Edit tour

Windows Analysis Report
http://d3ag4hukkh62yn.cloudfront.net

Overview

General Information

Sample URL:	http://d3ag4hukkh62yn.cloudfront.net
Analysis ID:	1673430
Infos:

Detection

Score:	1
Range:	0 - 100
Confidence:	80%

Signatures

HTML page contains hidden javascript code

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6092 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 3088 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2052,i,17251419406621996946,13667212765532300792,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=1564 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6924 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-pre-read-main-dll --field-trial-handle=2052,i,17251419406621996946,13667212765532300792,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6640 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://d3ag4hukkh62yn.cloudfront.net" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Suricata Signatures

ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-04-24T20:22:28.095967+0200	2022112	1	Exploit Kit Activity Detected	192.168.2.16	50396	104.18.26.193	443	TCP
2025-04-24T20:22:28.107499+0200	2022112	1	Exploit Kit Activity Detected	192.168.2.16	50394	34.239.88.13	443	TCP
2025-04-24T20:22:35.404518+0200	2022112	1	Exploit Kit Activity Detected	192.168.2.16	50493	52.53.191.192	443	TCP
2025-04-24T20:22:36.182938+0200	2022112	1	Exploit Kit Activity Detected	192.168.2.16	50505	52.53.191.192	443	TCP

HTTP traffic detected: POST /ah/ajax/counter?ctr=desktop_ajax_atf&exp=1745519029690&rId=M2EXPCX8BB4GGX0WV8S0&mkId=ATVPDKIKX0DER&h=7700ca3364401df168e12733cdcae68025ab0d575bfd1369a88d00c71ede87be HTTP/1.1Host: d3ag4hukkh62yn.cloudfront.netConnection: keep-aliveContent-Length: 0sec-ch-ua-platform: "Windows"viewport-width: 1280device-memory: 8sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-dpr: 1sec-ch-ua-mobile: ?0X-Requested-With: XMLHttpRequestAccept: */*sec-ch-viewport-width: 1280downlink: 1.3ect: 3gsec-ch-device-memory: 8dpr: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36rtt: 300sec-ch-ua-platform-version: "10.0.0"Origin: https://d3ag4hukkh62yn.cloudfront.netSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://d3ag4hukkh62yn.cloudfront.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: csm-hit=tb:s-M2EXPCX8BB4GGX0WV8S0|1745518909955&t:1745518912594&adb:adblk_no

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/jsonTransfer-Encoding: chunkedConnection: closeServer: ServerDate: Thu, 24 Apr 2025 18:22:04 GMTx-amz-rid: 6G2NKTZ9ZHJ5Y1HV3S7Pset-cookie: session-id=136-9270449-4188425; Domain=.amazon.com; Expires=Fri, 24-Apr-2026 18:22:04 GMT; Path=/; Secureset-cookie: session-id-time=2082787201l; Domain=.amazon.com; Expires=Fri, 24-Apr-2026 18:22:04 GMT; Path=/; Secureset-cookie: i18n-prefs=USD; Domain=.amazon.com; Expires=Fri, 24-Apr-2026 18:22:04 GMT; Path=/X-XSS-Protection: 1;Accept-CH: ect,rtt,downlink,device-memory,sec-ch-device-memory,viewport-width,sec-ch-viewport-width,dpr,sec-ch-dprContent-Security-Policy: upgrade-insecure-requests;report-uri https://metrics.media-amazon.com/Accept-CH-Lifetime: 86400Content-Encoding: gzipX-Content-Type-Options: nosniffcontent-security-policy-report-only: default-src 'self' blob: https: data: mediastream: 'unsafe-eval' 'unsafe-inline';report-uri https://metrics.media-amazon.com/Vary: Content-Type,Accept-Encoding,User-AgentX-Frame-Options: SAMEORIGINStrict-Transport-Security: max-age=47474747; includeSubDomains; preloadX-Cache: Error from cloudfrontVia: 1.1 f31a6426ebd75ce4393909b12f5cbdcc.cloudfront.net (CloudFront)X-Amz-Cf-Pop: LAX53-P4Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: d95pATvxyMaIKuLPxpGPBRpgn7OrD0qQs6unTqO39hATj8O3ZognWg==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: ServerDate: Thu, 24 Apr 2025 18:22:26 GMTContent-Length: 29Connection: closex-amz-rid: W19K0603RQ5NTAG8MWG5x-amzn-RequestId: c11b92cb-3e52-4dc4-bf58-96d6cd1e2d64Vary: Content-Type,Accept-Encoding,User-AgentStrict-Transport-Security: max-age=47474747; includeSubDomains; preload
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 24 Apr 2025 18:22:30 GMTContent-Type: text/plain; charset=utf-8Content-Length: 19Connection: closeX-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Length: 9Date: Thu, 24 Apr 2025 18:22:34 GMTVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 50439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 50382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50522 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50370 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50496 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 50369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown	Network traffic detected: HTTP traffic on port 50420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50339
Source: unknown	Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50338
Source: unknown	Network traffic detected: HTTP traffic on port 50546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50330
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50349
Source: unknown	Network traffic detected: HTTP traffic on port 50505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50359
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50358
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50351
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50350
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50353
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50357
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50356
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50360
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 50419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50369
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50367
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50371
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50370
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 50444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50319
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 50394 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 50488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50537 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50550 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50481 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 50353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 50456 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50263
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50262
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50269
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown	Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50270
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50272
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50271
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50468 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50273
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50277
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50279
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50281
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50280
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50283
Source: unknown	Network traffic detected: HTTP traffic on port 50412 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50282
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50341 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50285
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50284
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50287
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50286
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50289
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50288
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50290
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50292
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50291
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50294
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50293
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50357 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50517 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50448 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50461 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50529 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50473 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50345 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50530 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50436 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50404 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50542 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50509 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50321 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50493 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50554 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50284 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50333 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 50222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50428 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50543 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 50416 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50291 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50403
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50402
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50405
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50404
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50407
Source: unknown	Network traffic detected: HTTP traffic on port 50555 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50406
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50409
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50408
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50401
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50400
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50348 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50453 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 50210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443

Source: unknown	HTTPS traffic detected: 18.164.169.45:443 -> 192.168.2.16:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.16:443 -> 192.168.2.16:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.16:443 -> 192.168.2.16:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.16:443 -> 192.168.2.16:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.16:443 -> 192.168.2.16:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.16:443 -> 192.168.2.16:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.197.7.236:443 -> 192.168.2.16:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.82.167.184:443 -> 192.168.2.16:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.193.16:443 -> 192.168.2.16:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.193.16:443 -> 192.168.2.16:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.193.16:443 -> 192.168.2.16:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.193.16:443 -> 192.168.2.16:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.193.16:443 -> 192.168.2.16:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.193.16:443 -> 192.168.2.16:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.45.118.88:443 -> 192.168.2.16:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.178.49.196:443 -> 192.168.2.16:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.16:443 -> 192.168.2.16:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.16:443 -> 192.168.2.16:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.16:443 -> 192.168.2.16:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.16:443 -> 192.168.2.16:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.16:443 -> 192.168.2.16:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.16:443 -> 192.168.2.16:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.16:443 -> 192.168.2.16:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.16:443 -> 192.168.2.16:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:49807 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.16:443 -> 192.168.2.16:49906 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.16:443 -> 192.168.2.16:49908 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.16:443 -> 192.168.2.16:49921 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:49982 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:49986 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:49990 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.215.128.78:443 -> 192.168.2.16:50014 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.16:443 -> 192.168.2.16:50021 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.16:443 -> 192.168.2.16:50022 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.169.45:443 -> 192.168.2.16:50023 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.169.45:443 -> 192.168.2.16:50024 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.16:443 -> 192.168.2.16:50034 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.16:443 -> 192.168.2.16:50035 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.16:443 -> 192.168.2.16:50037 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.16:443 -> 192.168.2.16:50040 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.16:443 -> 192.168.2.16:50044 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.16:443 -> 192.168.2.16:50046 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:50050 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:50052 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:50053 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:50055 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:50057 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:50059 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.199.180.130:443 -> 192.168.2.16:50061 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:50082 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:50084 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:50086 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:50088 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:50090 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.16:443 -> 192.168.2.16:50102 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.16:443 -> 192.168.2.16:50104 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.16:443 -> 192.168.2.16:50106 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.16:443 -> 192.168.2.16:50108 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.16:443 -> 192.168.2.16:50110 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.16:443 -> 192.168.2.16:50112 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:50115 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.16:443 -> 192.168.2.16:50114 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:50117 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.16:443 -> 192.168.2.16:50116 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.16:443 -> 192.168.2.16:50118 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:50119 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:50121 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.16:443 -> 192.168.2.16:50120 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:50123 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.16:443 -> 192.168.2.16:50124 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:50125 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.16:443 -> 192.168.2.16:50122 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:50137 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:50139 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:50141 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:50143 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:50145 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:50147 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:50199 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:50201 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:50203 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:50205 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:50207 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.16:443 -> 192.168.2.16:50210 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.16:443 -> 192.168.2.16:50212 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.16:443 -> 192.168.2.16:50214 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.16:443 -> 192.168.2.16:50216 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.16:443 -> 192.168.2.16:50218 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:50223 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:50227 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:50226 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:50229 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:50231 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.16:443 -> 192.168.2.16:50234 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.16:443 -> 192.168.2.16:50236 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.16:443 -> 192.168.2.16:50237 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.16:443 -> 192.168.2.16:50240 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.16:443 -> 192.168.2.16:50241 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:50242 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:50259 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:50261 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:50263 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:50266 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.16:443 -> 192.168.2.16:50267 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.16:443 -> 192.168.2.16:50272 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.16:443 -> 192.168.2.16:50274 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.16:443 -> 192.168.2.16:50276 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.16:443 -> 192.168.2.16:50278 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.16:443 -> 192.168.2.16:50280 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.16:443 -> 192.168.2.16:50328 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.169.245.200:443 -> 192.168.2.16:50354 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.215.138.159:443 -> 192.168.2.16:50353 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 98.82.158.241:443 -> 192.168.2.16:50355 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.215.138.159:443 -> 192.168.2.16:50367 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.41.104:443 -> 192.168.2.16:50398 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.65.21.130:443 -> 192.168.2.16:50399 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.26.193:443 -> 192.168.2.16:50396 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.239.88.13:443 -> 192.168.2.16:50394 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.105.12.121:443 -> 192.168.2.16:50395 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.254.151.69:443 -> 192.168.2.16:50393 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.212.37.81:443 -> 192.168.2.16:50400 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.147.88.8:443 -> 192.168.2.16:50397 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.172.55:443 -> 192.168.2.16:50408 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.212.115.163:443 -> 192.168.2.16:50407 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.234.42.50:443 -> 192.168.2.16:50412 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.147.80.15:443 -> 192.168.2.16:50413 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.211.162.203:443 -> 192.168.2.16:50418 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 98.82.156.207:443 -> 192.168.2.16:50420 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 98.82.156.207:443 -> 192.168.2.16:50421 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 98.82.156.207:443 -> 192.168.2.16:50422 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.90.30:443 -> 192.168.2.16:50423 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.173.154.8:443 -> 192.168.2.16:50419 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.12.171.214:443 -> 192.168.2.16:50417 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 98.82.156.207:443 -> 192.168.2.16:50424 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.167.164.38:443 -> 192.168.2.16:50425 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.72.233.168:443 -> 192.168.2.16:50426 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 98.82.156.207:443 -> 192.168.2.16:50427 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.26.193:443 -> 192.168.2.16:50430 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.36.150.182:443 -> 192.168.2.16:50428 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.214.142.103:443 -> 192.168.2.16:50429 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.205.74.95:443 -> 192.168.2.16:50434 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.36.113.107:443 -> 192.168.2.16:50442 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.70.36:443 -> 192.168.2.16:50446 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.205.74.95:443 -> 192.168.2.16:50447 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.229.3.43:443 -> 192.168.2.16:50444 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.241.62.124:443 -> 192.168.2.16:50449 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.159.8:443 -> 192.168.2.16:50453 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.36.113.107:443 -> 192.168.2.16:50454 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.149.129.172:443 -> 192.168.2.16:50451 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.68.226:443 -> 192.168.2.16:50459 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 141.226.230.48:443 -> 192.168.2.16:50460 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.154.144.56:443 -> 192.168.2.16:50470 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.211.195.230:443 -> 192.168.2.16:50468 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.212.160.220:443 -> 192.168.2.16:50473 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.225.38:443 -> 192.168.2.16:50479 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.211.195.230:443 -> 192.168.2.16:50480 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.22.50.98:443 -> 192.168.2.16:50482 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 38.71.2.198:443 -> 192.168.2.16:50483 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.147.80.15:443 -> 192.168.2.16:50481 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.186.196.148:443 -> 192.168.2.16:50486 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.225.23:443 -> 192.168.2.16:50491 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.53.191.192:443 -> 192.168.2.16:50493 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.22.51.98:443 -> 192.168.2.16:50494 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.186.196.148:443 -> 192.168.2.16:50496 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.38.239.33:443 -> 192.168.2.16:50499 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.147.80.12:443 -> 192.168.2.16:50497 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.53.191.192:443 -> 192.168.2.16:50505 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.169.252.78:443 -> 192.168.2.16:50507 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.223.22.214:443 -> 192.168.2.16:50517 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 50.57.31.206:443 -> 192.168.2.16:50519 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.37.30.173:443 -> 192.168.2.16:50523 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.66.132:443 -> 192.168.2.16:50528 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.82.242.209:443 -> 192.168.2.16:50529 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.82.242.209:443 -> 192.168.2.16:50537 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@27/350@188/643

