Windows Analysis Report
https://bathingdelicatedemise.com/pixel/puclc?tmpl=70&bv=24.8.8162&plk=d577c65e4106d4ebdd0575cf904e1955

Overview

General Information

Sample URL:	https://bathingdelicatedemise.com/pixel/puclc?tmpl=70&bv=24.8.8162&plk=d577c65e4106d4ebdd0575cf904e1955
Analysis ID:	1527393

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	60%

Signatures

Stores files to the Windows start menu directory

Classification

Signatures

Source: https://www.google.com/	HTTP Parser: No favicon
Source: https://www.google.com/	HTTP Parser: No favicon
Source: https://www.google.com/search?q=pezoomsekre&oq=pezoomsekre&gs_lcrp=EgZjaHJvbWUyBggAEEUYOdIBCDM3NjRqMGo0qAIAsAIA&sourceid=chrome&ie=UTF-8	HTTP Parser: No favicon
Source: https://www.google.com/search?q=pezoomsekre.com&sca_esv=fe4d00f75289ff4c&ei=U_MCZ6-kCsSki-gP2JiO0AY&ved=0ahUKEwjvmd-qzPqIAxVE0gIHHViMA2oQ4dUDCA8&uact=5&oq=pezoomsekre.com&gs_lp=Egxnd3Mtd2l6LXNlcnAiD3Blem9vbXNla3JlLmNvbUjaDlDfClicDXACeACQAQCYAd8BoAGwA6oBAzItMrgBA8gBAPgBAZgCAKACAJgDAIgGAZIHAKAHWg&sclient=gws-wiz-serp	HTTP Parser: No favicon
Source: https://www.google.com/search?q=pezoomsekre.com&sca_esv=fe4d00f75289ff4c&ei=U_MCZ6-kCsSki-gP2JiO0AY&ved=0ahUKEwjvmd-qzPqIAxVE0gIHHViMA2oQ4dUDCA8&uact=5&oq=pezoomsekre.com&gs_lp=Egxnd3Mtd2l6LXNlcnAiD3Blem9vbXNla3JlLmNvbUjaDlDfClicDXACeACQAQCYAd8BoAGwA6oBAzItMrgBA8gBAPgBAZgCAKACAJgDAIgGAZIHAKAHWg&sclient=gws-wiz-serp	HTTP Parser: No favicon
Source: https://www.google.com/search?q=pezoomsekre.com&sca_esv=fe4d00f75289ff4c&ei=U_MCZ6-kCsSki-gP2JiO0AY&ved=0ahUKEwjvmd-qzPqIAxVE0gIHHViMA2oQ4dUDCA8&uact=5&oq=pezoomsekre.com&gs_lp=Egxnd3Mtd2l6LXNlcnAiD3Blem9vbXNla3JlLmNvbUjaDlDfClicDXACeACQAQCYAd8BoAGwA6oBAzItMrgBA8gBAPgBAZgCAKACAJgDAIgGAZIHAKAHWg&sclient=gws-wiz-serp	HTTP Parser: No favicon
Source: http://pezoomsekre.com/	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49822 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: pezoomsekre.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: pezoomsekre.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://pezoomsekre.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: bathingdelicatedemise.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: ogs.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: id.google.com
Source: global traffic	DNS traffic detected: DNS query: dns-tunnel-check.googlezip.net
Source: global traffic	DNS traffic detected: DNS query: tunnel.googlezip.net
Source: global traffic	DNS traffic detected: DNS query: pezoomsekre.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49822 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@27/65@31/194

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1972,i,15320547904695206709,1647926389395203680,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://bathingdelicatedemise.com/pixel/puclc?tmpl=70&bv=24.8.8162&plk=d577c65e4106d4ebdd0575cf904e1955"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1972,i,15320547904695206709,1647926389395203680,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Source: Window Recorder

