Edit tour
Windows
Analysis Report
file.exe
Overview
General Information
| Sample name: | file.exe |
| Analysis ID: | 1523784 |
| MD5: | 84857d029b892796223a0388e578c717 |
| SHA1: | 035492bdbcf0e449294ae50eeace2ca2ba36923e |
| SHA256: | be9295fb6df84c5f65b777a04b1db541c15fe36fda341ad3c0f55d3b9ae17105 |
| Tags: | exeuser-Bitsight |
| Infos: |  |
 | |
Detection
Credential Flusher
| Score: | 72 |
| Range: | 0 - 100 |
| Whitelisted: | false |
| Confidence: | 100% |
Signatures
Multi AV Scanner detection for submitted file
Yara detected Credential Flusher
AI detected suspicious sample
Binary is likely a compiled AutoIt script file
Found API chain indicative of sandbox detection
Machine Learning detection for sample
Contains functionality for read data from the clipboard
Contains functionality to block mouse and keyboard input (often used to hinder debugging)
Contains functionality to check if a debugger is running (IsDebuggerPresent)
Contains functionality to check if a window is minimized (may be used to check if an application is visible)
Contains functionality to communicate with device drivers
Contains functionality to dynamically determine API calls
Contains functionality to execute programs as a different user
Contains functionality to launch a process as a different user
Contains functionality to launch a program with higher privileges
Contains functionality to modify clipboard data
Contains functionality to open a port and listen for incoming connection (possibly a backdoor)
Contains functionality to query CPU information (cpuid)
Contains functionality to read the PEB
Contains functionality to read the clipboard data
Contains functionality to retrieve information about pressed keystrokes
Contains functionality to shutdown / reboot the system
Contains functionality to simulate keystroke presses
Contains functionality to simulate mouse events
Contains functionality which may be used to detect a debugger (GetProcessHeap)
Detected potential crypto function
Found large amount of non-executed APIs
Found potential string decryption / allocating functions
IP address seen in connection with other malware
JA3 SSL client fingerprint seen in connection with other malware
OS version to string mapping found (often used in BOTs)
Potential key logger detected (key state polling based)
Uses 32bit PE files
Uses code obfuscation techniques (call, push, ret)
Classification
- System is w10x64
file.exe (PID: 6692 cmdline: "C:\Users\ user\Deskt op\file.ex e" MD5: 84857D029B892796223A0388E578C717) 
chrome.exe (PID: 6744 cmdline: "C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --ap p="https:/ /youtube.c om/account ?=https:// accounts.g oogle.com/ v3/signin/ challenge/ pwd" --sta rt-fullscr een --no-f irst-run - -disable-s ession-cra shed-bubbl e --disabl e-features =CrashReco very MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4) - chrome.exe (PID: 332 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --ty pe=utility --utility -sub-type= network.mo jom.Networ kService - -lang=en-U S --servic e-sandbox- type=none --mojo-pla tform-chan nel-handle =2080 --fi eld-trial- handle=195 6,i,684862 7385945716 294,117256 3021847990 6615,26214 4 --disabl e-features =CrashReco very /pref etch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4) - chrome.exe (PID: 7808 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --ty pe=utility --utility -sub-type= audio.mojo m.AudioSer vice --lan g=en-US -- service-sa ndbox-type =audio --m ojo-platfo rm-channel -handle=55 12 --field -trial-han dle=1956,i ,684862738 5945716294 ,117256302 1847990661 5,262144 - -disable-f eatures=Cr ashRecover y /prefetc h:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4) - chrome.exe (PID: 7816 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --ty pe=utility --utility -sub-type= video_capt ure.mojom. VideoCaptu reService --lang=en- US --servi ce-sandbox -type=none --mojo-pl atform-cha nnel-handl e=5476 --f ield-trial -handle=19 56,i,68486 2738594571 6294,11725 6302184799 06615,2621 44 --disab le-feature s=CrashRec overy /pre fetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
- cleanup
⊘No configs have been found
| Source | Rule | Description | Author | Strings |
|---|---|---|---|---|
| JoeSecurity_CredentialFlusher | Yara detected Credential Flusher | Joe Security |
⊘No Sigma rule has matched
⊘No Suricata rule has matched
Click to jump to signature section
Show All Signature Results
AV Detection |   |
|---|
| Source: | ReversingLabs: | ||
| Source: | Integrated Neural Analysis Model: | ||
| Source: | Joe Sandbox ML: | ||
| Source: | Static PE information: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | Code function: | 0_2_00BCDBBE | |
| Source: | Code function: | 0_2_00BD68EE | |
| Source: | Code function: | 0_2_00BD698F | |
| Source: | Code function: | 0_2_00BCD076 | |
| Source: | Code function: | 0_2_00BCD3A9 | |
| Source: | Code function: | 0_2_00BD9642 | |
| Source: | Code function: | 0_2_00BD979D | |
| Source: | Code function: | 0_2_00BD9B2B | |
| Source: | Code function: | 0_2_00BD5C97 | |
| Source: | IP Address: | ||
| Source: | JA3 fingerprint: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | Code function: | 0_2_00BDCE44 | |
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | String found in binary or memory: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | Code function: | 0_2_00BDEAFF | |
| Source: | Code function: | 0_2_00BDED6A | |
| Source: | Code function: | 0_2_00BDEAFF | |
| Source: | Code function: | 0_2_00BCAA57 | |
| Source: | Code function: | 0_2_00BF9576 | |
System Summary | |
|---|
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | memstr_8b93f721-5 | |
| Source: | String found in binary or memory: | memstr_adf54d3a-5 | |
| Source: | String found in binary or memory: | memstr_c6f5272c-c | |
| Source: | String found in binary or memory: | memstr_8dffd9ef-a | |
| Source: | Code function: | 0_2_00BCD5EB | |
| Source: | Code function: | 0_2_00BC1201 | |
| Source: | Code function: | 0_2_00BCE8F6 | |
| Source: | Code function: | 0_2_00B68060 | |
| Source: | Code function: | 0_2_00BD2046 | |
| Source: | Code function: | 0_2_00BC8298 | |
| Source: | Code function: | 0_2_00B9E4FF | |
| Source: | Code function: | 0_2_00B9676B | |
| Source: | Code function: | 0_2_00BF4873 | |
| Source: | Code function: | 0_2_00B8CAA0 | |
| Source: | Code function: | 0_2_00B6CAF0 | |
| Source: | Code function: | 0_2_00B7CC39 | |
| Source: | Code function: | 0_2_00B96DD9 | |
| Source: | Code function: | 0_2_00B691C0 | |
| Source: | Code function: | 0_2_00B7B119 | |
| Source: | Code function: | 0_2_00B81394 | |
| Source: | Code function: | 0_2_00B81706 | |
| Source: | Code function: | 0_2_00B8781B | |
| Source: | Code function: | 0_2_00B819B0 | |
| Source: | Code function: | 0_2_00B67920 | |
| Source: | Code function: | 0_2_00B7997D | |
| Source: | Code function: | 0_2_00B87A4A | |
| Source: | Code function: | 0_2_00B87CA7 | |
| Source: | Code function: | 0_2_00B81C77 | |
| Source: | Code function: | 0_2_00B99EEE | |
| Source: | Code function: | 0_2_00BEBE44 | |
| Source: | Code function: | 0_2_00B81F32 | |
| Source: | Code function: | ||
| Source: | Code function: | ||
| Source: | Static PE information: | ||
| Source: | Classification label: | ||
| Source: | Code function: | 0_2_00BD37B5 | |
| Source: | Code function: | 0_2_00BC10BF | |
| Source: | Code function: | 0_2_00BC16C3 | |
| Source: | Code function: | 0_2_00BD51CD | |
| Source: | Code function: | 0_2_00BEA67C | |
| Source: | Code function: | 0_2_00BD648E | |
| Source: | Code function: | 0_2_00B642A2 | |
| Source: | Static PE information: | ||
| Source: | Key opened: | Jump to behavior | ||
| Source: | ReversingLabs: | ||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Code function: | 0_2_00B642DE | |
| Source: | Code function: | 0_2_00B80A89 | |
| Source: | Code function: | 0_2_00B7F98E | |
| Source: | Code function: | 0_2_00BF1C41 | |
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
Malware Analysis System Evasion | |
|---|
| Source: | Sandbox detection routine: | graph_0-96448 | ||
| Source: | API coverage: | ||
| Source: | Code function: | 0_2_00BCDBBE | |
| Source: | Code function: | 0_2_00BD68EE | |
| Source: | Code function: | 0_2_00BD698F | |
| Source: | Code function: | 0_2_00BCD076 | |
| Source: | Code function: | 0_2_00BCD3A9 | |
| Source: | Code function: | 0_2_00BD9642 | |
| Source: | Code function: | 0_2_00BD979D | |
| Source: | Code function: | 0_2_00BD9B2B | |
| Source: | Code function: | 0_2_00BD5C97 | |
| Source: | Code function: | 0_2_00B642DE | |
| Source: | Process information queried: | Jump to behavior | ||
| Source: | Code function: | 0_2_00BDEAA2 | |
| Source: | Code function: | 0_2_00B92622 | |
| Source: | Code function: | 0_2_00B642DE | |
| Source: | Code function: | 0_2_00B84CE8 | |
| Source: | Code function: | 0_2_00BC0B62 | |
| Source: | Code function: | 0_2_00B92622 | |
| Source: | Code function: | 0_2_00B8083F | |
| Source: | Code function: | 0_2_00B809D5 | |
| Source: | Code function: | 0_2_00B80C21 | |
| Source: | Code function: | 0_2_00BC1201 | |
| Source: | Code function: | 0_2_00BA2BA5 | |
| Source: | Code function: | 0_2_00BCB226 | |
| Source: | Code function: | 0_2_00BE22DA | |
| Source: | Code function: | 0_2_00BC0B62 | |
| Source: | Code function: | 0_2_00BC1663 | |
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
| Source: | Code function: | 0_2_00B80698 | |
| Source: | Code function: | 0_2_00BD8195 | |
| Source: | Code function: | 0_2_00BBD27A | |
| Source: | Code function: | 0_2_00B9BB6F | |
| Source: | Code function: | 0_2_00B642DE | |
Stealing of Sensitive Information | |
|---|
| Source: | File source: | ||
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
Remote Access Functionality | |
|---|
| Source: | File source: | ||
| Source: | Code function: | 0_2_00BE1204 | |
| Source: | Code function: | 0_2_00BE1806 | |
| Reconnaissance | Resource Development | Initial Access | Execution | Persistence | Privilege Escalation | Defense Evasion | Credential Access | Discovery | Lateral Movement | Collection | Command and Control | Exfiltration | Impact |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Gather Victim Identity Information | Acquire Infrastructure | 2 Valid Accounts | 1 Native API | 1 DLL Side-Loading | 1 Exploitation for Privilege Escalation | 1 Disable or Modify Tools | 21 Input Capture | 2 System Time Discovery | Remote Services | 1 Archive Collected Data | 2 Ingress Tool Transfer | Exfiltration Over Other Network Medium | 1 System Shutdown/Reboot |
| Credentials | Domains | Default Accounts | Scheduled Task/Job | 2 Valid Accounts | 1 DLL Side-Loading | 1 Deobfuscate/Decode Files or Information | LSASS Memory | 1 Account Discovery | Remote Desktop Protocol | 21 Input Capture | 11 Encrypted Channel | Exfiltration Over Bluetooth | Network Denial of Service |
| Email Addresses | DNS Server | Domain Accounts | At | Logon Script (Windows) | 2 Valid Accounts | 2 Obfuscated Files or Information | Security Account Manager | 1 File and Directory Discovery | SMB/Windows Admin Shares | 3 Clipboard Data | 3 Non-Application Layer Protocol | Automated Exfiltration | Data Encrypted for Impact |
| Employee Names | Virtual Private Server | Local Accounts | Cron | Login Hook | 21 Access Token Manipulation | 1 DLL Side-Loading | NTDS | 15 System Information Discovery | Distributed Component Object Model | Input Capture | 4 Application Layer Protocol | Traffic Duplication | Data Destruction |
| Gather Victim Network Information | Server | Cloud Accounts | Launchd | Network Logon Script | 2 Process Injection | 2 Valid Accounts | LSA Secrets | 12 Security Software Discovery | SSH | Keylogging | Fallback Channels | Scheduled Transfer | Data Encrypted for Impact |
| Domain Properties | Botnet | Replication Through Removable Media | Scheduled Task | RC Scripts | RC Scripts | 1 Virtualization/Sandbox Evasion | Cached Domain Credentials | 1 Virtualization/Sandbox Evasion | VNC | GUI Input Capture | Multiband Communication | Data Transfer Size Limits | Service Stop |
| DNS | Web Services | External Remote Services | Systemd Timers | Startup Items | Startup Items | 21 Access Token Manipulation | DCSync | 3 Process Discovery | Windows Remote Management | Web Portal Capture | Commonly Used Port | Exfiltration Over C2 Channel | Inhibit System Recovery |
| Network Trust Dependencies | Serverless | Drive-by Compromise | Container Orchestration Job | Scheduled Task/Job | Scheduled Task/Job | 2 Process Injection | Proc Filesystem | 1 Application Window Discovery | Cloud Services | Credential API Hooking | Application Layer Protocol | Exfiltration Over Alternative Protocol | Defacement |
| Network Topology | Malvertising | Exploit Public-Facing Application | Command and Scripting Interpreter | At | At | HTML Smuggling | /etc/passwd and /etc/shadow | 1 System Owner/User Discovery | Direct Cloud VM Connections | Data Staged | Web Protocols | Exfiltration Over Symmetric Encrypted Non-C2 Protocol | Internal Defacement |
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
InternetThis section contains all screenshots as thumbnails, including those not shown in the slideshow.
