Windows Analysis Report
https://news.claroty.com/e3t/Ctc/OR+113/d2n-4L04/VVPy5P46C_3pW8Pz7_V3LxM13W7TctdS5ltnG0N3hBC6F3lYMRW7Y8-PT6lZ3p8VDPSWB2hkr0xW1jSCJz5Tx0CbW4k0Gdy84cgR5W75xzbh3JYxzyN3dsPjKyk4Y1W4hFjjr44kS1nW2D8hxk5DxH7vW3g6xkn2qrb3vW2SpQp81dtr0GW7r7Q7L2FZ5vJW152Dy06dcx6xVX2VR38JqC9HW7zbbH-4kxdWFW4cdkc03qH46PW6zkfpv6b

Overview

General Information

Sample URL:	https://news.claroty.com/e3t/Ctc/OR+113/d2n-4L04/VVPy5P46C_3pW8Pz7_V3LxM13W7TctdS5ltnG0N3hBC6F3lYMRW7Y8-PT6lZ3p8VDPSWB2hkr0xW1jSCJz5Tx0CbW4k0Gdy84cgR5W75xzbh3JYxzyN3dsPjKyk4Y1W4hFjjr44kS1nW2D8hxk5DxH7
Analysis ID:	1520629

Detection

Score:	3
Range:	0 - 100
Whitelisted:	false
Confidence:	60%

Signatures

Detected non-DNS traffic on DNS port

Found iframes

HTML page contains hidden javascript code

HTML title does not match URL

Invalid 'forgot password' link found

Invalid T&C link found

Stores files to the Windows start menu directory

Classification

Signatures

Found iframes

HTML page contains hidden javascript code

Source: https://cybersecuritynews.com/critical-unauthenticated-rce-flaw/?utm_medium=email&_hsenc=p2ANqtz-_cEbv13FOKqZu77uVCZMI5Nikqw7ZIt3E4ePE3WTjgezuJ3dDluqV2zs5rzQ72zzo5LvbUfg9WOnqk-LcGAbluHbCVmMiBTvP7OEAXxTo4zKEhses&_hsmi=326603005&utm_content=326603005&utm_source=hs_email

HTTP Parser: Base64 decoded: 1727450709.000000

HTML title does not match URL

HTTP Parser: Title: Critical Unauthenticated RCE Flaw Impacts all GNU/Linux systems does not match URL

Invalid 'forgot password' link found

HTTP Parser: Invalid link: Forgot your password? Get help

Invalid T&C link found

Source: https://cybersecuritynews.com/critical-unauthenticated-rce-flaw/?utm_medium=email&_hsenc=p2ANqtz-_cEbv13FOKqZu77uVCZMI5Nikqw7ZIt3E4ePE3WTjgezuJ3dDluqV2zs5rzQ72zzo5LvbUfg9WOnqk-LcGAbluHbCVmMiBTvP7OEAXxTo4zKEhses&_hsmi=326603005&utm_content=326603005&utm_source=hs_email	HTTP Parser: Invalid link: Forgot your password? Get help
Source: https://cybersecuritynews.com/critical-unauthenticated-rce-flaw/?utm_medium=email&_hsenc=p2ANqtz-_cEbv13FOKqZu77uVCZMI5Nikqw7ZIt3E4ePE3WTjgezuJ3dDluqV2zs5rzQ72zzo5LvbUfg9WOnqk-LcGAbluHbCVmMiBTvP7OEAXxTo4zKEhses&_hsmi=326603005&utm_content=326603005&utm_source=hs_email	HTTP Parser: Invalid link: Forgot your password? Get help
Source: https://cybersecuritynews.com/critical-unauthenticated-rce-flaw/?utm_medium=email&_hsenc=p2ANqtz-_cEbv13FOKqZu77uVCZMI5Nikqw7ZIt3E4ePE3WTjgezuJ3dDluqV2zs5rzQ72zzo5LvbUfg9WOnqk-LcGAbluHbCVmMiBTvP7OEAXxTo4zKEhses&_hsmi=326603005&utm_content=326603005&utm_source=hs_email	HTTP Parser: Invalid link: Forgot your password? Get help
Source: https://cybersecuritynews.com/critical-unauthenticated-rce-flaw/?utm_medium=email&_hsenc=p2ANqtz-_cEbv13FOKqZu77uVCZMI5Nikqw7ZIt3E4ePE3WTjgezuJ3dDluqV2zs5rzQ72zzo5LvbUfg9WOnqk-LcGAbluHbCVmMiBTvP7OEAXxTo4zKEhses&_hsmi=326603005&utm_content=326603005&utm_source=hs_email	HTTP Parser: Invalid link: Forgot your password? Get help

HTTP Parser: <input type="password" .../> found

Source: https://cybersecuritynews.com/critical-unauthenticated-rce-flaw/?utm_medium=email&_hsenc=p2ANqtz-_cEbv13FOKqZu77uVCZMI5Nikqw7ZIt3E4ePE3WTjgezuJ3dDluqV2zs5rzQ72zzo5LvbUfg9WOnqk-LcGAbluHbCVmMiBTvP7OEAXxTo4zKEhses&_hsmi=326603005&utm_content=326603005&utm_source=hs_email	HTTP Parser: No favicon
Source: https://cybersecuritynews.com/critical-unauthenticated-rce-flaw/?utm_medium=email&_hsenc=p2ANqtz-_cEbv13FOKqZu77uVCZMI5Nikqw7ZIt3E4ePE3WTjgezuJ3dDluqV2zs5rzQ72zzo5LvbUfg9WOnqk-LcGAbluHbCVmMiBTvP7OEAXxTo4zKEhses&_hsmi=326603005&utm_content=326603005&utm_source=hs_email	HTTP Parser: No favicon
Source: https://cybersecuritynews.com/critical-unauthenticated-rce-flaw/?utm_medium=email&_hsenc=p2ANqtz-_cEbv13FOKqZu77uVCZMI5Nikqw7ZIt3E4ePE3WTjgezuJ3dDluqV2zs5rzQ72zzo5LvbUfg9WOnqk-LcGAbluHbCVmMiBTvP7OEAXxTo4zKEhses&_hsmi=326603005&utm_content=326603005&utm_source=hs_email	HTTP Parser: No favicon
Source: https://cybersecuritynews.com/critical-unauthenticated-rce-flaw/?utm_medium=email&_hsenc=p2ANqtz-_cEbv13FOKqZu77uVCZMI5Nikqw7ZIt3E4ePE3WTjgezuJ3dDluqV2zs5rzQ72zzo5LvbUfg9WOnqk-LcGAbluHbCVmMiBTvP7OEAXxTo4zKEhses&_hsmi=326603005&utm_content=326603005&utm_source=hs_email	HTTP Parser: No favicon
Source: https://cybersecuritynews.com/critical-unauthenticated-rce-flaw/?utm_medium=email&_hsenc=p2ANqtz-_cEbv13FOKqZu77uVCZMI5Nikqw7ZIt3E4ePE3WTjgezuJ3dDluqV2zs5rzQ72zzo5LvbUfg9WOnqk-LcGAbluHbCVmMiBTvP7OEAXxTo4zKEhses&_hsmi=326603005&utm_content=326603005&utm_source=hs_email	HTTP Parser: No favicon
Source: https://cybersecuritynews.com/critical-unauthenticated-rce-flaw/?utm_medium=email&_hsenc=p2ANqtz-_cEbv13FOKqZu77uVCZMI5Nikqw7ZIt3E4ePE3WTjgezuJ3dDluqV2zs5rzQ72zzo5LvbUfg9WOnqk-LcGAbluHbCVmMiBTvP7OEAXxTo4zKEhses&_hsmi=326603005&utm_content=326603005&utm_source=hs_email	HTTP Parser: No favicon

Source: https://cybersecuritynews.com/critical-unauthenticated-rce-flaw/?utm_medium=email&_hsenc=p2ANqtz-_cEbv13FOKqZu77uVCZMI5Nikqw7ZIt3E4ePE3WTjgezuJ3dDluqV2zs5rzQ72zzo5LvbUfg9WOnqk-LcGAbluHbCVmMiBTvP7OEAXxTo4zKEhses&_hsmi=326603005&utm_content=326603005&utm_source=hs_email	HTTP Parser: No <meta name="copyright".. found
Source: https://cybersecuritynews.com/critical-unauthenticated-rce-flaw/?utm_medium=email&_hsenc=p2ANqtz-_cEbv13FOKqZu77uVCZMI5Nikqw7ZIt3E4ePE3WTjgezuJ3dDluqV2zs5rzQ72zzo5LvbUfg9WOnqk-LcGAbluHbCVmMiBTvP7OEAXxTo4zKEhses&_hsmi=326603005&utm_content=326603005&utm_source=hs_email	HTTP Parser: No <meta name="copyright".. found
Source: https://cybersecuritynews.com/critical-unauthenticated-rce-flaw/?utm_medium=email&_hsenc=p2ANqtz-_cEbv13FOKqZu77uVCZMI5Nikqw7ZIt3E4ePE3WTjgezuJ3dDluqV2zs5rzQ72zzo5LvbUfg9WOnqk-LcGAbluHbCVmMiBTvP7OEAXxTo4zKEhses&_hsmi=326603005&utm_content=326603005&utm_source=hs_email	HTTP Parser: No <meta name="copyright".. found
Source: https://cybersecuritynews.com/critical-unauthenticated-rce-flaw/?utm_medium=email&_hsenc=p2ANqtz-_cEbv13FOKqZu77uVCZMI5Nikqw7ZIt3E4ePE3WTjgezuJ3dDluqV2zs5rzQ72zzo5LvbUfg9WOnqk-LcGAbluHbCVmMiBTvP7OEAXxTo4zKEhses&_hsmi=326603005&utm_content=326603005&utm_source=hs_email	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:55440 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:55440 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 27MB later: 37MB

Detected non-DNS traffic on DNS port

Source: global traffic	TCP traffic: 192.168.2.16:55438 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:55438 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:55438 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:55438 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:55438 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:55438 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:55438 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:55438 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: news.claroty.com
Source: global traffic	DNS traffic detected: DNS query: cybersecuritynews.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: 1.bp.blogspot.com
Source: global traffic	DNS traffic detected: DNS query: blogger.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: secure.gravatar.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: stats.wp.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: static.xx.fbcdn.net
Source: global traffic	DNS traffic detected: DNS query: pixel.wp.com
Source: global traffic	DNS traffic detected: DNS query: fundingchoicesmessages.google.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 55442 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55440
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55442
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55444
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:55440 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:55440 version: TLS 1.2

Source: classification engine

Classification label: clean3.win@30/92@52/389

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1948,i,14260977157907239449,3878259860255169503,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://news.claroty.com/e3t/Ctc/OR+113/d2n-4L04/VVPy5P46C_3pW8Pz7_V3LxM13W7TctdS5ltnG0N3hBC6F3lYMRW7Y8-PT6lZ3p8VDPSWB2hkr0xW1jSCJz5Tx0CbW4k0Gdy84cgR5W75xzbh3JYxzyN3dsPjKyk4Y1W4hFjjr44kS1nW2D8hxk5DxH7vW3g6xkn2qrb3vW2SpQp81dtr0GW7r7Q7L2FZ5vJW152Dy06dcx6xVX2VR38JqC9HW7zbbH-4kxdWFW4cdkc03qH46PW6zkfpv6b7TyqW7xXcWC8200CKW3sff8w94k8jJN2NtC1BKs5HkN9kB4jVFTr3KW2Pl4Gd5kZ-8zW4psP_Z13trc2W5ggw2W7jyjZZW2Sq8vT2lr77MN29f9ChSYrrKW19xDX_1nRws8W8l47FX8MZS30f1xn1dn04"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1948,i,14260977157907239449,3878259860255169503,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=auction_worklet.mojom.AuctionWorkletService --lang=en-US --service-sandbox-type=service_with_jit --mojo-platform-channel-handle=4116 --field-trial-handle=1948,i,14260977157907239449,3878259860255169503,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=auction_worklet.mojom.AuctionWorkletService --lang=en-US --service-sandbox-type=service_with_jit --mojo-platform-channel-handle=4116 --field-trial-handle=1948,i,14260977157907239449,3878259860255169503,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Source: Window Recorder

Window detected: More than 3 window changes detected

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Screenshots

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
199.60.103.2	group29.sites.hscoscdn20.net	Canada	23181	QUICKSILVER1CA	false
216.58.206.33	unknown	United States	15169	GOOGLEUS	false
142.250.181.234	unknown	United States	15169	GOOGLEUS	false
157.240.0.6	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
172.217.23.99	unknown	United States	15169	GOOGLEUS	false
142.250.185.163	unknown	United States	15169	GOOGLEUS	false
142.250.185.162	unknown	United States	15169	GOOGLEUS	false
142.250.184.227	unknown	United States	15169	GOOGLEUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
142.250.184.228	www.google.com	United States	15169	GOOGLEUS	false
216.58.212.174	unknown	United States	15169	GOOGLEUS	false
172.217.18.110	unknown	United States	15169	GOOGLEUS	false
142.250.186.97	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false
142.250.186.99	unknown	United States	15169	GOOGLEUS	false
142.250.185.65	unknown	United States	15169	GOOGLEUS	false
142.250.186.35	unknown	United States	15169	GOOGLEUS	false
216.58.212.136	unknown	United States	15169	GOOGLEUS	false
142.250.186.34	unknown	United States	15169	GOOGLEUS	false
172.217.16.202	unknown	United States	15169	GOOGLEUS	false
34.104.35.123	unknown	United States	15169	GOOGLEUS	false
1.1.1.1	unknown	Australia	13335	CLOUDFLARENETUS	false
142.250.186.163	unknown	United States	15169	GOOGLEUS	false
157.240.0.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
192.0.76.3	stats.wp.com	United States	2635	AUTOMATTICUS	false
192.0.73.2	secure.gravatar.com	United States	2635	AUTOMATTICUS	false
142.250.185.238	unknown	United States	15169	GOOGLEUS	false
172.217.18.1	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
157.240.251.9	unknown	United States	32934	FACEBOOKUS	false
142.250.185.170	unknown	United States	15169	GOOGLEUS	false
142.250.186.129	unknown	United States	15169	GOOGLEUS	false
64.233.167.84	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	cybersecuritynews.com	European Union	13335	CLOUDFLARENETUS	false
142.250.185.130	unknown	United States	15169	GOOGLEUS	false
172.217.23.100	unknown	United States	15169	GOOGLEUS	false
142.250.186.142	www3.l.google.com	United States	15169	GOOGLEUS	false
172.217.16.194	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.184.238	unknown	United States	15169	GOOGLEUS	false
172.217.16.193	unknown	United States	15169	GOOGLEUS	false
142.250.184.232	unknown	United States	15169	GOOGLEUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
142.250.185.97	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.16
192.168.2.6

Contacted Domains

Name	IP	Active
star-mini.c10r.facebook.com	157.240.0.35	true
stats.wp.com	192.0.76.3	true
secure.gravatar.com	192.0.73.2	true
a.nel.cloudflare.com	35.190.80.1	true
group29.sites.hscoscdn20.net	199.60.103.2	true
scontent.xx.fbcdn.net	157.240.0.6	true
cybersecuritynews.com	188.114.97.3	true
googleads.g.doubleclick.net	172.217.16.194	true
www3.l.google.com	142.250.186.142	true
pixel.wp.com	192.0.76.3	true
cdnjs.cloudflare.com	104.17.25.14	true
photos-ugc.l.googleusercontent.com	142.250.186.97	true
www.google.com	142.250.184.228	true
googlehosted.l.googleusercontent.com	172.217.18.1	true
www.facebook.com	unknown	unknown
fundingchoicesmessages.google.com	unknown	unknown
static.xx.fbcdn.net	unknown	unknown
news.claroty.com	unknown	unknown
1.bp.blogspot.com	unknown	unknown
blogger.googleusercontent.com	unknown	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cybersecuritynews.com/critical-unauthenticated-rce-flaw/?utm_medium=email&_hsenc=p2ANqtz-_cEbv13FOKqZu77uVCZMI5Nikqw7ZIt3E4ePE3WTjgezuJ3dDluqV2zs5rzQ72zzo5LvbUfg9WOnqk-LcGAbluHbCVmMiBTvP7OEAXxTo4zKEhses&_hsmi=326603005&utm_content=326603005&utm_source=hs_email	false		unknown