Window detected: More than 3 window changes detected

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Screenshots

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.99	unknown	United States	15169	GOOGLEUS	false
142.250.186.46	unknown	United States	15169	GOOGLEUS	false
172.217.18.14	unknown	United States	15169	GOOGLEUS	false
216.58.206.78	google.com	United States	15169	GOOGLEUS	false
142.250.185.227	unknown	United States	15169	GOOGLEUS	false
216.58.206.35	id.google.com	United States	15169	GOOGLEUS	false
64.233.166.84	unknown	United States	15169	GOOGLEUS	false
172.217.23.110	plus.l.google.com	United States	15169	GOOGLEUS	false
142.250.186.131	unknown	United States	15169	GOOGLEUS	false
142.250.186.110	unknown	United States	15169	GOOGLEUS	false
192.243.59.20	bathingdelicatedemise.com	Dominica	39572	ADVANCEDHOSTERS-ASNL	false
142.250.186.138	unknown	United States	15169	GOOGLEUS	false
142.250.184.195	unknown	United States	15169	GOOGLEUS	false
142.250.184.196	unknown	United States	15169	GOOGLEUS	false
1.1.1.1	unknown	Australia	13335	CLOUDFLARENETUS	false
172.217.18.4	www.google.com	United States	15169	GOOGLEUS	false
172.217.18.3	unknown	United States	15169	GOOGLEUS	false
139.45.197.242	pezoomsekre.com	Netherlands	9002	RETN-ASEU	false
142.250.185.238	www3.l.google.com	United States	15169	GOOGLEUS	false
216.58.206.46	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.217.16.194	unknown	United States	15169	GOOGLEUS	false
142.250.185.74	unknown	United States	15169	GOOGLEUS	false
216.239.34.157	tunnel.googlezip.net	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.16
192.168.2.15
192.168.2.14

Contacted Domains

Name	IP	Active
google.com	216.58.206.78	true
www3.l.google.com	142.250.185.238	true
plus.l.google.com	172.217.23.110	true
play.google.com	216.58.206.78	true
pezoomsekre.com	139.45.197.242	true
dns-tunnel-check.googlezip.net	216.239.34.159	true
tunnel.googlezip.net	216.239.34.157	true
id.google.com	216.58.206.35	true
www.google.com	172.217.18.4	true
bathingdelicatedemise.com	192.243.59.20	true
ogs.google.com	unknown	unknown
apis.google.com	unknown	unknown

Contacted URLs

Name	Malicious	Reputation
http://pezoomsekre.com/	false	unknown
https://www.google.com/search?q=pezoomsekre.com&sca_esv=fe4d00f75289ff4c&ei=U_MCZ6-kCsSki-gP2JiO0AY&ved=0ahUKEwjvmd-qzPqIAxVE0gIHHViMA2oQ4dUDCA8&uact=5&oq=pezoomsekre.com&gs_lp=Egxnd3Mtd2l6LXNlcnAiD3Blem9vbXNla3JlLmNvbUjaDlDfClicDXACeACQAQCYAd8BoAGwA6oBAzItMrgBA8gBAPgBAZgCAKACAJgDAIgGAZIHAKAHWg&sclient=gws-wiz-serp	false	unknown
http://pezoomsekre.com/favicon.ico	false	unknown
https://bathingdelicatedemise.com/pixel/puclc?tmpl=70&bv=24.8.8162&plk=d577c65e4106d4ebdd0575cf904e1955	false	unknown
https://www.google.com/	false	unknown
https://www.google.com/search?q=pezoomsekre&oq=pezoomsekre&gs_lcrp=EgZjaHJvbWUyBggAEEUYOdIBCDM3NjRqMGo0qAIAsAIA&sourceid=chrome&ie=UTF-8	false	unknown

