Linux Analysis Report
https://generali.werbeartikel-online-shop.com

Overview

General Information

Sample URL: https://generali.werbeartikel-online-shop.com
Analysis ID: 1528210
Infos:

Detection

Score: 2
Range: 0 - 100
Whitelisted: false

Signatures

Creates hidden files and/or directories
Creates hidden files without content (potentially used as a mutex)
Queries the installed Ubuntu/CentOS release
Reads the 'hosts' file potentially containing internal network hosts
Uses the "uname" system call to query kernel version information (possible evasion)

Classification

Source: unknown HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.20:58630 version: TLS 1.2
Reads the 'hosts' file potentially containing internal network hosts
Source: /usr/lib/firefox/firefox (PID: 4797) Reads hosts file: /etc/hosts Jump to behavior
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brConnection: keep-aliveUpgrade-Insecure-Requests: 1
Source: global traffic HTTP traffic detected: GET /cosmoshop/shared/libs/NormalizeCss/normalize.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,*/*;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic HTTP traffic detected: GET /6/Firefox/66.0.3/20190410113011/Linux_x86_64-gcc3/en-US/release-cck-ubuntu/Linux%204.4.0-116-generic%20(GTK%203.18.9%2Clibpulse%208.0.0)/canonical/1.0/ HTTP/1.1Host: snippets.cdn.mozilla.netUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: */*Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brConnection: keep-alive
Source: global traffic HTTP traffic detected: GET /cosmoshop/shared/css/shop/frame/style/de/bramble.min.2.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,*/*;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic HTTP traffic detected: GET /cosmoshop/default/css/shop/content/layout/bramble.min.2.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,*/*;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic HTTP traffic detected: GET /cosmoshop/shared/template/css/bramble_rootStyles.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,*/*;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic HTTP traffic detected: GET /cosmoshop/shared/css/shop/content/style/de/bramble.min.2.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,*/*;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic HTTP traffic detected: GET /cosmoshop/default/css/shop/frame/layout/bramble.min.2.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,*/*;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic HTTP traffic detected: GET /us-west/bundles-pregen/Firefox/en-us/default.json HTTP/1.1Host: snippets.cdn.mozilla.netUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: */*Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brConnection: keep-alive
Source: global traffic HTTP traffic detected: GET /cosmoshop/default/template/css/bramble_customDesign.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,*/*;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic HTTP traffic detected: GET /cosmoshop/shared/libs/Fontello/fontello.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,*/*;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic HTTP traffic detected: GET /cosmoshop/shared/template/css/bramble_responsive.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,*/*;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic HTTP traffic detected: GET /cosmoshop/default/template/css/bramble_customResponsive.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,*/*;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic HTTP traffic detected: GET /cosmoshop/shared/libs/jQuery/jquery.min.js HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: */*Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic HTTP traffic detected: GET /cosmoshop/shared/libs/jQuery/jquery-migrate.min.js HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: */*Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic HTTP traffic detected: GET /cosmoshop/shared/libs/Fontello/fontello-animation.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,*/*;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic HTTP traffic detected: GET /cosmoshop/shared/libs/jQueryUI/jquery-ui.min.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,*/*;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic HTTP traffic detected: GET /cosmoshop/shared/libs/jQueryUI/jquery-ui.theme.min.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,*/*;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic HTTP traffic detected: GET /cosmoshop/shared/libs/jQueryUI/jquery-ui.min.js HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: */*Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic HTTP traffic detected: GET /cosmoshop/shared/libs/jQueryUI/jquery-ui.structure.min.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,*/*;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic HTTP traffic detected: GET /cosmoshop/shared/libs/Cosmoshop/Cosmoshop.js HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: */*Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic HTTP traffic detected: GET /cosmoshop/shared/libs/jQuerySlickCarousel/css/slick.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,*/*;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic HTTP traffic detected: GET /cosmoshop/shared/libs/jQuerySlickCarousel/css/slick-theme.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,*/*;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic HTTP traffic detected: GET /cosmoshop/shared/libs/FormLib/shop_formlib.js HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: */*Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic HTTP traffic detected: GET /cosmoshop/shared/libs/modernizr/modernizr.js HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: */*Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic HTTP traffic detected: GET /cosmoshop/shared/libs/jQueryCookie/jquery.cookie.js HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: */*Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic HTTP traffic detected: GET /cosmoshop/shared/libs/jQuerySlickCarousel/js/slick.js HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: */*Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic HTTP traffic detected: GET /cosmoshop/shared/libs/LiveSearch/jQueryLiveSearch.js HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: */*Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic HTTP traffic detected: GET /cosmoshop/shared/template/js/bramble_shopFunctions.js HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: */*Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic HTTP traffic detected: GET /cosmoshop/default/lib/de_categories_61fc104855eb3a96fccf5f576c8595fd.js HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: */*Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic HTTP traffic detected: GET /cosmoshop/shared/libs/Cosmoshop/style.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,*/*;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic HTTP traffic detected: GET /cosmoshop/shared/libs/Cosmoshop/lazyClasses.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,*/*;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic HTTP traffic detected: GET /cosmoshop/shared/libs/Cosmoshop/overrides.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,*/*;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic HTTP traffic detected: GET /cosmoshop/shared/libs/Cosmoshop/Cache.js HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: */*Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic HTTP traffic detected: GET /cosmoshop/shared/libs/Cosmoshop/EventHandler.js HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: */*Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic HTTP traffic detected: GET /cosmoshop/shared/libs/Cosmoshop/Helper.js HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: */*Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic HTTP traffic detected: GET /cosmoshop/shared/libs/Cosmoshop/Validators.js HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: */*Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic HTTP traffic detected: GET /cosmoshop/shared/libs/Cosmoshop/Ajax.js HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: */*Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic HTTP traffic detected: GET /cosmoshop/shared/pix/template_vorlage/bramble/shop_header/de/Logo.png HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: image/webp,*/*Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic HTTP traffic detected: GET /cosmoshop/shared/pix/template_vorlage/bramble/shop_header/de/apple-touch-icon.png HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: image/webp,*/*Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brConnection: keep-alive
Source: global traffic HTTP traffic detected: GET /cosmoshop/default/pix/s/favicon/icon.ico HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: image/webp,*/*Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brConnection: keep-alive
Source: global traffic HTTP traffic detected: GET /cosmoshop/shared/pix/template_vorlage/bramble/suchleiste/de/logo.png HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: image/webp,*/*Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic HTTP traffic detected: GET /cosmoshop/shared/libs/Fontello/fontello.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,*/*;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-aliveRange: bytes=65155-If-Range: "14bd0-5feccdab8af05"
Source: global traffic HTTP traffic detected: GET /cosmoshop/shared/libs/Cosmoshop/shop/Core.js HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: */*Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-alive
Source: global traffic HTTP traffic detected: GET /cosmoshop/shared/libs/Cosmoshop/external/Ejs_3_1_6_min.js HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: */*Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-aliveCookie: SHOP_SESSION_generali.werbeartikel-online-shop.com=1728312512.71117.0uHYw6pSErPHx3g9qVqS8v3aVhJI3yRwSNCyGzwU
Source: global traffic HTTP traffic detected: GET /cosmoshop/shared/libs/Cosmoshop/external/jQuery/Modal.js HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: */*Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-aliveCookie: SHOP_SESSION_generali.werbeartikel-online-shop.com=1728312512.71117.0uHYw6pSErPHx3g9qVqS8v3aVhJI3yRwSNCyGzwU
Source: global traffic HTTP traffic detected: GET /cosmoshop/shared/libs/Fontello/font/cs.woff?29759507 HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8Accept-Language: en-US,en;q=0.5Accept-Encoding: identityReferer: https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/Fontello/fontello.cssConnection: keep-aliveCookie: SHOP_SESSION_generali.werbeartikel-online-shop.com=1728312512.71117.0uHYw6pSErPHx3g9qVqS8v3aVhJI3yRwSNCyGzwU
