Play interactive tourEdit tour

Windows Analysis Report
https://mandrillapp.com/track/click/30581239/open.substack.com?p=eyJzIjoiYldtdEhLRG9Mc3lrLXptaTNjV3ZrcWJrMDU0IiwidiI6MSwicCI6IntcInVcIjozMDU4MTIzOSxcInZcIjoxLFwidXJsXCI6XCJodHRwczpcXFwvXFxcL29wZW4uc3Vic3RhY2suY29tXFxcL3B1YlxcXC9nYnJheVxcXC9wXFxcL2RpZC1tdXNsaW1zLWF0dGFjay11cy1vbi05MTE_cj0xZDZxeWEmdXR

Overview

General Information

Sample URL:	https://mandrillapp.com/track/click/30581239/open.substack.com?p=eyJzIjoiYldtdEhLRG9Mc3lrLXptaTNjV3ZrcWJrMDU0IiwidiI6MSwicCI6IntcInVcIjozMDU4MTIzOSxcInZcIjoxLFwidXJsXCI6XCJodHRwczpcXFwvXFxcL29wZW4uc3V
Analysis ID:	1523598

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected non-DNS traffic on DNS port

Found iframes

HTML page contains hidden javascript code

Stores files to the Windows start menu directory

Classification

×

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Phishing

Found iframes

Source: https://gbray.substack.com/p/did-muslims-attack-us-on-911?r=1d6qya&utm_campaign=post&utm_medium=web&triedRedirect=true	HTTP Parser: Iframe src: https://www.youtube-nocookie.com/embed/PK_iBYSqEsc?rel=0&autoplay=0&showinfo=0&enablejsapi=0
Source: https://gbray.substack.com/p/did-muslims-attack-us-on-911?r=1d6qya&utm_campaign=post&utm_medium=web&triedRedirect=true	HTTP Parser: Iframe src: https://www.youtube-nocookie.com/embed/EEogeIIOJzU?rel=0&autoplay=0&showinfo=0&enablejsapi=0
Source: https://gbray.substack.com/p/did-muslims-attack-us-on-911?r=1d6qya&utm_campaign=post&utm_medium=web&triedRedirect=true	HTTP Parser: Iframe src: https://www.youtube-nocookie.com/embed/M_pLOvvUpi8?rel=0&autoplay=0&showinfo=0&enablejsapi=0
Source: https://gbray.substack.com/p/did-muslims-attack-us-on-911?r=1d6qya&utm_campaign=post&utm_medium=web&triedRedirect=true	HTTP Parser: Iframe src: https://www.youtube-nocookie.com/embed/PK_iBYSqEsc?rel=0&autoplay=0&showinfo=0&enablejsapi=0
Source: https://gbray.substack.com/p/did-muslims-attack-us-on-911?r=1d6qya&utm_campaign=post&utm_medium=web&triedRedirect=true	HTTP Parser: Iframe src: https://www.youtube-nocookie.com/embed/EEogeIIOJzU?rel=0&autoplay=0&showinfo=0&enablejsapi=0
Source: https://gbray.substack.com/p/did-muslims-attack-us-on-911?r=1d6qya&utm_campaign=post&utm_medium=web&triedRedirect=true	HTTP Parser: Iframe src: https://www.youtube-nocookie.com/embed/M_pLOvvUpi8?rel=0&autoplay=0&showinfo=0&enablejsapi=0
Source: https://gbray.substack.com/p/did-muslims-attack-us-on-911?r=1d6qya&utm_campaign=post&utm_medium=web&triedRedirect=true	HTTP Parser: Iframe src: https://www.youtube-nocookie.com/embed/PK_iBYSqEsc?rel=0&autoplay=0&showinfo=0&enablejsapi=0
Source: https://gbray.substack.com/p/did-muslims-attack-us-on-911?r=1d6qya&utm_campaign=post&utm_medium=web&triedRedirect=true	HTTP Parser: Iframe src: https://www.youtube-nocookie.com/embed/EEogeIIOJzU?rel=0&autoplay=0&showinfo=0&enablejsapi=0
Source: https://gbray.substack.com/p/did-muslims-attack-us-on-911?r=1d6qya&utm_campaign=post&utm_medium=web&triedRedirect=true	HTTP Parser: Iframe src: https://www.youtube-nocookie.com/embed/M_pLOvvUpi8?rel=0&autoplay=0&showinfo=0&enablejsapi=0
Source: https://gbray.substack.com/p/did-muslims-attack-us-on-911?r=1d6qya&utm_campaign=post&utm_medium=web&triedRedirect=true	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/316245675?random=1727807029425&cv=11&fst=1727807029425&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be49u0v887153041za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101686685~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fgbray.substack.com%2Fp%2Fdid-muslims-attack-us-on-911%3Fr%3D1d6qya%26utm_campaign%3Dpost%26utm_medium%3Dweb%26triedRedirect%3Dtrue&ref=https%3A%2F%2Fopen.substack.com%2F&hn=www.googleadservices.com&frm=0&tiba=Who%20Attacked%20Us%20on%209%2F11%3F%20-%20by%20Gene%20Bray%20-%20genebray&npa=0&pscdl=noapi&auid=1515183734.1727807029&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config