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 6 19:28:58 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	C91FEF3885E853F1E4232159755961C4	08A674011AD305ECB5D094A56E7A5E9651C765EE	CDE9CDBD3E99FE8CDEE9ED99E6162D14CE8F059B2C1E3F12506BB60E6EFDE29A
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	466B890A4A119223CD9D7E5EF2C3A647	59C83274151C3FBE0C0945B1C212E15C84BBDF86	727A8996E189EF6057B5A78881887F16E01555CAB4D71D4B21204F05110F6A8C
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 6 19:28:58 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	3820DEDF1F7455C9E8661575F825AF77	F8999684A9E015EE0C1BF9C59E10B6600E8A9A63	5C9E911A4A19FCF1303D3D5CF6DCC985572791234B442A59088457A827B4B633
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 6 19:28:58 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	95A53517BC6102BD9D6CD791B9F3BCB2	507F9ECB619190BBBFFEA81D28FC38F2692EC8D9	1D3F6076988D85B36AA27F962D826632C16A23A2200B40203B12E6CEC29F3691
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 6 19:28:57 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	F84E9F72EB5981E50D26C5BD1D66B5CB	E15928CDFD3602D326618433C44F6595C79CADD3	C9F903F6568C3BA1DA57AB926948BBBF4BACB53BBB8D663F293D92C11D6EEFBC
Chrome Cache Entry: 113	gzip compressed data, original size modulo 2^32 12213	CF3BA37C0E866D57A22990FA6E0BC3F0	84F52A3C2C6BAD4239A1AF1F945EF386F83F8C2C	447FC61E4C118EA140C50147B1097C153F8F9AE10D894F87F7B638461D98A145
Chrome Cache Entry: 114	PGP Secret Sub-key -	28C8D69A075E866B48F14F17C32DEB13	44BEB0C0D287C008BAF4D05DE9B7C4C6F2F39FB4	922D238BB0540D61022633B763E445564CBE15BF80B1607A1E0168E8B2DD9DB7
Chrome Cache Entry: 115	data	71017734C6E73EF0BBF80AEE0E5C7BFB	8466F12C31FF5E2E99936B91D103BFA3CC519328	EB8EDF260E7B70260CD4DCBEC9FA89F66FF3ABB03C441E236A956F29E24ED725
Chrome Cache Entry: 117	ASCII text, with very long lines (3532)	D4635169256C0CDBE109B80CE4F4C153	C76F2D2696B5A59DF365BED5DE25F994D76547FE	0C189835C0348F06F9315FC7A47021E13FB8B8AFE2BDB2A6922E5DDB961C3074
Chrome Cache Entry: 119	data	FA29372B0E5F0FDD940D591EA5CCF335	8641A6F17E07882D8FEDAFE8DB2F4FA15E762B2C	BB654C7B848A2AEFE90C235B5C1308ECDF7E7EC8B58CA7A0CCF5DF957214BDC7
Chrome Cache Entry: 120	data	71012B329D17B296979C4B133137863A	C794629CFD211916D76F2B4F47DC13AA655CE44A	2790BEAC3E35F0A5F037470B2822B0CC825947085109B9AA6EB34431E4E368FD
Chrome Cache Entry: 122	PGP Secret Sub-key -	83C3C30E716E2CC0C3201C41C8935504	2157BF7FD23AC8AC81338E5AD9177C88AED99291	68500D4FF8BD0E06262DCC33D0E57A7775EC8DB655BDF0E80260FA24502411D3
Chrome Cache Entry: 123	data	E4625827CDAFE233FC1A5FF6AB9AB703	01ABD9811FB2094F2BA5A543FB52FFCE09DD5FE7	8B024B0F08CBA2CA4B86FD8728A549454B215E6DDF64C46F4F654320CADAF533
Chrome Cache Entry: 124	data	6BFD74B7485569FA49CDFD4D9C0451E8	FA00308DB310EE6D7E4A24F9CBF4780BC9A53E30	298E356A493AA7A5968CCAEAD18995510201DCE0F38ADFBB132B561A3CA6A87D
Chrome Cache Entry: 130	data	0D075343FC3F359A435608E5B2571D35	63407D619A7638F7DBC84FA841A542C54851C57E	CCE63DA9196FC9EEC9671DDD5CFC2F9989F62615EE08D1520D9F609CCF650F5F
Chrome Cache Entry: 131	PNG image data, 272 x 92, 8-bit/color RGBA, non-interlaced	8F9327DB2597FA57D2F42B4A6C5A9855	1737D3DFB411C07B86ED8BD30F5987A4DC397CC1	5776CD87617EACEC3BC00EBCF530D1924026033EDA852F706C1A675A98915826
Chrome Cache Entry: 134	PNG image data, 64 x 64, 8-bit colormap, non-interlaced	6197225BB330BBCB1713F4DA68EA4722	70802450DB9DAFCE33FA239E11D4B23FEF0DA470	B0D05EA4BA29FA175D0916EA1F3D82EB48764F60B3869E5FEF7899B982320755
Chrome Cache Entry: 135	PNG image data, 64 x 20, 8-bit colormap, non-interlaced	DBB90B9229148B7181BC7C5024DC4057	99D9A25325DC9736C80D483C0F735F462429D54F	6FFDE72A85C780EF15B63BACA8FF6CC9937B4B87B931F9BFDEAC5C9263A1EA65
Chrome Cache Entry: 137	PNG image data, 64 x 44, 8-bit colormap, non-interlaced	43743253BEE64CB3997688E83672AFDF	C0AF039FF8A55491381D71B0EA510407CA4F09D7	6BB292A4930348A9E691E52A464265D9784270A492CBA2232DCCF60D4E53EB98
Chrome Cache Entry: 139	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 64x31, components 3	89F104F17B473617C96B6A255CD803D0	FB6BCF6AD7A50DCCD074A52FCA6851FC506C14E1	A5D457901518C4758075266D9746A0A72DE64093B781F685436C083B41132583
Chrome Cache Entry: 140	data	C569E65A687831C5942C388C31E3D1FD	9A516C894987A18E05471B4ACFC2B22D75382B5C	ADCC051E33E31164FAE61E35B0F9A61AAD844B3A1834AAF1F80B8F223A81E77E
Chrome Cache Entry: 141	data	990B2D8D46CEC4EF5717816BFABD1A53	43B51640FF7BAE957ED1972137125D8D28385D98	CD5D218FFB7EE50CBE6EDEC380FEAC5F4126BB535A5601A80E5DB0B53B494055
Chrome Cache Entry: 144	data	EF1B06DCF05AF22EBACE0690BE1B6AD9	778C0AD3C8127C85D62E5D22E7E15C4CAD04D56E	3399F0A653B473FBDA2A1607C9B7B0B2518A1320F2C85A9E9B0F151A02C71FFB
Chrome Cache Entry: 145	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced	6282A05D151E7D0446C655D1892475E2	B2B05F319DA0E73250200AE9BB518A318D6B4C5D	4CAB9CF78FD7C85AE2236CDD47B905FA4173F664946DFAB008591B3CFE4280B7
Chrome Cache Entry: 147	data	B11580FE4E541E1584C0779EEB127694	EF929DA03CD616C0D54EC159A8DABD09878DAC4E	797ED2F2C582E737A1594806E1D0D80B6E82411E3E56C2DD881DECF0A5D4A570
Chrome Cache Entry: 148	ASCII text, with no line terminators	3BBBAC058FC4ED9E8078F0318D31D9FA	FB3F78865EAC1BDD3406F00B9CAE5C6CDF6211B8	3938C63E8B782001C4B451B439634C1380B1E262D919E11BA7374862835D83E4
Chrome Cache Entry: 149	gzip compressed data, max compression, original size modulo 2^32 5430	3C7DCF00B5DDECE397782818B2CF9D74	FBF7D59857A3CA4D6C94F0819B58A191D76E7DB2	08D60D0844BC4457BC7BADB32545AD3A3D037D941C8D5F7D0DE6AAD1517B15A5
Chrome Cache Entry: 150	data	762318DF031EAFAC5E2F3454B5EA2AD4	F363C1804E17DA8252BC80FBDE4FCFC976898F38	3AD8BE192AB11F599E56A2F8688961D326EE64BFB0A5D20D171878532925D794
Chrome Cache Entry: 151	data	63374B413CC4A3029E9F2B07E04C233E	F77D6738E0612EB1680F6ACDA6360800050DC89F	CE8FC192A4097ED755F23F6B0E606B37251C25F77B9543DD78A22237AB9E2B0D
Chrome Cache Entry: 153	data	0A6B171C59A98B51371D50E6DB7199D2	3DBACFAAFF815F6B746E226C66BE0A690EA4ED83	1834D52F321F6689FF3AD05B63571100AC6020F3F916F5606A774B5D55ED9DA3
Chrome Cache Entry: 155	data	E3B5E5E21E36C705E1E7511622CE0313	4EEDC413B79CDEE9CF46C5A68B934FAD19533916	EE4727DAF44F7C217FD068EEEA779ED20340AB56A61F7A1BE33FDCA453C44127