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Sep 27 14:25:05 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	A703F36B5AECCFAA49FD3F5FEFAE1D10	D3AD31FDACD23BEDA9E0DEA6305ECA325455CA0B	2D44539E00351803E050F271E0E66C0C93FE5C61FA7B2B79F24CFF0CB604E935
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Sep 27 14:25:05 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	5B5D9A8BF533EDDFFA7212BFBE1F25AC	9ED37C39A2C1AAF41848DF656055938CC898EE84	F6D37F23CF0F05017D94E4662C05C77AD446E558E31EA1ECA9983E0FA24E959A
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	AE0CB3B118E17F6F3999B5D1B452B7D6	431FD00E44F926D8840E7C9EF30EBFC8C72C16D4	37B93429989F5D23BADE6FF318DBD43927E9A45A16D612312D33EC86D4FDD776
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Sep 27 14:25:05 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	AEE78E84879E174F5284B175695DB549	E9D21FD269CA843D7C5B85269237B0FFE6CC29B9	9468198D3DF23859E95B4CD82CD0F66621E46477C70EAB4CEE186191D1BC6B7F
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Sep 27 14:25:05 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	E5149913EB75AFDB08021A5336FB4A05	CA888333B415AA5C010B43B3564A0E35715038D6	7450F07BF9E14D32920BAD5BFCFD6EE2DC8B7DC3350C15C8C40F360E874695A0
Chrome Cache Entry: 208	ASCII text, with very long lines (7370), with no line terminators	12DF00D326D9D7CA84BA60C0ECA1F7DB	BC2AF6354BDBE334C94B8A33D26357C5C3156925	5BADD609A51EDE5BAB5B89534FC3011A4DD1AB487CC7081D7CF38479BCBAB855
Chrome Cache Entry: 209	ASCII text, with no line terminators	D64F3CD9A3907F778748A1150EB32E79	89FC26F8F57D3CB7F823C4D7FA785C173ADD75B5	A0BC00AFC306690C2B6EB35A67F99A1176C6517532139BC0B2FD7195C2AABEFB
Chrome Cache Entry: 211	HTML document, ASCII text, with very long lines (436), with no line terminators	F3328243B0C32511039A149413B25F9D	8339D8AD04161C87AC86DD1F8DCE85B26BD2A2BB	2D65C56D9E215A5C82D4CD0FC95BF9935A37C5E50BD84B8699C6ABA6ABA2CBCF
Chrome Cache Entry: 212	ASCII text, with very long lines (1572)	65F82F80CC28D1D81BED2952299A9327	E8501AA07E81FA3883D9336C6586AF0F66DE6118	9BF164FD8F85BBE262753BCA4167F5BAACB295FA1F167E0DFCC43FBF3E21A876
Chrome Cache Entry: 213	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 1600x900, components 3	3E2E7F1460AB1960CC7B30AED54F2ABE	8058CC0FEE81D162189656ADA76936AA4B08A3EC	524ECB3839BF0CBE5C44C304FCA6E0DED981E1DDAEE20AB4ED6E9FE91B26230C
Chrome Cache Entry: 214	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced	0053E70B4377BAD5459E309EF6113464	DEAC64FA4E9DA0785422D57E17B969F89BE64A82	25E61E22A409C4D384230C6FDE3C478678BD88F2CE49CE77DF706C7DED232D51
Chrome Cache Entry: 215	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 1600x900, components 3	E694C82286372F728EDB01C36187CAB4	AF89BA73A1C4AED3131D8E86A0500138C15C90F0	A5D22830BDD6831C1C00114D866A91BA2946BC877340760D8115B715AA95CA76
Chrome Cache Entry: 216	ASCII text, with very long lines (18798)	F88D5720BB454ED5D204CBDB56901F6B	F1952292FDE4B15936E9AAC16B2B9896684DB95B	726B820E44F6AB90AD991D30A4BF26D3A5D71493CBCD1FB1EFD0D14E89B9DF2A
Chrome Cache Entry: 219	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 1600x900, components 3	56ECD96BCD6440E7D6074799C1C12CB6	F70AECF72A255C2E63496D7619D4D2590090BBCB	1286567239646BE0865EEF29EE3080353F4FBD692E9B0F668A67CB748F869041
Chrome Cache Entry: 220	ASCII text, with very long lines (1382)	3B071D5606CC1CF92AE307F5BDB4E540	E191068CC90E5489130489A1CF173FE50BBA28B8	FF3DE130872FE0FB5B770DFA2BC9F0DAF8AB320403A34A60D089436F08D24F99
Chrome Cache Entry: 221	ASCII text, with very long lines (4345)	8525158C7B1D2A73B78A8B242A6F612F	07F35D0B518AB795DE9324AA8ED7A21C9A3F4D0E	07D73D8AF2D583F0EECC4598CC64E3719DB3164B978A45EFCB5E4376972CC5F1
Chrome Cache Entry: 225	JSON data	A7D6064541DBDDA46967973F69DD6D43	A8B46BE8B01F7D78BF49B45281A0C89F51B8477E	8A7441F9240B6F93D90DE798521D33E2A3D1CE723E32AA74A79D831B1CC951E1
Chrome Cache Entry: 226	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 1600x900, components 3	16563604F392BF7AF6AD35A5C87D2B42	F9B5F9B212669F46EBEAFAA6CF8D70D383AEFD2C	E2C228B27275D9EC517A62507EB7A362731EEC0963F9B691CAC4AF83F9DC5320
Chrome Cache Entry: 228	PNG image data, 272 x 90, 8-bit/color RGBA, non-interlaced	ED75BA6F87932ED3DDE95254A06869B2	DCEFCA55CEC3E5856FE5752120A1759FBBA5D770	A99D51DCDA055A1D505A2E003DD114D769D33184A07963D3810974CB653695C4
Chrome Cache Entry: 229	PNG image data, 16 x 16, 8-bit colormap, non-interlaced	388940C42991EFD9EB33F133E3280696	C6B4C460D1CCB5833DEB7844423C54C5F2CD2394	D65F4B2E8EEE94DDC7F762D098DE19558D879A3B597C8913B4D075532E3ED4B4
Chrome Cache Entry: 236	ASCII text, with very long lines (4014)	2D1DF636D33C77E6DC7CA1F089021122	C4E7EA51477ADBED7A6708D0CF54F4B834FA96A0	0B5494B93637D65BEC703D66D6D63E27EF78B56F2259C81908B6E24222C4C14E
Chrome Cache Entry: 237	ASCII text, with very long lines (4186), with no line terminators	EA958276B7DE454BD3C2873F0DC47E5F	B143F6E8E8F79D8F104C26B0057EF5514D763219	2E10D353FF038C2CAD3492FC17801AF3E6EF2669C9E9713BDB78B1DCB104C4FE
Chrome Cache Entry: 238	HTML document, ASCII text, with very long lines (65536), with no line terminators	2C12D58F0836E35A3E7EFEC45C750A01	E1F23E1EDFE821F076A3A3925C5665F4012CF44A	E4AC5BC2CBCBD523F90DDAB92F4D384D4FB2B1476726F34B40623C303748AC2D
Chrome Cache Entry: 239	ASCII text	976B9B6F54565A7226F00E40BE9F40C2	A2822527C76316559158833C41E0357C693C908B	CAACFC6A3602FE9A189A4BD15792C4BED2FCE634C04716F515E6C07CDA07315A
Chrome Cache Entry: 240	ASCII text	BAFDE036AC718873332DCD486A55B334	A4C2D5A8D1114479A3035FE1B649AC56ED2501F8	B689F2267305A97C30F5BDA1A0E18993C4BED294007DF78EAFD6829A4408CB1E
Chrome Cache Entry: 242	ASCII text, with very long lines (670)	78B8737D57A7D0B029EFA514907CD506	67C6CE628B259C9A8C500586302D2ED9C9EA98AD	2D036346B18BF4C27BC91F0416F8B59427E32BFC6C2724A27E6FE2E5A7B58574
Chrome Cache Entry: 243	ASCII text, with very long lines (4816)	196D9E333AB445E1A674313C79F42F16	12B611093FBE9C40C0E9B63708C377D2FEB45AF4	05DE5C8908714CC3DC1DAC9AC7659B9BD33257CC1F6B31E6990BC73E950F760A
Chrome Cache Entry: 244	ASCII text, with very long lines (4345)	EC692811D3D2FF1A12BF5624CC7023B9	818AE45659BB26603B72D1DB793FA5C7E24B6E3D	E153E9292A4139F686434BFB11642E35CF4B430C6705483AEE60149EC0F85105
Chrome Cache Entry: 245	PNG image data, 300 x 600, 8-bit/color RGB, non-interlaced	2A3812A8FC89C073A5A0F93F4C041CD7	D2FB98F6C125990DD24CDFDD97908E2E855B9B6F	697E0C946CC30F3557F325901FCDADA2D180DD4ADB817B2518002A3BA34374B0
Chrome Cache Entry: 246	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 200x200, components 3	634C676F2DCA021D855F5DB2B5B579DC	11F5473319E5127CC67D9F90ED7530F51CD7D824	040966CB4BA3FC0568A0EF64990457095BC73C578E227924BF72CD4C74AF6C1D