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2052,i,17251419406621996946,13667212765532300792,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=1564 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://d3ag4hukkh62yn.cloudfront.net"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2052,i,17251419406621996946,13667212765532300792,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=1564 /prefetch:3
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-pre-read-main-dll --field-trial-handle=2052,i,17251419406621996946,13667212765532300792,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-pre-read-main-dll --field-trial-handle=2052,i,17251419406621996946,13667212765532300792,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Extra Window Memory Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label	Link
http://d3ag4hukkh62yn.cloudfront.net	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://images-na.ssl-images-amazon.com/images/G/01/DiscoTec/2025/Vionic/amazon_HP_desktop_QuadCard_Vionic_186x116_4_1x._SY116_CB546706743_.jpg	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/S/apesafeframe/ape/css/apePlacements-1.50.d0395653.css	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/AMAZON_FASHION/2025/LuxuryStores/Q1_HomepageAssets/CoreHP_QuadCard_SpringPicks__Desktop_MensShoes_186x116._SY116_CB545721970_.jpg	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/AMAZON_FASHION/2025/LuxuryStores/Q1_HomepageAssets/LS25_CoreHomepage_Quad_Desktop_Beauty_Fragrance_186x116._SY116_CB547295260_.jpg	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/AMAZON_FASHION/2025/LuxuryStores/CORE_HOMEPAGE_QuadCards_Pre-loved_Handbags_Gucci_186x116._SY116_CB546271331_.jpg	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/HMT/Spring/kitchen1x._SY116_CB546776368_.jpg	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/AMAZON_FASHION/2025/LuxuryStores/Q1_HomepageAssets/LS25_CoreHomepage_Quad_Desktop_Beauty_Skincare_186x116._SY116_CB547295260_.jpg	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/AMAZON_FASHION/2025/LuxuryStores/CORE_HOMEPAGE_QuadCards_Pre-loved_Handbags_Dior_186x116._SY116_CB546271331_.jpg	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/I/51rneLpLOiL._RC%7C71MXAvmLzmL.css,51JyeimZRFL.css,219xldWfNuL.css,01FcI3FsaiL.css,21Hc1s0-E4L.css,31YZpDCYJPL.css,21DwGGPS1eL.css,41ImKj6tF+L.css,11Wa5gEoKhL.css,31K0jc2KvHL.css,01H8CHB5aiL.css,21KQnzhmfTL.css,415g7iDx4VL.css,41DXgBSgRpL.css_.css?AUIClients/NavDesktopUberAsset	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/AMAZON_FASHION/2025/LuxuryStores/Q1_HomepageAssets/LS25_CoreHomepage_Quad_Desktop_Beauty_Makeup_186x116._SY116_CB547295260_.jpg	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/DiscoTec/2025/Vionic/amazon_HP_desktop_QuadCard_Vionic_186x116_1_1x._SY116_CB546706743_.jpg	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/DiscoTec/2024/CategoryFlips/2025/Spring_Summer/Everyday_Essentials/Ad_Hoc/EN/Homepage/ADHOC_Everyday_Essentials_Spring25_52-DT-186x116-EN._SY116_CB545397005_.jpg	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/AMAZON_FASHION/2025/LuxuryStores/Q1_HomepageAssets/LS25_CoreHomepage_Quad_Desktop_Beauty_NewArrivals_186x116._SY116_CB547295260_.jpg	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/S/apesafeframe/ape/sf/desktop/sf-1.50.25d10cda.html	0%	Avira URL Cloud	safe
https://d3ag4hukkh62yn.cloudfront.net/	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/DiscoTec/2024/CategoryFlips/2025/Spring_Summer/Everyday_Essentials/Ad_Hoc/EN/Homepage/ADHOC_Everyday_Essentials_Spring25_53-DT-186x116-EN._SY116_CB545397005_.jpg	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/HMT/Spring/bedding1x._SY116_CB546776368_.jpg	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/S/apesafeframe/ape/sf/desktop/DAsf-1.50.428837a8.js?csm_attribution=APE-SafeFrame	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/AMAZON_FASHION/2024/LuxuryStores/CORE_HOMEPAGE_QuadCards_Pre-loved_Handbags_Goyard_186x116_revised._SY116_CB796090269_.jpg	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/S/sash/MAbi1rCjQI9H2y0.png	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/HMT/Spring/furniture1x._SY116_CB546776368_.jpg	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/DiscoTec/2025/Vionic/amazon_HP_desktop_QuadCard_Vionic_186x116_2_1x._SY116_CB546706743_.jpg	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/DiscoTec/2025/Vionic/amazon_HP_desktop_QuadCard_Vionic_186x116_3_1x._SY116_CB546706743_.jpg	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/G/01/csm/showads.v2.js?wppaszoneid=-ad-sidebar.	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/AMAZON_FASHION/2025/LuxuryStores/Q1_HomepageAssets/CoreHP_QuadCard_SpringPicks__Desktop_WomensSandals_186x116._SY116_CB545721970_.jpg	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/I/41INzeD-WtL.css?AUIClients/AmazonGatewayAuiAssets	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/I/815vZyTm9WL._AC_SY200_.jpg	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/S/sash/ukXm5utlI1weDBc.gif	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/AMAZON_FASHION/2025/LuxuryStores/Q1_HomepageAssets/CoreHP_QuadCard_SpringPicks__Desktop_Jewelry_186x116._SY116_CB545721970_.jpg	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/I/71RPinQjeCL._AC_SY200_.jpg	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/HMT/Spring/decor1x._SY116_CB546776368_.jpg	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/G/01/gno/sprites/nav-sprite-global-1x-reorg-privacy._CB546805360_.png	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/AMAZON_FASHION/2025/LuxuryStores/Q1_HomepageAssets/CoreHP_QuadCard_SpringPicks__Desktop_Fragrance_186x116._SY116_CB545721970_.jpg	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/AMAZON_FASHION/2025/LuxuryStores/CORE_HOMEPAGE_QuadCards_Pre-loved_Handbags_LouisVuitton_186x116._SY116_CB546271331_.jpg	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/I/717Sxz+lHqL._SR1500,300_.jpg	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/S/apesafeframe/ape/sf/desktop/sf-1.50.3e12b156.js	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/I/91mv453UIVL._AC_SY200_.jpg	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/HMT/Spring/pots1x._SY116_CB546781494_.jpg	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/S/sash/x6ok$LYiGGUKJXl.png	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/DiscoTec/2025/1H/MothersDay/Gateway/Quads/Mday_25_2840_Gateway_DesktopQuadCard_KitchenUnder50_1x_186x116_VITWB._SY116_CB548420713_.jpg	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/AMAZON_FASHION/2025/LuxuryStores/Q1_HomepageAssets/LS25_CoreHomepage_Quad_Desktop_MothersDayGifting_Beauty_186x116._SY116_CB547764216_.jpg	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/DiscoTec/2025/Collections/SpringFavorites/HomePage/DQC/SpringFavorites_2025_GW_DQC_SE_Beauty_186x116_1x._SY116_CB550454992_.jpg	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/I/11+d9I1l9AL.js?xcp	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/I/61yC0m7eK2L._AC_SY200_.jpg	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/I/61VfvfV69lL._AC_SY200_.jpg	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/DiscoTec/2025/1H/MothersDay/Gateway/Quads/Mday_25_2839_Gateway_DesktopQuadCard_HandmadeUnder20_1x_186x116_VITWB._SY116_CB548420713_.jpg	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/DiscoTec/2024/CategoryFlips/2025/Spring_Summer/Everyday_Essentials/Ad_Hoc/EN/Homepage/ADHOC_Everyday_Essentials_Spring25_54-DT-186x116-EN._SY116_CB545397005_.jpg	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/I/719Q+UaPALL._AC_SY200_.jpg	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/I/61K+zcd9JPL._AC_SY200_.jpg	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/I/71mgBpijzML._AC_SY200_.jpg	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/I/71b8fh-dQ4L._AC_SY200_.jpg	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/I/71nVIiWEcgL._AC_SY200_.jpg	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/DiscoTec/2024/CategoryFlips/2025/Spring_Summer/Auto/ES/Homepage/Auto_Spring_Summer25_5432-DT-186x116-ES._SY116_CB547341357_.jpg	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/I/51SFVnJ-JWL._AC_SY200_.jpg	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/I/81Y6r7df7OL._AC_SY200_.jpg	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/DiscoTec/2025/1H/FathersDay/GW/QuadCards/Fday_25_3371_Gateway_DTQuadCard_Under20_1x_186x116_VITWB._SY116_CB547949342_.jpg	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/DiscoTec/2025/1H/MothersDay/Gateway/Quads/Mday_25_2829_Gateway_DesktopQuadCard_Under100_1x_186x116_VITWB._SY116_CB548420713_.jpg	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/I/71UsblW3D+L._AC_SY200_.jpg	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/I/414C25OyjML._AC_SY200_.jpg	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/HMT/Spring/indoorgarden1x._SY116_CB546781506_.jpg	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/I/61K6cQhw4EL._AC_SY200_.jpg	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/I/718DYJIqv4L._AC_SY200_.jpg	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/DiscoTec/2025/Haul/SPRING/HP/QUAD_CARDS/DT/PROJECTHAUL_2025_435_1x._SY116_CB546804794_.jpg	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/I/81PEl1s1G9L._AC_SY200_.jpg	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/softlines/shopbop/ingress/2025/february/mp_20250302_description_quad_desktop_186x116_04._SY116_CB549838022_.jpg	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/I/8187pIJ2dDL._AC_SY200_.jpg	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/DiscoTec/2025/1H/FathersDay/GW/QuadCards/Fday_25_3382_Gateway_DTQuadCard_Top-100_1x_186x116_VITWB._SY116_CB547949342_.jpg	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/softlines/shopbop/ingress/2025/april/mp_20250415_graduation_shop_quad_desktop_372x232_030.5x._SY116_CB546106044_.jpg	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/I/41JILztxbDL._AC_SY200_.jpg	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/DiscoTec/2025/Haul/SPRING/HP/QUAD_CARDS/DT/PROJECTHAUL_2025_436_1x._SY116_CB546804794_.jpg	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/DiscoTec/2025/1H/FathersDay/GW/QuadCards/Fday_25_3383_Gateway_DTQuadCard_Premium_1x_186x116_VITWB._SY116_CB548329827_.jpg	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/I/41roS4Ps5RL._AC_SY200_.jpg	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/DiscoTec/2025/1H/MothersDay/Gateway/Quads/Mday_25_2828_Gateway_DesktopQuadCard_Under50_1x_186x116_VITWB._SY116_CB548420713_.jpg	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/DiscoTec/2025/1H/MothersDay/Gateway/Quads/Mday_25_2841_Gateway_DesktopQuadCard_SportyUnder50_1x_186x116_VITWB._SY116_CB548420713_.jpg	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/DiscoTec/2024/CategoryFlips/2025/Spring_Summer/Everyday_Essentials/Ad_Hoc/EN/Homepage/ADHOC_Everyday_Essentials_Spring25_55-DT-186x116-EN._SY116_CB545397005_.jpg	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/HMT/Spring/fertilizer1x._SY116_CB546781484_.jpg	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/I/61C+zURu0EL._AC_SY200_.jpg	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/I/71WT7ECExXL._AC_SY200_.jpg	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/I/81U1j+Ni3BL._AC_SY200_.jpg	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/I/51cpWg2Ay7L._AC_SY200_.jpg	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/DiscoTec/2025/1H/FathersDay/GW/QuadCards/Fday_25_3381_Gateway_DTQuadCard_CML_1x_186x116_VITWB._SY116_CB547949342_.jpg	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/I/612OCczgZHL._AC_SY200_.jpg	0%	Avira URL Cloud	safe
https://d3ag4hukkh62yn.cloudfront.net/cross_border_interstitial_sp/render	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/DiscoTec/2025/1H/MothersDay/Gateway/Quads/Mday_AdHoc_25_916_Gateway_DesktopQuadCard_Premium_1x_186x116_VITWB._SY116_CB547593105_.jpg	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/I/61pp+20Oo0L._AC_SY200_.jpg	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/I/513fraGQXWL._AC_SY200_.jpg	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/DiscoTec/2025/1H/FathersDay/GW/QuadCards/Fday_25_3384_Gateway_DTQuadCard_NewNoteworthy_1x_186x116_VITWB._SY116_CB547949342_.jpg	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/I/91GpFxgIUeL._AC_SY200_.jpg	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/I/711w31jqoCL._AC_SY200_.jpg	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/DiscoTec/2025/Haul/SPRING/HP/QUAD_CARDS/DT/PROJECTHAUL_2025_433_2x._SY116_CB546805174_.jpg	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/I/11zuylp74DL._RC%7C11Y+5x+kkTL.js,51LPrROZ2JL.js,11EeeaacI2L.js,11GgN1+C7hL.js,01+z+uIeJ-L.js,01VRMV3FBdL.js,21NadQlXUWL.js,012FVc3131L.js,11a7qqY8xXL.js,11rRjDLdAVL.js,51zH7YD-TsL.js,11FhdH2HZwL.js,11wb9K3sw0L.js,11BrgrMAHUL.js,11GYEyswV2L.js,210X-JWUe-L.js,01Svfxfy8OL.js,518u7YD3VHL.js,01JYHc2oIlL.js,31nfKXylf6L.js,01ktRCtOqKL.js,01ASnt2lbqL.js,11F929pmpYL.js,31vxRYDelFL.js,01rpauTep4L.js,31wjiT+nvTL.js,011FfPwYqHL.js,213iL7Jf1nL.js,014gnDeJDsL.js,11vb6P5C5AL.js,01UExRvQDKL.js_.js?AUIClients/AmazonUI	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/DiscoTec/2025/1H/FathersDay/GW/QuadCards/Fday_25_3373_Gateway_DTQuadCard_Under50_1x_186x116_VITWB._SY116_CB547949342_.jpg	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/I/71p9k9c6f+L._AC_SY200_.jpg	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/I/61-KDa9Z7sL._AC_SY200_.jpg	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/I/514I0Eu-jKL._RC%7C71IlzIb241L.js,01QvReFeJyL.js,01VfhmbHmKL.js,71a9SkUZv7L.js,01cZ21lATAL.js,01bAfFgS7JL.js,01A2AtmCtlL.js,41jBieyCvYL.js,01wXnKULArL.js,01+pnQJuQ0L.js,21Nno1jWfVL.js,41zFN9UysJL.js,51jIBA6BvSL.js,31XO9BO1OrL.js,11lw6J7z8iL.js,31+UifI0MIL.js,01VYGE8lGhL.js_.js?AUIClients/NavDesktopUberAsset	0%	Avira URL Cloud	safe
https://d3ag4hukkh62yn.cloudfront.net/portal-migration/hz/glow/get-rendered-toaster?pageType=Gateway&aisTransitionState=null&rancorLocationSource=IP_GEOLOCATION&_=1745518921775	0%	Avira URL Cloud	safe
https://images-na.ssl-images-amazon.com/images/G/01/softlines/shopbop/ingress/2025/april/mp_20250404_sandals_quad_desktop_372x232_020.5x._SY116_CB545946198_.jpg	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/I/61RCVEMQGqL._AC_SY200_.jpg	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/I/91ZVf3kNrcL._AC_SY200_.jpg	0%	Avira URL Cloud	safe
https://m.media-amazon.com/images/I/61sk-pPL-sL._AC_SY200_.jpg	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
rtb-csync-use1.smartadserver.com	23.105.12.121	true	false	high
j.sni.global.fastly.net	151.101.66.132	true	false	high
us-east-eb2.3lift.com	52.223.22.214	true	false	high
syncelb-1881895040.us-west-2.elb.amazonaws.com	54.149.129.172	true	false	unknown
pugm-sv3pairbc.pubmnet.com	192.82.242.209	true	false	unknown
spl.zeotap.com	104.22.50.98	true	false	high
d20qwf0wrdtevy.cloudfront.net	18.154.144.56	true	false	high
crb.kargo.com	18.205.74.95	true	false	high
mwzeom.zeotap.com	104.22.51.98	true	false	high
na-ice.360yield.com	34.239.88.13	true	false	high
cm.g.doubleclick.net	142.250.68.226	true	false	high
www.google.com	192.178.49.196	true	false	high
dcs-ups.g03.yahoodns.net	69.147.80.15	true	false	high
tagr-gcp-odr-use1.mookie1.com	35.190.90.30	true	false	high
star-mini.c10r.facebook.com	31.13.70.36	true	false	high
us-u.openx.net	35.244.159.8	true	false	high
d35uxhjf90umnp.cloudfront.net	18.65.21.130	true	false	unknown
dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com	34.211.162.203	true	false	high
sync.rfp.fout.jp	35.186.196.148	true	false	high
d2bytcopxu066p.cloudfront.net	18.164.172.55	true	false	high
d1ykf07e75w7ss.cloudfront.net	3.169.245.200	true	false	high
lciapi.ninthdecimal.com	35.241.62.124	true	false	high
ssum-sec.casalemedia.com	104.18.26.193	true	false	high
unagi-na.amazon.com	44.199.180.130	true	false	high
sb.scorecardresearch.com	3.169.252.78	true	false	high
d3ag4hukkh62yn.cloudfront.net	18.164.169.45	true	false	high
usersync.samplicio.us	3.234.42.50	true	false	high
ms-cookie-sync.prod.cloud.ogury.io	52.38.239.33	true	false	high
la-vip001.taboola.com	141.226.230.48	true	false	high
pixel.rubiconproject.net.akadns.net	69.173.154.8	true	false	high
user-data-us-west.bidswitch.net	35.212.160.220	true	false	high
beacons-handoff.gcp.gvt2.com	142.250.9.94	true	false	high
public-prod-dspcookiematching.dmxleo.com	13.226.225.38	true	false	high
load-use1.exelator.com	34.229.3.43	true	false	high
usersync.gumgum.com	52.37.30.173	true	false	high
track.adformnet.akadns.net	185.167.164.38	true	false	high
fp3.ads.stickyadstv.com.akadns.net	38.71.2.198	true	false	high
jadserve.postrelease.com.akadns.net	34.211.195.230	true	false	high
aes-pr-inter-veycuznhtjbm-8d6598673097fbf9.elb.us-east-1.amazonaws.com	44.197.7.236	true	false	unknown
match-us-west-1-ecs.sharethrough.com	52.53.191.192	true	false	unknown
s.amazon-adsystem.com	98.82.158.241	true	false	high
capi.connatix.com.cdn.cloudflare.net	104.18.41.104	true	false	unknown
beacons.gvt2.com	192.178.131.94	true	false	high
media.amazon.map.fastly.net	151.101.1.16	true	false	high
pixelapi-west.cs.mysamba.tv	52.12.171.214	true	false	unknown
geo.ads.audio.thisisdax.com	35.212.37.81	true	false	high
completion.amazon.com	44.215.128.78	true	false	high
dsum-sec.casalemedia.com	104.18.26.193	true	false	high
lb.mediarithmics.com	54.36.150.182	true	false	high
ib.anycast.adnxs.com	104.254.151.69	true	false	high
envoy-hl.envoy-csync.core-002-ew4.ov1o.com	35.214.142.103	true	false	high
edge.gycpi.b.yahoodns.net	69.147.88.8	true	false	high
pug-sfo-bc.pubmnet.com	104.36.113.107	true	false	high
endpoint.prod.us-east-1.forester.a2z.com	54.82.167.184	true	false	high
uipus.semasio.net	50.57.31.206	true	false	high
images-na.ssl-images-amazon.com	unknown	unknown	false	high
ads.stickyadstv.com	unknown	unknown	false	high
pi.ispot.tv	unknown	unknown	false	high
unagi.amazon.com	unknown	unknown	false	high
jadserve.postrelease.com	unknown	unknown	false	high
aes.us-east.ono.axp.amazon-adsystem.com	unknown	unknown	false	unknown
csync.loopme.me	unknown	unknown	false	high
odr.mookie1.com	unknown	unknown	false	high
cookie-matching.mediarithmics.com	unknown	unknown	false	high
pixel.rubiconproject.com	unknown	unknown	false	high
c1.adform.net	unknown	unknown	false	high
sync-amazon.ads.yieldmo.com	unknown	unknown	false	high
usermatch.krxd.net	unknown	unknown	false	high
uipglob.semasio.net	unknown	unknown	false	high
cms.analytics.yahoo.com	unknown	unknown	false	high
m.media-amazon.com	unknown	unknown	false	high
image6.pubmatic.com	unknown	unknown	false	high
beacons.gcp.gvt2.com	unknown	unknown	false	high
ups.analytics.yahoo.com	unknown	unknown	false	high
match.sharethrough.com	unknown	unknown	false	high
loadus.exelator.com	unknown	unknown	false	high
rtb-csync.smartadserver.com	unknown	unknown	false	high
image2.pubmatic.com	unknown	unknown	false	high
capi.connatix.com	unknown	unknown	false	high
ms-cookie-sync.presage.io	unknown	unknown	false	high
fls-na.amazon.com	unknown	unknown	false	high
dpm.demdex.net	unknown	unknown	false	high
aa.agkn.com	unknown	unknown	false	high
sync.taboola.com	unknown	unknown	false	high
x.bidswitch.net	unknown	unknown	false	high
www.facebook.com	unknown	unknown	false	high
c.amazon-adsystem.com	unknown	unknown	false	high
beacon.krxd.net	unknown	unknown	false	high
tags.bluekai.com	unknown	unknown	false	high
ads.samba.tv	unknown	unknown	false	high
pbs.yahoo.com	unknown	unknown	false	high
bs.serving-sys.com	unknown	unknown	false	high
ib.adnxs.com	unknown	unknown	false	high
match.360yield.com	unknown	unknown	false	high
www.imdb.com	unknown	unknown	false	high
amazon.partners.tremorhub.com	unknown	unknown	false	high
eb2.3lift.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://images-na.ssl-images-amazon.com/images/G/01/AMAZON_FASHION/2025/LuxuryStores/CORE_HOMEPAGE_QuadCards_Pre-loved_Handbags_Gucci_186x116._SY116_CB546271331_.jpg	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/71x-iCOHaaL._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/51-h2oz-PeL._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/71VQl1X3DqL._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/71t3j00C-yL._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://images-na.ssl-images-amazon.com/images/G/01/AMAZON_FASHION/2025/LuxuryStores/Q1_HomepageAssets/LS25_CoreHomepage_Quad_Desktop_MothersDayGifting_Beauty_186x116._SY116_CB547764216_.jpg	false	Avira URL Cloud: safe	unknown
https://images-na.ssl-images-amazon.com/images/G/01/DiscoTec/2025/1H/MothersDay/Gateway/Quads/Mday_25_2839_Gateway_DesktopQuadCard_HandmadeUnder20_1x_186x116_VITWB._SY116_CB548420713_.jpg	false	Avira URL Cloud: safe	unknown
https://s.amazon-adsystem.com/ecm3?ex=rubiconprojectHMT&id=8hX2wV0gSYy2-mOlO3bWjw	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/719Q+UaPALL._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://s.amazon-adsystem.com/ecm3?ex=index&id=IVi2U5AcazpwbaZ_esK_vDc4ZhQ4ZgIC	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/61K+zcd9JPL._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/81Gdf20RghL._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/717Sxz+lHqL._SR3000,600_.jpg	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/71b8fh-dQ4L._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://image6.pubmatic.com/AdServer/UCookieSetPug?rd=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dpubmatic.com%26id%3D%23PM_USER_ID&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/51SFVnJ-JWL._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://images-na.ssl-images-amazon.com/images/G/01/DiscoTec/2025/1H/FathersDay/GW/QuadCards/Fday_25_3371_Gateway_DTQuadCard_Under20_1x_186x116_VITWB._SY116_CB547949342_.jpg	false	Avira URL Cloud: safe	unknown
https://s.amazon-adsystem.com/ecm3?ex=gumgumHMT	false	Avira URL Cloud: safe	unknown
https://images-na.ssl-images-amazon.com/images/G/01/AMAZON_FASHION/2025/LuxuryStores/Q1_HomepageAssets/CoreHP_QuadCard_SpringPicks__Desktop_Jewelry_186x116._SY116_CB545721970_.jpg	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/81WGNsy3aXL._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://s.amazon-adsystem.com/ecm3?&ex=nielsen&id=1858ac09a437a9428e64c27d13ab4819	false	Avira URL Cloud: safe	unknown
https://capi.connatix.com/us/pixel?pId=32&puId=a0NgEi1aQgCikW1zpBAuIw&callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DconnatixHMT%26id%3D%7BpuId%7D&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/71Cjhz9Sz7L._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/81YcajFMreL._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://images-na.ssl-images-amazon.com/images/G/01/DiscoTec/2025/Haul/SPRING/HP/QUAD_CARDS/DT/PROJECTHAUL_2025_435_1x._SY116_CB546804794_.jpg	false	Avira URL Cloud: safe	unknown
https://images-na.ssl-images-amazon.com/images/G/01/AMAZON_FASHION/2025/LuxuryStores/Q1_HomepageAssets/LS25_CoreHomepage_Quad_Desktop_Beauty_Fragrance_186x116._SY116_CB547295260_.jpg	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/81AHTyq2wVL._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://images-na.ssl-images-amazon.com/images/G/01/softlines/shopbop/ingress/2025/april/mp_20250415_graduation_shop_quad_desktop_372x232_030.5x._SY116_CB546106044_.jpg	false	Avira URL Cloud: safe	unknown
https://cookie-matching.mediarithmics.com/v1/get_or_create?gdpr=0&gdpr_consent=&domid=1109	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/61Lbb0IFyZL._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://images-na.ssl-images-amazon.com/images/G/01/DiscoTec/2025/Vionic/amazon_HP_desktop_QuadCard_Vionic_186x116_1_1x._SY116_CB546706743_.jpg	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/8153mG+qVgL._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/71LBHOjFOsL._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=medr&google_cm&key=GOO&gdpr_consent=&gdpr=0&action=GET_ID&opid=goo&etid=&domid=1109&ops=apx	false	Avira URL Cloud: safe	unknown
https://images-na.ssl-images-amazon.com/images/S/apesafeframe/ape/sf/desktop/DAsf-1.50.428837a8.js?csm_attribution=APE-SafeFrame	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/61zhzjgd2xL._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/81FIzp9c1BL._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://match.360yield.com/ul_cb/match?publisher_dsp_id=416&external_user_id=XfS-mfiMS_OInpSQO_NgFQ&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DimprovedigitalHMT%26id%3D%7BPUB_USER_ID%7D&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://images-na.ssl-images-amazon.com/images/G/01/DiscoTec/2024/CategoryFlips/2025/Spring_Summer/Everyday_Essentials/Ad_Hoc/EN/Homepage/ADHOC_Everyday_Essentials_Spring25_55-DT-186x116-EN._SY116_CB545397005_.jpg	false	Avira URL Cloud: safe	unknown
https://sb.scorecardresearch.com/p?c1=9&c2=27552257&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dcomscore.com%26id%3D%25AX_UUID%25	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/71C8ihcVWdL._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/81SNS-LSaPL._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/71WT7ECExXL._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/8130MQn-lhL._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://sync.taboola.com/sg/amazon-a9-network/1/rtb	false	Avira URL Cloud: safe	unknown
https://images-na.ssl-images-amazon.com/images/G/01/DiscoTec/2025/1H/FathersDay/GW/QuadCards/Fday_25_3381_Gateway_DTQuadCard_CML_1x_186x116_VITWB._SY116_CB547949342_.jpg	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/612OCczgZHL._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/71329CVoVDL._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://s.amazon-adsystem.com/ecm3?ex=taboola.com&id=5a38e50e-646e-4f5a-9191-0f87d48111a4-tuctf0406e8	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/61h65TBpQVL._SX1500_.jpg	false	Avira URL Cloud: safe	unknown
https://cookie-matching.mediarithmics.com/input?key=GOO&key=GOO&gdpr_consent=&gdpr=0&action=GET_ID&opid=goo&etid=&domid=1109&ops=apx&google_gid=CAESEMxRz06N9wm26JHIoaNlA2k&google_cver=1	false	Avira URL Cloud: safe	unknown
https://ads.stickyadstv.com/user-matching?id=2545&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://images-na.ssl-images-amazon.com/images/G/01/DiscoTec/2025/1H/FathersDay/GW/QuadCards/Fday_25_3384_Gateway_DTQuadCard_NewNoteworthy_1x_186x116_VITWB._SY116_CB547949342_.jpg	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/91GpFxgIUeL._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/711w31jqoCL._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://unagi.amazon.com/1/events/com.amazon.csm.csa.prod	false		high
https://m.media-amazon.com/images/I/71SEZvg1spL._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://images-na.ssl-images-amazon.com/images/S/apesafeframe/ape/sf/desktop/sf-1.50.3e12b156.js	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/91DW+RDtbcL._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/31mqNgZQVBL.js?AUIClients/PuffAuiAssets	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/81bpKKv68-L._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://images-na.ssl-images-amazon.com/images/G/01/DiscoTec/2025/Vionic/amazon_HP_desktop_QuadCard_Vionic_186x116_4_1x._SY116_CB546706743_.jpg	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/71LqxbA1WCL._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://images-na.ssl-images-amazon.com/images/G/01/AMAZON_FASHION/2025/LuxuryStores/Q1_HomepageAssets/LS25_CoreHomepage_Quad_Desktop_Beauty_Makeup_186x116._SY116_CB547295260_.jpg	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/719eDVmYeYL._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://images-na.ssl-images-amazon.com/images/G/01/AMAZON_FASHION/2025/LuxuryStores/Q1_HomepageAssets/LS25_CoreHomepage_Quad_Desktop_MothersDayGifting_Handbags_186x116._SY116_CB547427235_.jpg	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=a9&google_cm&ex=doubleclick.net&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/615HRY2dnML._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/719hqT1t0KL._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/81nZ0WEslvL._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/51IFiSD+kCL._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://s.amazon-adsystem.com/ecm3?ex=adform.net&id=738430381044146102	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/71pLd1zMfBL._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://images-na.ssl-images-amazon.com/images/G/01/DiscoTec/2025/1H/FathersDay/GW/QuadCards/Fday_25_3372_Gateway_DTQuadCard_Under30_1x_186x116_VITWB._SY116_CB547949342_.jpg	false	Avira URL Cloud: safe	unknown
https://eb2.3lift.com/xuid?mid=8341&xuid=bXI4T_3yQ2-DuIimKpaJhA&dongle=az46&rdir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DtripleliftHMT%26id%3D%24UID&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/71M6a8SHCeL._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/61WFOxtjgIL._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/71k2C0uXr7L._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/71L2i2B4DIL._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/61aDLFlvVuL._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://images-na.ssl-images-amazon.com/images/I/91dn5m6T1dL.js?AUIClients/VideoJsCardsBuzz	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/9101MLPcFTL._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://images-na.ssl-images-amazon.com/images/G/01/AMAZON_FASHION/2025/LuxuryStores/Q1_HomepageAssets/CoreHP_QuadCard_SpringPicks__Desktop_Fragrance_186x116._SY116_CB545721970_.jpg	false	Avira URL Cloud: safe	unknown
https://pixel.rubiconproject.com/token?pid=2179&pt=n&puid=8hX2wV0gSYy2-mOlO3bWjw&rk=usync-na&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://images-na.ssl-images-amazon.com/images/G/01/softlines/shopbop/ingress/2025/april/mp_20250415_graduation_shop_quad_desktop_372x232_020.5x._SY116_CB546106044_.jpg	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/61ZDr0RsX6L._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/81qsstEtrgL._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/512L0kFUpWL._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://images-na.ssl-images-amazon.com/images/I/21e5KB6qS1L.css?xcp	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/61ns3t327vL._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://images-na.ssl-images-amazon.com/images/G/01/HMT/Spring/kitchen1x._SY116_CB546776368_.jpg	false	Avira URL Cloud: safe	unknown
https://images-na.ssl-images-amazon.com/images/G/01/img18/home/journeys/OWFhYjJmNGIt/OWFhYjJmNGIt-NzIwODU5ZmIt-w379._SY304_CB405958196_.jpg	false		high
https://m.media-amazon.com/images/S/sash/WOnTLzkiaEccV7F.woff2	false		high
https://s.amazon-adsystem.com/ecm3?&ex=ninthdecimal.com&id=11469A0A68810A682B00E49102B82132	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/71tA6XFkkzL._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/S/sash/pDxWAF1pBB0dzGB.woff2	false		high
https://m.media-amazon.com/images/I/61wGhG-B-pL._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown
https://s.amazon-adsystem.com/ecm3?ex=mediarithmics&id=vec-128586221555&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://images-na.ssl-images-amazon.com/images/G/01/softlines/shopbop/ingress/2025/april/mp_20250415_graduation_shop_quad_desktop_372x232_040.5x_2._SY116_CB546085312_.jpg	false	Avira URL Cloud: safe	unknown
https://m.media-amazon.com/images/I/51WTFQEedhL._AC_SY200_.jpg	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
35.241.62.124	lciapi.ninthdecimal.com	United States	15169	GOOGLEUS	false
151.101.193.16	unknown	United States	54113	FASTLYUS	false
151.101.1.16	media.amazon.map.fastly.net	United States	54113	FASTLYUS	false
142.251.2.84	unknown	United States	15169	GOOGLEUS	false
13.226.225.38	public-prod-dspcookiematching.dmxleo.com	United States	16509	AMAZON-02US	false
98.82.156.207	unknown	United States	11351	TWC-11351-NORTHEASTUS	false
44.215.128.78	completion.amazon.com	United States	14618	AMAZON-AESUS	false
44.215.129.38	unknown	United States	14618	AMAZON-AESUS	false
18.164.169.45	d3ag4hukkh62yn.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
52.53.191.192	match-us-west-1-ecs.sharethrough.com	United States	16509	AMAZON-02US	false
18.164.172.55	d2bytcopxu066p.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
34.239.88.13	na-ice.360yield.com	United States	14618	AMAZON-AESUS	false
151.101.129.16	unknown	United States	54113	FASTLYUS	false
35.212.37.81	geo.ads.audio.thisisdax.com	United States	19527	GOOGLE-2US	false
38.71.2.198	fp3.ads.stickyadstv.com.akadns.net	United States	26558	FREEWHEELUS	false
98.82.158.241	s.amazon-adsystem.com	United States	11351	TWC-11351-NORTHEASTUS	false
31.13.70.36	star-mini.c10r.facebook.com	Ireland	32934	FACEBOOKUS	false
1.1.1.1	unknown	Australia	13335	CLOUDFLARENETUS	false
151.101.66.132	j.sni.global.fastly.net	United States	54113	FASTLYUS	false
35.214.142.103	envoy-hl.envoy-csync.core-002-ew4.ov1o.com	United States	19527	GOOGLE-2US	false
3.169.252.78	sb.scorecardresearch.com	United States	16509	AMAZON-02US	false
192.178.49.174	unknown	United States	15169	GOOGLEUS	false
185.167.164.38	track.adformnet.akadns.net	United States	198622	ADFORMDK	false
52.38.239.33	ms-cookie-sync.prod.cloud.ogury.io	United States	16509	AMAZON-02US	false
35.190.90.30	tagr-gcp-odr-use1.mookie1.com	United States	15169	GOOGLEUS	false
52.1.109.85	unknown	United States	14618	AMAZON-AESUS	false
142.250.68.226	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
3.169.245.200	d1ykf07e75w7ss.cloudfront.net	United States	16509	AMAZON-02US	false
52.37.30.173	usersync.gumgum.com	United States	16509	AMAZON-02US	false
104.18.41.104	capi.connatix.com.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false
192.82.242.209	pugm-sv3pairbc.pubmnet.com	United States	239	UTORONTO-ASCA	false
69.173.154.8	pixel.rubiconproject.net.akadns.net	United States	26667	RUBICONPROJECTUS	false
54.149.129.172	syncelb-1881895040.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
54.36.150.182	lb.mediarithmics.com	France	16276	OVHFR	false
44.199.180.130	unagi-na.amazon.com	United States	14618	AMAZON-AESUS	false
35.212.160.220	user-data-us-west.bidswitch.net	United States	19527	GOOGLE-2US	false
34.229.3.43	load-use1.exelator.com	United States	14618	AMAZON-AESUS	false
3.224.38.1	unknown	United States	14618	AMAZON-AESUS	false
142.250.68.234	unknown	United States	15169	GOOGLEUS	false
44.215.138.159	unknown	United States	14618	AMAZON-AESUS	false
34.211.162.203	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
3.234.42.50	usersync.samplicio.us	United States	14618	AMAZON-AESUS	false
142.250.68.238	unknown	United States	15169	GOOGLEUS	false
141.226.230.48	la-vip001.taboola.com	Israel	200478	TABOOLA-ASIL	false
23.105.12.121	rtb-csync-use1.smartadserver.com	United States	30633	LEASEWEB-USA-WDCUS	false
35.244.159.8	us-u.openx.net	United States	15169	GOOGLEUS	false
151.101.65.16	unknown	United States	54113	FASTLYUS	false
104.22.51.98	mwzeom.zeotap.com	United States	13335	CLOUDFLARENETUS	false
35.186.196.148	sync.rfp.fout.jp	United States	15169	GOOGLEUS	false
13.226.225.23	unknown	United States	16509	AMAZON-02US	false
34.211.195.230	jadserve.postrelease.com.akadns.net	United States	16509	AMAZON-02US	false
52.12.171.214	pixelapi-west.cs.mysamba.tv	United States	16509	AMAZON-02US	false
18.205.74.95	crb.kargo.com	United States	14618	AMAZON-AESUS	false
35.212.115.163	unknown	United States	19527	GOOGLE-2US	false
44.197.7.236	aes-pr-inter-veycuznhtjbm-8d6598673097fbf9.elb.us-east-1.amazonaws.com	United States	14618	AMAZON-AESUS	false
52.72.233.168	unknown	United States	14618	AMAZON-AESUS	false
52.45.118.88	unknown	United States	14618	AMAZON-AESUS	false
23.105.12.151	unknown	United States	30633	LEASEWEB-USA-WDCUS	false
192.178.49.195	unknown	United States	15169	GOOGLEUS	false
192.178.49.196	www.google.com	United States	15169	GOOGLEUS	false
18.65.21.130	d35uxhjf90umnp.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
104.36.113.107	pug-sfo-bc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
54.82.167.184	endpoint.prod.us-east-1.forester.a2z.com	United States	14618	AMAZON-AESUS	false
104.254.151.69	ib.anycast.adnxs.com	United States	29990	ASN-APPNEXUS	false
104.18.26.193	ssum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
52.223.22.214	us-east-eb2.3lift.com	United States	8987	AMAZONEXPANSIONGB	false
69.147.88.8	edge.gycpi.b.yahoodns.net	United States	36088	YAHOO-BCST-AC2US	false
18.154.144.56	d20qwf0wrdtevy.cloudfront.net	United States	16509	AMAZON-02US	false
50.57.31.206	uipus.semasio.net	United States	19994	RACKSPACEUS	false
104.22.50.98	spl.zeotap.com	United States	13335	CLOUDFLARENETUS	false
69.147.80.15	dcs-ups.g03.yahoodns.net	United States	393245	YAHOO-SWBUS	false
69.147.80.12	unknown	United States	393245	YAHOO-SWBUS	false