Chrome Cache Entry: 157	data	DB483FA3E38211007FD5C34A78BA0435	1FE4ED2AB21BE7D2DFA42E324CC62D9145DF931C	A734010C5AC71EB7DF43D3E35BBAED7F63840E3A272862ECC0C58B6DCE8B37A5
Chrome Cache Entry: 159	data	E06C5100ABB814C43DD065009180DF26	B72C4D95D2F4A1DDEBC96EB2AEE5FC5001BA39D4	465245C4098176D9CD0BE4594741FC84C71D604C0BF8853648F2BE2A56998008
Chrome Cache Entry: 160	ASCII text, with very long lines (2693)	08C8037875AFFFB594A3558958F31941	9A71DE04447772947AAD65C0E40AA01BAF112A92	2BA0AC245EC7F0D4889CBB4E3CC9A6B8E873E8FF878FEF7DFA8527928A6A36D6
Chrome Cache Entry: 161	data	AD196D9ED4DBCA1F16C1619C9EB87D01	76D81D63AAB87207DF02CEB706B571C1EB8048F8	CA99F7071F80D060599C0B2712C46CFE26EB1961F4E07D5C245EC2578949143B
Chrome Cache Entry: 163	data	B0E00E1529CE389AEE685F38942D6F8B	0E83379A63E27F55682DFA048DE81669515016C4	44FA89542E5E96F19C082E8F178ABF803284E84F1E6A1E937DE6085EF4371AF4
Chrome Cache Entry: 165	data	ED4796BB23B9831611525D01D155535A	D920D2C8CB2C9BEBD29D6B44B2DCF084392944AC	ADBECE186CEB934ED128CD00B6844E5927A2BFA0B873D68ECB9ECE91C846DCAA
Chrome Cache Entry: 166	ASCII text, with very long lines (2287)	CA99755538A8D8B1866C97729137BFEE	0949EAA1931E46A95BF1B0674F43D92885B3BEC7	088314A76E272A02EA40D754DDBA1E839D2C2817C5385CE332A03664C0B45B36
Chrome Cache Entry: 167	data	38D6AB73126227AF154C83365CF0B7C1	67A9DC378A1A66A518587F1AF8DD36E95C2C00E9	86E3CE6D4F3A39CF93DDE14FCEE1E93DD3A2A5613B2360CD4D7997DD40BB92CC
Chrome Cache Entry: 168	data	A5191CC80AA6335A4BCC229ACC2704E6	BED8329E76C615E75133C26BABA69082B1CFF643	C6C2E120F938A1A1F93E5534CCC09EDE73D2009690863EB49A30A6D13EBC7186
Chrome Cache Entry: 170	data	7D54E4C6CB5C25E819F9DD99A1FFF7CA	AA04C7D42B3214A9632D3B7B498F61EFD19E1FC6	421182DE989D9FF8CE92D22952CEF6A281238714A0A6C92AC29BA6A5CC1C55EC
Chrome Cache Entry: 174	data	0F234BB2F37FE1332B4F35290EFB1B04	C508F291783975E93C95BE37F4409C101B277704	62AABFD223AB541A3359BA89579935A699DBC251BDE8A3C356802C0351DEADB5
Chrome Cache Entry: 175	data	25A1340DC22D7807F6D20C1439A3A587	7D8DB4F3256FCAA3A01910D0D77C0D47FB14B347	DDC4217CB87BA40283A0126D6067477E27C556A6DD9A7AB981FECC58B0796772
Chrome Cache Entry: 176	gzip compressed data, original size modulo 2^32 17845	42CD37B9BCBDEF1C85A8AD9CFFCD6AF6	A64C67D16947580DCA4C39EAF0E113834B0FAD82	14C9D8DFECF6749215C7203B32EC5A75443EBF1941E2C2B0E62A5608015517AC
Chrome Cache Entry: 177	gzip compressed data, max compression, truncated	D2DD33633120B0066476C1EA9B8C386A	1545923588BC21FFDCBC0C59C7092535A6EDBEDF	F99D692902144DB09B19E325A9BF578020CABFC5A65243C524D39088756BBA40
Chrome Cache Entry: 178	PNG image data, 64 x 16, 8-bit colormap, non-interlaced	A75233D3C1A27A9FE8AFC925AEEC5C3B	E2CDB2047110DFBB434EB2644F694E25F0AD57F3	7F205FE64D61B2AFBA21D72206C3FE3A483676A4DFA81C55BCCDB72F9CDD6C0E
Chrome Cache Entry: 179	data	CC0FF0E96D9E21179F2E6761D2595424	57B6242CB84CD92C15B781D7C95CBCE72E5EE216	9944E07887FC3AEF18E6642F6FBF089897A9D794748CD4B45CC3DA2C10B0E903
Chrome Cache Entry: 180	data	49251E72DAFF974547A71A531773AA09	9D002BC1BF9C57FB07E6F3CD89A4742FDD421AD7	DA8921A4546BCB6FE9A70A831802E1C5C03225DCED81EDD365FA579E6A627DA1
Chrome Cache Entry: 181	data	5098F1532B908A461D3CEA1DF73AA477	DD80532AAA712109D94E8D7DFC77F824A6EE1F3D	C5DF68E04246EC29E656A4EC2189FF5C0189431ADB81C2584B2EA085172DFF67
Chrome Cache Entry: 182	RIFF (little-endian) data, Web/P image	C3DFF0D9F30EC0BCF4DEC9524505916B	4B378403ACBEBC3747E08C69B5FD7770A850C9EB	73D788F86BE22112BB53762545989C0F1BBDB7343161130952C9BA3834FF81E3
Chrome Cache Entry: 183	gzip compressed data, original size modulo 2^32 126135	ABDA4D3A17526328B95AAD4CFBF82980	F0E1D7C57C6504D2712CEC813BC6FD92446EC9E8	EE22A58FA0825364628A7618894BCACB1DF5A6A775CAFCFB6DEA146E56A7A476
Chrome Cache Entry: 184	HTML document, Unicode text, UTF-8 text, with very long lines (1136)	FBE36EB2EECF1B90451A3A72701E49D2	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
Chrome Cache Entry: 185	data	2C861C2E5FCE7AB3F6BD496E0C33228B	02F6009764B1C0ECC0C96E64DFFF8614D90C7CB1	7529E638C73CFE840A12608A71878D56659F2A0DC75D1678D2D324BFF94F9856
Chrome Cache Entry: 186	data	A47F3B47AE7E387C3CA5C0215AAE7FF7	4F21D13A7D7B68BA4C821A6169A2FEA547E7F74B	CCB346A2B3C939CBDFB0A3402FCD4174DA87D380E363C06619B6EA5959325639
Chrome Cache Entry: 190	data	2DD3B0344EF5BEF20BB9CE6C9A9AABC7	CC24ECE2A8BBDB90A0A0EE1656ECEA04F14D9511	E530AF4FA10C869C516C149825C40EDAEC28DA5016053B83413693241C4B61D7
Chrome Cache Entry: 197	data	C6AEE152A3D14A0B5728EFE297C67B92	CE71AE030251F37D82FC3A315E6E4237773B334A	D843EF7E56C8502F8732C0E9EB2E5616CC512AA3E24296F68015F720F84925CF
Chrome Cache Entry: 199	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0	285467176F7FE6BB6A9C6873B3DAD2CC	EA04E4FF5142DDD69307C183DEF721A160E0A64E	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
Chrome Cache Entry: 200	gzip compressed data, max compression, original size modulo 2^32 48893	A9E64B2EAA41B9214B2C105EB8979846	D23469B4D17C6A84A31A168E7BF99010C357B582	5BE9B4DB35A83A9871BBF13EC34C21F660A94D7BA5B9C0216D9319C4757CB367
Chrome Cache Entry: 204	data	697E0686071285B6C392DA1F330D42B0	936C9AC183EF15EAF3D8FA4209E324A31B50F83F	E0CBB044A15C03B3205289CB1FF46FEAC8C2F7A47C4EBF4B211F5E8819D36639
Chrome Cache Entry: 207	data	D22B2DD5BFD0754000EF81F77932838F	04670D3C83577F70AADA3F6DC4FE03C349FAA0C2	C47DD82AFCF5B2C9B7982EAFA62207E334194330D4360F748E80A9ACC6825655
Chrome Cache Entry: 208	data	00955038D8E9AC1627866470C5DD85EF	736EA6EEFBB01272B4385AC14E80D5B801A638F2	C39587DA0005F165BB9949956E4B8C74FF72AA54466D6E1BE52CB93963EE6B6F
Chrome Cache Entry: 209	data	59AC95A37D27E5931EDBA241252E0F68	CE5EC77616D17BB23D4DCF57275DD2CE7B83747B	58C085AA0432841CA78BE6975CCCEDB668D2C0D6BF993966F5D6566ECBEDF96A
Chrome Cache Entry: 211	data	9C7D9109E6B853CC50C62D4EAB4F64C2	C7647C90A369F0FE3FBB1A95CA36F4578DDD6519	3765C07A263BF3A175F18D2BA20CB45A03B5AB7EF5319074C4154B30EEFBB2FA
Chrome Cache Entry: 212	RIFF (little-endian) data, Web/P image	1E4ADFCE09B0D0C2E9DB0D9144ABAFE9	2058B270F22F40FB4B1EFD90CBF84BCF156564A4	460997174B5C47F2245ACB674BD5B1D0092272C4698AE83E504FC8CF06E1260B
Chrome Cache Entry: 214	data	706B630AD5EF453F42CB56E6F6EC8992	A491F18B15BF94464F4FDB0BC8C8805F1B5B1247	E7E0C045BCD3CD976E9E6207C9E5A4EB3B888598EE791A9E23E8D4E34208EDFD