| Source | Detection | Scanner | Label | Link |
|---|---|---|---|---|
| 16% | ReversingLabs | |||
| 100% | Joe Sandbox ML |
⊘No Antivirus matches
⊘No Antivirus matches
| Source | Detection | Scanner | Label | Link |
|---|---|---|---|---|
| 0% | Virustotal | Browse | ||
| 0% | Virustotal | Browse | ||
| 0% | Virustotal | Browse | ||
| 0% | Virustotal | Browse | ||
| 0% | Virustotal | Browse | ||
| 0% | Virustotal | Browse | ||
| 0% | Virustotal | Browse |
| Source | Detection | Scanner | Label | Link |
|---|---|---|---|---|
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 1% | Virustotal | Browse | ||
| 0% | Virustotal | Browse | ||
| 0% | Virustotal | Browse | ||
| 0% | Virustotal | Browse | ||
| 0% | Virustotal | Browse | ||
| 0% | Virustotal | Browse | ||
| 0% | Virustotal | Browse | ||
| 0% | Virustotal | Browse | ||
| 0% | Virustotal | Browse |
| Name | IP | Active | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|---|---|
| youtube-ui.l.google.com | 142.250.184.206 | true | false |
| unknown |
| www3.l.google.com | 172.217.16.206 | true | false |
| unknown |
| play.google.com | 142.250.185.142 | true | false |
| unknown |
| www.google.com | 142.250.186.68 | true | false |
| unknown |
| youtube.com | 142.250.186.46 | true | false |
| unknown |
| accounts.youtube.com | unknown | unknown | false |
| unknown |
| www.youtube.com | unknown | unknown | false |
| unknown |
| Name | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|
| false |
| unknown | |
| false |
| unknown | |
| false |
| unknown |
| Name | Source | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|---|
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown |
- No. of IPs < 25%
- 25% < No. of IPs < 50%
- 50% < No. of IPs < 75%
- 75% < No. of IPs
| IP | Domain | Country | Flag | ASN | ASN Name | Malicious |
|---|---|---|---|---|---|---|
| 142.250.186.46 | youtube.com | United States | 15169 | GOOGLEUS | false | |
| 142.250.186.68 | www.google.com | United States | 15169 | GOOGLEUS | false | |
| 172.217.16.206 | www3.l.google.com | United States | 15169 | GOOGLEUS | false | |
| 142.250.185.110 | unknown | United States | 15169 | GOOGLEUS | false | |
| 239.255.255.250 | unknown | Reserved | unknown | unknown | false | |
| 142.250.185.142 | play.google.com | United States | 15169 | GOOGLEUS | false | |
| 142.250.184.206 | youtube-ui.l.google.com | United States | 15169 | GOOGLEUS | false |
| IP |
|---|
| 192.168.2.4 |
| 192.168.2.6 |
| Joe Sandbox version: | 41.0.0 Charoite |
| Analysis ID: | 1523784 |
| Start date and time: | 2024-10-02 02:42:08 +02:00 |
| Joe Sandbox product: | CloudBasic |
| Overall analysis duration: | 0h 4m 37s |
| Hypervisor based Inspection enabled: | false |
| Report type: | full |
| Cookbook file name: | default.jbs |
| Analysis system description: | Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01 |
| Number of analysed new started processes analysed: | 11 |
| Number of new started drivers analysed: | 0 |
| Number of existing processes analysed: | 0 |
| Number of existing drivers analysed: | 0 |
| Number of injected processes analysed: | 0 |
| Technologies: |
|
| Analysis Mode: | default |
| Analysis stop reason: | Timeout |
| Sample name: | file.exe |
| Detection: | MAL |
| Classification: | mal72.troj.evad.winEXE@31/30@12/9 |
| EGA Information: |
|
| HCA Information: |
|
| Cookbook Comments: |
|
- Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
- Excluded IPs from analysis (whitelisted): 142.250.185.227, 216.58.212.142, 64.233.166.84, 34.104.35.123, 142.250.186.35, 142.250.186.131, 216.58.206.42, 142.250.185.138, 142.250.185.170, 172.217.18.10, 142.250.184.202, 142.250.185.106, 172.217.16.202, 142.250.186.170, 142.250.185.202, 142.250.185.234, 142.250.184.234, 142.250.186.106, 142.250.185.74, 142.250.186.74, 142.250.181.234, 142.250.186.42, 172.217.23.106, 216.58.206.74, 216.58.212.170, 142.250.186.138, 93.184.221.240, 192.229.221.95, 142.250.185.131, 74.125.206.84, 216.58.206.78
- Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, update.googleapis.com, clients.l.google.com, www.gstatic.com, optimizationguide-pa.googleapis.com
- Not all processes where analyzed, report is missing behavior information
- Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
⊘No simulations
| Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
|---|---|---|---|---|---|---|
| 239.255.255.250 | Get hash | malicious | Unknown | Browse | ||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Credential Flusher | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | HtmlDropper | Browse | |||
| Get hash | malicious | Credential Flusher | Browse | |||
| Get hash | malicious | HTMLPhisher | Browse |
⊘No context
⊘No context
| Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
|---|---|---|---|---|---|---|
| 28a2c9bd18a11de089ef85a160da29e4 | Get hash | malicious | Unknown | Browse |
| |
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Credential Flusher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HtmlDropper | Browse |
| ||
| Get hash | malicious | Credential Flusher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
|
⊘No context
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 1858 |
| Entropy (8bit): | 5.298162049824456 |
| Encrypted: | false |
| SSDEEP: | 48:o7vGoolL3ALFKphnpiu7xOKAcfO/3d/rYh4vZorw:o/QLUFUL4KA+2y0Mw |
| MD5: | CE055F881BDAB4EF6C1C8AA4B3890348 |
| SHA1: | 2671741A70E9F5B608F690AAEEA4972003747654 |
| SHA-256: | 9B91C23691D6032CDFE28863E369624B2EDB033E1487A1D1BB0977E3590E5462 |
| SHA-512: | 8A22250628985C2E570E6FBADFC0D5CB6753F0735130F9E74962A409476C2859C5C81F8A0F5C427A9F13ED399C8E251FA43FF67AD5F16860640D45E7A538E857 |
| Malicious: | false |
| Reputation: | low |
| URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.RgRbaBHDctU.es5.O/ck=boq-identity.AccountsSignInUi.gAiX_O5afVA.L.B1.O/am=xIFgKBi2EQjEE54DekBRIOQAAAAAAAAAAKANAAB0DA/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,EN3i8d,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZDZcre,ZZ4WUe,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,iyZMqd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlG_aYNE-Dz95N0OV63231Yfi4Jf5g/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=iAskyc,ziXSP" |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 3131 |
| Entropy (8bit): | 5.355381206612617 |
| Encrypted: | false |
| SSDEEP: | 48:o7FEEM3MtH15jNQ8jsK3rnw0dkckTrKEp/OqLE9xz0W5Bzv3M6hIHYA+JITbwrF8:oq675jOArwoAmI/DLaxNPL5m+m6w |
| MD5: | E2A7251AD83A0D0634FEA2703D10ED07 |
| SHA1: | 90D72011F31FC40D3DA3748F2817F90A29EB5C01 |
| SHA-256: | 1079B49C4AAF5C10E4F2E6A086623F40D200A71FF2A1F64E88AA6C91E4BE7A6F |
| SHA-512: | CD6D75580EA8BD97CF7C7C0E0BD9D9A54FB6EA7DF1DDB5A95E94D38B260F9EE1425C640839ECD229B8D01E145CF2786CA374D31EC537EB8FE17FF415D5B985F5 |
| Malicious: | false |
| Reputation: | low |
| URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.RgRbaBHDctU.es5.O/ck=boq-identity.AccountsSignInUi.gAiX_O5afVA.L.B1.O/am=xIFgKBi2EQjEE54DekBRIOQAAAAAAAAAAKANAAB0DA/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,EN3i8d,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZakeSe,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,iyZMqd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlG_aYNE-Dz95N0OV63231Yfi4Jf5g/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ZwDk9d,RMhBfe" |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 5430 |
| Entropy (8bit): | 3.6534652184263736 |
| Encrypted: | false |
| SSDEEP: | 48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B |
| MD5: | F3418A443E7D841097C714D69EC4BCB8 |
| SHA1: | 49263695F6B0CDD72F45CF1B775E660FDC36C606 |
| SHA-256: | 6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770 |
| SHA-512: | 82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563 |
| Malicious: | false |
| Reputation: | high, very likely benign file |
| URL: | https://www.google.com/favicon.ico |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 698314 |
| Entropy (8bit): | 5.595120835898624 |
| Encrypted: | false |
| SSDEEP: | 6144:TJvaKtQfcxene0F2HhPM8RGYcBlKmd5r6XISxi7SlncOpYMSrBg5X3O4mAEFD7:TJyKtkIct842ISxXJ09 |
| MD5: | F82438F9EAD5F57493C673008EED9E09 |
| SHA1: | E4681E68FD66D8C76C6ACBC21E2C45F36FD645BC |
| SHA-256: | B4B092F54EAAA82BFAA159B8D61FB867B51C3067CBD60F4904A205A11F503250 |
| SHA-512: | 89027A7B1B3A080D40411F2E6E3B62BF57AC60879223566E71BD41D900C17051F0A058EFE04F8F1FED5E05DC54617D7A86F83D21BDED0F79347795C8B980B4B2 |
| Malicious: | false |
| URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.RgRbaBHDctU.es5.O/ck=boq-identity.AccountsSignInUi.gAiX_O5afVA.L.B1.O/am=xIFgKBi2EQjEE54DekBRIOQAAAAAAAAAAKANAAB0DA/d=1/exm=LEikZe,_b,_tp,byfTOb,lsjVmc/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlG_aYNE-Dz95N0OV63231Yfi4Jf5g/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=n73qwf,SCuOPb,IZT63,vfuNJf,UUJqVe,ws9Tlc,siKnQd,XVq9Qb,STuCOe,njlZCf,m9oV,vjKJJ,y5vRwf,iyZMqd,NTMZac,mzzZzc,rCcCxc,vvMGie,K1ZKnb,ziZ8Mc,b3kMqb,mvkUhe,CMcBD,Fndnac,t2srLd,EN3i8d,z0u0L,xiZRqc,NOeYWe,O6y8ed,L9OGUe,PrPYRd,MpJwZc,qPfo0c,cYShmd,hc6Ubd,Rkm0ef,KUM7Z,oLggrd,inNHtf,L1AAkb,WpP9Yc,lwddkf,gJzDyc,SpsfSb,aC1iue,tUnxGc,aW3pY,ZakeSe,EFQ78c,xQtZb,I6YDgd,zbML3c,zr1jrb,vHEMJe,YHI3We,YTxL4,bSspM,Uas9Hd,zy0vNb,K0PMbc,AvtSve,qmdT9,MY7mZe,xBaz7b,GwYlN,eVCnO,EIOG1e,LDQI" |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 22833 |
| Entropy (8bit): | 5.425034548615223 |
| Encrypted: | false |
| SSDEEP: | 384:7lFo6ZEdpgtmyiPixV9OX9gMBpHkHnfst9lZulagGcwYHiRFjJzN7:77o6ZviPixV8xpEHn89l4IgGcwYCRtb7 |
| MD5: | 749B18538FE32BFE0815D75F899F5B21 |
| SHA1: | AF95A019211AF69F752A43CAA54A83C2AFD41D28 |
| SHA-256: | 116B2687C1D5E00DB56A79894AB0C12D4E2E000B9379B7E7AD751B84DF611F3F |
| SHA-512: | E4B6F4556AA0FD9979BB52681508F5E26FFB256473803F74F7F5C8D93FA3636D7D0A5835618FBC6123022805CE0D9616A7451A0F302C665E28A6090B5D588505 |
| Malicious: | false |
| URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.RgRbaBHDctU.es5.O/ck=boq-identity.AccountsSignInUi.gAiX_O5afVA.L.B1.O/am=xIFgKBi2EQjEE54DekBRIOQAAAAAAAAAAKANAAB0DA/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,EN3i8d,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZakeSe,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,iyZMqd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlG_aYNE-Dz95N0OV63231Yfi4Jf5g/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=RqjULd" |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 4066 |
| Entropy (8bit): | 5.363016925556486 |
| Encrypted: | false |
| SSDEEP: | 96:G2CiFZX5BReR68ujioIRVrqtyzBeTV6SfyAKLif9c7w:bCMZXVeR6jiosVrqtyzBaImyAKw9x |
| MD5: | FC5E597D923838E10390DADD12651A81 |
| SHA1: | C9959F8D539DB5DF07B8246EC12539B6A9CC101F |
| SHA-256: | A7EBD5280C50AE93C061EAE1E9727329E015E97531F8F2D82D0E3EA76ADB37B4 |
| SHA-512: | 784CA572808F184A849388723FBB3701E6981D885BBA8A330A933F90BF0B36A2E4A491D4463A27911B1D9F7A7134F23E15F187FC7CB4554EAE9BC252513EED7C |
| Malicious: | false |
| URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.RgRbaBHDctU.es5.O/ck=boq-identity.AccountsSignInUi.gAiX_O5afVA.L.B1.O/am=xIFgKBi2EQjEE54DekBRIOQAAAAAAAAAAKANAAB0DA/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,EN3i8d,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZDZcre,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,iyZMqd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlG_aYNE-Dz95N0OV63231Yfi4Jf5g/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=sOXFj,q0xTif,ZZ4WUe" |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 52280 |
| Entropy (8bit): | 7.995413196679271 |
| Encrypted: | true |
| SSDEEP: | 1536:1rvqtK8DZilXxwJ8mMwAZy7phqsFLdG3B4d:xytBZits8bw4wzbFxG3B4d |
| MD5: | F61F0D4D0F968D5BBA39A84C76277E1A |
| SHA1: | AA3693EA140ECA418B4B2A30F6A68F6F43B4BEB2 |
| SHA-256: | 57147F08949ABABE7DEEF611435AE418475A693E3823769A25C2A39B6EAD9CCC |
| SHA-512: | 6C3BD90F709BCF9151C9ED9FFEA55C4F6883E7FDA2A4E26BF018C83FE1CFBE4F4AA0DB080D6D024070D53B2257472C399C8AC44EEFD38B9445640EFA85D5C487 |
| Malicious: | false |
| URL: | https://fonts.gstatic.com/s/googlesans/v58/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCI.woff2 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 9210 |
| Entropy (8bit): | 5.404371326611379 |
| Encrypted: | false |
| SSDEEP: | 192:EEFZpeip4HzZlY0If0Ma23jcUcrhCx6VD1TYPi8:Es/p4jgjUhtD1TY68 |
| MD5: | 21E893B65627B397E22619A9F5BB9662 |
| SHA1: | F561B0F66211C1E7B22F94B4935C312AB7087E85 |
| SHA-256: | FFA9B8BC8EF2CDFF5EB4BA1A0BA1710A253A5B42535E2A369D5026967DCF4673 |
| SHA-512: | 3DE3CD6A4E9B06AB3EB324E90A40B5F2AEEA8D7D6A2651C310E993CF79EEB5AC6E2E33C587F46B2DD20CC862354FD1A61AEBB9B990E6805F6629404BA285F8FA |
| Malicious: | false |
| URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.RgRbaBHDctU.es5.O/ck=boq-identity.AccountsSignInUi.gAiX_O5afVA.L.B1.O/am=xIFgKBi2EQjEE54DekBRIOQAAAAAAAAAAKANAAB0DA/d=1/exm=AvtSve,CMcBD,EFQ78c,EIOG1e,EN3i8d,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PrPYRd,Rkm0ef,SCuOPb,STuCOe,SpsfSb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,ZakeSe,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,byfTOb,cYShmd,eVCnO,gJzDyc,hc6Ubd,inNHtf,iyZMqd,lsjVmc,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,qPfo0c,qmdT9,rCcCxc,siKnQd,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlG_aYNE-Dz95N0OV63231Yfi4Jf5g/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ltDFwf,SD8Jgb,rmumx,E87wgc,qPYxq,Tbb4sb,pxq3x,f8Gu1e,soHxf,YgOFye,yRXbo,bTi8wc,ywOR5c,PHUIyb" |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 1460 |
| Entropy (8bit): | 5.291808298251231 |
| Encrypted: | false |
| SSDEEP: | 24:kMYD7DuZvuhqCsNRxoYTY9/qoVk7hz1l2p6vDMW94uEQOeGbCx4VGbgCSFBV87OU:o7DuZWhv6oy12kvwKEeGbC6GbHSh/Hrw |
| MD5: | 4CA7ADFE744A690411EA4D3EA8DB9E4B |
| SHA1: | 2CF1777A199E25378D330DA68BED1871B5C5BC32 |
| SHA-256: | 128129BA736B3094323499B0498A5B3A909C1529717461C34B70080A5B1603BD |
| SHA-512: | 8BD3477AF41D1F0FE74AFFCB177BEC0F5F4FDCBBA6BD29D9C2567E6FFDEF5DEB7FF74BF348F33209C39D7BB4958E748DF6731D3DC8F6947352276BC92EAF9E79 |
| Malicious: | false |
| URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.RgRbaBHDctU.es5.O/ck=boq-identity.AccountsSignInUi.gAiX_O5afVA.L.B1.O/am=xIFgKBi2EQjEE54DekBRIOQAAAAAAAAAAKANAAB0DA/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,EN3i8d,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,iyZMqd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlG_aYNE-Dz95N0OV63231Yfi4Jf5g/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=P6sQOc" |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 743936 |
| Entropy (8bit): | 5.791086230020914 |
| Encrypted: | false |
| SSDEEP: | 6144:YVXWBQkPdzg5pTX1ROv/duPzd8C3s891/N:Nfd8j91/N |
| MD5: | 1A3606C746E7B1C949D9078E8E8C1244 |
| SHA1: | 56A3EB1E93E61ACD7AAD39DC3526CB60E23651B1 |
| SHA-256: | 5F49AE5162183E2EF6F082B29EC99F18DB0212B8ADDB03699B1BFB0AC7869742 |
| SHA-512: | F2D15243311C472331C5F3F083BB6C18D38EC0247A3F3CBAFD96DBA40E4EAE489CDA04176672E39FE3760EF7347596B2A5EAB0FB0125E881EF514475C99863B9 |
| Malicious: | false |
| URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.RgRbaBHDctU.es5.O/am=xIFgKBi2EQjEE54DekBRIOQAAAAAAAAAAKANAAB0DA/d=1/excm=_b,_tp,identifierview/ed=1/dg=0/wt=2/ujg=1/rs=AOaEmlE6O04h0gj7Nu50q-nmaRKM6WWcJw/m=_b,_tp" |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 3467 |
| Entropy (8bit): | 5.514745431912774 |
| Encrypted: | false |
| SSDEEP: | 96:ozbld2fNUmeqJNizhNtt1W8t//loyIpXmdVE2w:onSKE8PWe/Cy4X3j |
| MD5: | 8DEF399E8355ABC23E64505281005099 |
| SHA1: | 24FF74C3AEFD7696D84FF148465DF4B1B60B1696 |
| SHA-256: | F128D7218E1286B05DF11310AD3C8F4CF781402698E45448850D2A3A22F5F185 |
| SHA-512: | 33721DD47658D8E12ADF6BD9E9316EB89F5B6297927F7FD60F954E04B829DCBF0E1AE6DDD9A3401F45E0011AE4B1397B960C218238A3D0F633A2173D8E604082 |
| Malicious: | false |
| URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.RgRbaBHDctU.es5.O/ck=boq-identity.AccountsSignInUi.gAiX_O5afVA.L.B1.O/am=xIFgKBi2EQjEE54DekBRIOQAAAAAAAAAAKANAAB0DA/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,EN3i8d,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZDZcre,ZZ4WUe,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,iAskyc,inNHtf,iyZMqd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,w9hDv,wg1P6b,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlG_aYNE-Dz95N0OV63231Yfi4Jf5g/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=Wt6vjf,hhhU8,FCpbqb,WhJNk" |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 84 |
| Entropy (8bit): | 4.875266466142591 |
| Encrypted: | false |
| SSDEEP: | 3:DZFJu0+WVTBCq2Bjdw2KsJJuYHSKnZ:lFJuuVTBudw29nu4SKZ |
| MD5: | 87B6333E98B7620EA1FF98D1A837A39E |
| SHA1: | 105DE6815B0885357DE1414BFC0D77FCC9E924EF |
| SHA-256: | DCD3C133C5C40BECD4100BBE6EDAE84C9735E778E4234A5E8395C56FF8A733BA |
| SHA-512: | 867D7943D813685FAA76394E53199750C55817E836FD19C933F74D11E9657CE66719A6D6B2E39EE1DE62358BCE364E38A55F4E138DF92337DE6985DDCD5D0994 |
| Malicious: | false |
| URL: | https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgmA6QC9dWevzxIFDRkBE_oSBQ3oIX6GEgUN05ioBw==?alt=proto |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 1608 |
| Entropy (8bit): | 5.257113147606035 |
| Encrypted: | false |
| SSDEEP: | 48:o72ZrNZ4yNAbU+15fMxIdf5WENoBCbw7DbG2bEJrw:oyNNAY+1i4HoBNG2Ilw |
| MD5: | F06E2DC5CC446B39F878B5F8E4D78418 |
| SHA1: | 9F1F34FDD8F8DAB942A9B95D9F720587B6F6AD48 |
| SHA-256: | 118E4D2FE7CEF205F9AFC87636554C6D8220882B158333EE3D1990282D158B8F |
| SHA-512: | 893C4F883CD1C88C6AAF5A6E7F232D62823A53E1FFDE5C1C52BB066D75781DD041F4D281CDBF18070D921CE862652D8863E2B9D5E0190CFA4128890D62C44168 |
| Malicious: | false |
| URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.RgRbaBHDctU.es5.O/ck=boq-identity.AccountsSignInUi.gAiX_O5afVA.L.B1.O/am=xIFgKBi2EQjEE54DekBRIOQAAAAAAAAAAKANAAB0DA/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,EN3i8d,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,iyZMqd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlG_aYNE-Dz95N0OV63231Yfi4Jf5g/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=w9hDv,ZDZcre,A7fCU" |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 5050 |
| Entropy (8bit): | 5.289052544075544 |
| Encrypted: | false |
| SSDEEP: | 96:o4We0hP7OBFXYvB1sig3Fd8HkaXzLmUrv8Vh1WJlLQXT2v2gqw:655758Fd8HkaPZ0GmAD |
| MD5: | 26E26FD11772DFF5C7004BEA334289CC |
| SHA1: | 638DAAF541BDE31E95AEE4F8ADA677434D7051DB |
| SHA-256: | ADFE3E4960982F5EF4C043052A9990D8683C5FC2B590E817B6B1A5774DDE2CE3 |
| SHA-512: | C31929EB6D1C60D6A84A2574FF60490394A6D6F9B354972F3328952F570D80B3F2AEC916B0E1B66DDB1AC056EB75BFAC477E7AF631D0AD1810EDBAF025465D66 |
| Malicious: | false |
| URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.RgRbaBHDctU.es5.O/ck=boq-identity.AccountsSignInUi.gAiX_O5afVA.L.B1.O/am=xIFgKBi2EQjEE54DekBRIOQAAAAAAAAAAKANAAB0DA/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,EN3i8d,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZDZcre,ZZ4WUe,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,iAskyc,inNHtf,iyZMqd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlG_aYNE-Dz95N0OV63231Yfi4Jf5g/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=wg1P6b" |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 32500 |
| Entropy (8bit): | 5.378903546681047 |
| Encrypted: | false |
| SSDEEP: | 768:zYlbuROstb0e39nKGrkysU0smpu4OLOdzIf1p/5GeSsngurz6aKEEEGo/:zYl61Cysbu4OLOdzIfrIen72ZFo/ |
| MD5: | BF4BF9728A7C302FBA5B14F3D0F1878B |
| SHA1: | 2607CA7A93710D629400077FF3602CB207E6F53D |
| SHA-256: | 8981E7B228DF7D6A8797C0CD1E9B0F1F88337D5F0E1C27A04E7A57D2C4309798 |
| SHA-512: | AC9E170FC3AFDC0CF6BB8E926B93EF129A5FAD1BBA51B60BABCF3555E9B652E98F86A00FB099879DED35DD3FFE72ECFA597E20E6CA8CF402BEDEC40F78412EDA |
| Malicious: | false |
| URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.RgRbaBHDctU.es5.O/ck=boq-identity.AccountsSignInUi.gAiX_O5afVA.L.B1.O/am=xIFgKBi2EQjEE54DekBRIOQAAAAAAAAAAKANAAB0DA/d=1/exm=_b,_tp/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlG_aYNE-Dz95N0OV63231Yfi4Jf5g/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=byfTOb,lsjVmc,LEikZe" |
| Preview: |
| File type: | |
| Entropy (8bit): | 6.581959378023776 |
| TrID: |
|
| File name: | file.exe |
| File size: | 918'528 bytes |
| MD5: | 84857d029b892796223a0388e578c717 |
| SHA1: | 035492bdbcf0e449294ae50eeace2ca2ba36923e |
| SHA256: | be9295fb6df84c5f65b777a04b1db541c15fe36fda341ad3c0f55d3b9ae17105 |
| SHA512: | 4dc55ddeb1ed7785dbbb674d5cf3a6f21aee22a64db1a7fa99bac284a4ca50dd270b399d722a89f3cc5905e72c44b6990c83fdfbdffbc006955349403f681bf9 |
| SSDEEP: | 12288:IqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgaKTs:IqDEvCTbMWu7rQYlBQcBiT6rprG8aas |
| TLSH: | A8159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13A81D79BE701B1563E7A3 |
| File Content Preview: | MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.......................j:......j:..C...j:......@.*...............................n.......~.............{.......{.......{.........z.... |
 | |
| Icon Hash: | aaf3e3e3938382a0 |
| Entrypoint: | 0x420577 |
| Entrypoint Section: | .text |
| Digitally signed: | false |
| Imagebase: | 0x400000 |
| Subsystem: | windows gui |
| Image File Characteristics: | EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE, 32BIT_MACHINE |
| DLL Characteristics: | DYNAMIC_BASE, TERMINAL_SERVER_AWARE |
| Time Stamp: | 0x66FC969F [Wed Oct 2 00:41:03 2024 UTC] |
| TLS Callbacks: | |
| CLR (.Net) Version: | |
| OS Version Major: | 5 |
| OS Version Minor: | 1 |
| File Version Major: | 5 |
| File Version Minor: | 1 |
| Subsystem Version Major: | 5 |
| Subsystem Version Minor: | 1 |
| Import Hash: | 948cc502fe9226992dce9417f952fce3 |
| Instruction |
|---|
| call 00007F3519019923h |
| jmp 00007F351901922Fh |
| push ebp |
| mov ebp, esp |
| push esi |
| push dword ptr [ebp+08h] |
| mov esi, ecx |
| call 00007F351901940Dh |
| mov dword ptr [esi], 0049FDF0h |
| mov eax, esi |
| pop esi |
| pop ebp |
| retn 0004h |
| and dword ptr [ecx+04h], 00000000h |
| mov eax, ecx |
| and dword ptr [ecx+08h], 00000000h |
| mov dword ptr [ecx+04h], 0049FDF8h |
| mov dword ptr [ecx], 0049FDF0h |
| ret |
| push ebp |
| mov ebp, esp |
| push esi |
| push dword ptr [ebp+08h] |
| mov esi, ecx |
| call 00007F35190193DAh |
| mov dword ptr [esi], 0049FE0Ch |
| mov eax, esi |
| pop esi |
| pop ebp |
| retn 0004h |
| and dword ptr [ecx+04h], 00000000h |
| mov eax, ecx |
| and dword ptr [ecx+08h], 00000000h |
| mov dword ptr [ecx+04h], 0049FE14h |
| mov dword ptr [ecx], 0049FE0Ch |
| ret |
| push ebp |
| mov ebp, esp |
| push esi |
| mov esi, ecx |
| lea eax, dword ptr [esi+04h] |
| mov dword ptr [esi], 0049FDD0h |
| and dword ptr [eax], 00000000h |
| and dword ptr [eax+04h], 00000000h |
| push eax |
| mov eax, dword ptr [ebp+08h] |
| add eax, 04h |
| push eax |
| call 00007F351901BFCDh |
| pop ecx |
| pop ecx |
| mov eax, esi |
| pop esi |
| pop ebp |
| retn 0004h |
| lea eax, dword ptr [ecx+04h] |
| mov dword ptr [ecx], 0049FDD0h |
| push eax |
| call 00007F351901C018h |
| pop ecx |
| ret |
| push ebp |
| mov ebp, esp |
| push esi |
| mov esi, ecx |
| lea eax, dword ptr [esi+04h] |
| mov dword ptr [esi], 0049FDD0h |
| push eax |
| call 00007F351901C001h |
| test byte ptr [ebp+08h], 00000001h |
| pop ecx |
| Programming Language: |
|
| Name | Virtual Address | Virtual Size | Is in Section |
|---|---|---|---|
| IMAGE_DIRECTORY_ENTRY_EXPORT | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_IMPORT | 0xc8e64 | 0x17c | .rdata |
| IMAGE_DIRECTORY_ENTRY_RESOURCE | 0xd4000 | 0x9858 | .rsrc |
| IMAGE_DIRECTORY_ENTRY_EXCEPTION | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_SECURITY | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_BASERELOC | 0xde000 | 0x7594 | .reloc |
| IMAGE_DIRECTORY_ENTRY_DEBUG | 0xb0ff0 | 0x1c | .rdata |
| IMAGE_DIRECTORY_ENTRY_COPYRIGHT | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_GLOBALPTR | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_TLS | 0xc3400 | 0x18 | .rdata |
| IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG | 0xb1010 | 0x40 | .rdata |
| IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_IAT | 0x9c000 | 0x894 | .rdata |
| IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_RESERVED | 0x0 | 0x0 |
| Name | Virtual Address | Virtual Size | Raw Size | MD5 | Xored PE | ZLIB Complexity | File Type | Entropy | Characteristics |
|---|---|---|---|---|---|---|---|---|---|
| .text | 0x1000 | 0x9ab1d | 0x9ac00 | 0a1473f3064dcbc32ef93c5c8a90f3a6 | False | 0.565500681542811 | data | 6.668273581389308 | IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ |
| .rdata | 0x9c000 | 0x2fb82 | 0x2fc00 | c9cf2468b60bf4f80f136ed54b3989fb | False | 0.35289185209424084 | data | 5.691811547483722 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ |
| .data | 0xcc000 | 0x706c | 0x4800 | 53b9025d545d65e23295e30afdbd16d9 | False | 0.04356553819444445 | DOS executable (block device driver @\273\) | 0.5846666986982398 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE |
| .rsrc | 0xd4000 | 0x9858 | 0x9a00 | 1f621cbff6b10415f2b0374ae7f2804f | False | 0.29740767045454547 | data | 5.272517032491642 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ |
| .reloc | 0xde000 | 0x7594 | 0x7600 | c68ee8931a32d45eb82dc450ee40efc3 | False | 0.7628111758474576 | data | 6.7972128181359786 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ |
| Name | RVA | Size | Type | Language | Country | ZLIB Complexity |
|---|---|---|---|---|---|---|
| RT_ICON | 0xd45a8 | 0x128 | Device independent bitmap graphic, 16 x 32 x 4, image size 192 | English | Great Britain | 0.7466216216216216 |
| RT_ICON | 0xd46d0 | 0x128 | Device independent bitmap graphic, 16 x 32 x 4, image size 128, 16 important colors | English | Great Britain | 0.3277027027027027 |
| RT_ICON | 0xd47f8 | 0x128 | Device independent bitmap graphic, 16 x 32 x 4, image size 192 | English | Great Britain | 0.3885135135135135 |
| RT_ICON | 0xd4920 | 0x2e8 | Device independent bitmap graphic, 32 x 64 x 4, image size 0 | English | Great Britain | 0.3333333333333333 |
| RT_ICON | 0xd4c08 | 0x128 | Device independent bitmap graphic, 16 x 32 x 4, image size 0 | English | Great Britain | 0.5 |
| RT_ICON | 0xd4d30 | 0xea8 | Device independent bitmap graphic, 48 x 96 x 8, image size 0 | English | Great Britain | 0.2835820895522388 |
| RT_ICON | 0xd5bd8 | 0x8a8 | Device independent bitmap graphic, 32 x 64 x 8, image size 0 | English | Great Britain | 0.37906137184115524 |
| RT_ICON | 0xd6480 | 0x568 | Device independent bitmap graphic, 16 x 32 x 8, image size 0 | English | Great Britain | 0.23699421965317918 |
| RT_ICON | 0xd69e8 | 0x25a8 | Device independent bitmap graphic, 48 x 96 x 32, image size 0 | English | Great Britain | 0.13858921161825727 |
| RT_ICON | 0xd8f90 | 0x10a8 | Device independent bitmap graphic, 32 x 64 x 32, image size 0 | English | Great Britain | 0.25070356472795496 |
| RT_ICON | 0xda038 | 0x468 | Device independent bitmap graphic, 16 x 32 x 32, image size 0 | English | Great Britain | 0.3173758865248227 |
| RT_MENU | 0xda4a0 | 0x50 | data | English | Great Britain | 0.9 |
| RT_STRING | 0xda4f0 | 0x594 | data | English | Great Britain | 0.3333333333333333 |
| RT_STRING | 0xdaa84 | 0x68a | data | English | Great Britain | 0.2735961768219833 |
| RT_STRING | 0xdb110 | 0x490 | data | English | Great Britain | 0.3715753424657534 |
| RT_STRING | 0xdb5a0 | 0x5fc | data | English | Great Britain | 0.3087467362924282 |
| RT_STRING | 0xdbb9c | 0x65c | data | English | Great Britain | 0.34336609336609336 |
| RT_STRING | 0xdc1f8 | 0x466 | data | English | Great Britain | 0.3605683836589698 |
| RT_STRING | 0xdc660 | 0x158 | Matlab v4 mat-file (little endian) n, numeric, rows 0, columns 0 | English | Great Britain | 0.502906976744186 |
| RT_RCDATA | 0xdc7b8 | 0xb1e | data | 1.0038650737877723 | ||
| RT_GROUP_ICON | 0xdd2d8 | 0x76 | data | English | Great Britain | 0.6610169491525424 |
| RT_GROUP_ICON | 0xdd350 | 0x14 | data | English | Great Britain | 1.25 |
| RT_GROUP_ICON | 0xdd364 | 0x14 | data | English | Great Britain | 1.15 |
| RT_GROUP_ICON | 0xdd378 | 0x14 | data | English | Great Britain | 1.25 |
| RT_VERSION | 0xdd38c | 0xdc | data | English | Great Britain | 0.6181818181818182 |
| RT_MANIFEST | 0xdd468 | 0x3ef | ASCII text, with CRLF line terminators | English | Great Britain | 0.5074478649453823 |
| DLL | Import |
|---|---|
| WSOCK32.dll | gethostbyname, recv, send, socket, inet_ntoa, setsockopt, ntohs, WSACleanup, WSAStartup, sendto, htons, __WSAFDIsSet, select, accept, listen, bind, inet_addr, ioctlsocket, recvfrom, WSAGetLastError, closesocket, gethostname, connect |
| VERSION.dll | GetFileVersionInfoW, VerQueryValueW, GetFileVersionInfoSizeW |
| WINMM.dll | timeGetTime, waveOutSetVolume, mciSendStringW |
| COMCTL32.dll | ImageList_ReplaceIcon, ImageList_Destroy, ImageList_Remove, ImageList_SetDragCursorImage, ImageList_BeginDrag, ImageList_DragEnter, ImageList_DragLeave, ImageList_EndDrag, ImageList_DragMove, InitCommonControlsEx, ImageList_Create |
| MPR.dll | WNetGetConnectionW, WNetCancelConnection2W, WNetUseConnectionW, WNetAddConnection2W |
| WININET.dll | HttpOpenRequestW, InternetCloseHandle, InternetOpenW, InternetSetOptionW, InternetCrackUrlW, HttpQueryInfoW, InternetQueryOptionW, InternetConnectW, HttpSendRequestW, FtpOpenFileW, FtpGetFileSize, InternetOpenUrlW, InternetReadFile, InternetQueryDataAvailable |
| PSAPI.DLL | GetProcessMemoryInfo |
| IPHLPAPI.DLL | IcmpSendEcho, IcmpCloseHandle, IcmpCreateFile |
| USERENV.dll | DestroyEnvironmentBlock, LoadUserProfileW, CreateEnvironmentBlock, UnloadUserProfile |
| UxTheme.dll | IsThemeActive |
| KERNEL32.dll | DuplicateHandle, CreateThread, WaitForSingleObject, HeapAlloc, GetProcessHeap, HeapFree, Sleep, GetCurrentThreadId, MultiByteToWideChar, MulDiv, GetVersionExW, IsWow64Process, GetSystemInfo, FreeLibrary, LoadLibraryA, GetProcAddress, SetErrorMode, GetModuleFileNameW, WideCharToMultiByte, lstrcpyW, lstrlenW, GetModuleHandleW, QueryPerformanceCounter, VirtualFreeEx, OpenProcess, VirtualAllocEx, WriteProcessMemory, ReadProcessMemory, CreateFileW, SetFilePointerEx, SetEndOfFile, ReadFile, WriteFile, FlushFileBuffers, TerminateProcess, CreateToolhelp32Snapshot, Process32FirstW, Process32NextW, SetFileTime, GetFileAttributesW, FindFirstFileW, FindClose, GetLongPathNameW, GetShortPathNameW, DeleteFileW, IsDebuggerPresent, CopyFileExW, MoveFileW, CreateDirectoryW, RemoveDirectoryW, SetSystemPowerState, QueryPerformanceFrequency, LoadResource, LockResource, SizeofResource, OutputDebugStringW, GetTempPathW, GetTempFileNameW, DeviceIoControl, LoadLibraryW, GetLocalTime, CompareStringW, GetCurrentThread, EnterCriticalSection, LeaveCriticalSection, GetStdHandle, CreatePipe, InterlockedExchange, TerminateThread, LoadLibraryExW, FindResourceExW, CopyFileW, VirtualFree, FormatMessageW, GetExitCodeProcess, GetPrivateProfileStringW, WritePrivateProfileStringW, GetPrivateProfileSectionW, WritePrivateProfileSectionW, GetPrivateProfileSectionNamesW, FileTimeToLocalFileTime, FileTimeToSystemTime, SystemTimeToFileTime, LocalFileTimeToFileTime, GetDriveTypeW, GetDiskFreeSpaceExW, GetDiskFreeSpaceW, GetVolumeInformationW, SetVolumeLabelW, CreateHardLinkW, SetFileAttributesW, CreateEventW, SetEvent, GetEnvironmentVariableW, SetEnvironmentVariableW, GlobalLock, GlobalUnlock, GlobalAlloc, GetFileSize, GlobalFree, GlobalMemoryStatusEx, Beep, GetSystemDirectoryW, HeapReAlloc, HeapSize, GetComputerNameW, GetWindowsDirectoryW, GetCurrentProcessId, GetProcessIoCounters, CreateProcessW, GetProcessId, SetPriorityClass, VirtualAlloc, GetCurrentDirectoryW, lstrcmpiW, DecodePointer, GetLastError, RaiseException, InitializeCriticalSectionAndSpinCount, DeleteCriticalSection, InterlockedDecrement, InterlockedIncrement, ResetEvent, WaitForSingleObjectEx, IsProcessorFeaturePresent, UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetCurrentProcess, CloseHandle, GetFullPathNameW, GetStartupInfoW, GetSystemTimeAsFileTime, InitializeSListHead, RtlUnwind, SetLastError, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, EncodePointer, ExitProcess, GetModuleHandleExW, ExitThread, ResumeThread, FreeLibraryAndExitThread, GetACP, GetDateFormatW, GetTimeFormatW, LCMapStringW, GetStringTypeW, GetFileType, SetStdHandle, GetConsoleCP, GetConsoleMode, ReadConsoleW, GetTimeZoneInformation, FindFirstFileExW, IsValidCodePage, GetOEMCP, GetCPInfo, GetCommandLineA, GetCommandLineW, GetEnvironmentStringsW, FreeEnvironmentStringsW, SetEnvironmentVariableA, SetCurrentDirectoryW, FindNextFileW, WriteConsoleW |
| USER32.dll | GetKeyboardLayoutNameW, IsCharAlphaW, IsCharAlphaNumericW, IsCharLowerW, IsCharUpperW, GetMenuStringW, GetSubMenu, GetCaretPos, IsZoomed, GetMonitorInfoW, SetWindowLongW, SetLayeredWindowAttributes, FlashWindow, GetClassLongW, TranslateAcceleratorW, IsDialogMessageW, GetSysColor, InflateRect, DrawFocusRect, DrawTextW, FrameRect, DrawFrameControl, FillRect, PtInRect, DestroyAcceleratorTable, CreateAcceleratorTableW, SetCursor, GetWindowDC, GetSystemMetrics, GetActiveWindow, CharNextW, wsprintfW, RedrawWindow, DrawMenuBar, DestroyMenu, SetMenu, GetWindowTextLengthW, CreateMenu, IsDlgButtonChecked, DefDlgProcW, CallWindowProcW, ReleaseCapture, SetCapture, PeekMessageW, GetInputState, UnregisterHotKey, CharLowerBuffW, MonitorFromPoint, MonitorFromRect, LoadImageW, mouse_event, ExitWindowsEx, SetActiveWindow, FindWindowExW, EnumThreadWindows, SetMenuDefaultItem, InsertMenuItemW, IsMenu, ClientToScreen, GetCursorPos, DeleteMenu, CheckMenuRadioItem, GetMenuItemID, GetMenuItemCount, SetMenuItemInfoW, GetMenuItemInfoW, SetForegroundWindow, IsIconic, FindWindowW, SystemParametersInfoW, LockWindowUpdate, SendInput, GetAsyncKeyState, SetKeyboardState, GetKeyboardState, GetKeyState, VkKeyScanW, LoadStringW, DialogBoxParamW, MessageBeep, EndDialog, SendDlgItemMessageW, GetDlgItem, SetWindowTextW, CopyRect, ReleaseDC, GetDC, EndPaint, BeginPaint, GetClientRect, GetMenu, DestroyWindow, EnumWindows, GetDesktopWindow, IsWindow, IsWindowEnabled, IsWindowVisible, EnableWindow, InvalidateRect, GetWindowLongW, GetWindowThreadProcessId, AttachThreadInput, GetFocus, GetWindowTextW, SendMessageTimeoutW, EnumChildWindows, CharUpperBuffW, GetClassNameW, GetParent, GetDlgCtrlID, SendMessageW, MapVirtualKeyW, PostMessageW, GetWindowRect, SetUserObjectSecurity, CloseDesktop, CloseWindowStation, OpenDesktopW, RegisterHotKey, GetCursorInfo, SetWindowPos, CopyImage, AdjustWindowRectEx, SetRect, SetClipboardData, EmptyClipboard, CountClipboardFormats, CloseClipboard, GetClipboardData, IsClipboardFormatAvailable, OpenClipboard, BlockInput, TrackPopupMenuEx, GetMessageW, SetProcessWindowStation, GetProcessWindowStation, OpenWindowStationW, GetUserObjectSecurity, MessageBoxW, DefWindowProcW, MoveWindow, SetFocus, PostQuitMessage, KillTimer, CreatePopupMenu, RegisterWindowMessageW, SetTimer, ShowWindow, CreateWindowExW, RegisterClassExW, LoadIconW, LoadCursorW, GetSysColorBrush, GetForegroundWindow, MessageBoxA, DestroyIcon, DispatchMessageW, keybd_event, TranslateMessage, ScreenToClient |
| GDI32.dll | EndPath, DeleteObject, GetTextExtentPoint32W, ExtCreatePen, StrokeAndFillPath, GetDeviceCaps, SetPixel, CloseFigure, LineTo, AngleArc, MoveToEx, Ellipse, CreateCompatibleBitmap, CreateCompatibleDC, PolyDraw, BeginPath, Rectangle, SetViewportOrgEx, GetObjectW, SetBkMode, RoundRect, SetBkColor, CreatePen, SelectObject, StretchBlt, CreateSolidBrush, SetTextColor, CreateFontW, GetTextFaceW, GetStockObject, CreateDCW, GetPixel, DeleteDC, GetDIBits, StrokePath |
| COMDLG32.dll | GetSaveFileNameW, GetOpenFileNameW |
| ADVAPI32.dll | GetAce, RegEnumValueW, RegDeleteValueW, RegDeleteKeyW, RegEnumKeyExW, RegSetValueExW, RegOpenKeyExW, RegCloseKey, RegQueryValueExW, RegConnectRegistryW, InitializeSecurityDescriptor, InitializeAcl, AdjustTokenPrivileges, OpenThreadToken, OpenProcessToken, LookupPrivilegeValueW, DuplicateTokenEx, CreateProcessAsUserW, CreateProcessWithLogonW, GetLengthSid, CopySid, LogonUserW, AllocateAndInitializeSid, CheckTokenMembership, FreeSid, GetTokenInformation, RegCreateKeyExW, GetSecurityDescriptorDacl, GetAclInformation, GetUserNameW, AddAce, SetSecurityDescriptorDacl, InitiateSystemShutdownExW |
| SHELL32.dll | DragFinish, DragQueryPoint, ShellExecuteExW, DragQueryFileW, SHEmptyRecycleBinW, SHGetPathFromIDListW, SHBrowseForFolderW, SHCreateShellItem, SHGetDesktopFolder, SHGetSpecialFolderLocation, SHGetFolderPathW, SHFileOperationW, ExtractIconExW, Shell_NotifyIconW, ShellExecuteW |
| ole32.dll | CoTaskMemAlloc, CoTaskMemFree, CLSIDFromString, ProgIDFromCLSID, CLSIDFromProgID, OleSetMenuDescriptor, MkParseDisplayName, OleSetContainedObject, CoCreateInstance, IIDFromString, StringFromGUID2, CreateStreamOnHGlobal, OleInitialize, OleUninitialize, CoInitialize, CoUninitialize, GetRunningObjectTable, CoGetInstanceFromFile, CoGetObject, CoInitializeSecurity, CoCreateInstanceEx, CoSetProxyBlanket |
| OLEAUT32.dll | CreateStdDispatch, CreateDispTypeInfo, UnRegisterTypeLib, UnRegisterTypeLibForUser, RegisterTypeLibForUser, RegisterTypeLib, LoadTypeLibEx, VariantCopyInd, SysReAllocString, SysFreeString, VariantChangeType, SafeArrayDestroyData, SafeArrayUnaccessData, SafeArrayAccessData, SafeArrayAllocData, SafeArrayAllocDescriptorEx, SafeArrayCreateVector, SysStringLen, QueryPathOfRegTypeLib, SysAllocString, VariantInit, VariantClear, DispCallFunc, VariantTimeToSystemTime, VarR8FromDec, SafeArrayGetVartype, SafeArrayDestroyDescriptor, VariantCopy, OleLoadPicture |
| Language of compilation system | Country where language is spoken | Map |
|---|---|---|
| English | Great Britain |  |
Key Decision
Richest Path
Thread / callback creation
Lower opacity -> Library Node| Timestamp | Source Port | Dest Port | Source IP | Dest IP |
|---|---|---|---|---|
| Oct 2, 2024 02:43:02.964214087 CEST | 49732 | 443 | 192.168.2.4 | 142.250.186.46 |
| Oct 2, 2024 02:43:02.964282036 CEST | 443 | 49732 | 142.250.186.46 | 192.168.2.4 |
| Oct 2, 2024 02:43:02.964340925 CEST | 49732 | 443 | 192.168.2.4 | 142.250.186.46 |
| Oct 2, 2024 02:43:02.965341091 CEST | 49732 | 443 | 192.168.2.4 | 142.250.186.46 |
| Oct 2, 2024 02:43:02.965367079 CEST | 443 | 49732 | 142.250.186.46 | 192.168.2.4 |
| Oct 2, 2024 02:43:03.612587929 CEST | 443 | 49732 | 142.250.186.46 | 192.168.2.4 |
| Oct 2, 2024 02:43:03.663609028 CEST | 49732 | 443 | 192.168.2.4 | 142.250.186.46 |
| Oct 2, 2024 02:43:03.693545103 CEST | 49732 | 443 | 192.168.2.4 | 142.250.186.46 |
| Oct 2, 2024 02:43:03.693562984 CEST | 443 | 49732 | 142.250.186.46 | 192.168.2.4 |
| Oct 2, 2024 02:43:03.694360018 CEST | 443 | 49732 | 142.250.186.46 | 192.168.2.4 |
| Oct 2, 2024 02:43:03.694453955 CEST | 49732 | 443 | 192.168.2.4 | 142.250.186.46 |
| Oct 2, 2024 02:43:03.695450068 CEST | 443 | 49732 | 142.250.186.46 | 192.168.2.4 |
| Oct 2, 2024 02:43:03.695502043 CEST | 49732 | 443 | 192.168.2.4 | 142.250.186.46 |
| Oct 2, 2024 02:43:03.723858118 CEST | 49732 | 443 | 192.168.2.4 | 142.250.186.46 |
| Oct 2, 2024 02:43:03.723985910 CEST | 443 | 49732 | 142.250.186.46 | 192.168.2.4 |
| Oct 2, 2024 02:43:03.724961996 CEST | 49732 | 443 | 192.168.2.4 | 142.250.186.46 |
| Oct 2, 2024 02:43:03.724978924 CEST | 443 | 49732 | 142.250.186.46 | 192.168.2.4 |
| Oct 2, 2024 02:43:03.772988081 CEST | 49732 | 443 | 192.168.2.4 | 142.250.186.46 |
| Oct 2, 2024 02:43:03.918370008 CEST | 443 | 49732 | 142.250.186.46 | 192.168.2.4 |
| Oct 2, 2024 02:43:03.918473005 CEST | 443 | 49732 | 142.250.186.46 | 192.168.2.4 |
| Oct 2, 2024 02:43:03.918530941 CEST | 49732 | 443 | 192.168.2.4 | 142.250.186.46 |
| Oct 2, 2024 02:43:03.949712038 CEST | 49732 | 443 | 192.168.2.4 | 142.250.186.46 |
| Oct 2, 2024 02:43:03.949743986 CEST | 443 | 49732 | 142.250.186.46 | 192.168.2.4 |
| Oct 2, 2024 02:43:03.962764025 CEST | 49736 | 443 | 192.168.2.4 | 142.250.184.206 |
| Oct 2, 2024 02:43:03.962789059 CEST | 443 | 49736 | 142.250.184.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:03.962856054 CEST | 49736 | 443 | 192.168.2.4 | 142.250.184.206 |
| Oct 2, 2024 02:43:03.963166952 CEST | 49736 | 443 | 192.168.2.4 | 142.250.184.206 |
| Oct 2, 2024 02:43:03.963181019 CEST | 443 | 49736 | 142.250.184.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:04.710526943 CEST | 443 | 49736 | 142.250.184.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:04.710877895 CEST | 49736 | 443 | 192.168.2.4 | 142.250.184.206 |
| Oct 2, 2024 02:43:04.710905075 CEST | 443 | 49736 | 142.250.184.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:04.711344004 CEST | 443 | 49736 | 142.250.184.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:04.711421967 CEST | 49736 | 443 | 192.168.2.4 | 142.250.184.206 |
| Oct 2, 2024 02:43:04.712074041 CEST | 443 | 49736 | 142.250.184.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:04.712143898 CEST | 49736 | 443 | 192.168.2.4 | 142.250.184.206 |
| Oct 2, 2024 02:43:04.713468075 CEST | 49736 | 443 | 192.168.2.4 | 142.250.184.206 |
| Oct 2, 2024 02:43:04.713526964 CEST | 443 | 49736 | 142.250.184.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:04.713835955 CEST | 49736 | 443 | 192.168.2.4 | 142.250.184.206 |
| Oct 2, 2024 02:43:04.713843107 CEST | 443 | 49736 | 142.250.184.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:04.756944895 CEST | 49736 | 443 | 192.168.2.4 | 142.250.184.206 |
| Oct 2, 2024 02:43:05.017296076 CEST | 443 | 49736 | 142.250.184.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:05.017319918 CEST | 443 | 49736 | 142.250.184.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:05.017385006 CEST | 49736 | 443 | 192.168.2.4 | 142.250.184.206 |
| Oct 2, 2024 02:43:05.017405033 CEST | 443 | 49736 | 142.250.184.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:05.017460108 CEST | 443 | 49736 | 142.250.184.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:05.018806934 CEST | 49736 | 443 | 192.168.2.4 | 142.250.184.206 |
| Oct 2, 2024 02:43:05.019918919 CEST | 49736 | 443 | 192.168.2.4 | 142.250.184.206 |
| Oct 2, 2024 02:43:05.019932032 CEST | 443 | 49736 | 142.250.184.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:05.019941092 CEST | 49736 | 443 | 192.168.2.4 | 142.250.184.206 |
| Oct 2, 2024 02:43:05.020925999 CEST | 49736 | 443 | 192.168.2.4 | 142.250.184.206 |
| Oct 2, 2024 02:43:05.085105896 CEST | 49675 | 443 | 192.168.2.4 | 173.222.162.32 |
| Oct 2, 2024 02:43:07.454338074 CEST | 49741 | 443 | 192.168.2.4 | 142.250.186.68 |
| Oct 2, 2024 02:43:07.454399109 CEST | 443 | 49741 | 142.250.186.68 | 192.168.2.4 |
| Oct 2, 2024 02:43:07.454480886 CEST | 49741 | 443 | 192.168.2.4 | 142.250.186.68 |
| Oct 2, 2024 02:43:07.454689980 CEST | 49741 | 443 | 192.168.2.4 | 142.250.186.68 |
| Oct 2, 2024 02:43:07.454710007 CEST | 443 | 49741 | 142.250.186.68 | 192.168.2.4 |
| Oct 2, 2024 02:43:07.904032946 CEST | 49743 | 443 | 192.168.2.4 | 184.28.90.27 |
| Oct 2, 2024 02:43:07.904061079 CEST | 443 | 49743 | 184.28.90.27 | 192.168.2.4 |
| Oct 2, 2024 02:43:07.904117107 CEST | 49743 | 443 | 192.168.2.4 | 184.28.90.27 |
| Oct 2, 2024 02:43:07.906419039 CEST | 49743 | 443 | 192.168.2.4 | 184.28.90.27 |
| Oct 2, 2024 02:43:07.906430960 CEST | 443 | 49743 | 184.28.90.27 | 192.168.2.4 |
| Oct 2, 2024 02:43:08.086111069 CEST | 443 | 49741 | 142.250.186.68 | 192.168.2.4 |
| Oct 2, 2024 02:43:08.086397886 CEST | 49741 | 443 | 192.168.2.4 | 142.250.186.68 |
| Oct 2, 2024 02:43:08.086431026 CEST | 443 | 49741 | 142.250.186.68 | 192.168.2.4 |
| Oct 2, 2024 02:43:08.087284088 CEST | 443 | 49741 | 142.250.186.68 | 192.168.2.4 |
| Oct 2, 2024 02:43:08.087368965 CEST | 49741 | 443 | 192.168.2.4 | 142.250.186.68 |
| Oct 2, 2024 02:43:08.088893890 CEST | 49741 | 443 | 192.168.2.4 | 142.250.186.68 |
| Oct 2, 2024 02:43:08.088958025 CEST | 443 | 49741 | 142.250.186.68 | 192.168.2.4 |
| Oct 2, 2024 02:43:08.132400036 CEST | 49741 | 443 | 192.168.2.4 | 142.250.186.68 |
| Oct 2, 2024 02:43:08.132414103 CEST | 443 | 49741 | 142.250.186.68 | 192.168.2.4 |
| Oct 2, 2024 02:43:08.179280043 CEST | 49741 | 443 | 192.168.2.4 | 142.250.186.68 |
| Oct 2, 2024 02:43:08.540647984 CEST | 443 | 49743 | 184.28.90.27 | 192.168.2.4 |
| Oct 2, 2024 02:43:08.541006088 CEST | 49743 | 443 | 192.168.2.4 | 184.28.90.27 |
| Oct 2, 2024 02:43:08.559458017 CEST | 49743 | 443 | 192.168.2.4 | 184.28.90.27 |
| Oct 2, 2024 02:43:08.559472084 CEST | 443 | 49743 | 184.28.90.27 | 192.168.2.4 |
| Oct 2, 2024 02:43:08.559706926 CEST | 443 | 49743 | 184.28.90.27 | 192.168.2.4 |
| Oct 2, 2024 02:43:08.602931023 CEST | 49743 | 443 | 192.168.2.4 | 184.28.90.27 |
| Oct 2, 2024 02:43:08.814265013 CEST | 49743 | 443 | 192.168.2.4 | 184.28.90.27 |
| Oct 2, 2024 02:43:08.859402895 CEST | 443 | 49743 | 184.28.90.27 | 192.168.2.4 |
| Oct 2, 2024 02:43:08.998100042 CEST | 443 | 49743 | 184.28.90.27 | 192.168.2.4 |
| Oct 2, 2024 02:43:08.998290062 CEST | 49743 | 443 | 192.168.2.4 | 184.28.90.27 |
| Oct 2, 2024 02:43:08.998301983 CEST | 443 | 49743 | 184.28.90.27 | 192.168.2.4 |
| Oct 2, 2024 02:43:08.998336077 CEST | 49743 | 443 | 192.168.2.4 | 184.28.90.27 |
| Oct 2, 2024 02:43:08.998428106 CEST | 443 | 49743 | 184.28.90.27 | 192.168.2.4 |
| Oct 2, 2024 02:43:08.998455048 CEST | 443 | 49743 | 184.28.90.27 | 192.168.2.4 |
| Oct 2, 2024 02:43:08.998509884 CEST | 49743 | 443 | 192.168.2.4 | 184.28.90.27 |
| Oct 2, 2024 02:43:09.036515951 CEST | 49745 | 443 | 192.168.2.4 | 184.28.90.27 |
| Oct 2, 2024 02:43:09.036572933 CEST | 443 | 49745 | 184.28.90.27 | 192.168.2.4 |
| Oct 2, 2024 02:43:09.036669970 CEST | 49745 | 443 | 192.168.2.4 | 184.28.90.27 |
| Oct 2, 2024 02:43:09.036931038 CEST | 49745 | 443 | 192.168.2.4 | 184.28.90.27 |
| Oct 2, 2024 02:43:09.036950111 CEST | 443 | 49745 | 184.28.90.27 | 192.168.2.4 |
| Oct 2, 2024 02:43:09.669725895 CEST | 443 | 49745 | 184.28.90.27 | 192.168.2.4 |
| Oct 2, 2024 02:43:09.669807911 CEST | 49745 | 443 | 192.168.2.4 | 184.28.90.27 |
| Oct 2, 2024 02:43:09.671305895 CEST | 49745 | 443 | 192.168.2.4 | 184.28.90.27 |
| Oct 2, 2024 02:43:09.671319008 CEST | 443 | 49745 | 184.28.90.27 | 192.168.2.4 |
| Oct 2, 2024 02:43:09.671593904 CEST | 443 | 49745 | 184.28.90.27 | 192.168.2.4 |
| Oct 2, 2024 02:43:09.672854900 CEST | 49745 | 443 | 192.168.2.4 | 184.28.90.27 |
| Oct 2, 2024 02:43:09.715442896 CEST | 443 | 49745 | 184.28.90.27 | 192.168.2.4 |
| Oct 2, 2024 02:43:09.948031902 CEST | 443 | 49745 | 184.28.90.27 | 192.168.2.4 |
| Oct 2, 2024 02:43:09.948079109 CEST | 443 | 49745 | 184.28.90.27 | 192.168.2.4 |
| Oct 2, 2024 02:43:09.948290110 CEST | 49745 | 443 | 192.168.2.4 | 184.28.90.27 |
| Oct 2, 2024 02:43:09.948956966 CEST | 49745 | 443 | 192.168.2.4 | 184.28.90.27 |
| Oct 2, 2024 02:43:09.948976994 CEST | 443 | 49745 | 184.28.90.27 | 192.168.2.4 |
| Oct 2, 2024 02:43:09.948993921 CEST | 49745 | 443 | 192.168.2.4 | 184.28.90.27 |
| Oct 2, 2024 02:43:09.949001074 CEST | 443 | 49745 | 184.28.90.27 | 192.168.2.4 |
| Oct 2, 2024 02:43:11.961756945 CEST | 49756 | 443 | 192.168.2.4 | 172.217.16.206 |
| Oct 2, 2024 02:43:11.961781979 CEST | 443 | 49756 | 172.217.16.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:11.961973906 CEST | 49756 | 443 | 192.168.2.4 | 172.217.16.206 |
| Oct 2, 2024 02:43:11.969295979 CEST | 49756 | 443 | 192.168.2.4 | 172.217.16.206 |
| Oct 2, 2024 02:43:11.969307899 CEST | 443 | 49756 | 172.217.16.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:12.635162115 CEST | 443 | 49756 | 172.217.16.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:12.635389090 CEST | 49756 | 443 | 192.168.2.4 | 172.217.16.206 |
| Oct 2, 2024 02:43:12.635401011 CEST | 443 | 49756 | 172.217.16.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:12.635793924 CEST | 443 | 49756 | 172.217.16.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:12.635854006 CEST | 49756 | 443 | 192.168.2.4 | 172.217.16.206 |
| Oct 2, 2024 02:43:12.636498928 CEST | 443 | 49756 | 172.217.16.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:12.636548996 CEST | 49756 | 443 | 192.168.2.4 | 172.217.16.206 |
| Oct 2, 2024 02:43:12.637548923 CEST | 49756 | 443 | 192.168.2.4 | 172.217.16.206 |
| Oct 2, 2024 02:43:12.637615919 CEST | 443 | 49756 | 172.217.16.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:12.637877941 CEST | 49756 | 443 | 192.168.2.4 | 172.217.16.206 |
| Oct 2, 2024 02:43:12.637885094 CEST | 443 | 49756 | 172.217.16.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:12.680598974 CEST | 49756 | 443 | 192.168.2.4 | 172.217.16.206 |
| Oct 2, 2024 02:43:12.959248066 CEST | 443 | 49756 | 172.217.16.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:12.959302902 CEST | 443 | 49756 | 172.217.16.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:12.959336996 CEST | 443 | 49756 | 172.217.16.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:12.959398985 CEST | 49756 | 443 | 192.168.2.4 | 172.217.16.206 |
| Oct 2, 2024 02:43:12.959398985 CEST | 49756 | 443 | 192.168.2.4 | 172.217.16.206 |
| Oct 2, 2024 02:43:12.959417105 CEST | 443 | 49756 | 172.217.16.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:12.965260029 CEST | 443 | 49756 | 172.217.16.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:12.965327978 CEST | 49756 | 443 | 192.168.2.4 | 172.217.16.206 |
| Oct 2, 2024 02:43:12.965333939 CEST | 443 | 49756 | 172.217.16.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:12.971509933 CEST | 443 | 49756 | 172.217.16.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:12.971563101 CEST | 443 | 49756 | 172.217.16.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:12.971621037 CEST | 49756 | 443 | 192.168.2.4 | 172.217.16.206 |
| Oct 2, 2024 02:43:12.971633911 CEST | 443 | 49756 | 172.217.16.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:12.971817017 CEST | 49756 | 443 | 192.168.2.4 | 172.217.16.206 |
| Oct 2, 2024 02:43:12.978039026 CEST | 443 | 49756 | 172.217.16.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:12.978111982 CEST | 49756 | 443 | 192.168.2.4 | 172.217.16.206 |
| Oct 2, 2024 02:43:12.984262943 CEST | 443 | 49756 | 172.217.16.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:12.984308958 CEST | 443 | 49756 | 172.217.16.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:12.984318972 CEST | 49756 | 443 | 192.168.2.4 | 172.217.16.206 |
| Oct 2, 2024 02:43:12.984324932 CEST | 443 | 49756 | 172.217.16.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:12.984369993 CEST | 49756 | 443 | 192.168.2.4 | 172.217.16.206 |
| Oct 2, 2024 02:43:13.051610947 CEST | 443 | 49756 | 172.217.16.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:13.051661015 CEST | 443 | 49756 | 172.217.16.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:13.051691055 CEST | 49756 | 443 | 192.168.2.4 | 172.217.16.206 |
| Oct 2, 2024 02:43:13.051692963 CEST | 443 | 49756 | 172.217.16.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:13.051703930 CEST | 443 | 49756 | 172.217.16.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:13.051747084 CEST | 49756 | 443 | 192.168.2.4 | 172.217.16.206 |
| Oct 2, 2024 02:43:13.052455902 CEST | 49761 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:13.052495956 CEST | 443 | 49761 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:13.052553892 CEST | 49761 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:13.053318024 CEST | 49761 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:13.053328991 CEST | 443 | 49761 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:13.054835081 CEST | 443 | 49756 | 172.217.16.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:13.054877996 CEST | 443 | 49756 | 172.217.16.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:13.054900885 CEST | 49756 | 443 | 192.168.2.4 | 172.217.16.206 |
| Oct 2, 2024 02:43:13.054908991 CEST | 443 | 49756 | 172.217.16.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:13.054939985 CEST | 49756 | 443 | 192.168.2.4 | 172.217.16.206 |
| Oct 2, 2024 02:43:13.061213017 CEST | 443 | 49756 | 172.217.16.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:13.061275959 CEST | 49756 | 443 | 192.168.2.4 | 172.217.16.206 |
| Oct 2, 2024 02:43:13.061283112 CEST | 443 | 49756 | 172.217.16.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:13.072484970 CEST | 443 | 49756 | 172.217.16.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:13.072534084 CEST | 49756 | 443 | 192.168.2.4 | 172.217.16.206 |
| Oct 2, 2024 02:43:13.072540998 CEST | 443 | 49756 | 172.217.16.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:13.073951006 CEST | 443 | 49756 | 172.217.16.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:13.074007034 CEST | 49756 | 443 | 192.168.2.4 | 172.217.16.206 |
| Oct 2, 2024 02:43:13.074012995 CEST | 443 | 49756 | 172.217.16.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:13.080188990 CEST | 443 | 49756 | 172.217.16.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:13.080240965 CEST | 49756 | 443 | 192.168.2.4 | 172.217.16.206 |
| Oct 2, 2024 02:43:13.080245972 CEST | 443 | 49756 | 172.217.16.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:13.080332041 CEST | 443 | 49756 | 172.217.16.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:13.080378056 CEST | 49756 | 443 | 192.168.2.4 | 172.217.16.206 |
| Oct 2, 2024 02:43:13.097253084 CEST | 49756 | 443 | 192.168.2.4 | 172.217.16.206 |
| Oct 2, 2024 02:43:13.097268105 CEST | 443 | 49756 | 172.217.16.206 | 192.168.2.4 |
| Oct 2, 2024 02:43:13.139600992 CEST | 49762 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:13.139642954 CEST | 443 | 49762 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:13.139705896 CEST | 49762 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:13.140049934 CEST | 49762 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:13.140060902 CEST | 443 | 49762 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:13.688714027 CEST | 443 | 49761 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:13.702554941 CEST | 49761 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:13.702570915 CEST | 443 | 49761 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:13.702958107 CEST | 443 | 49761 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:13.703017950 CEST | 49761 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:13.703640938 CEST | 443 | 49761 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:13.703687906 CEST | 49761 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:13.738703012 CEST | 49761 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:13.738806963 CEST | 443 | 49761 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:13.753684998 CEST | 49761 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:13.753699064 CEST | 443 | 49761 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:13.776969910 CEST | 443 | 49762 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:13.783088923 CEST | 49762 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:13.783098936 CEST | 443 | 49762 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:13.783502102 CEST | 443 | 49762 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:13.783567905 CEST | 49762 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:13.784221888 CEST | 443 | 49762 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:13.784276962 CEST | 49762 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:13.784704924 CEST | 49762 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:13.784765005 CEST | 443 | 49762 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:13.785036087 CEST | 49762 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:13.785041094 CEST | 443 | 49762 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:13.805041075 CEST | 49761 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:13.835242987 CEST | 49762 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:13.988529921 CEST | 443 | 49761 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:13.989042997 CEST | 443 | 49761 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:13.989101887 CEST | 49761 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:13.989162922 CEST | 49761 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:13.989183903 CEST | 443 | 49761 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:13.989193916 CEST | 49761 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:13.989231110 CEST | 49761 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:13.990253925 CEST | 49763 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:13.990283966 CEST | 443 | 49763 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:13.990364075 CEST | 49763 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:13.990711927 CEST | 49763 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:13.990725994 CEST | 443 | 49763 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:14.079238892 CEST | 443 | 49762 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:14.079315901 CEST | 443 | 49762 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:14.079368114 CEST | 49762 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:14.079673052 CEST | 49762 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:14.079684019 CEST | 443 | 49762 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:14.079693079 CEST | 49762 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:14.079729080 CEST | 49762 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:14.080579042 CEST | 49767 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:14.080627918 CEST | 443 | 49767 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:14.080698967 CEST | 49767 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:14.081001043 CEST | 49767 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:14.081015110 CEST | 443 | 49767 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:14.618292093 CEST | 443 | 49763 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:14.618499041 CEST | 49763 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:14.618519068 CEST | 443 | 49763 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:14.618907928 CEST | 443 | 49763 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:14.618967056 CEST | 49763 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:14.619627953 CEST | 443 | 49763 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:14.619709969 CEST | 49763 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:14.619827986 CEST | 49763 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:14.619889975 CEST | 443 | 49763 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:14.619998932 CEST | 49763 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:14.620007038 CEST | 443 | 49763 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:14.620023966 CEST | 49763 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:14.663403988 CEST | 443 | 49763 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:14.664036036 CEST | 49763 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:14.708203077 CEST | 443 | 49767 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:14.708493948 CEST | 49767 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:14.708512068 CEST | 443 | 49767 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:14.708865881 CEST | 443 | 49767 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:14.709018946 CEST | 49767 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:14.709556103 CEST | 443 | 49767 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:14.709614038 CEST | 49767 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:14.709767103 CEST | 49767 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:14.709825993 CEST | 443 | 49767 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:14.709893942 CEST | 49767 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:14.709903002 CEST | 443 | 49767 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:14.709918022 CEST | 49767 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:14.755409002 CEST | 443 | 49767 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:14.757246971 CEST | 49767 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:14.837023020 CEST | 443 | 49763 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:14.837506056 CEST | 443 | 49763 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:14.837582111 CEST | 49763 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:14.838186979 CEST | 49763 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:14.838203907 CEST | 443 | 49763 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:14.924989939 CEST | 443 | 49767 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:14.925899982 CEST | 443 | 49767 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:14.925973892 CEST | 49767 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:14.926651001 CEST | 49767 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:14.926661015 CEST | 443 | 49767 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:14.954698086 CEST | 49741 | 443 | 192.168.2.4 | 142.250.186.68 |
| Oct 2, 2024 02:43:14.995405912 CEST | 443 | 49741 | 142.250.186.68 | 192.168.2.4 |
| Oct 2, 2024 02:43:15.221538067 CEST | 443 | 49741 | 142.250.186.68 | 192.168.2.4 |
| Oct 2, 2024 02:43:15.221581936 CEST | 443 | 49741 | 142.250.186.68 | 192.168.2.4 |
| Oct 2, 2024 02:43:15.221613884 CEST | 443 | 49741 | 142.250.186.68 | 192.168.2.4 |
| Oct 2, 2024 02:43:15.221638918 CEST | 49741 | 443 | 192.168.2.4 | 142.250.186.68 |
| Oct 2, 2024 02:43:15.221642017 CEST | 443 | 49741 | 142.250.186.68 | 192.168.2.4 |
| Oct 2, 2024 02:43:15.221658945 CEST | 443 | 49741 | 142.250.186.68 | 192.168.2.4 |
| Oct 2, 2024 02:43:15.221684933 CEST | 49741 | 443 | 192.168.2.4 | 142.250.186.68 |
| Oct 2, 2024 02:43:15.221755981 CEST | 443 | 49741 | 142.250.186.68 | 192.168.2.4 |
| Oct 2, 2024 02:43:15.221803904 CEST | 49741 | 443 | 192.168.2.4 | 142.250.186.68 |
| Oct 2, 2024 02:43:15.223220110 CEST | 49741 | 443 | 192.168.2.4 | 142.250.186.68 |
| Oct 2, 2024 02:43:15.223232985 CEST | 443 | 49741 | 142.250.186.68 | 192.168.2.4 |
| Oct 2, 2024 02:43:18.366503000 CEST | 49772 | 443 | 192.168.2.4 | 4.245.163.56 |
| Oct 2, 2024 02:43:18.366532087 CEST | 443 | 49772 | 4.245.163.56 | 192.168.2.4 |
| Oct 2, 2024 02:43:18.366782904 CEST | 49772 | 443 | 192.168.2.4 | 4.245.163.56 |
| Oct 2, 2024 02:43:18.367949009 CEST | 49772 | 443 | 192.168.2.4 | 4.245.163.56 |
| Oct 2, 2024 02:43:18.367964029 CEST | 443 | 49772 | 4.245.163.56 | 192.168.2.4 |
| Oct 2, 2024 02:43:19.134576082 CEST | 443 | 49772 | 4.245.163.56 | 192.168.2.4 |
| Oct 2, 2024 02:43:19.134653091 CEST | 49772 | 443 | 192.168.2.4 | 4.245.163.56 |
| Oct 2, 2024 02:43:19.138536930 CEST | 49772 | 443 | 192.168.2.4 | 4.245.163.56 |
| Oct 2, 2024 02:43:19.138550997 CEST | 443 | 49772 | 4.245.163.56 | 192.168.2.4 |
| Oct 2, 2024 02:43:19.138943911 CEST | 443 | 49772 | 4.245.163.56 | 192.168.2.4 |
| Oct 2, 2024 02:43:19.181551933 CEST | 49772 | 443 | 192.168.2.4 | 4.245.163.56 |
| Oct 2, 2024 02:43:19.897006989 CEST | 49772 | 443 | 192.168.2.4 | 4.245.163.56 |
| Oct 2, 2024 02:43:19.939414978 CEST | 443 | 49772 | 4.245.163.56 | 192.168.2.4 |
| Oct 2, 2024 02:43:20.148494959 CEST | 443 | 49772 | 4.245.163.56 | 192.168.2.4 |
| Oct 2, 2024 02:43:20.148524046 CEST | 443 | 49772 | 4.245.163.56 | 192.168.2.4 |
| Oct 2, 2024 02:43:20.148533106 CEST | 443 | 49772 | 4.245.163.56 | 192.168.2.4 |
| Oct 2, 2024 02:43:20.148549080 CEST | 443 | 49772 | 4.245.163.56 | 192.168.2.4 |
| Oct 2, 2024 02:43:20.148574114 CEST | 49772 | 443 | 192.168.2.4 | 4.245.163.56 |
| Oct 2, 2024 02:43:20.148592949 CEST | 443 | 49772 | 4.245.163.56 | 192.168.2.4 |
| Oct 2, 2024 02:43:20.148602009 CEST | 443 | 49772 | 4.245.163.56 | 192.168.2.4 |
| Oct 2, 2024 02:43:20.148616076 CEST | 49772 | 443 | 192.168.2.4 | 4.245.163.56 |
| Oct 2, 2024 02:43:20.148629904 CEST | 49772 | 443 | 192.168.2.4 | 4.245.163.56 |
| Oct 2, 2024 02:43:20.148644924 CEST | 49772 | 443 | 192.168.2.4 | 4.245.163.56 |
| Oct 2, 2024 02:43:20.149421930 CEST | 443 | 49772 | 4.245.163.56 | 192.168.2.4 |
| Oct 2, 2024 02:43:20.149491072 CEST | 49772 | 443 | 192.168.2.4 | 4.245.163.56 |
| Oct 2, 2024 02:43:20.149497032 CEST | 443 | 49772 | 4.245.163.56 | 192.168.2.4 |
| Oct 2, 2024 02:43:20.149558067 CEST | 443 | 49772 | 4.245.163.56 | 192.168.2.4 |
| Oct 2, 2024 02:43:20.149663925 CEST | 49772 | 443 | 192.168.2.4 | 4.245.163.56 |
| Oct 2, 2024 02:43:20.847126007 CEST | 49772 | 443 | 192.168.2.4 | 4.245.163.56 |
| Oct 2, 2024 02:43:20.847146988 CEST | 443 | 49772 | 4.245.163.56 | 192.168.2.4 |
| Oct 2, 2024 02:43:20.847157001 CEST | 49772 | 443 | 192.168.2.4 | 4.245.163.56 |
| Oct 2, 2024 02:43:20.847163916 CEST | 443 | 49772 | 4.245.163.56 | 192.168.2.4 |
| Oct 2, 2024 02:43:21.047301054 CEST | 49778 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:21.047348976 CEST | 443 | 49778 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:21.047420025 CEST | 49778 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:21.049586058 CEST | 49778 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:21.049602032 CEST | 443 | 49778 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:21.679079056 CEST | 443 | 49778 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:21.679553032 CEST | 49778 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:21.679580927 CEST | 443 | 49778 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:21.680156946 CEST | 443 | 49778 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:21.681370020 CEST | 49778 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:21.681452036 CEST | 443 | 49778 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:21.681581974 CEST | 49778 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:21.681581974 CEST | 49778 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:21.681611061 CEST | 443 | 49778 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:22.015031099 CEST | 443 | 49778 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:22.015203953 CEST | 443 | 49778 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:22.015256882 CEST | 49778 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:22.017833948 CEST | 49778 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:22.017857075 CEST | 443 | 49778 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:43.108872890 CEST | 49781 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:43.108920097 CEST | 443 | 49781 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:43.109004021 CEST | 49781 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:43.111710072 CEST | 49781 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:43.111728907 CEST | 443 | 49781 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:43.767321110 CEST | 443 | 49781 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:43.767683029 CEST | 49781 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:43.767699957 CEST | 443 | 49781 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:43.768018961 CEST | 443 | 49781 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:43.768352985 CEST | 49781 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:43.768409967 CEST | 443 | 49781 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:43.768532038 CEST | 49781 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:43.768532038 CEST | 49781 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:43.768560886 CEST | 443 | 49781 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:43.854372025 CEST | 49782 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:43.854413033 CEST | 443 | 49782 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:43.854543924 CEST | 49782 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:43.854765892 CEST | 49782 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:43.854779959 CEST | 443 | 49782 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:44.041425943 CEST | 49783 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:44.041462898 CEST | 443 | 49783 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:44.041563988 CEST | 49783 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:44.041930914 CEST | 49783 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:44.041944981 CEST | 443 | 49783 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:44.071907997 CEST | 443 | 49781 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:44.072020054 CEST | 443 | 49781 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:44.072137117 CEST | 49781 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:44.072523117 CEST | 49781 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:44.072539091 CEST | 443 | 49781 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:44.483100891 CEST | 443 | 49782 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:44.483409882 CEST | 49782 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:44.483422995 CEST | 443 | 49782 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:44.483786106 CEST | 443 | 49782 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:44.484080076 CEST | 49782 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:44.484143972 CEST | 443 | 49782 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:44.484241009 CEST | 49782 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:44.484258890 CEST | 49782 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:44.484271049 CEST | 443 | 49782 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:44.669008017 CEST | 443 | 49783 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:44.669308901 CEST | 49783 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:44.669327021 CEST | 443 | 49783 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:44.669683933 CEST | 443 | 49783 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:44.669986963 CEST | 49783 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:44.670051098 CEST | 443 | 49783 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:44.670160055 CEST | 49783 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:44.670180082 CEST | 49783 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:44.670192003 CEST | 443 | 49783 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:44.780859947 CEST | 443 | 49782 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:44.781409979 CEST | 443 | 49782 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:44.781487942 CEST | 49782 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:44.781938076 CEST | 49782 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:44.781960011 CEST | 443 | 49782 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:44.883948088 CEST | 443 | 49783 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:44.884656906 CEST | 443 | 49783 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:44.884814978 CEST | 49783 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:44.906411886 CEST | 49783 | 443 | 192.168.2.4 | 142.250.185.142 |
| Oct 2, 2024 02:43:44.906430006 CEST | 443 | 49783 | 142.250.185.142 | 192.168.2.4 |
| Oct 2, 2024 02:43:57.425740957 CEST | 49784 | 443 | 192.168.2.4 | 4.245.163.56 |
| Oct 2, 2024 02:43:57.425883055 CEST | 443 | 49784 | 4.245.163.56 | 192.168.2.4 |
| Oct 2, 2024 02:43:57.425992012 CEST | 49784 | 443 | 192.168.2.4 | 4.245.163.56 |
| Oct 2, 2024 02:43:57.426347017 CEST | 49784 | 443 | 192.168.2.4 | 4.245.163.56 |
| Oct 2, 2024 02:43:57.426388025 CEST | 443 | 49784 | 4.245.163.56 | 192.168.2.4 |
| Oct 2, 2024 02:43:58.208673954 CEST | 443 | 49784 | 4.245.163.56 | 192.168.2.4 |
| Oct 2, 2024 02:43:58.208765984 CEST | 49784 | 443 | 192.168.2.4 | 4.245.163.56 |
| Oct 2, 2024 02:43:58.213767052 CEST | 49784 | 443 | 192.168.2.4 | 4.245.163.56 |
| Oct 2, 2024 02:43:58.213803053 CEST | 443 | 49784 | 4.245.163.56 | 192.168.2.4 |
| Oct 2, 2024 02:43:58.214052916 CEST | 443 | 49784 | 4.245.163.56 | 192.168.2.4 |
| Oct 2, 2024 02:43:58.225533009 CEST | 49784 | 443 | 192.168.2.4 | 4.245.163.56 |
| Oct 2, 2024 02:43:58.267410040 CEST | 443 | 49784 | 4.245.163.56 | 192.168.2.4 |
| Oct 2, 2024 02:43:58.538583994 CEST | 443 | 49784 | 4.245.163.56 | 192.168.2.4 |
| Oct 2, 2024 02:43:58.538608074 CEST | 443 | 49784 | 4.245.163.56 | 192.168.2.4 |
| Oct 2, 2024 02:43:58.538621902 CEST | 443 | 49784 | 4.245.163.56 | 192.168.2.4 |
| Oct 2, 2024 02:43:58.538721085 CEST | 49784 | 443 | 192.168.2.4 | 4.245.163.56 |
| Oct 2, 2024 02:43:58.538774967 CEST | 443 | 49784 | 4.245.163.56 | 192.168.2.4 |
| Oct 2, 2024 02:43:58.538840055 CEST | 49784 | 443 | 192.168.2.4 | 4.245.163.56 |
| Oct 2, 2024 02:43:58.538976908 CEST | 443 | 49784 | 4.245.163.56 | 192.168.2.4 |
| Oct 2, 2024 02:43:58.539016962 CEST | 443 | 49784 | 4.245.163.56 | 192.168.2.4 |
| Oct 2, 2024 02:43:58.539048910 CEST | 49784 | 443 | 192.168.2.4 | 4.245.163.56 |
| Oct 2, 2024 02:43:58.539057970 CEST | 443 | 49784 | 4.245.163.56 | 192.168.2.4 |
| Oct 2, 2024 02:43:58.539072037 CEST | 49784 | 443 | 192.168.2.4 | 4.245.163.56 |
| Oct 2, 2024 02:43:58.539119959 CEST | 49784 | 443 | 192.168.2.4 | 4.245.163.56 |
| Oct 2, 2024 02:43:58.544670105 CEST | 49784 | 443 | 192.168.2.4 | 4.245.163.56 |
| Oct 2, 2024 02:43:58.544713020 CEST | 443 | 49784 | 4.245.163.56 | 192.168.2.4 |
| Oct 2, 2024 02:43:58.544755936 CEST | 49784 | 443 | 192.168.2.4 | 4.245.163.56 |
| Oct 2, 2024 02:43:58.544783115 CEST | 443 | 49784 | 4.245.163.56 | 192.168.2.4 |
| Oct 2, 2024 02:44:07.506372929 CEST | 49786 | 443 | 192.168.2.4 | 142.250.186.68 |
| Oct 2, 2024 02:44:07.506428957 CEST | 443 | 49786 | 142.250.186.68 | 192.168.2.4 |
| Oct 2, 2024 02:44:07.506504059 CEST | 49786 | 443 | 192.168.2.4 | 142.250.186.68 |
| Oct 2, 2024 02:44:07.506810904 CEST | 49786 | 443 | 192.168.2.4 | 142.250.186.68 |
| Oct 2, 2024 02:44:07.506824970 CEST | 443 | 49786 | 142.250.186.68 | 192.168.2.4 |
| Oct 2, 2024 02:44:08.166867018 CEST | 443 | 49786 | 142.250.186.68 | 192.168.2.4 |
| Oct 2, 2024 02:44:08.167181015 CEST | 49786 | 443 | 192.168.2.4 | 142.250.186.68 |
| Oct 2, 2024 02:44:08.167207956 CEST | 443 | 49786 | 142.250.186.68 | 192.168.2.4 |
| Oct 2, 2024 02:44:08.167537928 CEST | 443 | 49786 | 142.250.186.68 | 192.168.2.4 |
| Oct 2, 2024 02:44:08.167833090 CEST | 49786 | 443 | 192.168.2.4 | 142.250.186.68 |
| Oct 2, 2024 02:44:08.167891979 CEST | 443 | 49786 | 142.250.186.68 | 192.168.2.4 |
| Oct 2, 2024 02:44:08.210731983 CEST | 49786 | 443 | 192.168.2.4 | 142.250.186.68 |
| Oct 2, 2024 02:44:14.829464912 CEST | 49789 | 443 | 192.168.2.4 | 142.250.185.110 |
| Oct 2, 2024 02:44:14.829567909 CEST | 443 | 49789 | 142.250.185.110 | 192.168.2.4 |
| Oct 2, 2024 02:44:14.829746962 CEST | 49789 | 443 | 192.168.2.4 | 142.250.185.110 |
| Oct 2, 2024 02:44:14.830008984 CEST | 49789 | 443 | 192.168.2.4 | 142.250.185.110 |
| Oct 2, 2024 02:44:14.830045938 CEST | 443 | 49789 | 142.250.185.110 | 192.168.2.4 |
| Oct 2, 2024 02:44:14.994019032 CEST | 49790 | 443 | 192.168.2.4 | 142.250.185.110 |
| Oct 2, 2024 02:44:14.994070053 CEST | 443 | 49790 | 142.250.185.110 | 192.168.2.4 |
| Oct 2, 2024 02:44:14.994153023 CEST | 49790 | 443 | 192.168.2.4 | 142.250.185.110 |
| Oct 2, 2024 02:44:14.994452953 CEST | 49790 | 443 | 192.168.2.4 | 142.250.185.110 |
| Oct 2, 2024 02:44:14.994484901 CEST | 443 | 49790 | 142.250.185.110 | 192.168.2.4 |
| Oct 2, 2024 02:44:15.476994991 CEST | 443 | 49789 | 142.250.185.110 | 192.168.2.4 |
| Oct 2, 2024 02:44:15.477699995 CEST | 49789 | 443 | 192.168.2.4 | 142.250.185.110 |
| Oct 2, 2024 02:44:15.477754116 CEST | 443 | 49789 | 142.250.185.110 | 192.168.2.4 |
| Oct 2, 2024 02:44:15.478152990 CEST | 443 | 49789 | 142.250.185.110 | 192.168.2.4 |
| Oct 2, 2024 02:44:15.478523016 CEST | 49789 | 443 | 192.168.2.4 | 142.250.185.110 |
| Oct 2, 2024 02:44:15.478596926 CEST | 443 | 49789 | 142.250.185.110 | 192.168.2.4 |
| Oct 2, 2024 02:44:15.478691101 CEST | 49789 | 443 | 192.168.2.4 | 142.250.185.110 |
| Oct 2, 2024 02:44:15.478724957 CEST | 49789 | 443 | 192.168.2.4 | 142.250.185.110 |
| Oct 2, 2024 02:44:15.478738070 CEST | 443 | 49789 | 142.250.185.110 | 192.168.2.4 |
| Oct 2, 2024 02:44:15.644197941 CEST | 443 | 49790 | 142.250.185.110 | 192.168.2.4 |
| Oct 2, 2024 02:44:15.644501925 CEST | 49790 | 443 | 192.168.2.4 | 142.250.185.110 |
| Oct 2, 2024 02:44:15.644532919 CEST | 443 | 49790 | 142.250.185.110 | 192.168.2.4 |
| Oct 2, 2024 02:44:15.644912004 CEST | 443 | 49790 | 142.250.185.110 | 192.168.2.4 |
| Oct 2, 2024 02:44:15.645251989 CEST | 49790 | 443 | 192.168.2.4 | 142.250.185.110 |
| Oct 2, 2024 02:44:15.645334959 CEST | 443 | 49790 | 142.250.185.110 | 192.168.2.4 |
| Oct 2, 2024 02:44:15.645428896 CEST | 49790 | 443 | 192.168.2.4 | 142.250.185.110 |
| Oct 2, 2024 02:44:15.645428896 CEST | 49790 | 443 | 192.168.2.4 | 142.250.185.110 |
| Oct 2, 2024 02:44:15.645467043 CEST | 443 | 49790 | 142.250.185.110 | 192.168.2.4 |
| Oct 2, 2024 02:44:15.778891087 CEST | 443 | 49789 | 142.250.185.110 | 192.168.2.4 |
| Oct 2, 2024 02:44:15.779335022 CEST | 443 | 49789 | 142.250.185.110 | 192.168.2.4 |
| Oct 2, 2024 02:44:15.779423952 CEST | 49789 | 443 | 192.168.2.4 | 142.250.185.110 |
| Oct 2, 2024 02:44:15.779809952 CEST | 49789 | 443 | 192.168.2.4 | 142.250.185.110 |
| Oct 2, 2024 02:44:15.779855967 CEST | 443 | 49789 | 142.250.185.110 | 192.168.2.4 |
| Oct 2, 2024 02:44:15.946830988 CEST | 443 | 49790 | 142.250.185.110 | 192.168.2.4 |
| Oct 2, 2024 02:44:15.948066950 CEST | 443 | 49790 | 142.250.185.110 | 192.168.2.4 |
| Oct 2, 2024 02:44:15.948143959 CEST | 49790 | 443 | 192.168.2.4 | 142.250.185.110 |
| Oct 2, 2024 02:44:15.948280096 CEST | 49790 | 443 | 192.168.2.4 | 142.250.185.110 |
| Oct 2, 2024 02:44:15.948301077 CEST | 443 | 49790 | 142.250.185.110 | 192.168.2.4 |
| Oct 2, 2024 02:44:18.108202934 CEST | 443 | 49786 | 142.250.186.68 | 192.168.2.4 |
| Oct 2, 2024 02:44:18.108267069 CEST | 443 | 49786 | 142.250.186.68 | 192.168.2.4 |
| Oct 2, 2024 02:44:18.108342886 CEST | 49786 | 443 | 192.168.2.4 | 142.250.186.68 |
| Oct 2, 2024 02:44:30.570988894 CEST | 49786 | 443 | 192.168.2.4 | 142.250.186.68 |
| Oct 2, 2024 02:44:30.571064949 CEST | 443 | 49786 | 142.250.186.68 | 192.168.2.4 |
| Oct 2, 2024 02:44:45.432447910 CEST | 49792 | 443 | 192.168.2.4 | 142.250.185.110 |
| Oct 2, 2024 02:44:45.432477951 CEST | 443 | 49792 | 142.250.185.110 | 192.168.2.4 |
| Oct 2, 2024 02:44:45.432557106 CEST | 49792 | 443 | 192.168.2.4 | 142.250.185.110 |
| Oct 2, 2024 02:44:45.432838917 CEST | 49792 | 443 | 192.168.2.4 | 142.250.185.110 |
| Oct 2, 2024 02:44:45.432849884 CEST | 443 | 49792 | 142.250.185.110 | 192.168.2.4 |
| Oct 2, 2024 02:44:45.619293928 CEST | 49793 | 443 | 192.168.2.4 | 142.250.185.110 |
| Oct 2, 2024 02:44:45.619333982 CEST | 443 | 49793 | 142.250.185.110 | 192.168.2.4 |
| Oct 2, 2024 02:44:45.619404078 CEST | 49793 | 443 | 192.168.2.4 | 142.250.185.110 |
| Oct 2, 2024 02:44:45.619642019 CEST | 49793 | 443 | 192.168.2.4 | 142.250.185.110 |
| Oct 2, 2024 02:44:45.619657040 CEST | 443 | 49793 | 142.250.185.110 | 192.168.2.4 |
| Oct 2, 2024 02:44:46.079808950 CEST | 443 | 49792 | 142.250.185.110 | 192.168.2.4 |
| Oct 2, 2024 02:44:46.084095001 CEST | 49792 | 443 | 192.168.2.4 | 142.250.185.110 |
| Oct 2, 2024 02:44:46.084109068 CEST | 443 | 49792 | 142.250.185.110 | 192.168.2.4 |
| Oct 2, 2024 02:44:46.084436893 CEST | 443 | 49792 | 142.250.185.110 | 192.168.2.4 |
| Oct 2, 2024 02:44:46.118390083 CEST | 49792 | 443 | 192.168.2.4 | 142.250.185.110 |
| Oct 2, 2024 02:44:46.118501902 CEST | 443 | 49792 | 142.250.185.110 | 192.168.2.4 |
| Oct 2, 2024 02:44:46.118623018 CEST | 49792 | 443 | 192.168.2.4 | 142.250.185.110 |
| Oct 2, 2024 02:44:46.118649006 CEST | 49792 | 443 | 192.168.2.4 | 142.250.185.110 |
| Oct 2, 2024 02:44:46.118657112 CEST | 443 | 49792 | 142.250.185.110 | 192.168.2.4 |
| Oct 2, 2024 02:44:46.265876055 CEST | 443 | 49793 | 142.250.185.110 | 192.168.2.4 |
| Oct 2, 2024 02:44:46.266170025 CEST | 49793 | 443 | 192.168.2.4 | 142.250.185.110 |
| Oct 2, 2024 02:44:46.266182899 CEST | 443 | 49793 | 142.250.185.110 | 192.168.2.4 |
| Oct 2, 2024 02:44:46.266494989 CEST | 443 | 49793 | 142.250.185.110 | 192.168.2.4 |
| Oct 2, 2024 02:44:46.266850948 CEST | 49793 | 443 | 192.168.2.4 | 142.250.185.110 |
| Oct 2, 2024 02:44:46.266907930 CEST | 443 | 49793 | 142.250.185.110 | 192.168.2.4 |
| Oct 2, 2024 02:44:46.266968012 CEST | 49793 | 443 | 192.168.2.4 | 142.250.185.110 |
| Oct 2, 2024 02:44:46.266999960 CEST | 49793 | 443 | 192.168.2.4 | 142.250.185.110 |
| Oct 2, 2024 02:44:46.267004967 CEST | 443 | 49793 | 142.250.185.110 | 192.168.2.4 |
| Oct 2, 2024 02:44:46.383430958 CEST | 443 | 49792 | 142.250.185.110 | 192.168.2.4 |
| Oct 2, 2024 02:44:46.384159088 CEST | 443 | 49792 | 142.250.185.110 | 192.168.2.4 |
| Oct 2, 2024 02:44:46.384213924 CEST | 49792 | 443 | 192.168.2.4 | 142.250.185.110 |
| Oct 2, 2024 02:44:46.384432077 CEST | 49792 | 443 | 192.168.2.4 | 142.250.185.110 |
| Oct 2, 2024 02:44:46.384450912 CEST | 443 | 49792 | 142.250.185.110 | 192.168.2.4 |
| Oct 2, 2024 02:44:46.564894915 CEST | 443 | 49793 | 142.250.185.110 | 192.168.2.4 |
| Oct 2, 2024 02:44:46.565717936 CEST | 443 | 49793 | 142.250.185.110 | 192.168.2.4 |
| Oct 2, 2024 02:44:46.565774918 CEST | 49793 | 443 | 192.168.2.4 | 142.250.185.110 |
| Oct 2, 2024 02:44:46.566067934 CEST | 49793 | 443 | 192.168.2.4 | 142.250.185.110 |
| Oct 2, 2024 02:44:46.566092014 CEST | 443 | 49793 | 142.250.185.110 | 192.168.2.4 |
| Timestamp | Source Port | Dest Port | Source IP | Dest IP |
|---|---|---|---|---|
| Oct 2, 2024 02:43:02.857319117 CEST | 53 | 61499 | 1.1.1.1 | 192.168.2.4 |
| Oct 2, 2024 02:43:02.876127005 CEST | 51344 | 53 | 192.168.2.4 | 1.1.1.1 |
| Oct 2, 2024 02:43:02.876281977 CEST | 57058 | 53 | 192.168.2.4 | 1.1.1.1 |
| Oct 2, 2024 02:43:02.882730007 CEST | 53 | 51344 | 1.1.1.1 | 192.168.2.4 |
| Oct 2, 2024 02:43:02.883133888 CEST | 53 | 57058 | 1.1.1.1 | 192.168.2.4 |
| Oct 2, 2024 02:43:02.888607025 CEST | 53 | 52043 | 1.1.1.1 | 192.168.2.4 |
| Oct 2, 2024 02:43:03.953578949 CEST | 54638 | 53 | 192.168.2.4 | 1.1.1.1 |
| Oct 2, 2024 02:43:03.954029083 CEST | 53123 | 53 | 192.168.2.4 | 1.1.1.1 |
| Oct 2, 2024 02:43:03.960181952 CEST | 53 | 54638 | 1.1.1.1 | 192.168.2.4 |
| Oct 2, 2024 02:43:03.960412025 CEST | 53 | 53123 | 1.1.1.1 | 192.168.2.4 |
| Oct 2, 2024 02:43:04.007971048 CEST | 53 | 58533 | 1.1.1.1 | 192.168.2.4 |
| Oct 2, 2024 02:43:07.446774006 CEST | 58930 | 53 | 192.168.2.4 | 1.1.1.1 |
| Oct 2, 2024 02:43:07.446974993 CEST | 57962 | 53 | 192.168.2.4 | 1.1.1.1 |
| Oct 2, 2024 02:43:07.453411102 CEST | 53 | 58930 | 1.1.1.1 | 192.168.2.4 |
| Oct 2, 2024 02:43:07.453627110 CEST | 53 | 57962 | 1.1.1.1 | 192.168.2.4 |
| Oct 2, 2024 02:43:09.353461981 CEST | 53 | 63949 | 1.1.1.1 | 192.168.2.4 |
| Oct 2, 2024 02:43:11.949759007 CEST | 63784 | 53 | 192.168.2.4 | 1.1.1.1 |
| Oct 2, 2024 02:43:11.949954987 CEST | 56283 | 53 | 192.168.2.4 | 1.1.1.1 |
| Oct 2, 2024 02:43:11.956439972 CEST | 53 | 63784 | 1.1.1.1 | 192.168.2.4 |
| Oct 2, 2024 02:43:11.958594084 CEST | 53 | 56283 | 1.1.1.1 | 192.168.2.4 |
| Oct 2, 2024 02:43:13.002660990 CEST | 53165 | 53 | 192.168.2.4 | 1.1.1.1 |
| Oct 2, 2024 02:43:13.003297091 CEST | 55051 | 53 | 192.168.2.4 | 1.1.1.1 |
| Oct 2, 2024 02:43:13.009382010 CEST | 53 | 53165 | 1.1.1.1 | 192.168.2.4 |
| Oct 2, 2024 02:43:13.009802103 CEST | 53 | 55051 | 1.1.1.1 | 192.168.2.4 |
| Oct 2, 2024 02:43:15.327188015 CEST | 53 | 63438 | 1.1.1.1 | 192.168.2.4 |
| Oct 2, 2024 02:43:21.005423069 CEST | 53 | 57530 | 1.1.1.1 | 192.168.2.4 |
| Oct 2, 2024 02:43:22.373460054 CEST | 138 | 138 | 192.168.2.4 | 192.168.2.255 |
| Oct 2, 2024 02:43:40.077313900 CEST | 53 | 58325 | 1.1.1.1 | 192.168.2.4 |
| Oct 2, 2024 02:44:02.453198910 CEST | 53 | 50101 | 1.1.1.1 | 192.168.2.4 |
| Oct 2, 2024 02:44:02.813770056 CEST | 53 | 64181 | 1.1.1.1 | 192.168.2.4 |
| Oct 2, 2024 02:44:10.988600016 CEST | 53 | 55537 | 1.1.1.1 | 192.168.2.4 |
| Oct 2, 2024 02:44:14.822284937 CEST | 62724 | 53 | 192.168.2.4 | 1.1.1.1 |
| Oct 2, 2024 02:44:14.822448969 CEST | 60102 | 53 | 192.168.2.4 | 1.1.1.1 |
| Oct 2, 2024 02:44:14.828860998 CEST | 53 | 60102 | 1.1.1.1 | 192.168.2.4 |
| Oct 2, 2024 02:44:14.828885078 CEST | 53 | 62724 | 1.1.1.1 | 192.168.2.4 |
| Oct 2, 2024 02:44:30.578619003 CEST | 53 | 65370 | 1.1.1.1 | 192.168.2.4 |
| Timestamp | Source IP | Dest IP | Checksum | Code | Type |
|---|---|---|---|---|---|
| Oct 2, 2024 02:44:32.493345022 CEST | 192.168.2.4 | 1.1.1.1 | c233 | (Port unreachable) | Destination Unreachable |
| Timestamp | Source IP | Dest IP | Trans ID | OP Code | Name | Type | Class | DNS over HTTPS |
|---|---|---|---|---|---|---|---|---|
| Oct 2, 2024 02:43:02.876127005 CEST | 192.168.2.4 | 1.1.1.1 | 0xfcce | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Oct 2, 2024 02:43:02.876281977 CEST | 192.168.2.4 | 1.1.1.1 | 0x409 | Standard query (0) | 65 | IN (0x0001) | false | |
| Oct 2, 2024 02:43:03.953578949 CEST | 192.168.2.4 | 1.1.1.1 | 0x8eef | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Oct 2, 2024 02:43:03.954029083 CEST | 192.168.2.4 | 1.1.1.1 | 0x9872 | Standard query (0) | 65 | IN (0x0001) | false | |
| Oct 2, 2024 02:43:07.446774006 CEST | 192.168.2.4 | 1.1.1.1 | 0x5af | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Oct 2, 2024 02:43:07.446974993 CEST | 192.168.2.4 | 1.1.1.1 | 0xeac2 | Standard query (0) | 65 | IN (0x0001) | false | |
| Oct 2, 2024 02:43:11.949759007 CEST | 192.168.2.4 | 1.1.1.1 | 0x4564 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Oct 2, 2024 02:43:11.949954987 CEST | 192.168.2.4 | 1.1.1.1 | 0x17cc | Standard query (0) | 65 | IN (0x0001) | false | |
| Oct 2, 2024 02:43:13.002660990 CEST | 192.168.2.4 | 1.1.1.1 | 0x994d | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Oct 2, 2024 02:43:13.003297091 CEST | 192.168.2.4 | 1.1.1.1 | 0x7e0 | Standard query (0) | 65 | IN (0x0001) | false | |
| Oct 2, 2024 02:44:14.822284937 CEST | 192.168.2.4 | 1.1.1.1 | 0xd5e6 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Oct 2, 2024 02:44:14.822448969 CEST | 192.168.2.4 | 1.1.1.1 | 0xe702 | Standard query (0) | 65 | IN (0x0001) | false |
| Timestamp | Source IP | Dest IP | Trans ID | Reply Code | Name | CName | Address | Type | Class | DNS over HTTPS |
|---|---|---|---|---|---|---|---|---|---|---|
| Oct 2, 2024 02:43:02.882730007 CEST | 1.1.1.1 | 192.168.2.4 | 0xfcce | No error (0) | 142.250.186.46 | A (IP address) | IN (0x0001) | false | ||
| Oct 2, 2024 02:43:02.883133888 CEST | 1.1.1.1 | 192.168.2.4 | 0x409 | No error (0) | 65 | IN (0x0001) | false | |||
| Oct 2, 2024 02:43:03.960181952 CEST | 1.1.1.1 | 192.168.2.4 | 0x8eef | No error (0) | youtube-ui.l.google.com | CNAME (Canonical name) | IN (0x0001) | false | ||
| Oct 2, 2024 02:43:03.960181952 CEST | 1.1.1.1 | 192.168.2.4 | 0x8eef | No error (0) | 142.250.184.206 | A (IP address) | IN (0x0001) | false | ||
| Oct 2, 2024 02:43:03.960181952 CEST | 1.1.1.1 | 192.168.2.4 | 0x8eef | No error (0) | 172.217.23.110 | A (IP address) | IN (0x0001) | false | ||
| Oct 2, 2024 02:43:03.960181952 CEST | 1.1.1.1 | 192.168.2.4 | 0x8eef | No error (0) | 142.250.186.78 | A (IP address) | IN (0x0001) | false | ||
| Oct 2, 2024 02:43:03.960181952 CEST | 1.1.1.1 | 192.168.2.4 | 0x8eef | No error (0) | 142.250.186.174 | A (IP address) | IN (0x0001) | false | ||
| Oct 2, 2024 02:43:03.960181952 CEST | 1.1.1.1 | 192.168.2.4 | 0x8eef | No error (0) | 142.250.185.110 | A (IP address) | IN (0x0001) | false | ||
| Oct 2, 2024 02:43:03.960181952 CEST | 1.1.1.1 | 192.168.2.4 | 0x8eef | No error (0) | 142.250.185.78 | A (IP address) | IN (0x0001) | false | ||
| Oct 2, 2024 02:43:03.960181952 CEST | 1.1.1.1 | 192.168.2.4 | 0x8eef | No error (0) | 142.250.185.206 | A (IP address) | IN (0x0001) | false | ||
| Oct 2, 2024 02:43:03.960181952 CEST | 1.1.1.1 | 192.168.2.4 | 0x8eef | No error (0) | 142.250.185.174 | A (IP address) | IN (0x0001) | false | ||
| Oct 2, 2024 02:43:03.960181952 CEST | 1.1.1.1 | 192.168.2.4 | 0x8eef | No error (0) | 142.250.186.46 | A (IP address) | IN (0x0001) | false | ||
| Oct 2, 2024 02:43:03.960181952 CEST | 1.1.1.1 | 192.168.2.4 | 0x8eef | No error (0) | 142.250.181.238 | A (IP address) | IN (0x0001) | false | ||
| Oct 2, 2024 02:43:03.960181952 CEST | 1.1.1.1 | 192.168.2.4 | 0x8eef | No error (0) | 142.250.185.142 | A (IP address) | IN (0x0001) | false | ||
| Oct 2, 2024 02:43:03.960181952 CEST | 1.1.1.1 | 192.168.2.4 | 0x8eef | No error (0) | 142.250.185.238 | A (IP address) | IN (0x0001) | false | ||
| Oct 2, 2024 02:43:03.960181952 CEST | 1.1.1.1 | 192.168.2.4 | 0x8eef | No error (0) | 142.250.184.238 | A (IP address) | IN (0x0001) | false | ||
| Oct 2, 2024 02:43:03.960181952 CEST | 1.1.1.1 | 192.168.2.4 | 0x8eef | No error (0) | 216.58.206.46 | A (IP address) | IN (0x0001) | false | ||
| Oct 2, 2024 02:43:03.960181952 CEST | 1.1.1.1 | 192.168.2.4 | 0x8eef | No error (0) | 172.217.18.14 | A (IP address) | IN (0x0001) | false | ||
| Oct 2, 2024 02:43:03.960181952 CEST | 1.1.1.1 | 192.168.2.4 | 0x8eef | No error (0) | 216.58.212.174 | A (IP address) | IN (0x0001) | false | ||
| Oct 2, 2024 02:43:03.960412025 CEST | 1.1.1.1 | 192.168.2.4 | 0x9872 | No error (0) | youtube-ui.l.google.com | CNAME (Canonical name) | IN (0x0001) | false | ||
| Oct 2, 2024 02:43:03.960412025 CEST | 1.1.1.1 | 192.168.2.4 | 0x9872 | No error (0) | 65 | IN (0x0001) | false | |||
| Oct 2, 2024 02:43:07.453411102 CEST | 1.1.1.1 | 192.168.2.4 | 0x5af | No error (0) | 142.250.186.68 | A (IP address) | IN (0x0001) | false | ||
| Oct 2, 2024 02:43:07.453627110 CEST | 1.1.1.1 | 192.168.2.4 | 0xeac2 | No error (0) | 65 | IN (0x0001) | false | |||
| Oct 2, 2024 02:43:11.956439972 CEST | 1.1.1.1 | 192.168.2.4 | 0x4564 | No error (0) | www3.l.google.com | CNAME (Canonical name) | IN (0x0001) | false | ||
| Oct 2, 2024 02:43:11.956439972 CEST | 1.1.1.1 | 192.168.2.4 | 0x4564 | No error (0) | 172.217.16.206 | A (IP address) | IN (0x0001) | false | ||
| Oct 2, 2024 02:43:11.958594084 CEST | 1.1.1.1 | 192.168.2.4 | 0x17cc | No error (0) | www3.l.google.com | CNAME (Canonical name) | IN (0x0001) | false | ||
| Oct 2, 2024 02:43:13.009382010 CEST | 1.1.1.1 | 192.168.2.4 | 0x994d | No error (0) | 142.250.185.142 | A (IP address) | IN (0x0001) | false | ||
| Oct 2, 2024 02:44:14.828885078 CEST | 1.1.1.1 | 192.168.2.4 | 0xd5e6 | No error (0) | 142.250.185.110 | A (IP address) | IN (0x0001) | false |
|
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 0 | 192.168.2.4 | 49732 | 142.250.186.46 | 443 | 332 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-10-02 00:43:03 UTC | 851 | OUT | |
| 2024-10-02 00:43:03 UTC | 1704 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 1 | 192.168.2.4 | 49736 | 142.250.184.206 | 443 | 332 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-10-02 00:43:04 UTC | 869 | OUT | |
| 2024-10-02 00:43:05 UTC | 2634 | IN |