTC | 640 | IN | |
| 2025-04-22 13:18:42 UTC | 142 | IN | |
| 2025-04-22 13:18:42 UTC | 1324 | IN | |
| 2025-04-22 13:18:42 UTC | 276 | IN | |
| 2025-04-22 13:18:42 UTC | 5 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 2 | 192.168.2.16 | 49727 | 192.178.49.206 | 443 | 6468 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-04-22 13:18:43 UTC | 945 | OUT | |
| 2025-04-22 13:18:44 UTC | 836 | IN | |
| 2025-04-22 13:18:44 UTC | 488 | IN | |
| 2025-04-22 13:18:44 UTC | 73 | IN | |
| 2025-04-22 13:18:44 UTC | 5 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 3 | 192.168.2.16 | 49746 | 192.178.49.206 | 443 | 6468 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-04-22 13:18:51 UTC | 1349 | OUT | |
| 2025-04-22 13:18:51 UTC | 2101 | IN | |
| 2025-04-22 13:18:51 UTC | 2101 | IN | |
| 2025-04-22 13:18:51 UTC | 2101 | IN | |
| 2025-04-22 13:18:51 UTC | 2101 | IN | |
| 2025-04-22 13:18:51 UTC | 2101 | IN | |
| 2025-04-22 13:18:51 UTC | 2101 | IN | |
| 2025-04-22 13:18:51 UTC | 2101 | IN | |
| 2025-04-22 13:18:51 UTC | 2101 | IN | |
| 2025-04-22 13:18:51 UTC | 2101 | IN | |
| 2025-04-22 13:18:51 UTC | 2101 | IN | |
| 2025-04-22 13:18:51 UTC | 2101 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 4 | 192.168.2.16 | 49728 | 192.178.49.206 | 443 | 6468 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-04-22 13:18:51 UTC | 949 | OUT | |
| 2025-04-22 13:18:52 UTC | 651 | IN | |
| 2025-04-22 13:18:52 UTC | 673 | IN | |
| 2025-04-22 13:18:52 UTC | 1324 | IN | |
| 2025-04-22 13:18:52 UTC | 1070 | IN | |
| 2025-04-22 13:18:52 UTC | 5 | IN |
Click to jump to process
Click to jump to process
Click to jump to process
| Target ID: | 0 |
| Start time: | 09:18:05 |
| Start date: | 22/04/2025 |
| Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x7ff77eaf0000 |
| File size: | 3'388'000 bytes |
| MD5 hash: | E81F54E6C1129887AEA47E7D092680BF |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | low |
| Has exited: | false |
| Target ID: | 1 |
| Start time: | 09:18:06 |
| Start date: | 22/04/2025 |
| Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x7ff77eaf0000 |
| File size: | 3'388'000 bytes |
| MD5 hash: | E81F54E6C1129887AEA47E7D092680BF |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | low |
| Has exited: | false |
| Target ID: | 2 |
| Start time: | 09:18:07 |
| Start date: | 22/04/2025 |
| Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x7ff77eaf0000 |
| File size: | 3'388'000 bytes |
| MD5 hash: | E81F54E6C1129887AEA47E7D092680BF |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | low |
| Has exited: | true |
| Target ID: | 12 |
| Start time: | 09:18:50 |
| Start date: | 22/04/2025 |
| Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x7ff77eaf0000 |
| File size: | 3'388'000 bytes |
| MD5 hash: | E81F54E6C1129887AEA47E7D092680BF |
| Has elevated privileges: | false |
| Has administrator privileges: | false |
| Programmed in: | C, C++ or other language |
| Reputation: | low |
| Has exited: | false |
| Target ID: | 13 |
| Start time: | 09:18:50 |
| Start date: | 22/04/2025 |
| Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x7ff77eaf0000 |
| File size: | 3'388'000 bytes |
| MD5 hash: | E81F54E6C1129887AEA47E7D092680BF |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | low |
| Has exited: | false |
⊘No disassembly