Source: https://www.google.com/	HTTP Parser: No favicon
Source: https://www.google.com/	HTTP Parser: No favicon
Source: https://www.google.com/search?q=pezoomsekre&oq=pezoomsekre&gs_lcrp=EgZjaHJvbWUyBggAEEUYOdIBCDM3NjRqMGo0qAIAsAIA&sourceid=chrome&ie=UTF-8	HTTP Parser: No favicon
Source: https://www.google.com/search?q=pezoomsekre.com&sca_esv=fe4d00f75289ff4c&ei=U_MCZ6-kCsSki-gP2JiO0AY&ved=0ahUKEwjvmd-qzPqIAxVE0gIHHViMA2oQ4dUDCA8&uact=5&oq=pezoomsekre.com&gs_lp=Egxnd3Mtd2l6LXNlcnAiD3Blem9vbXNla3JlLmNvbUjaDlDfClicDXACeACQAQCYAd8BoAGwA6oBAzItMrgBA8gBAPgBAZgCAKACAJgDAIgGAZIHAKAHWg&sclient=gws-wiz-serp	HTTP Parser: No favicon
Source: https://www.google.com/search?q=pezoomsekre.com&sca_esv=fe4d00f75289ff4c&ei=U_MCZ6-kCsSki-gP2JiO0AY&ved=0ahUKEwjvmd-qzPqIAxVE0gIHHViMA2oQ4dUDCA8&uact=5&oq=pezoomsekre.com&gs_lp=Egxnd3Mtd2l6LXNlcnAiD3Blem9vbXNla3JlLmNvbUjaDlDfClicDXACeACQAQCYAd8BoAGwA6oBAzItMrgBA8gBAPgBAZgCAKACAJgDAIgGAZIHAKAHWg&sclient=gws-wiz-serp	HTTP Parser: No favicon
Source: https://www.google.com/search?q=pezoomsekre.com&sca_esv=fe4d00f75289ff4c&ei=U_MCZ6-kCsSki-gP2JiO0AY&ved=0ahUKEwjvmd-qzPqIAxVE0gIHHViMA2oQ4dUDCA8&uact=5&oq=pezoomsekre.com&gs_lp=Egxnd3Mtd2l6LXNlcnAiD3Blem9vbXNla3JlLmNvbUjaDlDfClicDXACeACQAQCYAd8BoAGwA6oBAzItMrgBA8gBAPgBAZgCAKACAJgDAIgGAZIHAKAHWg&sclient=gws-wiz-serp	HTTP Parser: No favicon
Source: http://pezoomsekre.com/	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49822 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: pezoomsekre.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: pezoomsekre.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://pezoomsekre.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: bathingdelicatedemise.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: ogs.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: id.google.com
Source: global traffic	DNS traffic detected: DNS query: dns-tunnel-check.googlezip.net
Source: global traffic	DNS traffic detected: DNS query: tunnel.googlezip.net
Source: global traffic	DNS traffic detected: DNS query: pezoomsekre.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49822 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@27/65@31/194

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1972,i,15320547904695206709,1647926389395203680,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://bathingdelicatedemise.com/pixel/puclc?tmpl=70&bv=24.8.8162&plk=d577c65e4106d4ebdd0575cf904e1955"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1972,i,15320547904695206709,1647926389395203680,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Source: Window Recorder

Window detected: More than 3 window changes detected

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

ID:	1527393
Product:	CloudBasic
Start time:	22:28:23
Start date:	06.10.2024
Cookbook:	defaultwindowsinteractivecookbook.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Windows Analysis Report
https://bathingdelicatedemise.com/pixel/puclc?tmpl=70&bv=24.8.8162&plk=d577c65e4106d4ebdd0575cf904e1955

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://bathingdelicatedemise.com/pixel/puclc?tmpl=70&bv=24.8.8162&plk=d577c65e4106d4ebdd0575cf904e1955

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://bathingdelicatedemise.com/pixel/puclc?tmpl=70&bv=24.8.8162&plk=d577c65e4106d4ebdd0575cf904e1955