Windows
Analysis Report
file.exe
Overview
General Information
Detection
Score: | 76 |
Range: | 0 - 100 |
Whitelisted: | false |
Confidence: | 100% |
Signatures
Antivirus / Scanner detection for submitted sample
Multi AV Scanner detection for submitted file
AI detected suspicious sample
Binary is likely a compiled AutoIt script file
Found API chain indicative of debugger detection
Found API chain indicative of sandbox detection
Machine Learning detection for sample
Contains functionality for read data from the clipboard
Contains functionality to block mouse and keyboard input (often used to hinder debugging)
Contains functionality to check if a debugger is running (IsDebuggerPresent)
Contains functionality to check if a window is minimized (may be used to check if an application is visible)
Contains functionality to communicate with device drivers
Contains functionality to dynamically determine API calls
Contains functionality to execute programs as a different user
Contains functionality to launch a process as a different user
Contains functionality to launch a program with higher privileges
Contains functionality to modify clipboard data
Contains functionality to open a port and listen for incoming connection (possibly a backdoor)
Contains functionality to query CPU information (cpuid)
Contains functionality to read the PEB
Contains functionality to read the clipboard data
Contains functionality to retrieve information about pressed keystrokes
Contains functionality to shutdown / reboot the system
Contains functionality to simulate keystroke presses
Contains functionality to simulate mouse events
Contains functionality which may be used to detect a debugger (GetProcessHeap)
Creates a process in suspended mode (likely to inject code)
Detected potential crypto function
Found a high number of Window / User specific system calls (may be a loop to detect user behavior)
Found large amount of non-executed APIs
Found potential string decryption / allocating functions
IP address seen in connection with other malware
Installs a raw input device (often for capturing keystrokes)
JA3 SSL client fingerprint seen in connection with other malware
OS version to string mapping found (often used in BOTs)
Potential key logger detected (key state polling based)
Sample file is different than original file name gathered from version info
Sleep loop found (likely to delay execution)
Uses 32bit PE files
Uses code obfuscation techniques (call, push, ret)
Classification
- System is w10x64
file.exe (PID: 1476 cmdline:
"C:\Users\ user\Deskt op\file.ex e" MD5: 619F9806AB2FAD61F931922DD30EDE7F) chrome.exe (PID: 6844 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" http s://www.yo utube.com/ account MD5: 5BBFA6CBDF4C254EB368D534F9E23C92) chrome.exe (PID: 1756 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --ty pe=utility --utility -sub-type= network.mo jom.Networ kService - -lang=en-U S --servic e-sandbox- type=none --mojo-pla tform-chan nel-handle =2316 --fi eld-trial- handle=202 0,i,101858 9847313137 636,160589 8340956988 895,262144 /prefetch :8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92) chrome.exe (PID: 8128 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --ty pe=utility --utility -sub-type= audio.mojo m.AudioSer vice --lan g=en-US -- service-sa ndbox-type =audio --m ojo-platfo rm-channel -handle=44 76 --field -trial-han dle=2020,i ,101858984 7313137636 ,160589834 0956988895 ,262144 /p refetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92) chrome.exe (PID: 8136 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --ty pe=utility --utility -sub-type= video_capt ure.mojom. VideoCaptu reService --lang=en- US --servi ce-sandbox -type=none --mojo-pl atform-cha nnel-handl e=5364 --f ield-trial -handle=20 20,i,10185 8984731313 7636,16058 9834095698 8895,26214 4 /prefetc h:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)
- cleanup
⊘No configs have been found
⊘No yara matches
⊘No Sigma rule has matched
⊘No Snort rule has matched
Click to jump to signature section
Show All Signature Results
AV Detection |
---|
Source: | Avira: |
Source: | ReversingLabs: |
Source: | Integrated Neural Analysis Model: |
Source: | Joe Sandbox ML: |
Source: | Static PE information: |
Source: | HTTPS traffic detected: | ||
Source: | HTTPS traffic detected: | ||
Source: | HTTPS traffic detected: | ||
Source: | HTTPS traffic detected: | ||
Source: | HTTPS traffic detected: | ||
Source: | HTTPS traffic detected: | ||
Source: | HTTPS traffic detected: | ||
Source: | HTTPS traffic detected: | ||
Source: | HTTPS traffic detected: | ||
Source: | HTTPS traffic detected: |
Source: | Code function: | 0_2_000FC2A2 | |
Source: | Code function: | 0_2_001368EE | |
Source: | Code function: | 0_2_0013698F | |
Source: | Code function: | 0_2_0012D076 | |
Source: | Code function: | 0_2_0012D3A9 | |
Source: | Code function: | 0_2_00139642 | |
Source: | Code function: | 0_2_0013979D | |
Source: | Code function: | 0_2_00139B2B | |
Source: | Code function: | 0_2_0012DBBE | |
Source: | Code function: | 0_2_00135C97 |
Source: | IP Address: |
Source: | JA3 fingerprint: | ||
Source: | JA3 fingerprint: |
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: |
Source: | Code function: | 0_2_0013CE44 |
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: |
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: |
Source: | DNS traffic detected: | ||
Source: | DNS traffic detected: | ||
Source: | DNS traffic detected: | ||
Source: | DNS traffic detected: |
Source: | HTTP traffic detected: |
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: |
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: |
Source: | HTTPS traffic detected: | ||
Source: | HTTPS traffic detected: | ||
Source: | HTTPS traffic detected: | ||
Source: | HTTPS traffic detected: | ||
Source: | HTTPS traffic detected: | ||
Source: | HTTPS traffic detected: | ||
Source: | HTTPS traffic detected: | ||
Source: | HTTPS traffic detected: | ||
Source: | HTTPS traffic detected: | ||
Source: | HTTPS traffic detected: |
Source: | Code function: | 0_2_0013EAFF |
Source: | Code function: | 0_2_0013ED6A |
Source: | Code function: | 0_2_0013EAFF |
Source: | Code function: | 0_2_0012AA57 |
Source: | Binary or memory string: | memstr_3283203f-7 |
Source: | Code function: | 0_2_00159576 |
System Summary |
---|
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | memstr_32df50eb-1 | |
Source: | String found in binary or memory: | memstr_0eed06c5-c | |
Source: | String found in binary or memory: | memstr_1eb1c9b6-8 | |
Source: | String found in binary or memory: | memstr_dce97568-d |
Source: | Code function: | 0_2_0012D5EB |
Source: | Code function: | 0_2_00121201 |
Source: | Code function: | 0_2_0012E8F6 |
Source: | Code function: | 0_2_00132046 | |
Source: | Code function: | 0_2_000C8060 | |
Source: | Code function: | 0_2_00128298 | |
Source: | Code function: | 0_2_000FE4FF | |
Source: | Code function: | 0_2_000F676B | |
Source: | Code function: | 0_2_00154873 | |
Source: | Code function: | 0_2_000ECAA0 | |
Source: | Code function: | 0_2_000CCAF0 | |
Source: | Code function: | 0_2_000DCC39 | |
Source: | Code function: | 0_2_000F6DD9 | |
Source: | Code function: | 0_2_000DB119 | |
Source: | Code function: | 0_2_000C91C0 | |
Source: | Code function: | 0_2_000E1394 | |
Source: | Code function: | 0_2_000E781B | |
Source: | Code function: | 0_2_000C7920 | |
Source: | Code function: | 0_2_000D997D | |
Source: | Code function: | 0_2_000E7A4A | |
Source: | Code function: | 0_2_000E7CA7 | |
Source: | Code function: | 0_2_0014BE44 | |
Source: | Code function: | 0_2_000F9EEE |
Source: | Binary or memory string: | ||
Source: | Binary or memory string: | ||
Source: | Binary or memory string: | ||
Source: | Binary or memory string: | ||
Source: | Binary or memory string: | ||
Source: | Binary or memory string: | ||
Source: | Binary or memory string: | ||
Source: | Binary or memory string: | ||
Source: | Binary or memory string: | ||
Source: | Binary or memory string: | ||
Source: | Binary or memory string: | ||
Source: | Binary or memory string: | ||
Source: | Binary or memory string: | ||
Source: | Binary or memory string: | ||
Source: | Binary or memory string: |
Source: | Static PE information: |
Source: | Classification label: |
Source: | Code function: | 0_2_001337B5 |
Source: | Code function: | 0_2_001210BF | |
Source: | Code function: | 0_2_001216C3 |
Source: | Code function: | 0_2_001351CD |
Source: | Code function: | 0_2_0014A67C |
Source: | Code function: | 0_2_0013648E |
Source: | Code function: | 0_2_000C42A2 |
Source: | Static PE information: |
Source: | File read: | Jump to behavior |
Source: | Key opened: | Jump to behavior |
Source: | ReversingLabs: |
Source: | Process created: | |||
Source: | Process created: | |||
Source: | Process created: | |||
Source: | Process created: | |||
Source: | Process created: | |||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior |
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior |
Source: | Key value queried: | Jump to behavior |
Source: | Window detected: |
Source: | Static file information: |
Source: | Static PE information: | ||
Source: | Static PE information: | ||
Source: | Static PE information: | ||
Source: | Static PE information: | ||
Source: | Static PE information: | ||
Source: | Static PE information: |
Source: | Static PE information: |
Source: | Static PE information: | ||
Source: | Static PE information: | ||
Source: | Static PE information: | ||
Source: | Static PE information: | ||
Source: | Static PE information: |
Source: | Code function: | 0_2_000C42DE |
Source: | Code function: | 0_2_000E0A89 |
Source: | Code function: | 0_2_000DF98E | |
Source: | Code function: | 0_2_00151C41 |
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior |
Malware Analysis System Evasion |
---|
Source: | Sandbox detection routine: | graph_0-97380 |
Source: | Window / User API: | Jump to behavior | ||
Source: | Window / User API: | Jump to behavior |
Source: | API coverage: |
Source: | Thread sleep count: | Jump to behavior |
Source: | Code function: | 0_2_000FC2A2 | |
Source: | Code function: | 0_2_001368EE | |
Source: | Code function: | 0_2_0013698F | |
Source: | Code function: | 0_2_0012D076 | |
Source: | Code function: | 0_2_0012D3A9 | |
Source: | Code function: | 0_2_00139642 | |
Source: | Code function: | 0_2_0013979D | |
Source: | Code function: | 0_2_00139B2B | |
Source: | Code function: | 0_2_0012DBBE | |
Source: | Code function: | 0_2_00135C97 |
Source: | Code function: | 0_2_000C42DE |
Anti Debugging |
---|
Source: | Debugger detection routine: | graph_0-97907 |
Source: | Code function: | 0_2_0013EAA2 |
Source: | Code function: | 0_2_000F2622 |
Source: | Code function: | 0_2_000C42DE |
Source: | Code function: | 0_2_000E4CE8 |
Source: | Code function: | 0_2_00120B62 |
Source: | Code function: | 0_2_000F2622 | |
Source: | Code function: | 0_2_000E083F | |
Source: | Code function: | 0_2_000E09D5 | |
Source: | Code function: | 0_2_000E0C21 |
Source: | Code function: | 0_2_00121201 |
Source: | Code function: | 0_2_00102BA5 |
Source: | Code function: | 0_2_0012B226 |
Source: | Code function: | 0_2_001422DA |
Source: | Process created: | Jump to behavior |
Source: | Code function: | 0_2_00120B62 |
Source: | Code function: | 0_2_00121663 |
Source: | Binary or memory string: | ||
Source: | Binary or memory string: |
Source: | Code function: | 0_2_000E0698 |
Source: | Code function: | 0_2_00138195 |
Source: | Code function: | 0_2_0011D27A |
Source: | Code function: | 0_2_000FB952 |
Source: | Code function: | 0_2_000C42DE |
Source: | Binary or memory string: | ||
Source: | Binary or memory string: | ||
Source: | Binary or memory string: | ||
Source: | Binary or memory string: | ||
Source: | Binary or memory string: | ||
Source: | Binary or memory string: | ||
Source: | Binary or memory string: |
Source: | Code function: | 0_2_00141204 | |
Source: | Code function: | 0_2_00141806 |
Reconnaissance | Resource Development | Initial Access | Execution | Persistence | Privilege Escalation | Defense Evasion | Credential Access | Discovery | Lateral Movement | Collection | Command and Control | Exfiltration | Impact |
---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Gather Victim Identity Information | Acquire Infrastructure | 2 Valid Accounts | 1 Native API | 1 DLL Side-Loading | 1 Exploitation for Privilege Escalation | 1 Disable or Modify Tools | 31 Input Capture | 2 System Time Discovery | Remote Services | 1 Archive Collected Data | 2 Ingress Tool Transfer | Exfiltration Over Other Network Medium | 1 System Shutdown/Reboot |
Credentials | Domains | Default Accounts | Scheduled Task/Job | 2 Valid Accounts | 1 DLL Side-Loading | 1 Deobfuscate/Decode Files or Information | LSASS Memory | 1 Account Discovery | Remote Desktop Protocol | 31 Input Capture | 11 Encrypted Channel | Exfiltration Over Bluetooth | Network Denial of Service |
Email Addresses | DNS Server | Domain Accounts | At | Logon Script (Windows) | 2 Valid Accounts | 2 Obfuscated Files or Information | Security Account Manager | 2 File and Directory Discovery | SMB/Windows Admin Shares | 3 Clipboard Data | 3 Non-Application Layer Protocol | Automated Exfiltration | Data Encrypted for Impact |
Employee Names | Virtual Private Server | Local Accounts | Cron | Login Hook | 21 Access Token Manipulation | 1 DLL Side-Loading | NTDS | 15 System Information Discovery | Distributed Component Object Model | Input Capture | 4 Application Layer Protocol | Traffic Duplication | Data Destruction |
Gather Victim Network Information | Server | Cloud Accounts | Launchd | Network Logon Script | 12 Process Injection | 2 Valid Accounts | LSA Secrets | 22 Security Software Discovery | SSH | Keylogging | Fallback Channels | Scheduled Transfer | Data Encrypted for Impact |
Domain Properties | Botnet | Replication Through Removable Media | Scheduled Task | RC Scripts | RC Scripts | 21 Virtualization/Sandbox Evasion | Cached Domain Credentials | 21 Virtualization/Sandbox Evasion | VNC | GUI Input Capture | Multiband Communication | Data Transfer Size Limits | Service Stop |
DNS | Web Services | External Remote Services | Systemd Timers | Startup Items | Startup Items | 21 Access Token Manipulation | DCSync | 2 Process Discovery | Windows Remote Management | Web Portal Capture | Commonly Used Port | Exfiltration Over C2 Channel | Inhibit System Recovery |
Network Trust Dependencies | Serverless | Drive-by Compromise | Container Orchestration Job | Scheduled Task/Job | Scheduled Task/Job | 12 Process Injection | Proc Filesystem | 11 Application Window Discovery | Cloud Services | Credential API Hooking | Application Layer Protocol | Exfiltration Over Alternative Protocol | Defacement |
Network Topology | Malvertising | Exploit Public-Facing Application | Command and Scripting Interpreter | At | At | HTML Smuggling | /etc/passwd and /etc/shadow | 1 System Owner/User Discovery | Direct Cloud VM Connections | Data Staged | Web Protocols | Exfiltration Over Symmetric Encrypted Non-C2 Protocol | Internal Defacement |
This section contains all screenshots as thumbnails, including those not shown in the slideshow.
Source | Detection | Scanner | Label | Link |
---|---|---|---|---|
42% | ReversingLabs | Win32.Trojan.AutoitInject | ||
100% | Avira | TR/AutoIt.zstul | ||
100% | Joe Sandbox ML |
⊘No Antivirus matches
⊘No Antivirus matches
⊘No Antivirus matches
Source | Detection | Scanner | Label | Link |
---|---|---|---|---|
0% | URL Reputation | safe | ||
0% | URL Reputation | safe | ||
0% | URL Reputation | safe | ||
0% | URL Reputation | safe | ||
0% | URL Reputation | safe | ||
0% | URL Reputation | safe | ||
0% | URL Reputation | safe | ||
0% | URL Reputation | safe | ||
0% | URL Reputation | safe | ||
0% | URL Reputation | safe | ||
0% | URL Reputation | safe | ||
0% | URL Reputation | safe | ||
0% | URL Reputation | safe | ||
0% | URL Reputation | safe | ||
0% | URL Reputation | safe | ||
0% | URL Reputation | safe | ||
0% | URL Reputation | safe | ||
0% | URL Reputation | safe | ||
0% | URL Reputation | safe | ||
0% | URL Reputation | safe | ||
0% | Avira URL Cloud | safe | ||
0% | Avira URL Cloud | safe | ||
0% | Avira URL Cloud | safe | ||
0% | Avira URL Cloud | safe | ||
0% | Avira URL Cloud | safe | ||
0% | Avira URL Cloud | safe | ||
0% | Avira URL Cloud | safe | ||
0% | Avira URL Cloud | safe |
Name | IP | Active | Malicious | Antivirus Detection | Reputation |
---|---|---|---|---|---|
youtube-ui.l.google.com | 142.250.185.206 | true | false | unknown | |
www3.l.google.com | 142.250.185.206 | true | false | unknown | |
play.google.com | 142.250.185.238 | true | false | unknown | |
www.google.com | 142.250.186.68 | true | false | unknown | |
accounts.youtube.com | unknown | unknown | false | unknown | |
www.youtube.com | unknown | unknown | false | unknown |
Name | Malicious | Antivirus Detection | Reputation |
---|---|---|---|
false |
| unknown | |
false |
| unknown | |
false |
| unknown |
Name | Source | Malicious | Antivirus Detection | Reputation |
---|---|---|---|---|
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown |
- No. of IPs < 25%
- 25% < No. of IPs < 50%
- 50% < No. of IPs < 75%
- 75% < No. of IPs
IP | Domain | Country | Flag | ASN | ASN Name | Malicious |
---|---|---|---|---|---|---|
142.250.186.68 | www.google.com | United States | 15169 | GOOGLEUS | false | |
142.250.185.206 | youtube-ui.l.google.com | United States | 15169 | GOOGLEUS | false | |
142.250.185.238 | play.google.com | United States | 15169 | GOOGLEUS | false | |
239.255.255.250 | unknown | Reserved | unknown | unknown | false | |
142.250.185.174 | unknown | United States | 15169 | GOOGLEUS | false |
IP |
---|
192.168.2.6 |
Joe Sandbox version: | 40.0.0 Tourmaline |
Analysis ID: | 1467823 |
Start date and time: | 2024-07-04 20:34:04 +02:00 |
Joe Sandbox product: | CloudBasic |
Overall analysis duration: | 0h 4m 57s |
Hypervisor based Inspection enabled: | false |
Report type: | full |
Cookbook file name: | default.jbs |
Analysis system description: | Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01 |
Number of analysed new started processes analysed: | 11 |
Number of new started drivers analysed: | 0 |
Number of existing processes analysed: | 0 |
Number of existing drivers analysed: | 0 |
Number of injected processes analysed: | 0 |
Technologies: |
|
Analysis Mode: | default |
Analysis stop reason: | Timeout |
Sample name: | file.exe |
Detection: | MAL |
Classification: | mal76.evad.winEXE@37/30@10/6 |
EGA Information: |
|
HCA Information: |
|
Cookbook Comments: |
|
- Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
- Excluded IPs from analysis (whitelisted): 172.217.18.110, 74.125.206.84, 142.250.185.227, 34.104.35.123, 142.250.185.99, 142.250.186.138, 142.250.184.202, 142.250.185.202, 216.58.206.74, 142.250.185.234, 216.58.206.42, 142.250.181.234, 142.250.185.138, 142.250.184.234, 142.250.185.74, 216.58.212.170, 142.250.185.106, 172.217.16.138, 142.250.186.74, 142.250.185.170, 142.250.186.42, 216.58.206.35, 142.250.186.106, 172.217.18.10, 142.250.74.202, 192.229.221.95, 88.221.110.96, 142.250.186.163, 142.251.173.84, 173.222.108.226
- Excluded domains from analysis (whitelisted): clients1.google.com, client.wns.windows.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, update.googleapis.com, clients.l.google.com, www.gstatic.com, optimizationguide-pa.googleapis.com
- Not all processes where analyzed, report is missing behavior information
- Report size exceeded maximum capacity and may have missing disassembly code.
- Report size getting too big, too many NtOpenKeyEx calls found.
- Report size getting too big, too many NtQueryValueKey calls found.
- Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
- VT rate limit hit for: file.exe
⊘No simulations
Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
---|---|---|---|---|---|---|
239.255.255.250 | Get hash | malicious | Unknown | Browse | ||
Get hash | malicious | Unknown | Browse | |||
Get hash | malicious | HTMLPhisher | Browse | |||
Get hash | malicious | Unknown | Browse | |||
Get hash | malicious | HTMLPhisher | Browse | |||
Get hash | malicious | Unknown | Browse | |||
Get hash | malicious | Unknown | Browse | |||
Get hash | malicious | Unknown | Browse | |||
Get hash | malicious | Unknown | Browse | |||
Get hash | malicious | Unknown | Browse |
⊘No context
⊘No context
Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
---|---|---|---|---|---|---|
28a2c9bd18a11de089ef85a160da29e4 | Get hash | malicious | Unknown | Browse |
| |
Get hash | malicious | Unknown | Browse |
| ||
Get hash | malicious | Unknown | Browse |
| ||
Get hash | malicious | HTMLPhisher | Browse |
| ||
Get hash | malicious | Quasar | Browse |
| ||
Get hash | malicious | Quasar | Browse |
| ||
Get hash | malicious | Unknown | Browse |
| ||
Get hash | malicious | Unknown | Browse |
| ||
Get hash | malicious | Unknown | Browse |
| ||
Get hash | malicious | HTMLPhisher | Browse |
| ||
3b5074b1b5d032e5620f69f9f700ff0e | Get hash | malicious | Unknown | Browse |
| |
Get hash | malicious | Unknown | Browse |
| ||
Get hash | malicious | Unknown | Browse |
| ||
Get hash | malicious | AgentTesla, PureLog Stealer | Browse |
| ||
Get hash | malicious | AgentTesla | Browse |
| ||
Get hash | malicious | AgentTesla, RedLine, StormKitty, XWorm | Browse |
| ||
Get hash | malicious | Quasar | Browse |
| ||
Get hash | malicious | GuLoader | Browse |
| ||
Get hash | malicious | AgentTesla, PureLog Stealer | Browse |
| ||
Get hash | malicious | Unknown | Browse |
|
⊘No context
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 4140 |
Entropy (8bit): | 5.371702264924607 |
Encrypted: | false |
SSDEEP: | 96:GPWUbFMvF/ygbQgs8qUoaCyPj8LvUe8tOFw:SWIF1R8qUVCywzzgt |
MD5: | 7DD911B1022E2F37811F8AAEEB74862E |
SHA1: | 36F79706B7E839CFF0DE16EE9CC7B026EE5019A2 |
SHA-256: | DD48C9475C9D2B02ED29382E9DD32791D671004BB217DB0B0F6750DA3011CD66 |
SHA-512: | 03996AD04C65D47A9C364C63AEBCB3F58F41CCCE4DAD70840316853BEF2967A38797744FE62BFFF418B799EC71476DC6B49CFE3053F2B9BEBE62CF5A30EA7847 |
Malicious: | false |
Reputation: | moderate, very likely benign file |
URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.ZU1EFvXsC20.es5.O/ck=boq-identity.AccountsSignInUi.DDD9SPcAL2k.L.B1.O/am=HmAYCN1zFADxnHPgA5QCIQMAAAAAAAAAgJYBMgM/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,F6sNGb,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,VwDzFe,YHI3We,YTxL4,YgOFye,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,bm51tf,byfTOb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lRrMHd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,r1n9ec,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vvMGie,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEXqJoaGwEo5TjSaLcvO8AROXJTtw/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:F6sNGb;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=sOXFj,q0xTif,ZZ4WUe" |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 96558 |
Entropy (8bit): | 5.542959034430961 |
Encrypted: | false |
SSDEEP: | 1536:h5K9QgDoJZFMZZMR3Du4JnSyg/FyO7D4yQFPA0tEFHvnAwDyHK:K9rYFjDu4Jnzg/AO7hWPA0tE9vGHK |
MD5: | E020446EC64C78D8127C8E4D0C8D08DB |
SHA1: | 6447A74183CD590FAB25C008E60F838D09BF12E1 |
SHA-256: | 32779135C0EC086DA69B2DC597A8620CAEE8E104E079B5A02D98A8676712577E |
SHA-512: | 08348FAF64E033574D45446D75B8DFA01EE111C0FEE508ECE2E685C7C4986B833594279BD681E5DA2A02C5FB27DF039DF7E9751BB63A115AF4D3BB0688EA7659 |
Malicious: | false |
Reputation: | moderate, very likely benign file |
URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.ZU1EFvXsC20.es5.O/ck=boq-identity.AccountsSignInUi.DDD9SPcAL2k.L.B1.O/am=HmAYCN1zFADxnHPgA5QCIQMAAAAAAAAAgJYBMgM/d=1/exm=AvtSve,CMcBD,EFQ78c,EN3i8d,F6sNGb,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PrPYRd,Rkm0ef,SCuOPb,STuCOe,SpsfSb,UUJqVe,Uas9Hd,YHI3We,YTxL4,ZakeSe,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,byfTOb,eVCnO,gJzDyc,hc6Ubd,inNHtf,lRrMHd,lsjVmc,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,qmdT9,r1n9ec,rCcCxc,siKnQd,t2srLd,tUnxGc,vHEMJe,vfuNJf,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEXqJoaGwEo5TjSaLcvO8AROXJTtw/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:F6sNGb;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ltDFwf,SD8Jgb,rmumx,E87wgc,qPYxq,Tbb4sb,pxq3x,f8Gu1e,soHxf,YgOFye,qPfo0c,yRXbo,bTi8wc,ywOR5c,PHUIyb" |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 836241 |
Entropy (8bit): | 5.751370782507753 |
Encrypted: | false |
SSDEEP: | 6144:PLTYSPd+lWTqKZF8hmDrIMmqu3+jgX0BWj4+X+bW1wp8S+lo:PLTYSF+lWTASNjGXLC9 |
MD5: | 775F8A77AAE74DB7478D5EDADF67460A |
SHA1: | 740A72415AC75C2F1E08654386BC7B1B5E21BC5C |
SHA-256: | 01917BB57EA57B80D14AD3FACD6560106AA6935A26077C0AD13BF460751D8A65 |
SHA-512: | E8FFE4E59CC021EB2DC32B7050922BA61EC75A17C40245F399AE4064BBCD2029DA014E5D33D44F8447120DA2727ACC55DB6838A75563F6E7C276462907F92679 |
Malicious: | false |
Reputation: | moderate, very likely benign file |
URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.ZU1EFvXsC20.es5.O/ck=boq-identity.AccountsSignInUi.DDD9SPcAL2k.L.B1.O/am=HmAYCN1zFADxnHPgA5QCIQMAAAAAAAAAgJYBMgM/d=1/exm=LEikZe,_b,_tp,byfTOb,lsjVmc/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEXqJoaGwEo5TjSaLcvO8AROXJTtw/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:F6sNGb;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=n73qwf,SCuOPb,IZT63,vfuNJf,UUJqVe,ws9Tlc,siKnQd,STuCOe,njlZCf,m9oV,NTMZac,mzzZzc,rCcCxc,vvMGie,K1ZKnb,ziZ8Mc,b3kMqb,mvkUhe,CMcBD,Fndnac,t2srLd,EN3i8d,z0u0L,xiZRqc,NOeYWe,O6y8ed,L9OGUe,PrPYRd,MpJwZc,hc6Ubd,Rkm0ef,KUM7Z,oLggrd,inNHtf,L1AAkb,lwddkf,gJzDyc,SpsfSb,aC1iue,tUnxGc,aW3pY,ZakeSe,EFQ78c,xQtZb,I6YDgd,zbML3c,zr1jrb,vHEMJe,YHI3We,YTxL4,bSspM,Uas9Hd,zy0vNb,K0PMbc,AvtSve,qmdT9,lRrMHd,xBaz7b,F6sNGb,eVCnO,r1n9ec,LDQI" |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 5430 |
Entropy (8bit): | 3.6534652184263736 |
Encrypted: | false |
SSDEEP: | 48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B |
MD5: | F3418A443E7D841097C714D69EC4BCB8 |
SHA1: | 49263695F6B0CDD72F45CF1B775E660FDC36C606 |
SHA-256: | 6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770 |
SHA-512: | 82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563 |
Malicious: | false |
Reputation: | high, very likely benign file |
URL: | https://www.google.com/favicon.ico |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 52280 |
Entropy (8bit): | 7.995413196679271 |
Encrypted: | true |
SSDEEP: | 1536:1rvqtK8DZilXxwJ8mMwAZy7phqsFLdG3B4d:xytBZits8bw4wzbFxG3B4d |
MD5: | F61F0D4D0F968D5BBA39A84C76277E1A |
SHA1: | AA3693EA140ECA418B4B2A30F6A68F6F43B4BEB2 |
SHA-256: | 57147F08949ABABE7DEEF611435AE418475A693E3823769A25C2A39B6EAD9CCC |
SHA-512: | 6C3BD90F709BCF9151C9ED9FFEA55C4F6883E7FDA2A4E26BF018C83FE1CFBE4F4AA0DB080D6D024070D53B2257472C399C8AC44EEFD38B9445640EFA85D5C487 |
Malicious: | false |
Reputation: | moderate, very likely benign file |
URL: | https://fonts.gstatic.com/s/googlesans/v58/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCI.woff2 |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 1884 |
Entropy (8bit): | 5.280363294341128 |
Encrypted: | false |
SSDEEP: | 48:o74b7AJ0qbL3AUFQp9/j7kOXTf43Z/rm7ZbZrw:oKFSLrFw/3FXjaeZbVw |
MD5: | 6759666E5C2624986C2FBE9208D39C80 |
SHA1: | 4732C0CE332CEED1414CD2A6D4BEBEFD06A59115 |
SHA-256: | C0F98E792B9160E018D61998788E81396C68FB14E058C168E538A9AD6167533F |
SHA-512: | BCF00B74425A487A6F378FDEBAE1591E1FF6EF50B065850182ADDF239FFDBBA1882E96EF54775AB490CC4F4342337AA9E01286F85424856836082B33866FA26D |
Malicious: | false |
URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.ZU1EFvXsC20.es5.O/ck=boq-identity.AccountsSignInUi.DDD9SPcAL2k.L.B1.O/am=HmAYCN1zFADxnHPgA5QCIQMAAAAAAAAAgJYBMgM/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,F6sNGb,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,VwDzFe,YHI3We,YTxL4,YgOFye,ZZ4WUe,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,bm51tf,byfTOb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lRrMHd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,r1n9ec,rCcCxc,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vvMGie,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEXqJoaGwEo5TjSaLcvO8AROXJTtw/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:F6sNGb;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=iAskyc,ziXSP" |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 19418 |
Entropy (8bit): | 5.379195390856238 |
Encrypted: | false |
SSDEEP: | 384:gJEePjmMfOH3Qm45RAGSeIMPW2NYZvnXYv3HAEfqwuhU3p9uj9QtJg:oROXQm456AYZvoPhfVIUSj9QtJg |
MD5: | 9CE9445F24BFC74018956880D606553C |
SHA1: | ECF89E11E2091ACB1AF6735C9AF94AB19984F602 |
SHA-256: | 797EF136123058C1D54A0AE365896D4E56FB3D84E83D60EF840D16BBAD8AC6BB |
SHA-512: | 7B25B6EB9B03A2118AE112AE00E774CBD9928DF69F49DA762D88255F30533CD3E6F576C82F0220FC393FA5E08544188ED210135CE17FB03B76505BF03F48A9BE |
Malicious: | false |
URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.ZU1EFvXsC20.es5.O/ck=boq-identity.AccountsSignInUi.DDD9SPcAL2k.L.B1.O/am=HmAYCN1zFADxnHPgA5QCIQMAAAAAAAAAgJYBMgM/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,F6sNGb,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,YHI3We,YTxL4,YgOFye,ZakeSe,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lRrMHd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,r1n9ec,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEXqJoaGwEo5TjSaLcvO8AROXJTtw/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:F6sNGb;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=RqjULd" |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 1481 |
Entropy (8bit): | 5.316577802144649 |
Encrypted: | false |
SSDEEP: | 24:kMYD7xmEu0IvxqcNzoYcurO/qb99nyobhzWuNA+CkadpUGbX7MNa4VGbwCSF57M8:o7xmR0I5kc7b91xbf0dpUGbYNa4VGbwl |
MD5: | FC2DC9D5B7292B603D399F3E3046665B |
SHA1: | 92D25D672FDDD209D97ED306541CE686B6FD51CE |
SHA-256: | 614049A345B7E332826D74B79163DF74EDDE93CA1A661EE468352D4E5F94574C |
SHA-512: | 7348DBAF2A5A1FC87E3017B9E504EF22A3EBA65EC6FD255DD127DB78384B56B80A101BE9101F5BADBA4717FBE460C6A8DBE07DBA5F918413BE36EF0D88716C50 |
Malicious: | false |
URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.ZU1EFvXsC20.es5.O/ck=boq-identity.AccountsSignInUi.DDD9SPcAL2k.L.B1.O/am=HmAYCN1zFADxnHPgA5QCIQMAAAAAAAAAgJYBMgM/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,F6sNGb,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,YHI3We,YTxL4,YgOFye,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lRrMHd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,r1n9ec,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEXqJoaGwEo5TjSaLcvO8AROXJTtw/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:F6sNGb;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=bm51tf" |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 30637 |
Entropy (8bit): | 5.379716376439597 |
Encrypted: | false |
SSDEEP: | 768:ciVQqn5YPB1v2C82vd9BvjT4spXo6PVS+B3BWvJB6VSiV:cYYn2CzBvjT4GHPD00V |
MD5: | 1522EC1FD2855DE971E2341EA0A137BB |
SHA1: | 2E7564BBD084594968A105D2EBA5053A69F51F48 |
SHA-256: | B942FFA89D4E8337AE16D76A6D571DC0652D28D179D5B1BE9456D6967431FAEA |
SHA-512: | 5D35B151BE7A2D0D46E326A058622DF12FAE12687F0BC78C3E89CC1F65BC9043FEBE513FFAEF812BCEAB340F27EB16642545AE7AED4FAB1C820F9A76E2CC8619 |
Malicious: | false |
URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.ZU1EFvXsC20.es5.O/ck=boq-identity.AccountsSignInUi.DDD9SPcAL2k.L.B1.O/am=HmAYCN1zFADxnHPgA5QCIQMAAAAAAAAAgJYBMgM/d=1/exm=_b,_tp/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEXqJoaGwEo5TjSaLcvO8AROXJTtw/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:F6sNGb;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=byfTOb,lsjVmc,LEikZe" |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 233234 |
Entropy (8bit): | 5.4611037721061075 |
Encrypted: | false |
SSDEEP: | 3072:TSX0CBd2Buj8T4HvzoHfKxTadov0roCsu29d4XB:TA0CBd2BhT4EHS8rYEXB |
MD5: | C1544473B310EC2623BC2BCABC3945D2 |
SHA1: | 0CACCE70EAF08EEB64B2D96FD8D3EF09D97ABEFB |
SHA-256: | D2DD3595FA23A5565F0E2D4BD6E4B36ACE3987FD2C942DF3C298A010FD84B92D |
SHA-512: | CA6EA5ED5ADB531D0A9B7AF5A7F547AC7481063039591ECB3225EC68082DB3AE78B80D6118A225013638AAA24DA789D551ABBE03418F695219FEDF66A533D48E |
Malicious: | false |
URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.ZU1EFvXsC20.es5.O/am=HmAYCN1zFADxnHPgA5QCIQMAAAAAAAAAgJYBMgM/d=1/excm=_b,_tp,identifierview/ed=1/dg=0/wt=2/ujg=1/rs=AOaEmlEyIpqkGROwjeIZ9SCPrKCNVnFaYg/m=_b,_tp" |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 3477 |
Entropy (8bit): | 5.499342889552936 |
Encrypted: | false |
SSDEEP: | 96:oIByrBKfKVHcikUJFtlPMETAKv78pUCCjIw:INKS/vP3hv7mUbZ |
MD5: | E18219F32F2747C14548BCFEE58B13CD |
SHA1: | 85307A7D3376A623245EB21D245B8BC4FA481908 |
SHA-256: | 6479CFCD0C8840DD31DA0C55F596BDA37C28074517B5F063F5A5830EC27D0280 |
SHA-512: | EFE83897B3C1EE154EA3C14B3FFB4C242C065303F3F5A3DFA3E6E26C154B44509FE8E580D2402553CCDFABACEDD3F000FAC9171E861BBF22E6D56C5A6355CF47 |
Malicious: | false |
URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.ZU1EFvXsC20.es5.O/ck=boq-identity.AccountsSignInUi.DDD9SPcAL2k.L.B1.O/am=HmAYCN1zFADxnHPgA5QCIQMAAAAAAAAAgJYBMgM/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,F6sNGb,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,VwDzFe,YHI3We,YTxL4,YgOFye,ZZ4WUe,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,bm51tf,byfTOb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,iAskyc,inNHtf,lRrMHd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,r1n9ec,rCcCxc,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vvMGie,w9hDv,wg1P6b,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEXqJoaGwEo5TjSaLcvO8AROXJTtw/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:F6sNGb;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=Wt6vjf,hhhU8,FCpbqb,WhJNk" |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 3143 |
Entropy (8bit): | 5.37079395351489 |
Encrypted: | false |
SSDEEP: | 48:o7gbuQLkZHPLbrzOw3KP757NQ8jsKyYqb6f4np/EkGuf/x06IZ2rw:orQGXJaT57OMNwp/kufJRgqw |
MD5: | DB38B407EAF251C03254DA070DF97E29 |
SHA1: | 440A9FE061A55A3C2E20FC8D5421CB89B691C4D5 |
SHA-256: | 7071B6E12C5D15142A9D5EF16103678A3038B6D8FFDCDCE248C9E26B9D4D0E81 |
SHA-512: | B99B5DDA32BACF2C79CB23FFD9EC624AD678243C6DBEC19409C298C09486E8F38F31AD658A23BC9D5E249E7D906BA66C303EA3B84F63FD6B053CF588B718F377 |
Malicious: | false |
URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.ZU1EFvXsC20.es5.O/ck=boq-identity.AccountsSignInUi.DDD9SPcAL2k.L.B1.O/am=HmAYCN1zFADxnHPgA5QCIQMAAAAAAAAAgJYBMgM/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,F6sNGb,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,YHI3We,YTxL4,YgOFye,ZakeSe,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lRrMHd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,r1n9ec,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEXqJoaGwEo5TjSaLcvO8AROXJTtw/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:F6sNGb;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ZwDk9d,RMhBfe" |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 7624 |
Entropy (8bit): | 5.356859202879639 |
Encrypted: | false |
SSDEEP: | 192:mnwTgK8AwrKbbW8UFBlkU+/IrlQFsq1o98fYlp2PDYGym4nV9U:9ZwrKbaV/38xW8jn |
MD5: | 23ED78C00699D0EF97404A3901525DD3 |
SHA1: | 09125039F07B8B3DE33761BFEBB4E0754AEA6738 |
SHA-256: | B21A2E0BD7B733D42DB2FBC676E0710D00CF95491967ED46C8A204605DBFDA29 |
SHA-512: | 22AE4F4142F19399EE8C5ACF4EED70F9D91C41E3BB138522F340684CBA2C4E1FFF5233950DC9328861F79970ACABE2F5A28B396392AA72AD1A92429D61425D67 |
Malicious: | false |
URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.ZU1EFvXsC20.es5.O/ck=boq-identity.AccountsSignInUi.DDD9SPcAL2k.L.B1.O/am=HmAYCN1zFADxnHPgA5QCIQMAAAAAAAAAgJYBMgM/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,F6sNGb,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,VwDzFe,YHI3We,YTxL4,YgOFye,ZZ4WUe,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,bm51tf,byfTOb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,iAskyc,inNHtf,lRrMHd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,r1n9ec,rCcCxc,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vvMGie,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEXqJoaGwEo5TjSaLcvO8AROXJTtw/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:F6sNGb;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=wg1P6b" |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 44 |
Entropy (8bit): | 4.453416561671607 |
Encrypted: | false |
SSDEEP: | 3:8VKJmQcwVbF7KnZ:BJmjwVbF7KZ |
MD5: | 491DC96011445194971CFAE6A7A0B191 |
SHA1: | 74BD675A8CBC8AF507C0EB5509727EA3F9B85060 |
SHA-256: | C3BA6FCBB38A83C87009DEE4BAB93A9B3274553128D77E5B2C04077ECD35C1D3 |
SHA-512: | 38356EF67B6B704F2129828299E516B04B29EA1EEB25CF356E22E3AFEC7A875E2187F70E9E7CF0467DEFA14F11D802ACF00D69B2B13EFEA025942E21383AC35E |
Malicious: | false |
URL: | https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSHgmA6QC9dWevzxIFDRkBE_oSBQ3oIX6GEgUN05ioBw==?alt=proto |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 1600 |
Entropy (8bit): | 5.234706685474562 |
Encrypted: | false |
SSDEEP: | 48:o79bWW+d1xb0KeRV8YtQy0aqdHgxbaQ77DfTBpbrw:oAB6KOVddbqSnLzw |
MD5: | 777F1FD23230384A286E78C5ACD6AC33 |
SHA1: | CC33BAC75FDD7CE9AD535CBCEAD5C91D974DF975 |
SHA-256: | 277C957E852CD541B5D6D50B9A1CC3E6E6120DC704B529AADDA0171367557D98 |
SHA-512: | F785634C17C38826894B2D0D4363C26110418A9160AB36ACDFF2E6B76A2E07D32DD1BDA3D2D0F4D9BE3254DB834EB808FEA392A95B224AB5B94B429E69EBD1F0 |
Malicious: | false |
URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.ZU1EFvXsC20.es5.O/ck=boq-identity.AccountsSignInUi.DDD9SPcAL2k.L.B1.O/am=HmAYCN1zFADxnHPgA5QCIQMAAAAAAAAAgJYBMgM/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,F6sNGb,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,YHI3We,YTxL4,YgOFye,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,bm51tf,byfTOb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lRrMHd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,r1n9ec,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEXqJoaGwEo5TjSaLcvO8AROXJTtw/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:F6sNGb;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=w9hDv,VwDzFe,A7fCU" |
Preview: |
File type: | |
Entropy (8bit): | 7.035563548290413 |
TrID: |
|
File name: | file.exe |
File size: | 1'166'336 bytes |
MD5: | 619f9806ab2fad61f931922dd30ede7f |
SHA1: | e37a5d0abee7f33f31001dfb6352f7282fae174a |
SHA256: | 6948115e88783353bec40bf54a6d10c614fd1332848e6ce2f8a1932c918998ac |
SHA512: | 3b6df4cd430ac31e10a4d957a995073bfe582fd3965d69a108d62d0d6429a26083e533fc954e734b1c1e16450ea258e86bec6923a24373ab842f231600ff6935 |
SSDEEP: | 24576:gqDEvCTbMWu7rQYlBQcBiT6rprG8au/2+b+HdiJUX:gTvC/MTQYxsWR7au/2+b+HoJU |
TLSH: | C545BF027391C062FF9B92734F5AF6115BBC69260123E61F13981DBABE701B1563E7A3 |
File Content Preview: | MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.......................j:......j:..C...j:......@.*...............................n.......~.............{.......{.......{.........z.... |
Icon Hash: | aaf3e3e3938382a0 |
Entrypoint: | 0x420577 |
Entrypoint Section: | .text |
Digitally signed: | false |
Imagebase: | 0x400000 |
Subsystem: | windows gui |
Image File Characteristics: | EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE, 32BIT_MACHINE |
DLL Characteristics: | DYNAMIC_BASE, TERMINAL_SERVER_AWARE |
Time Stamp: | 0x6686DEC1 [Thu Jul 4 17:41:21 2024 UTC] |
TLS Callbacks: | |
CLR (.Net) Version: | |
OS Version Major: | 5 |
OS Version Minor: | 1 |
File Version Major: | 5 |
File Version Minor: | 1 |
Subsystem Version Major: | 5 |
Subsystem Version Minor: | 1 |
Import Hash: | 948cc502fe9226992dce9417f952fce3 |
Instruction |
---|
call 00007F98405004A3h |
jmp 00007F98404FFDAFh |
push ebp |
mov ebp, esp |
push esi |
push dword ptr [ebp+08h] |
mov esi, ecx |
call 00007F98404FFF8Dh |
mov dword ptr [esi], 0049FDF0h |
mov eax, esi |
pop esi |
pop ebp |
retn 0004h |
and dword ptr [ecx+04h], 00000000h |
mov eax, ecx |
and dword ptr [ecx+08h], 00000000h |
mov dword ptr [ecx+04h], 0049FDF8h |
mov dword ptr [ecx], 0049FDF0h |
ret |
push ebp |
mov ebp, esp |
push esi |
push dword ptr [ebp+08h] |
mov esi, ecx |
call 00007F98404FFF5Ah |
mov dword ptr [esi], 0049FE0Ch |
mov eax, esi |
pop esi |
pop ebp |
retn 0004h |
and dword ptr [ecx+04h], 00000000h |
mov eax, ecx |
and dword ptr [ecx+08h], 00000000h |
mov dword ptr [ecx+04h], 0049FE14h |
mov dword ptr [ecx], 0049FE0Ch |
ret |
push ebp |
mov ebp, esp |
push esi |
mov esi, ecx |
lea eax, dword ptr [esi+04h] |
mov dword ptr [esi], 0049FDD0h |
and dword ptr [eax], 00000000h |
and dword ptr [eax+04h], 00000000h |
push eax |
mov eax, dword ptr [ebp+08h] |
add eax, 04h |
push eax |
call 00007F9840502B4Dh |
pop ecx |
pop ecx |
mov eax, esi |
pop esi |
pop ebp |
retn 0004h |
lea eax, dword ptr [ecx+04h] |
mov dword ptr [ecx], 0049FDD0h |
push eax |
call 00007F9840502B98h |
pop ecx |
ret |
push ebp |
mov ebp, esp |
push esi |
mov esi, ecx |
lea eax, dword ptr [esi+04h] |
mov dword ptr [esi], 0049FDD0h |
push eax |
call 00007F9840502B81h |
test byte ptr [ebp+08h], 00000001h |
pop ecx |
Programming Language: |
|
Name | Virtual Address | Virtual Size | Is in Section |
---|---|---|---|
IMAGE_DIRECTORY_ENTRY_EXPORT | 0x0 | 0x0 | |
IMAGE_DIRECTORY_ENTRY_IMPORT | 0xc8e64 | 0x17c | .rdata |
IMAGE_DIRECTORY_ENTRY_RESOURCE | 0xd4000 | 0x4617c | .rsrc |
IMAGE_DIRECTORY_ENTRY_EXCEPTION | 0x0 | 0x0 | |
IMAGE_DIRECTORY_ENTRY_SECURITY | 0x0 | 0x0 | |
IMAGE_DIRECTORY_ENTRY_BASERELOC | 0x11b000 | 0x7594 | .reloc |
IMAGE_DIRECTORY_ENTRY_DEBUG | 0xb0ff0 | 0x1c | .rdata |
IMAGE_DIRECTORY_ENTRY_COPYRIGHT | 0x0 | 0x0 | |
IMAGE_DIRECTORY_ENTRY_GLOBALPTR | 0x0 | 0x0 | |
IMAGE_DIRECTORY_ENTRY_TLS | 0xc3400 | 0x18 | .rdata |
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG | 0xb1010 | 0x40 | .rdata |
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT | 0x0 | 0x0 | |
IMAGE_DIRECTORY_ENTRY_IAT | 0x9c000 | 0x894 | .rdata |
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT | 0x0 | 0x0 | |
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR | 0x0 | 0x0 | |
IMAGE_DIRECTORY_ENTRY_RESERVED | 0x0 | 0x0 |
Name | Virtual Address | Virtual Size | Raw Size | MD5 | Xored PE | ZLIB Complexity | File Type | Entropy | Characteristics |
---|---|---|---|---|---|---|---|---|---|
.text | 0x1000 | 0x9ab1d | 0x9ac00 | 0a1473f3064dcbc32ef93c5c8a90f3a6 | False | 0.565500681542811 | data | 6.668273581389308 | IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ |
.rdata | 0x9c000 | 0x2fb82 | 0x2fc00 | c9cf2468b60bf4f80f136ed54b3989fb | False | 0.35289185209424084 | data | 5.691811547483722 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ |
.data | 0xcc000 | 0x706c | 0x4800 | 53b9025d545d65e23295e30afdbd16d9 | False | 0.04356553819444445 | DOS executable (block device driver @\273\) | 0.5846666986982398 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE |
.rsrc | 0xd4000 | 0x4617c | 0x46200 | c2c7827c7524ac47cc17f50b3295d9d2 | False | 0.9065877061051694 | data | 7.844090278150599 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ |
.reloc | 0x11b000 | 0x7594 | 0x7600 | c68ee8931a32d45eb82dc450ee40efc3 | False | 0.7628111758474576 | data | 6.7972128181359786 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ |
Name | RVA | Size | Type | Language | Country | ZLIB Complexity |
---|---|---|---|---|---|---|
RT_ICON | 0xd45a8 | 0x128 | Device independent bitmap graphic, 16 x 32 x 4, image size 192 | English | Great Britain | 0.7466216216216216 |
RT_ICON | 0xd46d0 | 0x128 | Device independent bitmap graphic, 16 x 32 x 4, image size 128, 16 important colors | English | Great Britain | 0.3277027027027027 |
RT_ICON | 0xd47f8 | 0x128 | Device independent bitmap graphic, 16 x 32 x 4, image size 192 | English | Great Britain | 0.3885135135135135 |
RT_ICON | 0xd4920 | 0x2e8 | Device independent bitmap graphic, 32 x 64 x 4, image size 0 | English | Great Britain | 0.3333333333333333 |
RT_ICON | 0xd4c08 | 0x128 | Device independent bitmap graphic, 16 x 32 x 4, image size 0 | English | Great Britain | 0.5 |
RT_ICON | 0xd4d30 | 0xea8 | Device independent bitmap graphic, 48 x 96 x 8, image size 0 | English | Great Britain | 0.2835820895522388 |
RT_ICON | 0xd5bd8 | 0x8a8 | Device independent bitmap graphic, 32 x 64 x 8, image size 0 | English | Great Britain | 0.37906137184115524 |
RT_ICON | 0xd6480 | 0x568 | Device independent bitmap graphic, 16 x 32 x 8, image size 0 | English | Great Britain | 0.23699421965317918 |
RT_ICON | 0xd69e8 | 0x25a8 | Device independent bitmap graphic, 48 x 96 x 32, image size 0 | English | Great Britain | 0.13858921161825727 |
RT_ICON | 0xd8f90 | 0x10a8 | Device independent bitmap graphic, 32 x 64 x 32, image size 0 | English | Great Britain | 0.25070356472795496 |
RT_ICON | 0xda038 | 0x468 | Device independent bitmap graphic, 16 x 32 x 32, image size 0 | English | Great Britain | 0.3173758865248227 |
RT_MENU | 0xda4a0 | 0x50 | data | English | Great Britain | 0.9 |
RT_STRING | 0xda4f0 | 0x594 | data | English | Great Britain | 0.3333333333333333 |
RT_STRING | 0xdaa84 | 0x68a | data | English | Great Britain | 0.2735961768219833 |
RT_STRING | 0xdb110 | 0x490 | data | English | Great Britain | 0.3715753424657534 |
RT_STRING | 0xdb5a0 | 0x5fc | data | English | Great Britain | 0.3087467362924282 |
RT_STRING | 0xdbb9c | 0x65c | data | English | Great Britain | 0.34336609336609336 |
RT_STRING | 0xdc1f8 | 0x466 | data | English | Great Britain | 0.3605683836589698 |
RT_STRING | 0xdc660 | 0x158 | Matlab v4 mat-file (little endian) n, numeric, rows 0, columns 0 | English | Great Britain | 0.502906976744186 |
RT_RCDATA | 0xdc7b8 | 0x3d444 | data | 1.0003427004797807 | ||
RT_GROUP_ICON | 0x119bfc | 0x76 | data | English | Great Britain | 0.6610169491525424 |
RT_GROUP_ICON | 0x119c74 | 0x14 | data | English | Great Britain | 1.25 |
RT_GROUP_ICON | 0x119c88 | 0x14 | data | English | Great Britain | 1.15 |
RT_GROUP_ICON | 0x119c9c | 0x14 | data | English | Great Britain | 1.25 |
RT_VERSION | 0x119cb0 | 0xdc | data | English | Great Britain | 0.6181818181818182 |
RT_MANIFEST | 0x119d8c | 0x3ef | ASCII text, with CRLF line terminators | English | Great Britain | 0.5074478649453823 |
DLL | Import |
---|---|
WSOCK32.dll | gethostbyname, recv, send, socket, inet_ntoa, setsockopt, ntohs, WSACleanup, WSAStartup, sendto, htons, __WSAFDIsSet, select, accept, listen, bind, inet_addr, ioctlsocket, recvfrom, WSAGetLastError, closesocket, gethostname, connect |
VERSION.dll | GetFileVersionInfoW, VerQueryValueW, GetFileVersionInfoSizeW |
WINMM.dll | timeGetTime, waveOutSetVolume, mciSendStringW |
COMCTL32.dll | ImageList_ReplaceIcon, ImageList_Destroy, ImageList_Remove, ImageList_SetDragCursorImage, ImageList_BeginDrag, ImageList_DragEnter, ImageList_DragLeave, ImageList_EndDrag, ImageList_DragMove, InitCommonControlsEx, ImageList_Create |
MPR.dll | WNetGetConnectionW, WNetCancelConnection2W, WNetUseConnectionW, WNetAddConnection2W |
WININET.dll | HttpOpenRequestW, InternetCloseHandle, InternetOpenW, InternetSetOptionW, InternetCrackUrlW, HttpQueryInfoW, InternetQueryOptionW, InternetConnectW, HttpSendRequestW, FtpOpenFileW, FtpGetFileSize, InternetOpenUrlW, InternetReadFile, InternetQueryDataAvailable |
PSAPI.DLL | GetProcessMemoryInfo |
IPHLPAPI.DLL | IcmpSendEcho, IcmpCloseHandle, IcmpCreateFile |
USERENV.dll | DestroyEnvironmentBlock, LoadUserProfileW, CreateEnvironmentBlock, UnloadUserProfile |
UxTheme.dll | IsThemeActive |
KERNEL32.dll | DuplicateHandle, CreateThread, WaitForSingleObject, HeapAlloc, GetProcessHeap, HeapFree, Sleep, GetCurrentThreadId, MultiByteToWideChar, MulDiv, GetVersionExW, IsWow64Process, GetSystemInfo, FreeLibrary, LoadLibraryA, GetProcAddress, SetErrorMode, GetModuleFileNameW, WideCharToMultiByte, lstrcpyW, lstrlenW, GetModuleHandleW, QueryPerformanceCounter, VirtualFreeEx, OpenProcess, VirtualAllocEx, WriteProcessMemory, ReadProcessMemory, CreateFileW, SetFilePointerEx, SetEndOfFile, ReadFile, WriteFile, FlushFileBuffers, TerminateProcess, CreateToolhelp32Snapshot, Process32FirstW, Process32NextW, SetFileTime, GetFileAttributesW, FindFirstFileW, FindClose, GetLongPathNameW, GetShortPathNameW, DeleteFileW, IsDebuggerPresent, CopyFileExW, MoveFileW, CreateDirectoryW, RemoveDirectoryW, SetSystemPowerState, QueryPerformanceFrequency, LoadResource, LockResource, SizeofResource, OutputDebugStringW, GetTempPathW, GetTempFileNameW, DeviceIoControl, LoadLibraryW, GetLocalTime, CompareStringW, GetCurrentThread, EnterCriticalSection, LeaveCriticalSection, GetStdHandle, CreatePipe, InterlockedExchange, TerminateThread, LoadLibraryExW, FindResourceExW, CopyFileW, VirtualFree, FormatMessageW, GetExitCodeProcess, GetPrivateProfileStringW, WritePrivateProfileStringW, GetPrivateProfileSectionW, WritePrivateProfileSectionW, GetPrivateProfileSectionNamesW, FileTimeToLocalFileTime, FileTimeToSystemTime, SystemTimeToFileTime, LocalFileTimeToFileTime, GetDriveTypeW, GetDiskFreeSpaceExW, GetDiskFreeSpaceW, GetVolumeInformationW, SetVolumeLabelW, CreateHardLinkW, SetFileAttributesW, CreateEventW, SetEvent, GetEnvironmentVariableW, SetEnvironmentVariableW, GlobalLock, GlobalUnlock, GlobalAlloc, GetFileSize, GlobalFree, GlobalMemoryStatusEx, Beep, GetSystemDirectoryW, HeapReAlloc, HeapSize, GetComputerNameW, GetWindowsDirectoryW, GetCurrentProcessId, GetProcessIoCounters, CreateProcessW, GetProcessId, SetPriorityClass, VirtualAlloc, GetCurrentDirectoryW, lstrcmpiW, DecodePointer, GetLastError, RaiseException, InitializeCriticalSectionAndSpinCount, DeleteCriticalSection, InterlockedDecrement, InterlockedIncrement, ResetEvent, WaitForSingleObjectEx, IsProcessorFeaturePresent, UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetCurrentProcess, CloseHandle, GetFullPathNameW, GetStartupInfoW, GetSystemTimeAsFileTime, InitializeSListHead, RtlUnwind, SetLastError, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, EncodePointer, ExitProcess, GetModuleHandleExW, ExitThread, ResumeThread, FreeLibraryAndExitThread, GetACP, GetDateFormatW, GetTimeFormatW, LCMapStringW, GetStringTypeW, GetFileType, SetStdHandle, GetConsoleCP, GetConsoleMode, ReadConsoleW, GetTimeZoneInformation, FindFirstFileExW, IsValidCodePage, GetOEMCP, GetCPInfo, GetCommandLineA, GetCommandLineW, GetEnvironmentStringsW, FreeEnvironmentStringsW, SetEnvironmentVariableA, SetCurrentDirectoryW, FindNextFileW, WriteConsoleW |
USER32.dll | GetKeyboardLayoutNameW, IsCharAlphaW, IsCharAlphaNumericW, IsCharLowerW, IsCharUpperW, GetMenuStringW, GetSubMenu, GetCaretPos, IsZoomed, GetMonitorInfoW, SetWindowLongW, SetLayeredWindowAttributes, FlashWindow, GetClassLongW, TranslateAcceleratorW, IsDialogMessageW, GetSysColor, InflateRect, DrawFocusRect, DrawTextW, FrameRect, DrawFrameControl, FillRect, PtInRect, DestroyAcceleratorTable, CreateAcceleratorTableW, SetCursor, GetWindowDC, GetSystemMetrics, GetActiveWindow, CharNextW, wsprintfW, RedrawWindow, DrawMenuBar, DestroyMenu, SetMenu, GetWindowTextLengthW, CreateMenu, IsDlgButtonChecked, DefDlgProcW, CallWindowProcW, ReleaseCapture, SetCapture, PeekMessageW, GetInputState, UnregisterHotKey, CharLowerBuffW, MonitorFromPoint, MonitorFromRect, LoadImageW, mouse_event, ExitWindowsEx, SetActiveWindow, FindWindowExW, EnumThreadWindows, SetMenuDefaultItem, InsertMenuItemW, IsMenu, ClientToScreen, GetCursorPos, DeleteMenu, CheckMenuRadioItem, GetMenuItemID, GetMenuItemCount, SetMenuItemInfoW, GetMenuItemInfoW, SetForegroundWindow, IsIconic, FindWindowW, SystemParametersInfoW, LockWindowUpdate, SendInput, GetAsyncKeyState, SetKeyboardState, GetKeyboardState, GetKeyState, VkKeyScanW, LoadStringW, DialogBoxParamW, MessageBeep, EndDialog, SendDlgItemMessageW, GetDlgItem, SetWindowTextW, CopyRect, ReleaseDC, GetDC, EndPaint, BeginPaint, GetClientRect, GetMenu, DestroyWindow, EnumWindows, GetDesktopWindow, IsWindow, IsWindowEnabled, IsWindowVisible, EnableWindow, InvalidateRect, GetWindowLongW, GetWindowThreadProcessId, AttachThreadInput, GetFocus, GetWindowTextW, SendMessageTimeoutW, EnumChildWindows, CharUpperBuffW, GetClassNameW, GetParent, GetDlgCtrlID, SendMessageW, MapVirtualKeyW, PostMessageW, GetWindowRect, SetUserObjectSecurity, CloseDesktop, CloseWindowStation, OpenDesktopW, RegisterHotKey, GetCursorInfo, SetWindowPos, CopyImage, AdjustWindowRectEx, SetRect, SetClipboardData, EmptyClipboard, CountClipboardFormats, CloseClipboard, GetClipboardData, IsClipboardFormatAvailable, OpenClipboard, BlockInput, TrackPopupMenuEx, GetMessageW, SetProcessWindowStation, GetProcessWindowStation, OpenWindowStationW, GetUserObjectSecurity, MessageBoxW, DefWindowProcW, MoveWindow, SetFocus, PostQuitMessage, KillTimer, CreatePopupMenu, RegisterWindowMessageW, SetTimer, ShowWindow, CreateWindowExW, RegisterClassExW, LoadIconW, LoadCursorW, GetSysColorBrush, GetForegroundWindow, MessageBoxA, DestroyIcon, DispatchMessageW, keybd_event, TranslateMessage, ScreenToClient |
GDI32.dll | EndPath, DeleteObject, GetTextExtentPoint32W, ExtCreatePen, StrokeAndFillPath, GetDeviceCaps, SetPixel, CloseFigure, LineTo, AngleArc, MoveToEx, Ellipse, CreateCompatibleBitmap, CreateCompatibleDC, PolyDraw, BeginPath, Rectangle, SetViewportOrgEx, GetObjectW, SetBkMode, RoundRect, SetBkColor, CreatePen, SelectObject, StretchBlt, CreateSolidBrush, SetTextColor, CreateFontW, GetTextFaceW, GetStockObject, CreateDCW, GetPixel, DeleteDC, GetDIBits, StrokePath |
COMDLG32.dll | GetSaveFileNameW, GetOpenFileNameW |
ADVAPI32.dll | GetAce, RegEnumValueW, RegDeleteValueW, RegDeleteKeyW, RegEnumKeyExW, RegSetValueExW, RegOpenKeyExW, RegCloseKey, RegQueryValueExW, RegConnectRegistryW, InitializeSecurityDescriptor, InitializeAcl, AdjustTokenPrivileges, OpenThreadToken, OpenProcessToken, LookupPrivilegeValueW, DuplicateTokenEx, CreateProcessAsUserW, CreateProcessWithLogonW, GetLengthSid, CopySid, LogonUserW, AllocateAndInitializeSid, CheckTokenMembership, FreeSid, GetTokenInformation, RegCreateKeyExW, GetSecurityDescriptorDacl, GetAclInformation, GetUserNameW, AddAce, SetSecurityDescriptorDacl, InitiateSystemShutdownExW |
SHELL32.dll | DragFinish, DragQueryPoint, ShellExecuteExW, DragQueryFileW, SHEmptyRecycleBinW, SHGetPathFromIDListW, SHBrowseForFolderW, SHCreateShellItem, SHGetDesktopFolder, SHGetSpecialFolderLocation, SHGetFolderPathW, SHFileOperationW, ExtractIconExW, Shell_NotifyIconW, ShellExecuteW |
ole32.dll | CoTaskMemAlloc, CoTaskMemFree, CLSIDFromString, ProgIDFromCLSID, CLSIDFromProgID, OleSetMenuDescriptor, MkParseDisplayName, OleSetContainedObject, CoCreateInstance, IIDFromString, StringFromGUID2, CreateStreamOnHGlobal, OleInitialize, OleUninitialize, CoInitialize, CoUninitialize, GetRunningObjectTable, CoGetInstanceFromFile, CoGetObject, CoInitializeSecurity, CoCreateInstanceEx, CoSetProxyBlanket |
OLEAUT32.dll | CreateStdDispatch, CreateDispTypeInfo, UnRegisterTypeLib, UnRegisterTypeLibForUser, RegisterTypeLibForUser, RegisterTypeLib, LoadTypeLibEx, VariantCopyInd, SysReAllocString, SysFreeString, VariantChangeType, SafeArrayDestroyData, SafeArrayUnaccessData, SafeArrayAccessData, SafeArrayAllocData, SafeArrayAllocDescriptorEx, SafeArrayCreateVector, SysStringLen, QueryPathOfRegTypeLib, SysAllocString, VariantInit, VariantClear, DispCallFunc, VariantTimeToSystemTime, VarR8FromDec, SafeArrayGetVartype, SafeArrayDestroyDescriptor, VariantCopy, OleLoadPicture |
Language of compilation system | Country where language is spoken | Map |
---|---|---|
English | Great Britain |
Timestamp | Source Port | Dest Port | Source IP | Dest IP |
---|---|---|---|---|
Jul 4, 2024 20:34:49.834351063 CEST | 49674 | 443 | 192.168.2.6 | 173.222.162.64 |
Jul 4, 2024 20:34:49.834351063 CEST | 49673 | 443 | 192.168.2.6 | 173.222.162.64 |
Jul 4, 2024 20:34:50.162570953 CEST | 49672 | 443 | 192.168.2.6 | 173.222.162.64 |
Jul 4, 2024 20:34:53.465082884 CEST | 49713 | 443 | 192.168.2.6 | 142.250.185.206 |
Jul 4, 2024 20:34:53.465096951 CEST | 443 | 49713 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:34:53.465142012 CEST | 49713 | 443 | 192.168.2.6 | 142.250.185.206 |
Jul 4, 2024 20:34:53.467050076 CEST | 49713 | 443 | 192.168.2.6 | 142.250.185.206 |
Jul 4, 2024 20:34:53.467066050 CEST | 443 | 49713 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:34:54.148607969 CEST | 443 | 49713 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:34:54.148906946 CEST | 49713 | 443 | 192.168.2.6 | 142.250.185.206 |
Jul 4, 2024 20:34:54.148921013 CEST | 443 | 49713 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:34:54.149254084 CEST | 443 | 49713 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:34:54.149327040 CEST | 49713 | 443 | 192.168.2.6 | 142.250.185.206 |
Jul 4, 2024 20:34:54.149844885 CEST | 443 | 49713 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:34:54.149905920 CEST | 49713 | 443 | 192.168.2.6 | 142.250.185.206 |
Jul 4, 2024 20:34:54.150860071 CEST | 49713 | 443 | 192.168.2.6 | 142.250.185.206 |
Jul 4, 2024 20:34:54.150918961 CEST | 443 | 49713 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:34:54.151046038 CEST | 49713 | 443 | 192.168.2.6 | 142.250.185.206 |
Jul 4, 2024 20:34:54.151062012 CEST | 443 | 49713 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:34:54.200023890 CEST | 49713 | 443 | 192.168.2.6 | 142.250.185.206 |
Jul 4, 2024 20:34:54.472429991 CEST | 443 | 49713 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:34:54.472451925 CEST | 443 | 49713 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:34:54.472527027 CEST | 49713 | 443 | 192.168.2.6 | 142.250.185.206 |
Jul 4, 2024 20:34:54.472548962 CEST | 443 | 49713 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:34:54.472697973 CEST | 443 | 49713 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:34:54.473058939 CEST | 49713 | 443 | 192.168.2.6 | 142.250.185.206 |
Jul 4, 2024 20:34:54.476346970 CEST | 49713 | 443 | 192.168.2.6 | 142.250.185.206 |
Jul 4, 2024 20:34:54.476346970 CEST | 49713 | 443 | 192.168.2.6 | 142.250.185.206 |
Jul 4, 2024 20:34:54.476370096 CEST | 443 | 49713 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:34:54.476871967 CEST | 49713 | 443 | 192.168.2.6 | 142.250.185.206 |
Jul 4, 2024 20:34:57.341916084 CEST | 49721 | 443 | 192.168.2.6 | 142.250.186.68 |
Jul 4, 2024 20:34:57.341934919 CEST | 443 | 49721 | 142.250.186.68 | 192.168.2.6 |
Jul 4, 2024 20:34:57.342000961 CEST | 49721 | 443 | 192.168.2.6 | 142.250.186.68 |
Jul 4, 2024 20:34:57.342216969 CEST | 49721 | 443 | 192.168.2.6 | 142.250.186.68 |
Jul 4, 2024 20:34:57.342227936 CEST | 443 | 49721 | 142.250.186.68 | 192.168.2.6 |
Jul 4, 2024 20:34:57.991724014 CEST | 49724 | 443 | 192.168.2.6 | 184.28.90.27 |
Jul 4, 2024 20:34:57.991749048 CEST | 443 | 49724 | 184.28.90.27 | 192.168.2.6 |
Jul 4, 2024 20:34:57.991817951 CEST | 49724 | 443 | 192.168.2.6 | 184.28.90.27 |
Jul 4, 2024 20:34:57.993483067 CEST | 49724 | 443 | 192.168.2.6 | 184.28.90.27 |
Jul 4, 2024 20:34:57.993494034 CEST | 443 | 49724 | 184.28.90.27 | 192.168.2.6 |
Jul 4, 2024 20:34:58.005970955 CEST | 443 | 49721 | 142.250.186.68 | 192.168.2.6 |
Jul 4, 2024 20:34:58.006401062 CEST | 49721 | 443 | 192.168.2.6 | 142.250.186.68 |
Jul 4, 2024 20:34:58.006408930 CEST | 443 | 49721 | 142.250.186.68 | 192.168.2.6 |
Jul 4, 2024 20:34:58.007394075 CEST | 443 | 49721 | 142.250.186.68 | 192.168.2.6 |
Jul 4, 2024 20:34:58.007453918 CEST | 49721 | 443 | 192.168.2.6 | 142.250.186.68 |
Jul 4, 2024 20:34:58.008380890 CEST | 49721 | 443 | 192.168.2.6 | 142.250.186.68 |
Jul 4, 2024 20:34:58.008435965 CEST | 443 | 49721 | 142.250.186.68 | 192.168.2.6 |
Jul 4, 2024 20:34:58.054126024 CEST | 49721 | 443 | 192.168.2.6 | 142.250.186.68 |
Jul 4, 2024 20:34:58.054131985 CEST | 443 | 49721 | 142.250.186.68 | 192.168.2.6 |
Jul 4, 2024 20:34:58.103091955 CEST | 49721 | 443 | 192.168.2.6 | 142.250.186.68 |
Jul 4, 2024 20:34:58.670813084 CEST | 443 | 49724 | 184.28.90.27 | 192.168.2.6 |
Jul 4, 2024 20:34:58.671008110 CEST | 49724 | 443 | 192.168.2.6 | 184.28.90.27 |
Jul 4, 2024 20:34:58.674293041 CEST | 49724 | 443 | 192.168.2.6 | 184.28.90.27 |
Jul 4, 2024 20:34:58.674299955 CEST | 443 | 49724 | 184.28.90.27 | 192.168.2.6 |
Jul 4, 2024 20:34:58.674534082 CEST | 443 | 49724 | 184.28.90.27 | 192.168.2.6 |
Jul 4, 2024 20:34:58.712954044 CEST | 49724 | 443 | 192.168.2.6 | 184.28.90.27 |
Jul 4, 2024 20:34:58.756515026 CEST | 443 | 49724 | 184.28.90.27 | 192.168.2.6 |
Jul 4, 2024 20:34:58.948301077 CEST | 443 | 49724 | 184.28.90.27 | 192.168.2.6 |
Jul 4, 2024 20:34:58.948350906 CEST | 443 | 49724 | 184.28.90.27 | 192.168.2.6 |
Jul 4, 2024 20:34:58.948400021 CEST | 49724 | 443 | 192.168.2.6 | 184.28.90.27 |
Jul 4, 2024 20:34:58.948498011 CEST | 49724 | 443 | 192.168.2.6 | 184.28.90.27 |
Jul 4, 2024 20:34:58.948510885 CEST | 443 | 49724 | 184.28.90.27 | 192.168.2.6 |
Jul 4, 2024 20:34:58.948522091 CEST | 49724 | 443 | 192.168.2.6 | 184.28.90.27 |
Jul 4, 2024 20:34:58.948529005 CEST | 443 | 49724 | 184.28.90.27 | 192.168.2.6 |
Jul 4, 2024 20:34:58.990547895 CEST | 49730 | 443 | 192.168.2.6 | 184.28.90.27 |
Jul 4, 2024 20:34:58.990653992 CEST | 443 | 49730 | 184.28.90.27 | 192.168.2.6 |
Jul 4, 2024 20:34:58.990760088 CEST | 49730 | 443 | 192.168.2.6 | 184.28.90.27 |
Jul 4, 2024 20:34:58.991106987 CEST | 49730 | 443 | 192.168.2.6 | 184.28.90.27 |
Jul 4, 2024 20:34:58.991143942 CEST | 443 | 49730 | 184.28.90.27 | 192.168.2.6 |
Jul 4, 2024 20:34:59.080302954 CEST | 49731 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:34:59.080329895 CEST | 443 | 49731 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:34:59.080379963 CEST | 49731 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:34:59.080924988 CEST | 49731 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:34:59.080939054 CEST | 443 | 49731 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:34:59.443030119 CEST | 49674 | 443 | 192.168.2.6 | 173.222.162.64 |
Jul 4, 2024 20:34:59.443030119 CEST | 49673 | 443 | 192.168.2.6 | 173.222.162.64 |
Jul 4, 2024 20:34:59.642990112 CEST | 443 | 49730 | 184.28.90.27 | 192.168.2.6 |
Jul 4, 2024 20:34:59.643079996 CEST | 49730 | 443 | 192.168.2.6 | 184.28.90.27 |
Jul 4, 2024 20:34:59.645386934 CEST | 49730 | 443 | 192.168.2.6 | 184.28.90.27 |
Jul 4, 2024 20:34:59.645397902 CEST | 443 | 49730 | 184.28.90.27 | 192.168.2.6 |
Jul 4, 2024 20:34:59.645648003 CEST | 443 | 49730 | 184.28.90.27 | 192.168.2.6 |
Jul 4, 2024 20:34:59.646744013 CEST | 49730 | 443 | 192.168.2.6 | 184.28.90.27 |
Jul 4, 2024 20:34:59.692488909 CEST | 443 | 49730 | 184.28.90.27 | 192.168.2.6 |
Jul 4, 2024 20:34:59.771313906 CEST | 49672 | 443 | 192.168.2.6 | 173.222.162.64 |
Jul 4, 2024 20:34:59.892556906 CEST | 443 | 49731 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:34:59.892627001 CEST | 49731 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:34:59.897423983 CEST | 49731 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:34:59.897449970 CEST | 443 | 49731 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:34:59.897687912 CEST | 443 | 49731 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:34:59.900713921 CEST | 49731 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:34:59.900803089 CEST | 49731 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:34:59.900813103 CEST | 443 | 49731 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:34:59.900904894 CEST | 49731 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:34:59.930063963 CEST | 443 | 49730 | 184.28.90.27 | 192.168.2.6 |
Jul 4, 2024 20:34:59.930129051 CEST | 443 | 49730 | 184.28.90.27 | 192.168.2.6 |
Jul 4, 2024 20:34:59.931308031 CEST | 49730 | 443 | 192.168.2.6 | 184.28.90.27 |
Jul 4, 2024 20:34:59.931344032 CEST | 49730 | 443 | 192.168.2.6 | 184.28.90.27 |
Jul 4, 2024 20:34:59.931365013 CEST | 443 | 49730 | 184.28.90.27 | 192.168.2.6 |
Jul 4, 2024 20:34:59.931395054 CEST | 49730 | 443 | 192.168.2.6 | 184.28.90.27 |
Jul 4, 2024 20:34:59.931401968 CEST | 443 | 49730 | 184.28.90.27 | 192.168.2.6 |
Jul 4, 2024 20:34:59.948513985 CEST | 443 | 49731 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:35:00.085235119 CEST | 443 | 49731 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:35:00.085639000 CEST | 443 | 49731 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:35:00.086726904 CEST | 49731 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:35:00.097992897 CEST | 49731 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:35:00.098014116 CEST | 443 | 49731 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:35:01.279266119 CEST | 49739 | 443 | 192.168.2.6 | 142.250.185.206 |
Jul 4, 2024 20:35:01.279299021 CEST | 443 | 49739 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:35:01.279424906 CEST | 49739 | 443 | 192.168.2.6 | 142.250.185.206 |
Jul 4, 2024 20:35:01.279874086 CEST | 49739 | 443 | 192.168.2.6 | 142.250.185.206 |
Jul 4, 2024 20:35:01.279886007 CEST | 443 | 49739 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:35:01.489970922 CEST | 443 | 49705 | 173.222.162.64 | 192.168.2.6 |
Jul 4, 2024 20:35:01.490058899 CEST | 49705 | 443 | 192.168.2.6 | 173.222.162.64 |
Jul 4, 2024 20:35:01.933110952 CEST | 443 | 49739 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:35:01.933530092 CEST | 49739 | 443 | 192.168.2.6 | 142.250.185.206 |
Jul 4, 2024 20:35:01.933547974 CEST | 443 | 49739 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:35:01.933895111 CEST | 443 | 49739 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:35:01.933985949 CEST | 49739 | 443 | 192.168.2.6 | 142.250.185.206 |
Jul 4, 2024 20:35:01.934503078 CEST | 443 | 49739 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:35:01.934551001 CEST | 49739 | 443 | 192.168.2.6 | 142.250.185.206 |
Jul 4, 2024 20:35:01.943705082 CEST | 49739 | 443 | 192.168.2.6 | 142.250.185.206 |
Jul 4, 2024 20:35:01.943769932 CEST | 443 | 49739 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:35:01.944058895 CEST | 49739 | 443 | 192.168.2.6 | 142.250.185.206 |
Jul 4, 2024 20:35:01.944073915 CEST | 443 | 49739 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:35:01.990325928 CEST | 49739 | 443 | 192.168.2.6 | 142.250.185.206 |
Jul 4, 2024 20:35:02.249540091 CEST | 443 | 49739 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:35:02.249582052 CEST | 443 | 49739 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:35:02.249667883 CEST | 49739 | 443 | 192.168.2.6 | 142.250.185.206 |
Jul 4, 2024 20:35:02.249681950 CEST | 443 | 49739 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:35:02.249733925 CEST | 49739 | 443 | 192.168.2.6 | 142.250.185.206 |
Jul 4, 2024 20:35:02.249802113 CEST | 443 | 49739 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:35:02.249850035 CEST | 49739 | 443 | 192.168.2.6 | 142.250.185.206 |
Jul 4, 2024 20:35:02.255326033 CEST | 443 | 49739 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:35:02.255423069 CEST | 49739 | 443 | 192.168.2.6 | 142.250.185.206 |
Jul 4, 2024 20:35:02.261492014 CEST | 443 | 49739 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:35:02.261524916 CEST | 443 | 49739 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:35:02.261583090 CEST | 49739 | 443 | 192.168.2.6 | 142.250.185.206 |
Jul 4, 2024 20:35:02.261590004 CEST | 443 | 49739 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:35:02.261657000 CEST | 49739 | 443 | 192.168.2.6 | 142.250.185.206 |
Jul 4, 2024 20:35:02.269727945 CEST | 443 | 49739 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:35:02.269798040 CEST | 49739 | 443 | 192.168.2.6 | 142.250.185.206 |
Jul 4, 2024 20:35:02.273407936 CEST | 443 | 49739 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:35:02.273495913 CEST | 443 | 49739 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:35:02.273530006 CEST | 49739 | 443 | 192.168.2.6 | 142.250.185.206 |
Jul 4, 2024 20:35:02.273535967 CEST | 443 | 49739 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:35:02.273578882 CEST | 49739 | 443 | 192.168.2.6 | 142.250.185.206 |
Jul 4, 2024 20:35:02.342746019 CEST | 443 | 49739 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:35:02.342787981 CEST | 443 | 49739 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:35:02.342809916 CEST | 49739 | 443 | 192.168.2.6 | 142.250.185.206 |
Jul 4, 2024 20:35:02.342832088 CEST | 443 | 49739 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:35:02.342931986 CEST | 443 | 49739 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:35:02.343120098 CEST | 49739 | 443 | 192.168.2.6 | 142.250.185.206 |
Jul 4, 2024 20:35:02.343128920 CEST | 443 | 49739 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:35:02.344582081 CEST | 443 | 49739 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:35:02.344618082 CEST | 443 | 49739 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:35:02.344645023 CEST | 49739 | 443 | 192.168.2.6 | 142.250.185.206 |
Jul 4, 2024 20:35:02.344650984 CEST | 443 | 49739 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:35:02.344670057 CEST | 49739 | 443 | 192.168.2.6 | 142.250.185.206 |
Jul 4, 2024 20:35:02.350312948 CEST | 443 | 49739 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:35:02.350750923 CEST | 49739 | 443 | 192.168.2.6 | 142.250.185.206 |
Jul 4, 2024 20:35:02.350756884 CEST | 443 | 49739 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:35:02.356374979 CEST | 443 | 49739 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:35:02.356400013 CEST | 443 | 49739 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:35:02.356502056 CEST | 49739 | 443 | 192.168.2.6 | 142.250.185.206 |
Jul 4, 2024 20:35:02.356507063 CEST | 443 | 49739 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:35:02.356580973 CEST | 49739 | 443 | 192.168.2.6 | 142.250.185.206 |
Jul 4, 2024 20:35:02.362276077 CEST | 443 | 49739 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:35:02.368706942 CEST | 443 | 49739 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:35:02.368745089 CEST | 443 | 49739 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:35:02.368820906 CEST | 49739 | 443 | 192.168.2.6 | 142.250.185.206 |
Jul 4, 2024 20:35:02.368828058 CEST | 443 | 49739 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:35:02.368969917 CEST | 49739 | 443 | 192.168.2.6 | 142.250.185.206 |
Jul 4, 2024 20:35:02.368974924 CEST | 443 | 49739 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:35:02.368993044 CEST | 443 | 49739 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:35:02.369118929 CEST | 49739 | 443 | 192.168.2.6 | 142.250.185.206 |
Jul 4, 2024 20:35:02.601649046 CEST | 49739 | 443 | 192.168.2.6 | 142.250.185.206 |
Jul 4, 2024 20:35:02.601664066 CEST | 443 | 49739 | 142.250.185.206 | 192.168.2.6 |
Jul 4, 2024 20:35:02.649183989 CEST | 49743 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:02.649218082 CEST | 443 | 49743 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:02.649333954 CEST | 49743 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:02.649774075 CEST | 49743 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:02.649786949 CEST | 443 | 49743 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:02.701739073 CEST | 49744 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:02.701775074 CEST | 443 | 49744 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:02.701844931 CEST | 49744 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:02.702394962 CEST | 49744 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:02.702411890 CEST | 443 | 49744 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:03.350214005 CEST | 443 | 49744 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:03.350666046 CEST | 49744 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:03.350675106 CEST | 443 | 49744 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:03.351027966 CEST | 443 | 49744 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:03.351090908 CEST | 49744 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:03.351723909 CEST | 443 | 49744 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:03.351777077 CEST | 49744 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:03.352722883 CEST | 49744 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:03.352781057 CEST | 443 | 49744 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:03.353053093 CEST | 49744 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:03.353059053 CEST | 443 | 49744 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:03.394092083 CEST | 443 | 49743 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:03.394359112 CEST | 49743 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:03.394371033 CEST | 443 | 49743 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:03.394684076 CEST | 443 | 49743 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:03.394745111 CEST | 49743 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:03.395298004 CEST | 443 | 49743 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:03.395380020 CEST | 49743 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:03.396112919 CEST | 49743 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:03.396164894 CEST | 443 | 49743 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:03.396449089 CEST | 49743 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:03.396454096 CEST | 443 | 49743 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:03.397032976 CEST | 49744 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:03.443464994 CEST | 49743 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:03.630973101 CEST | 443 | 49744 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:03.631108999 CEST | 443 | 49744 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:03.631165028 CEST | 49744 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:03.632637978 CEST | 49744 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:03.632652044 CEST | 443 | 49744 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:03.633924961 CEST | 49749 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:03.633949041 CEST | 443 | 49749 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:03.634032965 CEST | 49749 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:03.634529114 CEST | 49749 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:03.634546041 CEST | 443 | 49749 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:03.675834894 CEST | 443 | 49743 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:03.675899029 CEST | 443 | 49743 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:03.675976038 CEST | 49743 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:03.678620100 CEST | 49743 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:03.678630114 CEST | 443 | 49743 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:03.679769993 CEST | 49750 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:03.679785967 CEST | 443 | 49750 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:03.679869890 CEST | 49750 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:03.680866003 CEST | 49750 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:03.680876017 CEST | 443 | 49750 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:04.308753967 CEST | 443 | 49749 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:04.315104008 CEST | 49749 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:04.315138102 CEST | 443 | 49749 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:04.315692902 CEST | 443 | 49749 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:04.315761089 CEST | 49749 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:04.316380024 CEST | 443 | 49749 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:04.316437006 CEST | 49749 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:04.316590071 CEST | 49749 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:04.316651106 CEST | 443 | 49749 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:04.316838026 CEST | 49749 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:04.316849947 CEST | 443 | 49749 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:04.316868067 CEST | 49749 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:04.340585947 CEST | 443 | 49750 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:04.340794086 CEST | 49750 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:04.340805054 CEST | 443 | 49750 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:04.341167927 CEST | 443 | 49750 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:04.341222048 CEST | 49750 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:04.341881990 CEST | 443 | 49750 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:04.341938972 CEST | 49750 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:04.342173100 CEST | 49750 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:04.342238903 CEST | 443 | 49750 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:04.342403889 CEST | 49750 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:04.342417002 CEST | 443 | 49750 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:04.342433929 CEST | 49750 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:04.364501953 CEST | 443 | 49749 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:04.365262032 CEST | 49749 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:04.388500929 CEST | 443 | 49750 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:04.396573067 CEST | 49750 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:04.532821894 CEST | 443 | 49749 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:04.532957077 CEST | 443 | 49749 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:04.533036947 CEST | 49749 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:04.533998966 CEST | 49749 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:04.534020901 CEST | 443 | 49749 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:04.536468029 CEST | 443 | 49750 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:04.536850929 CEST | 443 | 49750 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:04.536911011 CEST | 49750 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:04.537818909 CEST | 49750 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:04.537836075 CEST | 443 | 49750 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:04.630651951 CEST | 49721 | 443 | 192.168.2.6 | 142.250.186.68 |
Jul 4, 2024 20:35:04.672503948 CEST | 443 | 49721 | 142.250.186.68 | 192.168.2.6 |
Jul 4, 2024 20:35:04.904772043 CEST | 443 | 49721 | 142.250.186.68 | 192.168.2.6 |
Jul 4, 2024 20:35:04.904808998 CEST | 443 | 49721 | 142.250.186.68 | 192.168.2.6 |
Jul 4, 2024 20:35:04.904836893 CEST | 443 | 49721 | 142.250.186.68 | 192.168.2.6 |
Jul 4, 2024 20:35:04.904849052 CEST | 49721 | 443 | 192.168.2.6 | 142.250.186.68 |
Jul 4, 2024 20:35:04.904860020 CEST | 443 | 49721 | 142.250.186.68 | 192.168.2.6 |
Jul 4, 2024 20:35:04.904870033 CEST | 443 | 49721 | 142.250.186.68 | 192.168.2.6 |
Jul 4, 2024 20:35:04.904921055 CEST | 49721 | 443 | 192.168.2.6 | 142.250.186.68 |
Jul 4, 2024 20:35:04.904937029 CEST | 443 | 49721 | 142.250.186.68 | 192.168.2.6 |
Jul 4, 2024 20:35:04.904977083 CEST | 49721 | 443 | 192.168.2.6 | 142.250.186.68 |
Jul 4, 2024 20:35:04.905033112 CEST | 443 | 49721 | 142.250.186.68 | 192.168.2.6 |
Jul 4, 2024 20:35:04.905071974 CEST | 443 | 49721 | 142.250.186.68 | 192.168.2.6 |
Jul 4, 2024 20:35:04.905111074 CEST | 49721 | 443 | 192.168.2.6 | 142.250.186.68 |
Jul 4, 2024 20:35:04.906713963 CEST | 49721 | 443 | 192.168.2.6 | 142.250.186.68 |
Jul 4, 2024 20:35:04.906724930 CEST | 443 | 49721 | 142.250.186.68 | 192.168.2.6 |
Jul 4, 2024 20:35:07.174556971 CEST | 49756 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:35:07.174571991 CEST | 443 | 49756 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:35:07.174662113 CEST | 49756 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:35:07.175450087 CEST | 49756 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:35:07.175460100 CEST | 443 | 49756 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:35:07.972490072 CEST | 443 | 49756 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:35:07.972735882 CEST | 49756 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:35:07.974977016 CEST | 49756 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:35:07.974989891 CEST | 443 | 49756 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:35:07.975193977 CEST | 443 | 49756 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:35:07.977201939 CEST | 49756 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:35:07.977258921 CEST | 49756 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:35:07.977262974 CEST | 443 | 49756 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:35:07.977417946 CEST | 49756 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:35:08.020507097 CEST | 443 | 49756 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:35:08.151561975 CEST | 443 | 49756 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:35:08.151904106 CEST | 443 | 49756 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:35:08.151966095 CEST | 49756 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:35:08.152589083 CEST | 49756 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:35:08.152610064 CEST | 443 | 49756 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:35:08.152625084 CEST | 49756 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:35:09.999947071 CEST | 49758 | 443 | 192.168.2.6 | 40.68.123.157 |
Jul 4, 2024 20:35:10.000005007 CEST | 443 | 49758 | 40.68.123.157 | 192.168.2.6 |
Jul 4, 2024 20:35:10.000087976 CEST | 49758 | 443 | 192.168.2.6 | 40.68.123.157 |
Jul 4, 2024 20:35:10.001221895 CEST | 49758 | 443 | 192.168.2.6 | 40.68.123.157 |
Jul 4, 2024 20:35:10.001239061 CEST | 443 | 49758 | 40.68.123.157 | 192.168.2.6 |
Jul 4, 2024 20:35:10.367719889 CEST | 49759 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:10.367772102 CEST | 443 | 49759 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:10.367837906 CEST | 49759 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:10.368302107 CEST | 49759 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:10.368340015 CEST | 443 | 49759 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:10.831104040 CEST | 443 | 49758 | 40.68.123.157 | 192.168.2.6 |
Jul 4, 2024 20:35:10.831191063 CEST | 49758 | 443 | 192.168.2.6 | 40.68.123.157 |
Jul 4, 2024 20:35:10.835541964 CEST | 49758 | 443 | 192.168.2.6 | 40.68.123.157 |
Jul 4, 2024 20:35:10.835570097 CEST | 443 | 49758 | 40.68.123.157 | 192.168.2.6 |
Jul 4, 2024 20:35:10.835782051 CEST | 443 | 49758 | 40.68.123.157 | 192.168.2.6 |
Jul 4, 2024 20:35:10.879565001 CEST | 49758 | 443 | 192.168.2.6 | 40.68.123.157 |
Jul 4, 2024 20:35:10.902615070 CEST | 49758 | 443 | 192.168.2.6 | 40.68.123.157 |
Jul 4, 2024 20:35:10.948504925 CEST | 443 | 49758 | 40.68.123.157 | 192.168.2.6 |
Jul 4, 2024 20:35:11.043445110 CEST | 443 | 49759 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:11.045222044 CEST | 49759 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:11.045264006 CEST | 443 | 49759 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:11.045594931 CEST | 443 | 49759 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:11.049120903 CEST | 49759 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:11.049184084 CEST | 443 | 49759 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:11.049338102 CEST | 49759 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:11.049355030 CEST | 49759 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:11.049366951 CEST | 443 | 49759 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:11.177021027 CEST | 443 | 49758 | 40.68.123.157 | 192.168.2.6 |
Jul 4, 2024 20:35:11.177041054 CEST | 443 | 49758 | 40.68.123.157 | 192.168.2.6 |
Jul 4, 2024 20:35:11.177047968 CEST | 443 | 49758 | 40.68.123.157 | 192.168.2.6 |
Jul 4, 2024 20:35:11.177056074 CEST | 443 | 49758 | 40.68.123.157 | 192.168.2.6 |
Jul 4, 2024 20:35:11.177078962 CEST | 443 | 49758 | 40.68.123.157 | 192.168.2.6 |
Jul 4, 2024 20:35:11.177156925 CEST | 49758 | 443 | 192.168.2.6 | 40.68.123.157 |
Jul 4, 2024 20:35:11.177208900 CEST | 443 | 49758 | 40.68.123.157 | 192.168.2.6 |
Jul 4, 2024 20:35:11.177253962 CEST | 49758 | 443 | 192.168.2.6 | 40.68.123.157 |
Jul 4, 2024 20:35:11.178396940 CEST | 443 | 49758 | 40.68.123.157 | 192.168.2.6 |
Jul 4, 2024 20:35:11.178468943 CEST | 443 | 49758 | 40.68.123.157 | 192.168.2.6 |
Jul 4, 2024 20:35:11.178514957 CEST | 49758 | 443 | 192.168.2.6 | 40.68.123.157 |
Jul 4, 2024 20:35:11.178540945 CEST | 49758 | 443 | 192.168.2.6 | 40.68.123.157 |
Jul 4, 2024 20:35:11.200525045 CEST | 49758 | 443 | 192.168.2.6 | 40.68.123.157 |
Jul 4, 2024 20:35:11.200567961 CEST | 443 | 49758 | 40.68.123.157 | 192.168.2.6 |
Jul 4, 2024 20:35:11.357909918 CEST | 443 | 49759 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:11.358077049 CEST | 443 | 49759 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:11.358141899 CEST | 49759 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:11.358839989 CEST | 49759 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:11.358860970 CEST | 443 | 49759 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:19.496682882 CEST | 49764 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:35:19.496745110 CEST | 443 | 49764 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:35:19.496834993 CEST | 49764 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:35:19.497426033 CEST | 49764 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:35:19.497446060 CEST | 443 | 49764 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:35:20.306452990 CEST | 443 | 49764 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:35:20.306528091 CEST | 49764 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:35:20.313566923 CEST | 49764 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:35:20.313621044 CEST | 443 | 49764 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:35:20.313853979 CEST | 443 | 49764 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:35:20.316647053 CEST | 49764 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:35:20.316761971 CEST | 49764 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:35:20.316771030 CEST | 443 | 49764 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:35:20.316935062 CEST | 49764 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:35:20.364510059 CEST | 443 | 49764 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:35:20.507817030 CEST | 443 | 49764 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:35:20.508001089 CEST | 443 | 49764 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:35:20.508066893 CEST | 49764 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:35:20.508203030 CEST | 49764 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:35:20.508227110 CEST | 443 | 49764 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:35:33.008377075 CEST | 49765 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:33.008435011 CEST | 443 | 49765 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:33.008514881 CEST | 49765 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:33.008853912 CEST | 49765 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:33.008869886 CEST | 443 | 49765 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:33.648406029 CEST | 49766 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:33.648468018 CEST | 443 | 49766 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:33.648550987 CEST | 49766 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:33.648839951 CEST | 49766 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:33.648854017 CEST | 443 | 49766 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:33.691818953 CEST | 443 | 49765 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:33.692672014 CEST | 49765 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:33.692730904 CEST | 443 | 49765 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:33.693068027 CEST | 443 | 49765 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:33.695457935 CEST | 49767 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:33.695508957 CEST | 443 | 49767 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:33.695576906 CEST | 49767 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:33.695867062 CEST | 49765 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:33.695926905 CEST | 443 | 49765 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:33.696156979 CEST | 49767 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:33.696171999 CEST | 443 | 49767 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:33.696448088 CEST | 49765 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:33.696470022 CEST | 49765 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:33.696486950 CEST | 443 | 49765 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:33.979104042 CEST | 443 | 49765 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:33.979223013 CEST | 443 | 49765 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:33.979293108 CEST | 49765 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:33.979749918 CEST | 49765 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:33.979772091 CEST | 443 | 49765 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:34.343453884 CEST | 443 | 49766 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:34.343847990 CEST | 49766 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:34.343887091 CEST | 443 | 49766 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:34.344253063 CEST | 443 | 49766 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:34.344839096 CEST | 49766 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:34.344914913 CEST | 443 | 49766 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:34.345340014 CEST | 49766 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:34.345362902 CEST | 49766 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:34.345412970 CEST | 443 | 49766 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:34.349263906 CEST | 443 | 49767 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:34.349756002 CEST | 49767 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:34.349781036 CEST | 443 | 49767 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:34.350102901 CEST | 443 | 49767 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:34.350171089 CEST | 49767 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:34.350709915 CEST | 443 | 49767 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:34.350766897 CEST | 49767 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:34.351078987 CEST | 49767 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:34.351135015 CEST | 443 | 49767 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:34.351346016 CEST | 49767 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:34.351353884 CEST | 443 | 49767 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:34.351371050 CEST | 49767 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:34.392498016 CEST | 443 | 49767 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:34.395457983 CEST | 49767 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:34.544306993 CEST | 443 | 49766 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:34.544444084 CEST | 443 | 49766 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:34.544492006 CEST | 49766 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:34.545372009 CEST | 443 | 49767 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:34.545490980 CEST | 443 | 49767 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:34.545531034 CEST | 49767 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:34.559844971 CEST | 49767 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:34.559880972 CEST | 443 | 49767 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:34.561125994 CEST | 49766 | 443 | 192.168.2.6 | 142.250.185.238 |
Jul 4, 2024 20:35:34.561146975 CEST | 443 | 49766 | 142.250.185.238 | 192.168.2.6 |
Jul 4, 2024 20:35:38.624353886 CEST | 49768 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:35:38.624399900 CEST | 443 | 49768 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:35:38.624474049 CEST | 49768 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:35:38.625224113 CEST | 49768 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:35:38.625238895 CEST | 443 | 49768 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:35:39.425875902 CEST | 443 | 49768 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:35:39.425940037 CEST | 49768 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:35:39.428442955 CEST | 49768 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:35:39.428467035 CEST | 443 | 49768 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:35:39.428679943 CEST | 443 | 49768 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:35:39.430851936 CEST | 49768 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:35:39.430936098 CEST | 49768 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:35:39.430939913 CEST | 443 | 49768 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:35:39.431116104 CEST | 49768 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:35:39.472489119 CEST | 443 | 49768 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:35:39.607716084 CEST | 443 | 49768 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:35:39.608153105 CEST | 443 | 49768 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:35:39.608201027 CEST | 49768 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:35:39.608464956 CEST | 49768 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:35:39.608495951 CEST | 443 | 49768 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:35:39.608514071 CEST | 49768 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:35:47.758979082 CEST | 49769 | 443 | 192.168.2.6 | 40.68.123.157 |
Jul 4, 2024 20:35:47.759021997 CEST | 443 | 49769 | 40.68.123.157 | 192.168.2.6 |
Jul 4, 2024 20:35:47.759130001 CEST | 49769 | 443 | 192.168.2.6 | 40.68.123.157 |
Jul 4, 2024 20:35:47.759479046 CEST | 49769 | 443 | 192.168.2.6 | 40.68.123.157 |
Jul 4, 2024 20:35:47.759495020 CEST | 443 | 49769 | 40.68.123.157 | 192.168.2.6 |
Jul 4, 2024 20:35:48.632366896 CEST | 443 | 49769 | 40.68.123.157 | 192.168.2.6 |
Jul 4, 2024 20:35:48.632561922 CEST | 49769 | 443 | 192.168.2.6 | 40.68.123.157 |
Jul 4, 2024 20:35:48.634157896 CEST | 49769 | 443 | 192.168.2.6 | 40.68.123.157 |
Jul 4, 2024 20:35:48.634169102 CEST | 443 | 49769 | 40.68.123.157 | 192.168.2.6 |
Jul 4, 2024 20:35:48.634371996 CEST | 443 | 49769 | 40.68.123.157 | 192.168.2.6 |
Jul 4, 2024 20:35:48.643074989 CEST | 49769 | 443 | 192.168.2.6 | 40.68.123.157 |
Jul 4, 2024 20:35:48.688504934 CEST | 443 | 49769 | 40.68.123.157 | 192.168.2.6 |
Jul 4, 2024 20:35:48.985445976 CEST | 443 | 49769 | 40.68.123.157 | 192.168.2.6 |
Jul 4, 2024 20:35:48.985467911 CEST | 443 | 49769 | 40.68.123.157 | 192.168.2.6 |
Jul 4, 2024 20:35:48.985510111 CEST | 443 | 49769 | 40.68.123.157 | 192.168.2.6 |
Jul 4, 2024 20:35:48.985745907 CEST | 49769 | 443 | 192.168.2.6 | 40.68.123.157 |
Jul 4, 2024 20:35:48.985769987 CEST | 443 | 49769 | 40.68.123.157 | 192.168.2.6 |
Jul 4, 2024 20:35:48.985836983 CEST | 49769 | 443 | 192.168.2.6 | 40.68.123.157 |
Jul 4, 2024 20:35:48.986666918 CEST | 443 | 49769 | 40.68.123.157 | 192.168.2.6 |
Jul 4, 2024 20:35:48.986707926 CEST | 443 | 49769 | 40.68.123.157 | 192.168.2.6 |
Jul 4, 2024 20:35:48.986732006 CEST | 49769 | 443 | 192.168.2.6 | 40.68.123.157 |
Jul 4, 2024 20:35:48.986737967 CEST | 443 | 49769 | 40.68.123.157 | 192.168.2.6 |
Jul 4, 2024 20:35:48.986767054 CEST | 49769 | 443 | 192.168.2.6 | 40.68.123.157 |
Jul 4, 2024 20:35:48.987036943 CEST | 443 | 49769 | 40.68.123.157 | 192.168.2.6 |
Jul 4, 2024 20:35:48.987080097 CEST | 49769 | 443 | 192.168.2.6 | 40.68.123.157 |
Jul 4, 2024 20:35:48.991499901 CEST | 49769 | 443 | 192.168.2.6 | 40.68.123.157 |
Jul 4, 2024 20:35:48.991512060 CEST | 443 | 49769 | 40.68.123.157 | 192.168.2.6 |
Jul 4, 2024 20:35:48.991520882 CEST | 49769 | 443 | 192.168.2.6 | 40.68.123.157 |
Jul 4, 2024 20:35:48.991524935 CEST | 443 | 49769 | 40.68.123.157 | 192.168.2.6 |
Jul 4, 2024 20:35:57.396732092 CEST | 49771 | 443 | 192.168.2.6 | 142.250.186.68 |
Jul 4, 2024 20:35:57.396753073 CEST | 443 | 49771 | 142.250.186.68 | 192.168.2.6 |
Jul 4, 2024 20:35:57.396878958 CEST | 49771 | 443 | 192.168.2.6 | 142.250.186.68 |
Jul 4, 2024 20:35:57.397089005 CEST | 49771 | 443 | 192.168.2.6 | 142.250.186.68 |
Jul 4, 2024 20:35:57.397099972 CEST | 443 | 49771 | 142.250.186.68 | 192.168.2.6 |
Jul 4, 2024 20:35:58.077616930 CEST | 443 | 49771 | 142.250.186.68 | 192.168.2.6 |
Jul 4, 2024 20:35:58.077977896 CEST | 49771 | 443 | 192.168.2.6 | 142.250.186.68 |
Jul 4, 2024 20:35:58.077986002 CEST | 443 | 49771 | 142.250.186.68 | 192.168.2.6 |
Jul 4, 2024 20:35:58.078315020 CEST | 443 | 49771 | 142.250.186.68 | 192.168.2.6 |
Jul 4, 2024 20:35:58.078658104 CEST | 49771 | 443 | 192.168.2.6 | 142.250.186.68 |
Jul 4, 2024 20:35:58.078708887 CEST | 443 | 49771 | 142.250.186.68 | 192.168.2.6 |
Jul 4, 2024 20:35:58.129693985 CEST | 49771 | 443 | 192.168.2.6 | 142.250.186.68 |
Jul 4, 2024 20:36:03.575171947 CEST | 49773 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:36:03.575282097 CEST | 443 | 49773 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:36:03.575366974 CEST | 49773 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:36:03.575994968 CEST | 49773 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:36:03.576033115 CEST | 443 | 49773 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:36:04.477679968 CEST | 443 | 49773 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:36:04.477766037 CEST | 49773 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:36:04.480664968 CEST | 49773 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:36:04.480678082 CEST | 443 | 49773 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:36:04.480884075 CEST | 443 | 49773 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:36:04.482877016 CEST | 49773 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:36:04.482935905 CEST | 49773 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:36:04.482942104 CEST | 443 | 49773 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:36:04.483103991 CEST | 49773 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:36:04.528527021 CEST | 443 | 49773 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:36:04.659440041 CEST | 443 | 49773 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:36:04.659517050 CEST | 443 | 49773 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:36:04.659634113 CEST | 49773 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:36:04.659969091 CEST | 49773 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:36:04.660020113 CEST | 443 | 49773 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:36:04.955043077 CEST | 49774 | 443 | 192.168.2.6 | 142.250.185.174 |
Jul 4, 2024 20:36:04.955084085 CEST | 443 | 49774 | 142.250.185.174 | 192.168.2.6 |
Jul 4, 2024 20:36:04.955140114 CEST | 49774 | 443 | 192.168.2.6 | 142.250.185.174 |
Jul 4, 2024 20:36:04.955380917 CEST | 49774 | 443 | 192.168.2.6 | 142.250.185.174 |
Jul 4, 2024 20:36:04.955395937 CEST | 443 | 49774 | 142.250.185.174 | 192.168.2.6 |
Jul 4, 2024 20:36:05.571984053 CEST | 49775 | 443 | 192.168.2.6 | 142.250.185.174 |
Jul 4, 2024 20:36:05.572012901 CEST | 443 | 49775 | 142.250.185.174 | 192.168.2.6 |
Jul 4, 2024 20:36:05.572102070 CEST | 49775 | 443 | 192.168.2.6 | 142.250.185.174 |
Jul 4, 2024 20:36:05.572484970 CEST | 49775 | 443 | 192.168.2.6 | 142.250.185.174 |
Jul 4, 2024 20:36:05.572494984 CEST | 443 | 49775 | 142.250.185.174 | 192.168.2.6 |
Jul 4, 2024 20:36:05.633405924 CEST | 443 | 49774 | 142.250.185.174 | 192.168.2.6 |
Jul 4, 2024 20:36:05.633934021 CEST | 49774 | 443 | 192.168.2.6 | 142.250.185.174 |
Jul 4, 2024 20:36:05.633974075 CEST | 443 | 49774 | 142.250.185.174 | 192.168.2.6 |
Jul 4, 2024 20:36:05.634350061 CEST | 443 | 49774 | 142.250.185.174 | 192.168.2.6 |
Jul 4, 2024 20:36:05.634741068 CEST | 49774 | 443 | 192.168.2.6 | 142.250.185.174 |
Jul 4, 2024 20:36:05.634804010 CEST | 443 | 49774 | 142.250.185.174 | 192.168.2.6 |
Jul 4, 2024 20:36:05.635298014 CEST | 49774 | 443 | 192.168.2.6 | 142.250.185.174 |
Jul 4, 2024 20:36:05.635324955 CEST | 49774 | 443 | 192.168.2.6 | 142.250.185.174 |
Jul 4, 2024 20:36:05.635329962 CEST | 443 | 49774 | 142.250.185.174 | 192.168.2.6 |
Jul 4, 2024 20:36:05.834383011 CEST | 443 | 49774 | 142.250.185.174 | 192.168.2.6 |
Jul 4, 2024 20:36:05.834749937 CEST | 443 | 49774 | 142.250.185.174 | 192.168.2.6 |
Jul 4, 2024 20:36:05.834835052 CEST | 49774 | 443 | 192.168.2.6 | 142.250.185.174 |
Jul 4, 2024 20:36:05.834965944 CEST | 49774 | 443 | 192.168.2.6 | 142.250.185.174 |
Jul 4, 2024 20:36:05.834985018 CEST | 443 | 49774 | 142.250.185.174 | 192.168.2.6 |
Jul 4, 2024 20:36:06.219459057 CEST | 443 | 49775 | 142.250.185.174 | 192.168.2.6 |
Jul 4, 2024 20:36:06.219789028 CEST | 49775 | 443 | 192.168.2.6 | 142.250.185.174 |
Jul 4, 2024 20:36:06.219799995 CEST | 443 | 49775 | 142.250.185.174 | 192.168.2.6 |
Jul 4, 2024 20:36:06.220130920 CEST | 443 | 49775 | 142.250.185.174 | 192.168.2.6 |
Jul 4, 2024 20:36:06.220443964 CEST | 49775 | 443 | 192.168.2.6 | 142.250.185.174 |
Jul 4, 2024 20:36:06.220505953 CEST | 443 | 49775 | 142.250.185.174 | 192.168.2.6 |
Jul 4, 2024 20:36:06.220599890 CEST | 49775 | 443 | 192.168.2.6 | 142.250.185.174 |
Jul 4, 2024 20:36:06.220599890 CEST | 49775 | 443 | 192.168.2.6 | 142.250.185.174 |
Jul 4, 2024 20:36:06.220628023 CEST | 443 | 49775 | 142.250.185.174 | 192.168.2.6 |
Jul 4, 2024 20:36:06.415251017 CEST | 443 | 49775 | 142.250.185.174 | 192.168.2.6 |
Jul 4, 2024 20:36:06.415386915 CEST | 443 | 49775 | 142.250.185.174 | 192.168.2.6 |
Jul 4, 2024 20:36:06.415484905 CEST | 49775 | 443 | 192.168.2.6 | 142.250.185.174 |
Jul 4, 2024 20:36:06.415893078 CEST | 49775 | 443 | 192.168.2.6 | 142.250.185.174 |
Jul 4, 2024 20:36:06.415906906 CEST | 443 | 49775 | 142.250.185.174 | 192.168.2.6 |
Jul 4, 2024 20:36:07.984555006 CEST | 443 | 49771 | 142.250.186.68 | 192.168.2.6 |
Jul 4, 2024 20:36:07.984620094 CEST | 443 | 49771 | 142.250.186.68 | 192.168.2.6 |
Jul 4, 2024 20:36:07.984699011 CEST | 49771 | 443 | 192.168.2.6 | 142.250.186.68 |
Jul 4, 2024 20:36:21.412820101 CEST | 49771 | 443 | 192.168.2.6 | 142.250.186.68 |
Jul 4, 2024 20:36:21.412837029 CEST | 443 | 49771 | 142.250.186.68 | 192.168.2.6 |
Jul 4, 2024 20:36:29.560549021 CEST | 49778 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:36:29.560609102 CEST | 443 | 49778 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:36:29.560698986 CEST | 49778 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:36:29.561295986 CEST | 49778 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:36:29.561317921 CEST | 443 | 49778 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:36:29.755140066 CEST | 49704 | 80 | 192.168.2.6 | 199.232.210.172 |
Jul 4, 2024 20:36:29.762376070 CEST | 80 | 49704 | 199.232.210.172 | 192.168.2.6 |
Jul 4, 2024 20:36:29.762423992 CEST | 49704 | 80 | 192.168.2.6 | 199.232.210.172 |
Jul 4, 2024 20:36:30.361021996 CEST | 443 | 49778 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:36:30.361136913 CEST | 49778 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:36:30.365293980 CEST | 49778 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:36:30.365304947 CEST | 443 | 49778 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:36:30.365549088 CEST | 443 | 49778 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:36:30.367507935 CEST | 49778 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:36:30.367573023 CEST | 49778 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:36:30.367580891 CEST | 443 | 49778 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:36:30.367750883 CEST | 49778 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:36:30.408507109 CEST | 443 | 49778 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:36:30.541538954 CEST | 443 | 49778 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:36:30.541631937 CEST | 443 | 49778 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:36:30.541692019 CEST | 49778 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:36:30.541815042 CEST | 49778 | 443 | 192.168.2.6 | 40.113.103.199 |
Jul 4, 2024 20:36:30.541832924 CEST | 443 | 49778 | 40.113.103.199 | 192.168.2.6 |
Jul 4, 2024 20:36:37.617432117 CEST | 49779 | 443 | 192.168.2.6 | 142.250.185.174 |
Jul 4, 2024 20:36:37.617470026 CEST | 443 | 49779 | 142.250.185.174 | 192.168.2.6 |
Jul 4, 2024 20:36:37.617563009 CEST | 49779 | 443 | 192.168.2.6 | 142.250.185.174 |
Jul 4, 2024 20:36:37.618201017 CEST | 49779 | 443 | 192.168.2.6 | 142.250.185.174 |
Jul 4, 2024 20:36:37.618218899 CEST | 443 | 49779 | 142.250.185.174 | 192.168.2.6 |
Jul 4, 2024 20:36:38.265189886 CEST | 443 | 49779 | 142.250.185.174 | 192.168.2.6 |
Jul 4, 2024 20:36:38.265703917 CEST | 49779 | 443 | 192.168.2.6 | 142.250.185.174 |
Jul 4, 2024 20:36:38.265733957 CEST | 443 | 49779 | 142.250.185.174 | 192.168.2.6 |
Jul 4, 2024 20:36:38.266047001 CEST | 443 | 49779 | 142.250.185.174 | 192.168.2.6 |
Jul 4, 2024 20:36:38.266355991 CEST | 49779 | 443 | 192.168.2.6 | 142.250.185.174 |
Jul 4, 2024 20:36:38.266415119 CEST | 443 | 49779 | 142.250.185.174 | 192.168.2.6 |
Jul 4, 2024 20:36:38.266525030 CEST | 49779 | 443 | 192.168.2.6 | 142.250.185.174 |
Jul 4, 2024 20:36:38.266546965 CEST | 49779 | 443 | 192.168.2.6 | 142.250.185.174 |
Jul 4, 2024 20:36:38.266557932 CEST | 443 | 49779 | 142.250.185.174 | 192.168.2.6 |
Jul 4, 2024 20:36:38.545324087 CEST | 443 | 49779 | 142.250.185.174 | 192.168.2.6 |
Jul 4, 2024 20:36:38.545416117 CEST | 443 | 49779 | 142.250.185.174 | 192.168.2.6 |
Jul 4, 2024 20:36:38.545465946 CEST | 49779 | 443 | 192.168.2.6 | 142.250.185.174 |
Jul 4, 2024 20:36:38.545882940 CEST | 49779 | 443 | 192.168.2.6 | 142.250.185.174 |
Jul 4, 2024 20:36:38.545912981 CEST | 443 | 49779 | 142.250.185.174 | 192.168.2.6 |
Jul 4, 2024 20:36:39.445370913 CEST | 49780 | 443 | 192.168.2.6 | 142.250.185.174 |
Jul 4, 2024 20:36:39.445400953 CEST | 443 | 49780 | 142.250.185.174 | 192.168.2.6 |
Jul 4, 2024 20:36:39.445491076 CEST | 49780 | 443 | 192.168.2.6 | 142.250.185.174 |
Jul 4, 2024 20:36:39.446119070 CEST | 49780 | 443 | 192.168.2.6 | 142.250.185.174 |
Jul 4, 2024 20:36:39.446130037 CEST | 443 | 49780 | 142.250.185.174 | 192.168.2.6 |
Jul 4, 2024 20:36:40.090966940 CEST | 443 | 49780 | 142.250.185.174 | 192.168.2.6 |
Jul 4, 2024 20:36:40.091316938 CEST | 49780 | 443 | 192.168.2.6 | 142.250.185.174 |
Jul 4, 2024 20:36:40.091327906 CEST | 443 | 49780 | 142.250.185.174 | 192.168.2.6 |
Jul 4, 2024 20:36:40.091639996 CEST | 443 | 49780 | 142.250.185.174 | 192.168.2.6 |
Jul 4, 2024 20:36:40.091995001 CEST | 49780 | 443 | 192.168.2.6 | 142.250.185.174 |
Jul 4, 2024 20:36:40.092047930 CEST | 443 | 49780 | 142.250.185.174 | 192.168.2.6 |
Jul 4, 2024 20:36:40.092289925 CEST | 49780 | 443 | 192.168.2.6 | 142.250.185.174 |
Jul 4, 2024 20:36:40.092302084 CEST | 49780 | 443 | 192.168.2.6 | 142.250.185.174 |
Jul 4, 2024 20:36:40.092312098 CEST | 443 | 49780 | 142.250.185.174 | 192.168.2.6 |
Jul 4, 2024 20:36:40.290115118 CEST | 443 | 49780 | 142.250.185.174 | 192.168.2.6 |
Jul 4, 2024 20:36:40.290255070 CEST | 443 | 49780 | 142.250.185.174 | 192.168.2.6 |
Jul 4, 2024 20:36:40.290318012 CEST | 49780 | 443 | 192.168.2.6 | 142.250.185.174 |
Jul 4, 2024 20:36:40.290947914 CEST | 49780 | 443 | 192.168.2.6 | 142.250.185.174 |
Jul 4, 2024 20:36:40.290956974 CEST | 443 | 49780 | 142.250.185.174 | 192.168.2.6 |
Jul 4, 2024 20:36:57.459374905 CEST | 49781 | 443 | 192.168.2.6 | 142.250.186.68 |
Jul 4, 2024 20:36:57.459414005 CEST | 443 | 49781 | 142.250.186.68 | 192.168.2.6 |
Jul 4, 2024 20:36:57.459578037 CEST | 49781 | 443 | 192.168.2.6 | 142.250.186.68 |
Jul 4, 2024 20:36:57.459839106 CEST | 49781 | 443 | 192.168.2.6 | 142.250.186.68 |
Jul 4, 2024 20:36:57.459851980 CEST | 443 | 49781 | 142.250.186.68 | 192.168.2.6 |
Jul 4, 2024 20:36:58.135533094 CEST | 443 | 49781 | 142.250.186.68 | 192.168.2.6 |
Jul 4, 2024 20:36:58.176286936 CEST | 49781 | 443 | 192.168.2.6 | 142.250.186.68 |
Timestamp | Source Port | Dest Port | Source IP | Dest IP |
---|---|---|---|---|
Jul 4, 2024 20:34:53.425580978 CEST | 65452 | 53 | 192.168.2.6 | 1.1.1.1 |
Jul 4, 2024 20:34:53.427036047 CEST | 60220 | 53 | 192.168.2.6 | 1.1.1.1 |
Jul 4, 2024 20:34:53.439368010 CEST | 53 | 65452 | 1.1.1.1 | 192.168.2.6 |
Jul 4, 2024 20:34:53.442979097 CEST | 53 | 60220 | 1.1.1.1 | 192.168.2.6 |
Jul 4, 2024 20:34:53.452152014 CEST | 53 | 50151 | 1.1.1.1 | 192.168.2.6 |
Jul 4, 2024 20:34:53.460702896 CEST | 53 | 61245 | 1.1.1.1 | 192.168.2.6 |
Jul 4, 2024 20:34:54.460215092 CEST | 53 | 55698 | 1.1.1.1 | 192.168.2.6 |
Jul 4, 2024 20:34:57.300218105 CEST | 53 | 62939 | 1.1.1.1 | 192.168.2.6 |
Jul 4, 2024 20:34:57.333913088 CEST | 62478 | 53 | 192.168.2.6 | 1.1.1.1 |
Jul 4, 2024 20:34:57.334060907 CEST | 53440 | 53 | 192.168.2.6 | 1.1.1.1 |
Jul 4, 2024 20:34:57.340914965 CEST | 53 | 62478 | 1.1.1.1 | 192.168.2.6 |
Jul 4, 2024 20:34:57.341274023 CEST | 53 | 53440 | 1.1.1.1 | 192.168.2.6 |
Jul 4, 2024 20:34:57.874986887 CEST | 53 | 58908 | 1.1.1.1 | 192.168.2.6 |
Jul 4, 2024 20:34:57.911535025 CEST | 53 | 51290 | 1.1.1.1 | 192.168.2.6 |
Jul 4, 2024 20:34:58.627774000 CEST | 53 | 50437 | 1.1.1.1 | 192.168.2.6 |
Jul 4, 2024 20:35:01.269723892 CEST | 61905 | 53 | 192.168.2.6 | 1.1.1.1 |
Jul 4, 2024 20:35:01.270278931 CEST | 52819 | 53 | 192.168.2.6 | 1.1.1.1 |
Jul 4, 2024 20:35:01.277746916 CEST | 53 | 52819 | 1.1.1.1 | 192.168.2.6 |
Jul 4, 2024 20:35:01.278793097 CEST | 53 | 61905 | 1.1.1.1 | 192.168.2.6 |
Jul 4, 2024 20:35:02.617343903 CEST | 63260 | 53 | 192.168.2.6 | 1.1.1.1 |
Jul 4, 2024 20:35:02.617497921 CEST | 51503 | 53 | 192.168.2.6 | 1.1.1.1 |
Jul 4, 2024 20:35:02.625596046 CEST | 53 | 51503 | 1.1.1.1 | 192.168.2.6 |
Jul 4, 2024 20:35:02.629069090 CEST | 53 | 63260 | 1.1.1.1 | 192.168.2.6 |
Jul 4, 2024 20:35:11.490328074 CEST | 53 | 59066 | 1.1.1.1 | 192.168.2.6 |
Jul 4, 2024 20:35:30.576807976 CEST | 53 | 61642 | 1.1.1.1 | 192.168.2.6 |
Jul 4, 2024 20:35:52.612874985 CEST | 53 | 58103 | 1.1.1.1 | 192.168.2.6 |
Jul 4, 2024 20:35:53.014149904 CEST | 53 | 49319 | 1.1.1.1 | 192.168.2.6 |
Jul 4, 2024 20:36:03.376764059 CEST | 53 | 49376 | 1.1.1.1 | 192.168.2.6 |
Jul 4, 2024 20:36:04.945907116 CEST | 62117 | 53 | 192.168.2.6 | 1.1.1.1 |
Jul 4, 2024 20:36:04.946288109 CEST | 56472 | 53 | 192.168.2.6 | 1.1.1.1 |
Jul 4, 2024 20:36:04.953735113 CEST | 53 | 62117 | 1.1.1.1 | 192.168.2.6 |
Jul 4, 2024 20:36:04.954624891 CEST | 53 | 56472 | 1.1.1.1 | 192.168.2.6 |
Jul 4, 2024 20:36:21.583492994 CEST | 53 | 62752 | 1.1.1.1 | 192.168.2.6 |
Timestamp | Source IP | Dest IP | Trans ID | OP Code | Name | Type | Class | DNS over HTTPS |
---|---|---|---|---|---|---|---|---|
Jul 4, 2024 20:34:53.425580978 CEST | 192.168.2.6 | 1.1.1.1 | 0x6e8e | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jul 4, 2024 20:34:53.427036047 CEST | 192.168.2.6 | 1.1.1.1 | 0x60c6 | Standard query (0) | 65 | IN (0x0001) | false | |
Jul 4, 2024 20:34:57.333913088 CEST | 192.168.2.6 | 1.1.1.1 | 0x6110 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jul 4, 2024 20:34:57.334060907 CEST | 192.168.2.6 | 1.1.1.1 | 0x2d9b | Standard query (0) | 65 | IN (0x0001) | false | |
Jul 4, 2024 20:35:01.269723892 CEST | 192.168.2.6 | 1.1.1.1 | 0xba2 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jul 4, 2024 20:35:01.270278931 CEST | 192.168.2.6 | 1.1.1.1 | 0x862b | Standard query (0) | 65 | IN (0x0001) | false | |
Jul 4, 2024 20:35:02.617343903 CEST | 192.168.2.6 | 1.1.1.1 | 0x1678 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jul 4, 2024 20:35:02.617497921 CEST | 192.168.2.6 | 1.1.1.1 | 0x3cb2 | Standard query (0) | 65 | IN (0x0001) | false | |
Jul 4, 2024 20:36:04.945907116 CEST | 192.168.2.6 | 1.1.1.1 | 0xdb2 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jul 4, 2024 20:36:04.946288109 CEST | 192.168.2.6 | 1.1.1.1 | 0xdec7 | Standard query (0) | 65 | IN (0x0001) | false |
Timestamp | Source IP | Dest IP | Trans ID | Reply Code | Name | CName | Address | Type | Class | DNS over HTTPS |
---|---|---|---|---|---|---|---|---|---|---|
Jul 4, 2024 20:34:53.439368010 CEST | 1.1.1.1 | 192.168.2.6 | 0x6e8e | No error (0) | youtube-ui.l.google.com | CNAME (Canonical name) | IN (0x0001) | false | ||
Jul 4, 2024 20:34:53.439368010 CEST | 1.1.1.1 | 192.168.2.6 | 0x6e8e | No error (0) | 142.250.185.206 | A (IP address) | IN (0x0001) | false | ||
Jul 4, 2024 20:34:53.439368010 CEST | 1.1.1.1 | 192.168.2.6 | 0x6e8e | No error (0) | 142.250.185.78 | A (IP address) | IN (0x0001) | false | ||
Jul 4, 2024 20:34:53.439368010 CEST | 1.1.1.1 | 192.168.2.6 | 0x6e8e | No error (0) | 172.217.16.206 | A (IP address) | IN (0x0001) | false | ||
Jul 4, 2024 20:34:53.439368010 CEST | 1.1.1.1 | 192.168.2.6 | 0x6e8e | No error (0) | 142.250.185.238 | A (IP address) | IN (0x0001) | false | ||
Jul 4, 2024 20:34:53.439368010 CEST | 1.1.1.1 | 192.168.2.6 | 0x6e8e | No error (0) | 142.250.74.206 | A (IP address) | IN (0x0001) | false | ||
Jul 4, 2024 20:34:53.439368010 CEST | 1.1.1.1 | 192.168.2.6 | 0x6e8e | No error (0) | 142.250.185.142 | A (IP address) | IN (0x0001) | false | ||
Jul 4, 2024 20:34:53.439368010 CEST | 1.1.1.1 | 192.168.2.6 | 0x6e8e | No error (0) | 142.250.185.110 | A (IP address) | IN (0x0001) | false | ||
Jul 4, 2024 20:34:53.439368010 CEST | 1.1.1.1 | 192.168.2.6 | 0x6e8e | No error (0) | 142.250.184.238 | A (IP address) | IN (0x0001) | false | ||
Jul 4, 2024 20:34:53.439368010 CEST | 1.1.1.1 | 192.168.2.6 | 0x6e8e | No error (0) | 216.58.206.78 | A (IP address) | IN (0x0001) | false | ||
Jul 4, 2024 20:34:53.439368010 CEST | 1.1.1.1 | 192.168.2.6 | 0x6e8e | No error (0) | 142.250.185.174 | A (IP address) | IN (0x0001) | false | ||
Jul 4, 2024 20:34:53.439368010 CEST | 1.1.1.1 | 192.168.2.6 | 0x6e8e | No error (0) | 142.250.186.110 | A (IP address) | IN (0x0001) | false | ||
Jul 4, 2024 20:34:53.439368010 CEST | 1.1.1.1 | 192.168.2.6 | 0x6e8e | No error (0) | 172.217.18.14 | A (IP address) | IN (0x0001) | false | ||
Jul 4, 2024 20:34:53.439368010 CEST | 1.1.1.1 | 192.168.2.6 | 0x6e8e | No error (0) | 216.58.206.46 | A (IP address) | IN (0x0001) | false | ||
Jul 4, 2024 20:34:53.439368010 CEST | 1.1.1.1 | 192.168.2.6 | 0x6e8e | No error (0) | 142.250.186.78 | A (IP address) | IN (0x0001) | false | ||
Jul 4, 2024 20:34:53.439368010 CEST | 1.1.1.1 | 192.168.2.6 | 0x6e8e | No error (0) | 142.250.186.174 | A (IP address) | IN (0x0001) | false | ||
Jul 4, 2024 20:34:53.439368010 CEST | 1.1.1.1 | 192.168.2.6 | 0x6e8e | No error (0) | 216.58.212.142 | A (IP address) | IN (0x0001) | false | ||
Jul 4, 2024 20:34:53.442979097 CEST | 1.1.1.1 | 192.168.2.6 | 0x60c6 | No error (0) | youtube-ui.l.google.com | CNAME (Canonical name) | IN (0x0001) | false | ||
Jul 4, 2024 20:34:53.442979097 CEST | 1.1.1.1 | 192.168.2.6 | 0x60c6 | No error (0) | 65 | IN (0x0001) | false | |||
Jul 4, 2024 20:34:57.340914965 CEST | 1.1.1.1 | 192.168.2.6 | 0x6110 | No error (0) | 142.250.186.68 | A (IP address) | IN (0x0001) | false | ||
Jul 4, 2024 20:34:57.341274023 CEST | 1.1.1.1 | 192.168.2.6 | 0x2d9b | No error (0) | 65 | IN (0x0001) | false | |||
Jul 4, 2024 20:35:01.277746916 CEST | 1.1.1.1 | 192.168.2.6 | 0x862b | No error (0) | www3.l.google.com | CNAME (Canonical name) | IN (0x0001) | false | ||
Jul 4, 2024 20:35:01.278793097 CEST | 1.1.1.1 | 192.168.2.6 | 0xba2 | No error (0) | www3.l.google.com | CNAME (Canonical name) | IN (0x0001) | false | ||
Jul 4, 2024 20:35:01.278793097 CEST | 1.1.1.1 | 192.168.2.6 | 0xba2 | No error (0) | 142.250.185.206 | A (IP address) | IN (0x0001) | false | ||
Jul 4, 2024 20:35:02.629069090 CEST | 1.1.1.1 | 192.168.2.6 | 0x1678 | No error (0) | 142.250.185.238 | A (IP address) | IN (0x0001) | false | ||
Jul 4, 2024 20:36:04.953735113 CEST | 1.1.1.1 | 192.168.2.6 | 0xdb2 | No error (0) | 142.250.185.174 | A (IP address) | IN (0x0001) | false |
|
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
0 | 192.168.2.6 | 49713 | 142.250.185.206 | 443 | 1756 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2024-07-04 18:34:54 UTC | 790 | OUT | |
2024-07-04 18:34:54 UTC | 2470 | IN |