Source: global traffic HTTP traffic detected: GET /cosmoshop/shared/libs/Cosmoshop/external/jQuery/Loading.js HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: */*Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-aliveCookie: SHOP_SESSION_generali.werbeartikel-online-shop.com=1728312512.71117.0uHYw6pSErPHx3g9qVqS8v3aVhJI3yRwSNCyGzwU
Source: global traffic HTTP traffic detected: GET /cosmoshop/shared/libs/Cosmoshop/external/jQuery/loading.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,*/*;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-aliveCookie: SHOP_SESSION_generali.werbeartikel-online-shop.com=1728312512.71117.0uHYw6pSErPHx3g9qVqS8v3aVhJI3yRwSNCyGzwU
Source: global traffic HTTP traffic detected: GET /cosmoshop/shared/libs/Cosmoshop/external/jQuery/modal.css HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,*/*;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Connection: keep-aliveCookie: SHOP_SESSION_generali.werbeartikel-online-shop.com=1728312512.71117.0uHYw6pSErPHx3g9qVqS8v3aVhJI3yRwSNCyGzwU
Source: global traffic HTTP traffic detected: GET /update/3/GMP/66.0.3/20190410113011/Linux_x86_64-gcc3/null/release-cck-ubuntu/Linux%204.4.0-116-generic%20(GTK%203.18.9%2Clibpulse%208.0.0)/canonical/1.0/update.xml HTTP/1.1Host: aus5.mozilla.orgUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: */*Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: push.services.mozilla.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: */*Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brSec-WebSocket-Version: 13Origin: wss://push.services.mozilla.com/Sec-WebSocket-Protocol: push-notificationSec-WebSocket-Extensions: permessage-deflateSec-WebSocket-Key: xev8YB1whZWmp3xLeb+PtQ==Connection: keep-alive, UpgradePragma: no-cacheCache-Control: no-cacheUpgrade: websocket
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: push.services.mozilla.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: */*Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brSec-WebSocket-Version: 13Origin: wss://push.services.mozilla.com/Sec-WebSocket-Protocol: push-notificationSec-WebSocket-Extensions: permessage-deflateSec-WebSocket-Key: Giwk5E669Eu9xuCnED93cg==Connection: keep-alive, UpgradePragma: no-cacheCache-Control: no-cacheUpgrade: websocket
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: push.services.mozilla.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: */*Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brSec-WebSocket-Version: 13Origin: wss://push.services.mozilla.com/Sec-WebSocket-Protocol: push-notificationSec-WebSocket-Extensions: permessage-deflateSec-WebSocket-Key: DhrbBwdwLy0yYGCNGbsk2Q==Connection: keep-alive, UpgradePragma: no-cacheCache-Control: no-cacheUpgrade: websocket
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: push.services.mozilla.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: */*Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brSec-WebSocket-Version: 13Origin: wss://push.services.mozilla.com/Sec-WebSocket-Protocol: push-notificationSec-WebSocket-Extensions: permessage-deflateSec-WebSocket-Key: dmzcw8f+mp0a8xDMLWeZpg==Connection: keep-alive, UpgradePragma: no-cacheCache-Control: no-cacheUpgrade: websocket
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: push.services.mozilla.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: */*Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brSec-WebSocket-Version: 13Origin: wss://push.services.mozilla.com/Sec-WebSocket-Protocol: push-notificationSec-WebSocket-Extensions: permessage-deflateSec-WebSocket-Key: DZJ26dvtPenqt++cA0yyNQ==Connection: keep-alive, UpgradePragma: no-cacheCache-Control: no-cacheUpgrade: websocket
Source: global traffic DNS traffic detected: DNS query: generali.werbeartikel-online-shop.com
Source: global traffic DNS traffic detected: DNS query: push.services.mozilla.com
Source: unknown HTTP traffic detected: POST /cgi-bin/cosmoshop/lshop.cgi HTTP/1.1Host: generali.werbeartikel-online-shop.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: application/json, text/javascript, */*; q=0.01Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://generali.werbeartikel-online-shop.com/Content-Type: application/x-www-form-urlencoded; charset=UTF-8X-Requested-With: XMLHttpRequestContent-Length: 78Connection: keep-alive
Source: cert9.db-journal.34.dr, cert9.db.34.dr String found in binary or memory: http://crl.pki.goog/gsr2/gsr2.crl0?
Source: cert9.db-journal.34.dr, cert9.db.34.dr String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: cert9.db-journal.34.dr, cert9.db.34.dr String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl0=
Source: cert9.db-journal.34.dr, cert9.db.34.dr String found in binary or memory: http://ocsp.digicert.com0
Source: cert9.db-journal.34.dr, cert9.db.34.dr String found in binary or memory: http://ocsp.pki.goog/gsr202
Source: places.sqlite-wal.34.dr String found in binary or memory: http://wiki.ubuntu.com
Source: places.sqlite-wal.34.dr String found in binary or memory: http://wiki.ubuntu.com/moc.utnubu.ikiw.
Source: places.sqlite-wal.34.dr String found in binary or memory: http://www.debian.org
Source: places.sqlite-wal.34.dr String found in binary or memory: http://www.debian.org/gro.naibed.www.
Source: places.sqlite-wal.34.dr String found in binary or memory: http://www.ubuntu.com
Source: places.sqlite-wal.34.dr String found in binary or memory: http://www.ubuntu.com/moc.utnubu.www.
Source: places.sqlite-wal.34.dr String found in binary or memory: https://answers.launchpad.net
Source: places.sqlite-wal.34.dr String found in binary or memory: https://answers.launchpad.net/ubuntu/
Source: places.sqlite-wal.34.dr String found in binary or memory: https://generali.werbeartikel-online-shop.com
Source: recovery.jsonlz4.tmp.34.dr String found in binary or memory: https://generali.werbeartikel-online-shop.com/
Source: places.sqlite-wal.34.dr String found in binary or memory: https://generali.werbeartikel-online-shop.com/GENERALI
Source: AD059B96D97FE240161540F36D46C5F70734D6F2.34.dr String found in binary or memory: https://generali.werbeartikel-online-shop.com/cosmoshop/default/css/shop/content/layout/bramble.min.
Source: 255180BBFC392A33F03051F3DC10335C080DDA20.34.dr String found in binary or memory: https://generali.werbeartikel-online-shop.com/cosmoshop/default/css/shop/frame/layout/bramble.min.2.
Source: E39A30365062FED6A062C3B828869E960E9E1641.34.dr String found in binary or memory: https://generali.werbeartikel-online-shop.com/cosmoshop/default/template/css/bramble_customDesign.cs
Source: 9E876DD8AD3949F308300382320CBAFF2C684314.34.dr String found in binary or memory: https://generali.werbeartikel-online-shop.com/cosmoshop/default/template/css/bramble_customResponsiv
Source: 40ABD0A962B8FE31514026AD426D53FC2AD624FE.34.dr String found in binary or memory: https://generali.werbeartikel-online-shop.com/cosmoshop/shared/css/shop/content/style/de/bramble.min
Source: 1B22BDA5BA68A1448FCB56906398FE61B0AEE710.34.dr String found in binary or memory: https://generali.werbeartikel-online-shop.com/cosmoshop/shared/css/shop/frame/style/de/bramble.min.2
Source: 17BCC6A55E85E8F6A4C660529BB763D3464877E1.34.dr String found in binary or memory: https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/Fontello/fontello-animation.css
Source: C451CAD6E876978E63FFFC9865A83D89CFBE951D.34.dr String found in binary or memory: https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/Fontello/fontello.css
Source: E8D2EF960BE529ACF6A67B8DF1D64710B0CD15D1.34.dr String found in binary or memory: https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/NormalizeCss/normalize.css
Source: 66B7941C45385F0CD6B46B392D0BEF2CBD64288D.34.dr String found in binary or memory: https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/jQuery/jquery-migrate.min.js
Source: 1ACD9749AAE3D02FEE084B8576784A1535E5546C.34.dr String found in binary or memory: https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/jQuery/jquery.min.js
Source: C7093830EE04AD47A1F61AE4D939134F0A4244BF.34.dr String found in binary or memory: https://generali.werbeartikel-online-shop.com/cosmoshop/shared/template/css/bramble_responsive.css
Source: 919AD4B6B4DF5BEE81EE8EC9665A5FC662F12E3B.34.dr String found in binary or memory: https://generali.werbeartikel-online-shop.com/cosmoshop/shared/template/css/bramble_rootStyles.css
Source: places.sqlite-wal.34.dr String found in binary or memory: https://generali.werbeartikel-online-shop.com/moc.pohs-enilno-lekitraebrew.ilareneg.d
Source: places.sqlite-wal.34.dr String found in binary or memory: https://generali.werbeartikel-online-shop.comd
Source: cert9.db-journal.34.dr, cert9.db.34.dr String found in binary or memory: https://pki.goog/repository/0
Source: C389DE279BF5275924497D5B33D1F1900116E591.34.dr String found in binary or memory: https://snippets.cdn.mozilla.net/us-west/bundles-pregen/Firefox/en-us/default.json
Source: places.sqlite-wal.34.dr String found in binary or memory: https://support.mozilla.org
Source: places.sqlite-wal.34.dr String found in binary or memory: https://support.mozilla.org/en-US/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=fire
Source: places.sqlite-wal.34.dr String found in binary or memory: https://support.mozilla.org/en-US/products/firefoxgro.allizom.troppus.
Source: cert9.db-journal.34.dr, cert9.db.34.dr String found in binary or memory: https://www.digicert.com/CPS0
Source: places.sqlite-wal.34.dr String found in binary or memory: https://www.mozilla.org
Source: places.sqlite-wal.34.dr String found in binary or memory: https://www.mozilla.org/en-US/about/gro.allizom.www.
Source: places.sqlite-wal.34.dr String found in binary or memory: https://www.mozilla.org/en-US/contribute/gro.allizom.www.
Source: places.sqlite-wal.34.dr String found in binary or memory: https://www.mozilla.org/en-US/firefox/central/gro.allizom.www.
Source: places.sqlite-wal.34.dr String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: places.sqlite-wal.34.dr String found in binary or memory: https://www.mozilla.org/media/img/mozorg/mozilla-256.4720741d4108.jpg
Source: places.sqlite-wal.34.dr String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43760
Source: unknown Network traffic detected: HTTP traffic on port 43732 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 43790 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 43778 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43758
Source: unknown Network traffic detected: HTTP traffic on port 43726 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43754
Source: unknown Network traffic detected: HTTP traffic on port 59210 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43756
Source: unknown Network traffic detected: HTTP traffic on port 43764 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 43806 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43750
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43752
Source: unknown Network traffic detected: HTTP traffic on port 58630 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 43890 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 43752 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 43798 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 58630
Source: unknown Network traffic detected: HTTP traffic on port 43770 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 43746 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43748
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43744
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43746
Source: unknown Network traffic detected: HTTP traffic on port 43784 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43740
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43742
Source: unknown Network traffic detected: HTTP traffic on port 43782 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 43728 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 43734 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 43776 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 59208
Source: unknown Network traffic detected: HTTP traffic on port 43720 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43736
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 59210
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43738
Source: unknown Network traffic detected: HTTP traffic on port 43714 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43732
Source: unknown Network traffic detected: HTTP traffic on port 43762 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43734
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43730
Source: unknown Network traffic detected: HTTP traffic on port 43800 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 43754 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 43892 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 43712 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 43706 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 43884 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 43796 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 59194 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43726
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43728
Source: unknown Network traffic detected: HTTP traffic on port 43740 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 43748 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43720
Source: unknown Network traffic detected: HTTP traffic on port 43780 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 43736 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 43774 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43718
Source: unknown Network traffic detected: HTTP traffic on port 43768 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 43794 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43714
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43716
Source: unknown Network traffic detected: HTTP traffic on port 43716 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 59194
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43710
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43798
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43712
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43794
Source: unknown Network traffic detected: HTTP traffic on port 43802 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43796
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43790
Source: unknown Network traffic detected: HTTP traffic on port 43710 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 43756 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43792
Source: unknown Network traffic detected: HTTP traffic on port 43760 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 43704 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 59208 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 43742 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43704
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43706
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43788
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43784
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43786
Source: unknown Network traffic detected: HTTP traffic on port 43788 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43780
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43782
Source: unknown Network traffic detected: HTTP traffic on port 43730 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 43738 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 43804 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 43792 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 43718 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 43750 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43776
Source: unknown Network traffic detected: HTTP traffic on port 43894 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43778
Source: unknown Network traffic detected: HTTP traffic on port 43766 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43894
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43772
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43774
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43890
Source: unknown Network traffic detected: HTTP traffic on port 43758 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43892
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43770
Source: unknown Network traffic detected: HTTP traffic on port 43888 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 43744 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43806
Source: unknown Network traffic detected: HTTP traffic on port 43772 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43802
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43804
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43766
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43768
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43800
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43888
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43762
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43764
Source: unknown Network traffic detected: HTTP traffic on port 43786 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 43884
Source: unknown HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.20:58630 version: TLS 1.2
Source: classification engine Classification label: clean2.lin@0/74@20/0
Creates hidden files and/or directories
Source: /usr/bin/exo-open (PID: 4782) Directory: /home/james/.Xauthority Jump to behavior
Source: /usr/bin/exo-open (PID: 4782) Directory: /home/james/.cache Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/exo-1/exo-helper-1 (PID: 4790) Directory: /home/james/.Xauthority Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/exo-1/exo-helper-1 (PID: 4790) Directory: /home/james/.cache Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/exo-1/exo-helper-1 (PID: 4790) Directory: /home/james/.local Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/exo-1/exo-helper-1 (PID: 4790) Directory: /home/james/.config Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4797) Directory: /home/james/.Xauthority Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4797) File: /tmp/firefox_james/.parentlock Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4797) Directory: /home/james/.Xauthority Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4797) File: /home/james/.mozilla/firefox/5zxot757.default/.parentlock Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4797) File: /home/james/.cache/mozilla/firefox/5zxot757.default/.startup-incomplete Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4797) Directory: /home/james/.Xdefaults-ubuntu Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4797) Directory: /home/james/.mime.types Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4797) Directory: /home/james/.mozilla/firefox/5zxot757.default/storage/permanent/chrome/.metadata-v2 Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4797) Directory: /home/james/.mailcap Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4797) Directory: /home/james/.cache Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4825) Directory: /home/james/.Xauthority Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4825) Directory: /home/james/.drirc Jump to behavior
Source: /usr/bin/dbus-launch (PID: 4859) Directory: /home/james/.Xauthority Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4923) Directory: /home/james/.Xauthority Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4968) Directory: /home/james/.Xauthority Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 5009) Directory: /home/james/.Xauthority Jump to behavior
Creates hidden files without content (potentially used as a mutex)
Source: /usr/lib/firefox/firefox (PID: 4797) Empty hidden file: /tmp/firefox_james/.parentlock Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4797) Empty hidden file: /home/james/.cache/mozilla/firefox/5zxot757.default/.startup-incomplete Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4797) Empty hidden file: /home/james/.mozilla/firefox/5zxot757.default/.parentlock Jump to behavior
Uses the "uname" system call to query kernel version information (possible evasion)
Source: /usr/bin/exo-open (PID: 4782) Queries kernel information via 'uname': Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/exo-1/exo-helper-1 (PID: 4790) Queries kernel information via 'uname': Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4797) Queries kernel information via 'uname': Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4825) Queries kernel information via 'uname': Jump to behavior
Source: /usr/bin/dbus-launch (PID: 4859) Queries kernel information via 'uname': Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4923) Queries kernel information via 'uname': Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4968) Queries kernel information via 'uname': Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 5009) Queries kernel information via 'uname': Jump to behavior
Queries the installed Ubuntu/CentOS release
Source: /usr/lib/firefox/firefox (PID: 4839) Arguments: /usr/bin/lsb_release -> /usr/bin/python3 -Es /usr/bin/lsb_release -idrc Jump to behavior
windows-stand
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
13.32.121.112
 d228z91au11ukj.cloudfront.net United States
16509 AMAZON-02US false
35.244.181.201
 prod.balrog.prod.cloudops.mozgcp.net United States
15169 GOOGLEUS false
95.142.78.35
 generali.werbeartikel-online-shop.com Germany
51483 SASGCecinastr70DE false
34.107.243.93
 push.services.mozilla.com United States
15169 GOOGLEUS false

Contacted Domains

Name IP Active
prod.balrog.prod.cloudops.mozgcp.net 35.244.181.201 true
push.services.mozilla.com 34.107.243.93 true
generali.werbeartikel-online-shop.com 95.142.78.35 true
d228z91au11ukj.cloudfront.net 13.32.121.112 true

Contacted URLs

Name Malicious Antivirus Detection Reputation
https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/Cosmoshop/style.css false
    		unknown
    https://generali.werbeartikel-online-shop.com/cosmoshop/default/template/css/bramble_customDesign.css false
      		unknown
      https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/Cosmoshop/shop/Core.js false
        		unknown
        https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/Cosmoshop/lazyClasses.css false
          		unknown
          https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/NormalizeCss/normalize.css false
            		unknown
            https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/jQuerySlickCarousel/js/slick.js false
              		unknown
              https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/jQuerySlickCarousel/css/slick.css false
                		unknown
                https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/jQuerySlickCarousel/css/slick-theme.css false
                  		unknown
                  https://generali.werbeartikel-online-shop.com/cosmoshop/shared/css/shop/frame/style/de/bramble.min.2.css false
                    		unknown
                    https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/Cosmoshop/Cosmoshop.js false
                      		unknown
                      https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/Cosmoshop/external/jQuery/Loading.js false
                        		unknown
                        https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/Cosmoshop/Helper.js false
                          		unknown
                          https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/jQueryUI/jquery-ui.min.js false
                            		unknown
                            https://generali.werbeartikel-online-shop.com/cosmoshop/shared/pix/template_vorlage/bramble/shop_header/de/apple-touch-icon.png false
                              		unknown
                              https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/jQuery/jquery-migrate.min.js false
                                		unknown
                                https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/Cosmoshop/external/Ejs_3_1_6_min.js false
                                  		unknown
                                  https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/Fontello/font/cs.woff?29759507 false
                                    		unknown
                                    https://generali.werbeartikel-online-shop.com/cosmoshop/default/lib/de_categories_61fc104855eb3a96fccf5f576c8595fd.js false
                                      		unknown
                                      https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/Fontello/fontello-animation.css false
                                        		unknown
                                        https://generali.werbeartikel-online-shop.com/cosmoshop/shared/template/css/bramble_responsive.css false
                                          		unknown
                                          https://generali.werbeartikel-online-shop.com/ false
                                            		unknown
                                            https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/jQueryUI/jquery-ui.min.css false
                                              		unknown
                                              https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/jQueryUI/jquery-ui.theme.min.css false
                                                		unknown
                                                https://generali.werbeartikel-online-shop.com/cosmoshop/default/template/css/bramble_customResponsive.css false
                                                  		unknown
                                                  https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/FormLib/shop_formlib.js false
                                                    		unknown
                                                    https://generali.werbeartikel-online-shop.com/cosmoshop/shared/template/js/bramble_shopFunctions.js false
                                                      		unknown
                                                      https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/jQueryCookie/jquery.cookie.js false
                                                        		unknown
                                                        https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/jQuery/jquery.min.js false
                                                          		unknown
                                                          https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/Cosmoshop/external/jQuery/modal.css false
                                                            		unknown
                                                            https://generali.werbeartikel-online-shop.com/cosmoshop/shared/css/shop/content/style/de/bramble.min.2.css false
                                                              		unknown
                                                              https://generali.werbeartikel-online-shop.com/cosmoshop/default/css/shop/content/layout/bramble.min.2.css false
                                                                		unknown
                                                                https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/Cosmoshop/Validators.js false
                                                                  		unknown
                                                                  https://generali.werbeartikel-online-shop.com/cgi-bin/cosmoshop/lshop.cgi false
                                                                    		unknown
                                                                    https://push.services.mozilla.com/ false
                                                                      		unknown
                                                                      https://generali.werbeartikel-online-shop.com/cosmoshop/shared/template/css/bramble_rootStyles.css false
                                                                        		unknown
                                                                        https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/Cosmoshop/external/jQuery/Modal.js false
                                                                          		unknown
                                                                          https://generali.werbeartikel-online-shop.com/cosmoshop/shared/pix/template_vorlage/bramble/shop_header/de/Logo.png false
                                                                            		unknown
                                                                            https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/Cosmoshop/overrides.css false
                                                                              		unknown
                                                                              https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/Cosmoshop/EventHandler.js false
                                                                                		unknown
                                                                                https://generali.werbeartikel-online-shop.com/cosmoshop/default/css/shop/frame/layout/bramble.min.2.css false
                                                                                  		unknown
                                                                                  https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/Fontello/fontello.css false
                                                                                    		unknown
                                                                                    https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/Cosmoshop/Cache.js false
                                                                                      		unknown
                                                                                      https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/LiveSearch/jQueryLiveSearch.js false
                                                                                        		unknown
                                                                                        https://generali.werbeartikel-online-shop.com/cosmoshop/shared/pix/template_vorlage/bramble/suchleiste/de/logo.png false
                                                                                          		unknown
                                                                                          https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/jQueryUI/jquery-ui.structure.min.css false
                                                                                            		unknown
                                                                                            https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/Cosmoshop/external/jQuery/loading.css false
                                                                                              		unknown
                                                                                              https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/Cosmoshop/Ajax.js false
                                                                                                		unknown
                                                                                                https://generali.werbeartikel-online-shop.com/cosmoshop/shared/libs/modernizr/modernizr.js false
                                                                                                  		unknown
                                                                                                  https://generali.werbeartikel-online-shop.com/cosmoshop/default/pix/s/favicon/icon.ico false
                                                                                                    		unknown