HTML page contains hidden javascript code

Source: https://gbray.substack.com/p/did-muslims-attack-us-on-911?r=1d6qya&utm_campaign=post&utm_medium=web&triedRedirect=true

HTTP Parser: Base64 decoded: *CAMSDBUP-Zq-DIOz9AsdBw==

HTML page is missing a favicon

Source: https://gbray.substack.com/p/did-muslims-attack-us-on-911?r=1d6qya&utm_campaign=post&utm_medium=web&triedRedirect=true	HTTP Parser: No favicon
Source: https://gbray.substack.com/p/did-muslims-attack-us-on-911?r=1d6qya&utm_campaign=post&utm_medium=web&triedRedirect=true	HTTP Parser: No favicon
Source: https://gbray.substack.com/p/did-muslims-attack-us-on-911?r=1d6qya&utm_campaign=post&utm_medium=web&triedRedirect=true	HTTP Parser: No favicon
Source: https://gbray.substack.com/p/did-muslims-attack-us-on-911?r=1d6qya&utm_campaign=post&utm_medium=web&triedRedirect=true	HTTP Parser: No favicon
Source: https://gbray.substack.com/p/did-muslims-attack-us-on-911?r=1d6qya&utm_campaign=post&utm_medium=web&triedRedirect=true	HTTP Parser: No favicon
Source: https://gbray.substack.com/p/did-muslims-attack-us-on-911?r=1d6qya&utm_campaign=post&utm_medium=web&triedRedirect=true	HTTP Parser: No favicon

META copyright tag missing

Source: https://gbray.substack.com/p/did-muslims-attack-us-on-911?r=1d6qya&utm_campaign=post&utm_medium=web&triedRedirect=true	HTTP Parser: No <meta name="copyright".. found
Source: https://gbray.substack.com/p/did-muslims-attack-us-on-911?r=1d6qya&utm_campaign=post&utm_medium=web&triedRedirect=true	HTTP Parser: No <meta name="copyright".. found
Source: https://gbray.substack.com/p/did-muslims-attack-us-on-911?r=1d6qya&utm_campaign=post&utm_medium=web&triedRedirect=true	HTTP Parser: No <meta name="copyright".. found

Compliance

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:50874 version: TLS 1.2

Networking

Detected non-DNS traffic on DNS port

Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50668 -> 1.1.1.1:53

Connects to IPs without corresponding DNS lookups

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Performs DNS lookups

Source: global traffic	DNS traffic detected: DNS query: mandrillapp.com
Source: global traffic	DNS traffic detected: DNS query: open.substack.com
Source: global traffic	DNS traffic detected: DNS query: gbray.substack.com
Source: global traffic	DNS traffic detected: DNS query: substackcdn.com
Source: global traffic	DNS traffic detected: DNS query: js.sentry-cdn.com
Source: global traffic	DNS traffic detected: DNS query: static.cloudflareinsights.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.youtube-nocookie.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: yt3.ggpht.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: www.datadoghq-browser-agent.com
Source: global traffic	DNS traffic detected: DNS query: cloudflareinsights.com
Source: global traffic	DNS traffic detected: DNS query: substack.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net