Private

IP
192.168.2.4
192.168.2.16

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1673430
Start date and time:	2025-04-24 20:21:17 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	http://d3ag4hukkh62yn.cloudfront.net
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	16
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled
Analysis Mode:	stream
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@27/350@188/643

Warnings

Exclude process from analysis (whitelisted): svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.68.238, 192.178.49.195, 142.251.2.84, 142.250.69.14, 142.250.68.234, 142.250.69.10, 192.178.49.170, 192.178.49.202
Excluded domains from analysis (whitelisted): clients2.google.com, accounts.google.com, redirector.gvt1.com, content-autofill.googleapis.com, clientservices.googleapis.com, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://d3ag4hukkh62yn.cloudfront.net

Source: https://d3ag4hukkh62yn.cloudfront.net/	HTTP Parser: No favicon
Source: https://d3ag4hukkh62yn.cloudfront.net/	HTTP Parser: No favicon

Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.16:50394 -> 34.239.88.13:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.16:50396 -> 104.18.26.193:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.16:50505 -> 52.53.191.192:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.16:50493 -> 52.53.191.192:443

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: d3ag4hukkh62yn.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: images-na.ssl-images-amazon.com
Source: global traffic	DNS traffic detected: DNS query: m.media-amazon.com
Source: global traffic	DNS traffic detected: DNS query: completion.amazon.com
Source: global traffic	DNS traffic detected: DNS query: aes.us-east.ono.axp.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: fls-na.amazon.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: unagi-na.amazon.com
Source: global traffic	DNS traffic detected: DNS query: unagi.amazon.com
Source: global traffic	DNS traffic detected: DNS query: c.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: s.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: d35uxhjf90umnp.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: match.360yield.com
Source: global traffic	DNS traffic detected: DNS query: rtb-csync.smartadserver.com
Source: global traffic	DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: pbs.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: capi.connatix.com
Source: global traffic	DNS traffic detected: DNS query: amazon.partners.tremorhub.com
Source: global traffic	DNS traffic detected: DNS query: geo.ads.audio.thisisdax.com
Source: global traffic	DNS traffic detected: DNS query: www.imdb.com
Source: global traffic	DNS traffic detected: DNS query: usersync.samplicio.us
Source: global traffic	DNS traffic detected: DNS query: ads.samba.tv
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: odr.mookie1.com
Source: global traffic	DNS traffic detected: DNS query: c1.adform.net
Source: global traffic	DNS traffic detected: DNS query: bs.serving-sys.com
Source: global traffic	DNS traffic detected: DNS query: cookie-matching.mediarithmics.com
Source: global traffic	DNS traffic detected: DNS query: csync.loopme.me
Source: global traffic	DNS traffic detected: DNS query: ssum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: crb.kargo.com
Source: global traffic	DNS traffic detected: DNS query: image2.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: loadus.exelator.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: lciapi.ninthdecimal.com
Source: global traffic	DNS traffic detected: DNS query: sync-amazon.ads.yieldmo.com
Source: global traffic	DNS traffic detected: DNS query: us-u.openx.net
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: sync.taboola.com
Source: global traffic	DNS traffic detected: DNS query: jadserve.postrelease.com
Source: global traffic	DNS traffic detected: DNS query: aa.agkn.com
Source: global traffic	DNS traffic detected: DNS query: x.bidswitch.net
Source: global traffic	DNS traffic detected: DNS query: tags.bluekai.com
Source: global traffic	DNS traffic detected: DNS query: public-prod-dspcookiematching.dmxleo.com
Source: global traffic	DNS traffic detected: DNS query: cms.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: spl.zeotap.com
Source: global traffic	DNS traffic detected: DNS query: ads.stickyadstv.com
Source: global traffic	DNS traffic detected: DNS query: sync.rfp.fout.jp
Source: global traffic	DNS traffic detected: DNS query: beacon.krxd.net
Source: global traffic	DNS traffic detected: DNS query: match.sharethrough.com
Source: global traffic	DNS traffic detected: DNS query: mwzeom.zeotap.com
Source: global traffic	DNS traffic detected: DNS query: ups.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: ms-cookie-sync.presage.io
Source: global traffic	DNS traffic detected: DNS query: usermatch.krxd.net
Source: global traffic	DNS traffic detected: DNS query: sb.scorecardresearch.com
Source: global traffic	DNS traffic detected: DNS query: eb2.3lift.com
Source: global traffic	DNS traffic detected: DNS query: uipglob.semasio.net
Source: global traffic	DNS traffic detected: DNS query: usersync.gumgum.com
Source: global traffic	DNS traffic detected: DNS query: pi.ispot.tv
Source: global traffic	DNS traffic detected: DNS query: image6.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: beacons.gcp.gvt2.com
Source: global traffic	DNS traffic detected: DNS query: beacons.gvt2.com

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 186x116, components 3
Category:	downloaded
Size (bytes):	5338
Entropy (8bit):	7.821583058363297
Encrypted:	false
SSDEEP:
MD5:	D52B9FFCB591DEEB7ECEFC4F58ED31A8
SHA1:	6EBA565A5FE50C5299BFCD6E3FE0C4E5EB107294
SHA-256:	E48F73A1997C7E7CEA3725D38AB87132456E5C887B18BDD76D726F1F71FAF3E7
SHA-512:	A70349A4FA7F50E72B89A7F36D41DDA4FC84FC5C3101911A9629A83CEBD1038F9621489861D622FFE352002430D9EFFBE77D356F85C51BB7E5063D1F7D28744A
Malicious:	false
Reputation:	unknown
URL:	https://images-na.ssl-images-amazon.com/images/G/01/AMAZON_FASHION/2025/LuxuryStores/Q1_HomepageAssets/CoreHP_QuadCard_SpringPicks__Desktop_Jewelry_186x116._SY116_CB545721970_.jpg
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................t...."...............................................................................#.. L.....P..A.....+$P........)5"\.)...y9...S.....b.W...t/0\:e....[JR...ug]_=...X.e....5.J.i[..q%..5fY....o:qs..p..rw.....nZ.....Bs..Y...U.>..NM.}l...q6..........qFq..ZPR;cOA.o...ys....V(...C.7b.......F...:_..y..![.$.s...+t..X.y..^z26..8_..J{.......9^.....}fDb.H`.....2..8U......T0P.E.S......$.. C"`H.H.H.d@.2..I...I....(........................... !."0.#13@P..............]..o...s..m..............K..w2...._}......q:9.5..nno...ff..L..tY...!..9.U...D.....M.FfY0..+..j.q..........8i%b...^&.DW3.!.c.iY..h.1..%z.r.w...vuW...J...C..e...WQ..L..V.....j...w......+...9.........!ode.%.x.U..LQ..><\|.Ne(..nU..VxU..8u.l..f..S.q....~JI...'}GU.M.K!.....*...?VVf=.~J.......m-....J.^0..@I. .^....F.A.....~@]....@.s..8.#3.^.>37...PS!.r...

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, xresolution=86, yresolution=94, resolutionunit=2, software=Adobe Photoshop 2025 Macintosh, datetime=2025-03-12T17:30:51-06:00], progressive, precision 8, 186x116, components 3
Category:	dropped
Size (bytes):	3575
Entropy (8bit):	7.43326773957062
Encrypted:	false
SSDEEP:
MD5:	E6822AA4E68726C003E9A1931A37859E
SHA1:	6103A19815ABFAF74705C0BA786468FED7E15E9A
SHA-256:	FC04B7948F70998F3AD9CE92246A48D997A3998362AA1597E2E80D07377B08F0
SHA-512:	9012B3264AF9B7BF499AC8E5B0CBB8A3FFC5CF180B30471BEC84BF54812FA5909989512C2B776955E30E7095946DFA3284C3635F344FBEDBD104E20C1F4ACEB6
Malicious:	false
Reputation:	unknown
Preview:	......JFIF..............Exif..II*...............V...........^...(...........1.......f...2...........i...............H.......H.......Adobe Photoshop 2025 Macintosh..2025-03-12T17:30:51-06:00...........0220....................t.......t.........Ducky.......I......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.b7c64ccf9, 2024/07/16-12:39:04 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:15E7F06BF78C11EFA6329ADFD91EAAF6" xmpMM:InstanceID="xmp.iid:15E7F06AF78C11EFA6329ADFD91EAAF6" dc:format="image/jpeg" xmp:CreateDate="2025-03-12T11:20:54-06:00" xmp:ModifyDate="2025-03-12T17:30:51-06:00" xmp:MetadataDate="2025-03-

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://d3ag4hukkh62yn.cloudfront.net

Overview

General Information

Detection

Signatures

Classification

Process Tree

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Mitre Att&ck Matrix

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Created / dropped Files

Chrome Cache Entry: 140

Chrome Cache Entry: 145

Chrome Cache Entry: 147

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 153

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 166

Chrome Cache Entry: 168

Chrome Cache Entry: 169

Chrome Cache Entry: 170

Chrome Cache Entry: 172

Chrome Cache Entry: 173

Chrome Cache Entry: 175

Chrome Cache Entry: 177

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Chrome Cache Entry: 181

Chrome Cache Entry: 183

Chrome Cache Entry: 184

Chrome Cache Entry: 185

Chrome Cache Entry: 187

Chrome Cache Entry: 190

Chrome Cache Entry: 192

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 204

Chrome Cache Entry: 209

Chrome Cache Entry: 211

Chrome Cache Entry: 212

Windows Analysis Report
http://d3ag4hukkh62yn.cloudfront.net