Chrome Cache Entry: 247	ASCII text, with very long lines (3916)	A9C190F275DD23136ABFFB11BF57FE61	2D1FA43FD27B0CF197E6F6A869633C87F90D4AE7	EF7414F883C239365954DDC6F8870D9FE5DAFD850FBB0806219E25C1B5A3D20B
Chrome Cache Entry: 248	ASCII text, with very long lines (20274)	ED477DB52A190E5B6741698F3167FDE6	5130C7FDBEE9BBA507AB5F4E3487854AB5FC96A2	5AA600AEA047CB99C7E2C22E7EDAF89F0539A6772A21981636E21DA89BED440A
Chrome Cache Entry: 252	HTML document, ASCII text, with very long lines (877), with no line terminators	6BF570815308C1F124385A2F17CF8F31	9E0EAEC6FCD32346B7823E424BD399125BC173BF	F234EA52136AC4FEC852AEF56C30FF628E4E3942F489834759364AE3AA48E709
Chrome Cache Entry: 253	HTML document, ASCII text	E4E31B474D3E0B577B3C8856E91F8659	A81311F7FCFA9B6B23A24D4E5C976D5F75B1B9B7	18088C10E79C926292732AF98A0CE470E90F3FBCBA4BB4896AB3310C2D94E421
Chrome Cache Entry: 254	PNG image data, 940 x 665, 8-bit/color RGBA, non-interlaced	A8D57C834ED6FA8C03ABA05519F03EBB	80657BF998726D40A1739EABBB47197449DDE48E	91E06A3B36351E50673C4D14EB3FC60195738E2BA05D7878096775BB92D0D72B
Chrome Cache Entry: 256	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 1600x900, components 3	07864FEBCCD8F2207A9722416E8E4CCE	7ABCF67647EE25C4A0B6A83DEC31F2C4D3165ACC	BC3557488C514860C1048A9035DDEB7EDD99FF6103B0A378D0A1CA2784BB4119
Chrome Cache Entry: 257	ASCII text, with very long lines (2353)	EF76FB3A4837C6537E939A32026D281C	C76016BFE231C7DD69E2B34319D615CCE9078E87	BB24C4F650D7257198DC193D944C5530A1474CEC0EF77218C9EDB8F8D41D8D68
Chrome Cache Entry: 258	ASCII text, with very long lines (3115)	B8425715CC06ADC70506099DE936AF74	FBCEE87DF0B9A0F6C07E01A3494383A634D4012C	89DCA72E96D0934E366EEE462BAE42235B0A891389134775CA4ACB3E71BCE6CA
Chrome Cache Entry: 259	ASCII text, with no line terminators	8267894E11C49F7C976EAA1E22137302	9F9C75963E184FB54A3BE9EED0523C00A2DCFE8A	BE6020CB6895B70B9EB41312DABEE107575BC152002200FA151098987339F390
Chrome Cache Entry: 261	ASCII text, with very long lines (2015)	D64BD6AB65DDB794E3A53D17664F547D	587DAF312494C0938078859F8CF6A540BB37A874	E217AA633D1A7501713AB4F913DB0941E41B70CE5C8717C2E6F41303B62416C2
Chrome Cache Entry: 262	JSON data	CE32A36B49A2F873D483C64AC069CB35	355174F724D700DF068ED5C902A8CA4CAE016DDA	02B2FF5C261E70156D58B10CD758BED1C9D56EDB69FCE6393513A1FB0E240E10
Chrome Cache Entry: 263	ASCII text, with very long lines (65447)	826EB77E86B02AB7724FE3D0141FF87C	79CD3587D565AFE290076A8D36C31C305A573D18	CB6F2D32C49D1C2B25E9FFC9AAAFA3F83075346C01BCD4AE6EB187392A4292CF
Chrome Cache Entry: 264	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1440, components 3	F6E280B26961EBF59EA4ED2AAB4899D0	73CC4A1EDCE8D579E1EE58AA6109E15AAEDA6D68	726F64B258A411AA45A577EBA953CE0EF7D6C574E0F9431120A4665C51CE1C2E
Chrome Cache Entry: 266	HTML document, ASCII text, with very long lines (8933), with CRLF, LF line terminators	CA3F4F91D5F2C53030CC83AB7A9A47EB	4B004DFC5154524C5A0438D5C43AEDB175C1F575	4DF70792D8C5E20F13471CC6041A5D9C3DE3B4DDD4D0A16E7F4F20128EDE0A6C
Chrome Cache Entry: 267	ASCII text, with very long lines (2946)	492F2C1A7EA7EB83FE42E0FF7CB51AA2	DB36A77F6AAA2063BFBEC02C2C0E967438C5A245	E174A58A503AB84B3D1B9DE12FD3895788204485170F1289E445F7B5B98EC789
Chrome Cache Entry: 268	ASCII text, with very long lines (13479)	9FFEB32E2D9EFBF8F70CAABDED242267	3AD0C10E501AC2A9BFA18F9CD7E700219B378738	5274F11E6FB32AE0CF2DFB9F8043272865C397A7C4223B4CFA7D50EA52FBDE89
Chrome Cache Entry: 269	ASCII text, with very long lines (53605)	90C81DE66A4EC34D5B4B4F12E42EA025	BD1394EEA3F3790CC970E4A734B79897311B7FAC	1F9126512CF49B26891A3D13FA03DF2F286ECC03C27FFBF1607F733DE8378DE4
Chrome Cache Entry: 270	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 1600x900, components 3	BD8B97E565DE718582C0C488BBBDD3CA	48A29AECE509F4C13141921B32E3A60E5F302C85	0B3D58C61FA57F108980759B06E1C61006B9BE03CFC5E9C3271C8AB292A4D5BB
Chrome Cache Entry: 271	HTML document, ASCII text, with very long lines (877), with no line terminators	F10ED31AD99E5FD3C53E8C0F0D9842B8	08FC7C1650D875C3405F223381F134CD628B0754	6C64559CC67A9C3BDC87450923D1532B555E6FB2757B651208685100CE1C5884
Chrome Cache Entry: 273	Web Open Font Format (Version 2), TrueType, length 18536, version 1.0	8EFF0B8045FD1959E117F85654AE7770	227FEE13CEB7C410B5C0BB8000258B6643CB6255	89978E658E840B927DDDB5CB3A835C7D8526ECE79933BD9F3096B301FE1A8571
Chrome Cache Entry: 274	ASCII text, with very long lines (3557)	0D833FD65D7A9C8C17FED9705F579B49	128A64F415163AE29D547D4167E12875E2C9E465	E239504132EBD13F770F54B558319788EF8D1146473132043B2D9A1130B42A77
Chrome Cache Entry: 275	ASCII text, with very long lines (37284), with no line terminators	B8FDC78E2CF11D2D83C09052D26460E6	95957ACAFBD2AD4ACA91C4406DE0B619458DF62B	D227E31EC93027F2B903FE5011B6EF0D67FD1FD8E0105843A2F56626E74F4322
Chrome Cache Entry: 277	ASCII text, with very long lines (15752)	B976B651932BFD25B9DDB5B7693D88A7	7FCB7CB5C11227F9213B1E08A07D0212209E1432	4E6CE5444C7F396CEF0EB1FA3611034151E485DD06FBE5573A5583E1EEBC98C3
Chrome Cache Entry: 279	ASCII text	8FE7A5344B9E8C6C249EB350D986DEFB	64B158E3B8CC576E30C5519ADD4158F93664DC7B	253817D06ADE2C59D38E5B4E34017D4E3D00B27F2B3466EF33F9942501FB2B46
Chrome Cache Entry: 280	ASCII text, with very long lines (8098), with no line terminators	AAB0E4309A261324AA2FE8128EA6EFE2	23FA8712A0351B600C28F11F3E1F2720B5B5359E	05FEEC8D93D67A6E2570F9FB9D1095283D170DF9E8654008079E1A6D1733533B
Chrome Cache Entry: 281	ASCII text	32872B624F07035C3A88A86A5BAF62C6	D91D523484AAD1D9508E889A7684649560519C99	7A89D23287AE3C749A356C76DA7EF88C34D0ED018C049701B05304C3F6601AB7
Chrome Cache Entry: 283	Web Open Font Format (Version 2), TrueType, length 48236, version 1.0	015C126A3520C9A8F6A27979D0266E96	2ACF956561D44434A6D84204670CF849D3215D5F	3C4D6A1421C7DDB7E404521FE8C4CD5BE5AF446D7689CD880BE26612EAAD3CFA
Chrome Cache Entry: 284	ASCII text, with very long lines (832)	9CC7B6B06A13711D555F669F2DB09244	03969BED0B360EA0882455888FAC7F47F8146E6A	15C510FE49C3EC5FD57AC7EAD341655699156A63FE10195347DFEAE1DC53F909
Chrome Cache Entry: 285	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 1600x900, components 3	F4A05F5A111AFB1E126184DDDC12BB9A	5E7782849C97B43D75B1957EED457E4B836CE2C5	DC05A84FDE578E7E2DE5106DD375F3592A044D83D5358E4BD2CCF1AB12848AC8
Chrome Cache Entry: 289	Web Open Font Format (Version 2), TrueType, length 18588, version 1.0	115C2D84727B41DA5E9B4394887A8C40	44F495A7F32620E51ACCA2E78F7E0615CB305781	AE0E442895406E9922237108496C2CD60F4947649A826463E2DA9860B5C25DD6
Chrome Cache Entry: 290	Web Open Font Format, TrueType, length 24864, version 0.0	B527D8CE3F034285F69B410D6AC6E58B	80C79FE969594D2F4C57027650872FDD7BBA491D	EA9AD8F6ACE011A694D664482CC6CA0ACC2DD86A8D6B684154327EC84C0C95FD