Uses HTTPS

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50975
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50739
Source: unknown	Network traffic detected: HTTP traffic on port 50806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50970
Source: unknown	Network traffic detected: HTTP traffic on port 50726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50972
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51101 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50744
Source: unknown	Network traffic detected: HTTP traffic on port 50899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50745
Source: unknown	Network traffic detected: HTTP traffic on port 50853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50987
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50748
Source: unknown	Network traffic detected: HTTP traffic on port 51227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50749
Source: unknown	Network traffic detected: HTTP traffic on port 51135 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50980
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50982
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50981
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50741
Source: unknown	Network traffic detected: HTTP traffic on port 50761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50983
Source: unknown	Network traffic detected: HTTP traffic on port 51170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 50738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50755
Source: unknown	Network traffic detected: HTTP traffic on port 50875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50996
Source: unknown	Network traffic detected: HTTP traffic on port 51008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51249 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50759
Source: unknown	Network traffic detected: HTTP traffic on port 50980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50991
Source: unknown	Network traffic detected: HTTP traffic on port 51113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50993
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50994
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 50714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50768
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50760
Source: unknown	Network traffic detected: HTTP traffic on port 50818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50763
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 51090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51169 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50930
Source: unknown	Network traffic detected: HTTP traffic on port 50957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50933
Source: unknown	Network traffic detected: HTTP traffic on port 51192 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 50783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50939
Source: unknown	Network traffic detected: HTTP traffic on port 51160 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50938
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 51011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50942
Source: unknown	Network traffic detected: HTTP traffic on port 50683 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 50908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50704
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 50931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50946
Source: unknown	Network traffic detected: HTTP traffic on port 51252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50947
Source: unknown	Network traffic detected: HTTP traffic on port 50748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50940
Source: unknown	Network traffic detected: HTTP traffic on port 51089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50949
Source: unknown	Network traffic detected: HTTP traffic on port 50843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 51125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50952
Source: unknown	Network traffic detected: HTTP traffic on port 51033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50957
Source: unknown	Network traffic detected: HTTP traffic on port 51203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50716
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50958
Source: unknown	Network traffic detected: HTTP traffic on port 51159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50951
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50950
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50695 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50719
Source: unknown	Network traffic detected: HTTP traffic on port 50808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 50865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 50771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50963
Source: unknown	Network traffic detected: HTTP traffic on port 51225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50968
Source: unknown	Network traffic detected: HTTP traffic on port 51055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50969
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50960
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50962
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50961
Source: unknown	Network traffic detected: HTTP traffic on port 51137 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 51182 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 51201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51207
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51208
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51205
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51206
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51209
Source: unknown	Network traffic detected: HTTP traffic on port 50804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51200
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51204
Source: unknown	Network traffic detected: HTTP traffic on port 50781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51202
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51218
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51219
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51216
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51217
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 50685 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 51172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51210
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51211
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51214
Source: unknown	Network traffic detected: HTTP traffic on port 50897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51212
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51213
Source: unknown	Network traffic detected: HTTP traffic on port 50923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50776
Source: unknown	Network traffic detected: HTTP traffic on port 50768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50779
Source: unknown	Network traffic detected: HTTP traffic on port 50911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50778
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50772
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50774
Source: unknown	Network traffic detected: HTTP traffic on port 50863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50787
Source: unknown	Network traffic detected: HTTP traffic on port 51057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50789
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50780
Source: unknown	Network traffic detected: HTTP traffic on port 50702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50782
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50784
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50783
Source: unknown	Network traffic detected: HTTP traffic on port 51174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50786
Source: unknown	Network traffic detected: HTTP traffic on port 50895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50785
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50799
Source: unknown	Network traffic detected: HTTP traffic on port 50791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50798
Source: unknown	Network traffic detected: HTTP traffic on port 51117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50791
Source: unknown	Network traffic detected: HTTP traffic on port 50724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50792
Source: unknown	Network traffic detected: HTTP traffic on port 51245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50796
Source: unknown	Network traffic detected: HTTP traffic on port 51069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51145
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51143
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51148
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51149
Source: unknown	Network traffic detected: HTTP traffic on port 50858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51147
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51151
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51152
Source: unknown	Network traffic detected: HTTP traffic on port 51210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51150
Source: unknown	Network traffic detected: HTTP traffic on port 51038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50687 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51155
Source: unknown	Network traffic detected: HTTP traffic on port 51026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51156
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51153
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51154

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:50874 version: TLS 1.2

System Summary

Classification label

Source: classification engine

Classification label: clean2.win@29/368@68/225

Creates files inside the user directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Spawns processes

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 --field-trial-handle=1972,i,14920356984352795963,7039875678977620760,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mandrillapp.com/track/click/30581239/open.substack.com?p=eyJzIjoiYldtdEhLRG9Mc3lrLXptaTNjV3ZrcWJrMDU0IiwidiI6MSwicCI6IntcInVcIjozMDU4MTIzOSxcInZcIjoxLFwidXJsXCI6XCJodHRwczpcXFwvXFxcL29wZW4uc3Vic3RhY2suY29tXFxcL3B1YlxcXC9nYnJheVxcXC9wXFxcL2RpZC1tdXNsaW1zLWF0dGFjay11cy1vbi05MTE_cj0xZDZxeWEmdXRtX2NhbXBhaWduPXBvc3QmdXRtX21lZGl1bT13ZWJcIixcImlkXCI6XCJjN2E1NWExZjNiM2Q0MmNjOGY0MTVmOTFkN2QzZjFhNFwiLFwidXJsX2lkc1wiOltcIjEyMjQ3Y2JiNTdiOWViNWM1ZDEwYTUwZDhlMWRmNmYwN2VhYzEzYmVcIl19In0"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 --field-trial-handle=1972,i,14920356984352795963,7039875678977620760,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5680 --field-trial-handle=1972,i,14920356984352795963,7039875678977620760,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4180 --field-trial-handle=1972,i,14920356984352795963,7039875678977620760,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5680 --field-trial-handle=1972,i,14920356984352795963,7039875678977620760,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4180 --field-trial-handle=1972,i,14920356984352795963,7039875678977620760,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Found graphical window changes (likely an installer)

Source: Window Recorder

Window detected: More than 3 window changes detected

Boot Survival

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk