Score: | 21 |
Range: | 0 - 100 |
Whitelisted: | false |
Confidence: | 60% |
Source: |
HTTP Parser: |
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
Source: |
Memory has grown: |
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
UDP traffic detected without corresponding DNS query: |
||
Source: |
UDP traffic detected without corresponding DNS query: |
||
Source: |
UDP traffic detected without corresponding DNS query: |
||
Source: |
UDP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
Source: |
HTTP traffic detected: |
||
Source: |
HTTP traffic detected: |
||
Source: |
HTTP traffic detected: |
||
Source: |
HTTP traffic detected: |
||
Source: |
HTTP traffic detected: |
||
Source: |
HTTP traffic detected: |
||
Source: |
HTTP traffic detected: |
||
Source: |
HTTP traffic detected: |
||
Source: |
HTTP traffic detected: |
||
Source: |
HTTP traffic detected: |
||
Source: |
HTTP traffic detected: |
||
Source: |
HTTP traffic detected: |
||
Source: |
HTTP traffic detected: |
||
Source: |
HTTP traffic detected: |
||
Source: |
HTTP traffic detected: |
||
Source: |
HTTP traffic detected: |
||
Source: |
HTTP traffic detected: |
||
Source: |
HTTP traffic detected: |
||
Source: |
HTTP traffic detected: |
||
Source: |
HTTP traffic detected: |
||
Source: |
HTTP traffic detected: |
||
Source: |
HTTP traffic detected: |
||
Source: |
HTTP traffic detected: |
||
Source: |
HTTP traffic detected: |
||
Source: |
HTTP traffic detected: |
||
Source: |
HTTP traffic detected: |
||
Source: |
HTTP traffic detected: |
||
Source: |
HTTP traffic detected: |
||
Source: |
HTTP traffic detected: |
||
Source: |
HTTP traffic detected: |
||
Source: |
HTTP traffic detected: |
||
Source: |
HTTP traffic detected: |
Source: |
DNS traffic detected: |
||
Source: |
DNS traffic detected: |
||
Source: |
DNS traffic detected: |
||
Source: |
DNS traffic detected: |
||
Source: |
DNS traffic detected: |
||
Source: |
DNS traffic detected: |
||
Source: |
DNS traffic detected: |
||
Source: |
DNS traffic detected: |
||
Source: |
DNS traffic detected: |
||
Source: |
DNS traffic detected: |
||
Source: |
DNS traffic detected: |
||
Source: |
DNS traffic detected: |
||
Source: |
DNS traffic detected: |
||
Source: |
DNS traffic detected: |
||
Source: |
DNS traffic detected: |
||
Source: |
DNS traffic detected: |
||
Source: |
DNS traffic detected: |
||
Source: |
DNS traffic detected: |
||
Source: |
DNS traffic detected: |
||
Source: |
DNS traffic detected: |
||
Source: |
DNS traffic detected: |
||
Source: |
DNS traffic detected: |
||
Source: |
DNS traffic detected: |
||
Source: |
DNS traffic detected: |
||
Source: |
DNS traffic detected: |
||
Source: |
DNS traffic detected: |
||
Source: |
DNS traffic detected: |
||
Source: |
DNS traffic detected: |
||
Source: |
DNS traffic detected: |
||
Source: |
DNS traffic detected: |
||
Source: |
DNS traffic detected: |
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
||
Source: |
HTTPS traffic detected: |
Source: |
Classification label: |
Source: |
File created: |
Source: |
Mutant created: |
Source: |
File created: |
Source: |
File read: |
Source: |
Key opened: |
Source: |
Process created: |
||
Source: |
Process created: |
||
Source: |
Process created: |
||
Source: |
Process created: |
||
Source: |
Process created: |
||
Source: |
Process created: |
||
Source: |
Process created: |
||
Source: |
Process created: |
||
Source: |
Process created: |
||
Source: |
Process created: |
||
Source: |
Process created: |
||
Source: |
Process created: |
||
Source: |
Process created: |
||
Source: |
Process created: |
||
Source: |
Process created: |
||
Source: |
Process created: |
||
Source: |
Process created: |
||
Source: |
Process created: |
||
Source: |
Process created: |
||
Source: |
Process created: |
||
Source: |
Process created: |
||
Source: |
Process created: |
||
Source: |
Process created: |
||
Source: |
Process created: |
||
Source: |
Process created: |
||
Source: |
Process created: |
||
Source: |
Process created: |
||
Source: |
Process created: |
||
Source: |
Process created: |
||
Source: |
Process created: |
||
Source: |
Process created: |
||
Source: |
Process created: |
||
Source: |
Process created: |
Source: |
Section loaded: |
||
Source: |
Section loaded: |
||
Source: |
Section loaded: |
||
Source: |
Section loaded: |
||
Source: |
Section loaded: |
||
Source: |
Section loaded: |
||
Source: |
Section loaded: |
||
Source: |
Section loaded: |
||
Source: |
Section loaded: |
||
Source: |
Section loaded: |
||
Source: |
Section loaded: |
||
Source: |
Section loaded: |
||
Source: |
Section loaded: |
||
Source: |
Section loaded: |
||
Source: |
Section loaded: |
||
Source: |
Section loaded: |
||
Source: |
Section loaded: |
||
Source: |
Section loaded: |
||
Source: |
Section loaded: |
||
Source: |
Section loaded: |
||
Source: |
Section loaded: |
||
Source: |
Section loaded: |
||
Source: |
Section loaded: |
||
Source: |
Section loaded: |
||
Source: |
Section loaded: |
||
Source: |
Section loaded: |
||
Source: |
Section loaded: |
||
Source: |
Section loaded: |
||
Source: |
Section loaded: |
||
Source: |
Section loaded: |
||
Source: |
Section loaded: |
||
Source: |
Section loaded: |
||
Source: |
Section loaded: |
Source: |
Key value queried: |
Source: |
File created: |
Jump to dropped file |
Source: |
File created: |
||
Source: |
File created: |
||
Source: |
File created: |
||
Source: |
File created: |
||
Source: |
File created: |
||
Source: |
File created: |
||
Source: |
File created: |
Source: |
Process information set: |
||
Source: |
Process information set: |
||
Source: |
Process information set: |
||
Source: |
Process information set: |
Stealing of Sensitive Information |
---|
Source: |
File opened: |
||
Source: |
File opened: |
||
Source: |
File opened: |
IP | Domain | Country | Flag | ASN | ASN Name | Malicious |
---|---|---|---|---|---|---|
1.1.1.1 | unknown | Australia | 13335 | CLOUDFLARENETUS | false | |
74.125.136.84 | unknown | United States | 15169 | GOOGLEUS | false | |
172.217.215.105 | www.google.com | United States | 15169 | GOOGLEUS | false | |
142.250.9.139 | unknown | United States | 15169 | GOOGLEUS | false | |
34.149.100.209 | prod.remote-settings.prod.webservices.mozgcp.net | United States | 2686 | ATGS-MMD-ASUS | false | |
99.84.208.24 | services.addons.mozilla.org | United States | 16509 | AMAZON-02US | false | |
34.107.243.93 | unknown | United States | 15169 | GOOGLEUS | false | |
34.107.221.82 | prod.detectportal.prod.cloudops.mozgcp.net | United States | 15169 | GOOGLEUS | false | |
52.25.6.244 | unknown | United States | 16509 | AMAZON-02US | false | |
35.244.181.201 | prod.balrog.prod.cloudops.mozgcp.net | United States | 15169 | GOOGLEUS | false | |
34.117.188.166 | contile.services.mozilla.com | United States | 139070 | GOOGLE-AS-APGoogleAsiaPacificPteLtdSG | false | |
239.255.255.250 | unknown | Reserved | unknown | unknown | false | |
18.154.230.111 | dz8aopenkvv6s.cloudfront.net | United States | 16509 | AMAZON-02US | false | |
64.233.176.100 | unknown | United States | 15169 | GOOGLEUS | false | |
13.33.19.100 | unknown | United States | 16509 | AMAZON-02US | false | |
35.201.103.21 | normandy-cdn.services.mozilla.com | United States | 15169 | GOOGLEUS | false | |
142.250.9.95 | unknown | United States | 15169 | GOOGLEUS | false | |
34.160.144.191 | prod.content-signature-chains.prod.webservices.mozgcp.net | United States | 2686 | ATGS-MMD-ASUS | false | |
44.239.14.124 | unknown | United States | 16509 | AMAZON-02US | false | |
23.40.207.139 | unknown | United States | 20940 | AKAMAI-ASN1EU | false | |
74.125.138.94 | unknown | United States | 15169 | GOOGLEUS | false | |
34.120.208.123 | telemetry-incoming.r53-2.services.mozilla.com | United States | 15169 | GOOGLEUS | false |
IP |
---|
192.168.2.16 |
127.0.0.1 |
Name | IP | Active |
---|---|---|
example.org | 93.184.215.14 | true |
star-mini.c10r.facebook.com | 31.13.88.35 | true |
twitter.com | 104.244.42.65 | true |
prod.balrog.prod.cloudops.mozgcp.net | 35.244.181.201 | true |
prod.detectportal.prod.cloudops.mozgcp.net | 34.107.221.82 | true |
services.addons.mozilla.org | 99.84.208.24 | true |
dyna.wikimedia.org | 208.80.154.224 | true |
prod.remote-settings.prod.webservices.mozgcp.net | 34.149.100.209 | true |
contile.services.mozilla.com | 34.117.188.166 | true |
prod.content-signature-chains.prod.webservices.mozgcp.net | 34.160.144.191 | true |
youtube-ui.l.google.com | 64.233.177.190 | true |
reddit.map.fastly.net | 151.101.129.140 | true |
us-west1.prod.sumo.prod.webservices.mozgcp.net | 34.149.128.2 | true |
ipv4only.arpa | 192.0.0.170 | true |
dz8aopenkvv6s.cloudfront.net | 18.154.230.111 | true |
prod.ads.prod.webservices.mozgcp.net | 34.117.188.166 | true |
www.google.com | 172.217.215.105 | true |
normandy-cdn.services.mozilla.com | 35.201.103.21 | true |
telemetry-incoming.r53-2.services.mozilla.com | 34.120.208.123 | true |
www.reddit.com | unknown | unknown |
spocs.getpocket.com | unknown | unknown |
content-signature-2.cdn.mozilla.net | unknown | unknown |
support.mozilla.org | unknown | unknown |
firefox.settings.services.mozilla.com | unknown | unknown |
push.services.mozilla.com | unknown | unknown |
www.youtube.com | unknown | unknown |
www.facebook.com | unknown | unknown |
detectportal.firefox.com | unknown | unknown |
normandy.cdn.mozilla.net | unknown | unknown |
shavar.services.mozilla.com | unknown | unknown |
www.wikipedia.org | unknown | unknown |
Name | Malicious | Antivirus Detection | Reputation |
---|---|---|---|
false |
|
high | |
false |
|
high | |
false |
|
high |