Chrome Cache Entry: 292	C++ source, ASCII text, with very long lines (2873)	0A69A7A3530DE318072DE6182E31A0C6	9BF1165A0064FB85DD8F29DDC6C45AD5B9574EE9	BF1E2557855835794A8A1D9C1403AC53373CCEA3006325357E5CB384E93D7514
Chrome Cache Entry: 293	ASCII text, with very long lines (2215)	0CFE4BDFB7D67343B791FAA076C50917	3974AA496C5AC7DE1724A38FC1EFC99A7B1FD4D0	16C8CFB1EE17DD2E0FAE6BC41FF003135E0E45094D9867DEA6878CB552A70EAB
Chrome Cache Entry: 295	HTML document, Unicode text, UTF-8 text, with very long lines (1183)	3C2ED899242E9D17CFD50BF0542F018A	C99BB1DD851AA173115699F801FE9188D3C73C65	FA3FF9BB4A3D6BD142695B8D69BE15BA8A950FDE89D068CD65F3161102AE9470
Chrome Cache Entry: 296	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced	7BD42E5A35B5FB3FF852D6EA9191CA83	8A141EB392A05A2DEA3DCD83B97940EF70A81EBC	5C4A713EE4250851232BE9F9F68D41586BE39B299528CFC7266E0B0E7E582E1B
Chrome Cache Entry: 297	ASCII text, with very long lines (1572)	CCB322315DE29EA49F577240686F41DF	8AC6B9D162ECF5F2F119BEF8EB2F9A87A61C19CF	F8B90D223B19C972D304BCBF9A7B3B8263A05A58A5EDE3BDBB5D69BB66B0D662
Chrome Cache Entry: 298	ASCII text, with very long lines (378)	CD1CA4C1404E4B72DA39F36691D61AE1	A642CAAA23B25F313222670EB2C3C35AAE824613	312460F32193FF9910D720CC337941ABD9C749E9F3C7C0E3BF707D90A51CA897
Chrome Cache Entry: 299	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced	4087858E2C9DB9AA8F6A840AEDCFB533	D1FFE861DA6BD0E95FD1A365B0C3D3CEB6CD58A3	4D45982F2DC34F36C9045EE46A75A1943666BB7FD64E103CAC8C7429E7012840
Chrome Cache Entry: 303	ASCII text, with very long lines (2079)	63CE2B7DF9EDC4265DF3CB9EDAD9F650	F744EEBF95EEB1A067294A2DC29951F0EB5BE9CD	BA5F8D3B5CD5D1A9D01D0F07C1BF82B4F422D963AB1A406E2DECA0074CF5F32F
Chrome Cache Entry: 304	GIF image data, version 89a, 6 x 5	E4D673A55C5656F19EF81563FB10884C	1F2D8ED221D39329251AD3A6FF1EDB20B7219443	F3A8992ACB9AB911E0FA4AE12F4B85EF8E61008619F13EE51C7A121FF87F63B1
Chrome Cache Entry: 306	Web Open Font Format (Version 2), TrueType, length 7884, version 1.0	9212F6F9860F9FC6C69B02FEDF6DB8C3	AC6D71B4D5FDD2B3DABC9A06FF6C001E4251DA0B	7D93459D86585BFCDBB7E0376056226ADB25821EE54B96236FE2123E9560929F
Chrome Cache Entry: 307	ASCII text, with very long lines (7930), with no line terminators	0AAB772398C85FD9AAE00480EB2B64A1	55A4D63D24CA8C43C2149187765F703230F5C5C6	0E18354E5CDC18571A312EFD5107ECC7681E56B06FD2BC9D4992E06E4092FC49
Chrome Cache Entry: 309	ASCII text, with very long lines (11256), with no line terminators	2B0DD7EECEA03B4BDEDB94BA622FDB03	703BECBA85161118DD6FC66AF465428EF43F561C	B7908A015A567EC2363011DF2475368DBFF34360E9DA3FDFF50604D6395FB646
Chrome Cache Entry: 311	ASCII text, with very long lines (786)	AB304529064B2C30C88FC41AD81913E0	14091E21A049D97B052DD56FF4076898F6F7D0CC	88C5A7E6C9B3319F4BE9CD873D1E19766A62BE628EA9921156DD2702F1D15031
Chrome Cache Entry: 313	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 464x128, components 3	AD77E187279503B6BAB1ECA4BF7AD510	25EA364C3031FA7F23B72D25892019173B76F105	20C9AF294575006D2A588DB568C92223A141C7AD5A86A9B9FAE00E048717ADE0
Chrome Cache Entry: 314	PNG image data, 272 x 90, 8-bit/color RGBA, non-interlaced	D0A82C4D2DC8B6B73CDE245E7FF75B9F	B8BB6AB42972DC3F48D5E054A265E021CD8B30EB	4C6B5F9D642DE84DE45EC7F4F860016A27D1C1D8D890369A533A40A5BE0AB3AB
Chrome Cache Entry: 315	Web Open Font Format (Version 2), TrueType, length 18596, version 1.0	C83E4437A53D7F849F9D32DF3D6B68F3	FABEA5AD92ED3E2431659B02E7624DF30D0C6BBC	D9BADA3A44BB2FFA66DEC5CC781CAFC9EF17ED876CD9B0C5F7EF18228B63CEBB
Chrome Cache Entry: 317	ASCII text, with very long lines (20398)	1034AB33A5574B9A2E8F6F62D05802CC	E85736C02BEDD225246EA9DE0E0C0D2490BA93E8	484316933AACD153AB3E58F15E7515B52E27B1F13B7C7FF0138F1F978722D7DF
Chrome Cache Entry: 318	C++ source, ASCII text, with very long lines (2037)	BE48629105E6EE68E205C75D8D7D6F3F	3515DC76267D591C7713309539FC42AEFABAF7C1	9C31C69214F712F39DC91714D858553273C989800A5FAEDE15DEFD798B5F89BD
Chrome Cache Entry: 319	ASCII text, with very long lines (4014)	AC54A6926991873F5591EF2BE3CA682F	3FA69DC46631089159BB2F2516032F60B659D3AD	CA7EA7D749FFDABE5F93339E24C8F2E1A1A7144F6A86E3E60D420CB5E3F00A9B
Chrome Cache Entry: 320	HTML document, ASCII text, with very long lines (829), with no line terminators	F8DDB78807C82E0864CECA9C5A709CBA	FE78EDCE7D72F7D122C073D699FA8E9DEB578538	319068814EB70FDA4BE2D7746FB2B2423645E81624A8BCF108F54F3CC2FA211D
Chrome Cache Entry: 322	ASCII text, with very long lines (3683), with no line terminators	3AD5CAA5616445685659F934407A9472	E8797E351E12D40326ABBB1054FA42E141B9C16B	FF58039976D62BEEF36F2D3750B639E7CD571662FE6C6C34CC67BEB61647F312
Chrome Cache Entry: 323	ASCII text, with very long lines (1055)	76A4D84DE75340D59CA06503A14184D4	2FE3C4A95AF88BE57D1912BB09DC463F69924402	66E9BF446316F6EEC5EAEFA7098592BBD2144A60EB38C481DB233A6CA8B8D94A
Chrome Cache Entry: 324	PNG image data, 928 x 90, 8-bit/color RGB, non-interlaced	ED59D5FE906B422B3252219B9BF04C84	6AB9092CAA40647F7AE57FD6C7285727C2C8D713	BF1768561107464C67400FCCCB61AE6B9C43FA507EBD30DABDF7573FA1C6B31D
Chrome Cache Entry: 326	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 728x90, components 3	360A9A036735F3C662AD06066968EE8A	84F54C303BB417D29C2184364D978694CA81817F	AC06BCFEAACBBA357E59F664EF1CEE37534F78E67BDBA79634E916FCC1A57DB3
Chrome Cache Entry: 328	ASCII text, with very long lines (52915)	ACBCBB660EBC92A6766BA72457065851	7BC2CA2EA734A0490E24D745C0F1AF580B3521F5	0DEBF1DE10E6D0C2AB58FEBB6ACB542F7847594FA4D8070F86756D710785BE76
Chrome Cache Entry: 329	ASCII text, with very long lines (57765)	319580D7D8944A1A65F635E0D11E5DA5	E23BC18EF1B0F78F7010E3C16E4C5E1F333248BD	FB3A89CC6347E098063BD15F285BC90411846DDCE6F17812364FEEDAB67A67F5
Chrome Cache Entry: 330	HTML document, ASCII text, with very long lines (2008)	D1F231B50B152372A6C3100F4AED1973	1BF10951BE06DA03D1371A904E19C0419F2A3637	9DEC95894AF322B087AB6E87F9C8CE66D849646CF33B375D33C957F4569ED081
Chrome Cache Entry: 331	ASCII text, with very long lines (2090)	944DF6D6F035F3EC5B30852C128FA3BD	31AC7EC686B1C7AFE6D8D8E9B646C6C8C5D00105	C76FADDD13E0D946B9B0A6C93657FDD4D21518B30F22FBB1A25CF304D8B14971
Chrome Cache Entry: 335	Web Open Font Format (Version 2), TrueType, length 38268, version 1.0	9B0F2FE8AE9D38FEA56CC9E84FDBC2C2	6FE3352049B17554D46380342372A737F4A8A3DE	A8A4A852DEDCC7E3B6BB2C6ACFFAC1A82A31828A00749CE2A8C2D6DD5F268DD9
Chrome Cache Entry: 337	ASCII text, with very long lines (566)	6E98296229FFA777101F2EF59AE5F7C5	CB53E2D6108FFBBBC4A96307EEFA1ED6B3A4A4D8	0DD95D9BFC689B8862A9DD8AE8166CA21DF149FB24F3D0830423B66AE00D426E
Chrome Cache Entry: 338	ASCII text, with very long lines (1994)	A23C04973B18194A35807D5A57FC37CA	7CCA00067199CD35CCB07E7CEFC49FDBCD53AB32	487E52431A0AA261878C51BABABEC204D5649984260F8126A5117B281FE4700F

Found iframes

HTML page contains hidden javascript code

HTTP Parser: Base64 decoded: 1727450709.000000

HTML title does not match URL

HTTP Parser: Title: Critical Unauthenticated RCE Flaw Impacts all GNU/Linux systems does not match URL

Invalid 'forgot password' link found

HTTP Parser: Invalid link: Forgot your password? Get help

Invalid T&C link found

Source: https://cybersecuritynews.com/critical-unauthenticated-rce-flaw/?utm_medium=email&_hsenc=p2ANqtz-_cEbv13FOKqZu77uVCZMI5Nikqw7ZIt3E4ePE3WTjgezuJ3dDluqV2zs5rzQ72zzo5LvbUfg9WOnqk-LcGAbluHbCVmMiBTvP7OEAXxTo4zKEhses&_hsmi=326603005&utm_content=326603005&utm_source=hs_email	HTTP Parser: Invalid link: Forgot your password? Get help
Source: https://cybersecuritynews.com/critical-unauthenticated-rce-flaw/?utm_medium=email&_hsenc=p2ANqtz-_cEbv13FOKqZu77uVCZMI5Nikqw7ZIt3E4ePE3WTjgezuJ3dDluqV2zs5rzQ72zzo5LvbUfg9WOnqk-LcGAbluHbCVmMiBTvP7OEAXxTo4zKEhses&_hsmi=326603005&utm_content=326603005&utm_source=hs_email	HTTP Parser: Invalid link: Forgot your password? Get help
Source: https://cybersecuritynews.com/critical-unauthenticated-rce-flaw/?utm_medium=email&_hsenc=p2ANqtz-_cEbv13FOKqZu77uVCZMI5Nikqw7ZIt3E4ePE3WTjgezuJ3dDluqV2zs5rzQ72zzo5LvbUfg9WOnqk-LcGAbluHbCVmMiBTvP7OEAXxTo4zKEhses&_hsmi=326603005&utm_content=326603005&utm_source=hs_email	HTTP Parser: Invalid link: Forgot your password? Get help
Source: https://cybersecuritynews.com/critical-unauthenticated-rce-flaw/?utm_medium=email&_hsenc=p2ANqtz-_cEbv13FOKqZu77uVCZMI5Nikqw7ZIt3E4ePE3WTjgezuJ3dDluqV2zs5rzQ72zzo5LvbUfg9WOnqk-LcGAbluHbCVmMiBTvP7OEAXxTo4zKEhses&_hsmi=326603005&utm_content=326603005&utm_source=hs_email	HTTP Parser: Invalid link: Forgot your password? Get help

HTTP Parser: <input type="password" .../> found

Source: https://cybersecuritynews.com/critical-unauthenticated-rce-flaw/?utm_medium=email&_hsenc=p2ANqtz-_cEbv13FOKqZu77uVCZMI5Nikqw7ZIt3E4ePE3WTjgezuJ3dDluqV2zs5rzQ72zzo5LvbUfg9WOnqk-LcGAbluHbCVmMiBTvP7OEAXxTo4zKEhses&_hsmi=326603005&utm_content=326603005&utm_source=hs_email	HTTP Parser: No favicon
Source: https://cybersecuritynews.com/critical-unauthenticated-rce-flaw/?utm_medium=email&_hsenc=p2ANqtz-_cEbv13FOKqZu77uVCZMI5Nikqw7ZIt3E4ePE3WTjgezuJ3dDluqV2zs5rzQ72zzo5LvbUfg9WOnqk-LcGAbluHbCVmMiBTvP7OEAXxTo4zKEhses&_hsmi=326603005&utm_content=326603005&utm_source=hs_email	HTTP Parser: No favicon
Source: https://cybersecuritynews.com/critical-unauthenticated-rce-flaw/?utm_medium=email&_hsenc=p2ANqtz-_cEbv13FOKqZu77uVCZMI5Nikqw7ZIt3E4ePE3WTjgezuJ3dDluqV2zs5rzQ72zzo5LvbUfg9WOnqk-LcGAbluHbCVmMiBTvP7OEAXxTo4zKEhses&_hsmi=326603005&utm_content=326603005&utm_source=hs_email	HTTP Parser: No favicon
Source: https://cybersecuritynews.com/critical-unauthenticated-rce-flaw/?utm_medium=email&_hsenc=p2ANqtz-_cEbv13FOKqZu77uVCZMI5Nikqw7ZIt3E4ePE3WTjgezuJ3dDluqV2zs5rzQ72zzo5LvbUfg9WOnqk-LcGAbluHbCVmMiBTvP7OEAXxTo4zKEhses&_hsmi=326603005&utm_content=326603005&utm_source=hs_email	HTTP Parser: No favicon
Source: https://cybersecuritynews.com/critical-unauthenticated-rce-flaw/?utm_medium=email&_hsenc=p2ANqtz-_cEbv13FOKqZu77uVCZMI5Nikqw7ZIt3E4ePE3WTjgezuJ3dDluqV2zs5rzQ72zzo5LvbUfg9WOnqk-LcGAbluHbCVmMiBTvP7OEAXxTo4zKEhses&_hsmi=326603005&utm_content=326603005&utm_source=hs_email	HTTP Parser: No favicon
Source: https://cybersecuritynews.com/critical-unauthenticated-rce-flaw/?utm_medium=email&_hsenc=p2ANqtz-_cEbv13FOKqZu77uVCZMI5Nikqw7ZIt3E4ePE3WTjgezuJ3dDluqV2zs5rzQ72zzo5LvbUfg9WOnqk-LcGAbluHbCVmMiBTvP7OEAXxTo4zKEhses&_hsmi=326603005&utm_content=326603005&utm_source=hs_email	HTTP Parser: No favicon

Source: https://cybersecuritynews.com/critical-unauthenticated-rce-flaw/?utm_medium=email&_hsenc=p2ANqtz-_cEbv13FOKqZu77uVCZMI5Nikqw7ZIt3E4ePE3WTjgezuJ3dDluqV2zs5rzQ72zzo5LvbUfg9WOnqk-LcGAbluHbCVmMiBTvP7OEAXxTo4zKEhses&_hsmi=326603005&utm_content=326603005&utm_source=hs_email	HTTP Parser: No <meta name="copyright".. found
Source: https://cybersecuritynews.com/critical-unauthenticated-rce-flaw/?utm_medium=email&_hsenc=p2ANqtz-_cEbv13FOKqZu77uVCZMI5Nikqw7ZIt3E4ePE3WTjgezuJ3dDluqV2zs5rzQ72zzo5LvbUfg9WOnqk-LcGAbluHbCVmMiBTvP7OEAXxTo4zKEhses&_hsmi=326603005&utm_content=326603005&utm_source=hs_email	HTTP Parser: No <meta name="copyright".. found
Source: https://cybersecuritynews.com/critical-unauthenticated-rce-flaw/?utm_medium=email&_hsenc=p2ANqtz-_cEbv13FOKqZu77uVCZMI5Nikqw7ZIt3E4ePE3WTjgezuJ3dDluqV2zs5rzQ72zzo5LvbUfg9WOnqk-LcGAbluHbCVmMiBTvP7OEAXxTo4zKEhses&_hsmi=326603005&utm_content=326603005&utm_source=hs_email	HTTP Parser: No <meta name="copyright".. found
Source: https://cybersecuritynews.com/critical-unauthenticated-rce-flaw/?utm_medium=email&_hsenc=p2ANqtz-_cEbv13FOKqZu77uVCZMI5Nikqw7ZIt3E4ePE3WTjgezuJ3dDluqV2zs5rzQ72zzo5LvbUfg9WOnqk-LcGAbluHbCVmMiBTvP7OEAXxTo4zKEhses&_hsmi=326603005&utm_content=326603005&utm_source=hs_email	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:55440 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:55440 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 27MB later: 37MB

Detected non-DNS traffic on DNS port

Source: global traffic	TCP traffic: 192.168.2.16:55438 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:55438 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:55438 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:55438 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:55438 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:55438 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:55438 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:55438 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: news.claroty.com
Source: global traffic	DNS traffic detected: DNS query: cybersecuritynews.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: 1.bp.blogspot.com
Source: global traffic	DNS traffic detected: DNS query: blogger.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: secure.gravatar.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: stats.wp.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: static.xx.fbcdn.net
Source: global traffic	DNS traffic detected: DNS query: pixel.wp.com
Source: global traffic	DNS traffic detected: DNS query: fundingchoicesmessages.google.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 55442 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55440
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55442
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55444
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:55440 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:55440 version: TLS 1.2

Source: classification engine

Classification label: clean3.win@30/92@52/389

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1948,i,14260977157907239449,3878259860255169503,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://news.claroty.com/e3t/Ctc/OR+113/d2n-4L04/VVPy5P46C_3pW8Pz7_V3LxM13W7TctdS5ltnG0N3hBC6F3lYMRW7Y8-PT6lZ3p8VDPSWB2hkr0xW1jSCJz5Tx0CbW4k0Gdy84cgR5W75xzbh3JYxzyN3dsPjKyk4Y1W4hFjjr44kS1nW2D8hxk5DxH7vW3g6xkn2qrb3vW2SpQp81dtr0GW7r7Q7L2FZ5vJW152Dy06dcx6xVX2VR38JqC9HW7zbbH-4kxdWFW4cdkc03qH46PW6zkfpv6b7TyqW7xXcWC8200CKW3sff8w94k8jJN2NtC1BKs5HkN9kB4jVFTr3KW2Pl4Gd5kZ-8zW4psP_Z13trc2W5ggw2W7jyjZZW2Sq8vT2lr77MN29f9ChSYrrKW19xDX_1nRws8W8l47FX8MZS30f1xn1dn04"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1948,i,14260977157907239449,3878259860255169503,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=auction_worklet.mojom.AuctionWorkletService --lang=en-US --service-sandbox-type=service_with_jit --mojo-platform-channel-handle=4116 --field-trial-handle=1948,i,14260977157907239449,3878259860255169503,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=auction_worklet.mojom.AuctionWorkletService --lang=en-US --service-sandbox-type=service_with_jit --mojo-platform-channel-handle=4116 --field-trial-handle=1948,i,14260977157907239449,3878259860255169503,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Source: Window Recorder

Window detected: More than 3 window changes detected

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

ID:	1520629
Product:	CloudBasic
Start time:	17:24:29
Start date:	27.09.2024
Cookbook:	defaultwindowsinteractivecookbook.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs